$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1396ac0-d4bd-49db-924c-93e4f214c4b4.roa File: a1396ac0-d4bd-49db-924c-93e4f214c4b4.roa (raw, json) Hash identifier: Huh4j07G3NWrtwEYqhpT+WiYjaXisVHQnpt1bjuHOSE= Subject key identifier: 48:74:18:98:D9:21:40:93:EB:68:B6:41:CC:5A:EA:AF:99:D6:32:42 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 13294843F06A798ACB602067E4298ACAA93F2D43 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1396ac0-d4bd-49db-924c-93e4f214c4b4.roa Signing time: Fri 31 Oct 2025 03:26:34 +0000 ROA not before: Fri 31 Oct 2025 03:26:34 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2a0c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:29:48:43:f0:6a:79:8a:cb:60:20:67:e4:29:8a:ca:a9:3f:2d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:26:34 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=bc1ec327335b505ddd0598542379dd490f30c01981f8d426a43f6652ce059e60, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9f:39:e1:24:f4:a1:e4:72:4d:b0:d1:f8:8e: 1e:20:7f:b6:23:a2:12:a2:81:86:df:6f:23:16:b7: d8:3e:af:2f:9e:29:06:ae:6c:50:b6:ca:7c:46:71: ae:7f:c7:fe:b8:f1:06:a3:01:34:bf:55:e9:84:f6: 27:4a:0a:fe:d6:27:02:bb:20:62:aa:39:d3:68:0e: a0:a2:a8:5a:63:23:0b:cf:7d:5e:46:52:78:29:f5: 9a:59:74:17:43:8f:14:67:cd:28:e9:99:cc:48:1b: 2f:18:72:0c:98:17:3d:a4:77:07:4f:a2:34:65:1b: 35:b4:21:d8:a7:dd:42:cb:7e:3b:ef:db:94:a7:f9: 2c:ce:96:80:af:6d:90:24:43:27:50:e9:a3:62:3d: 80:29:e5:d1:af:ec:03:2a:d6:03:b0:1a:99:64:31: 0e:68:8d:45:dc:b4:b2:70:41:0b:62:46:1c:ed:21: d6:c4:73:bd:bc:f0:4e:f6:0a:b3:55:51:6c:1b:8d: fe:02:79:91:af:6b:54:42:80:19:94:4b:76:69:97: f1:85:28:2e:f9:29:a1:f8:9a:be:8a:97:f0:cb:d7: ae:3b:27:d9:41:da:7a:39:f2:84:27:7d:1f:0d:c3: bc:53:56:f9:a1:91:4f:8a:c6:7c:a9:62:1f:9a:73: 13:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:74:18:98:D9:21:40:93:EB:68:B6:41:CC:5A:EA:AF:99:D6:32:42 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1396ac0-d4bd-49db-924c-93e4f214c4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2a0c::/46 Signature Algorithm: sha256WithRSAEncryption 8f:32:52:bf:0f:c7:73:3c:d9:43:c6:74:ba:ec:d9:95:39:88: 48:dc:4e:7c:46:92:99:28:05:34:d3:8b:31:af:c3:af:b7:fd: 78:28:51:67:3e:b5:09:de:12:58:0e:91:68:82:29:48:00:9c: 0e:5b:e5:1c:37:f5:66:e6:1e:3b:ad:df:92:9e:2f:22:72:e8: 28:36:4e:54:16:e7:22:ff:d3:ff:8e:0e:c9:0c:e5:41:44:0b: d7:ee:b4:59:8f:35:3d:26:3e:8f:4a:ad:7f:a9:e9:c0:7a:fa: 32:ba:7d:3e:8b:92:9d:99:72:ff:1f:13:2b:d4:86:03:68:ab: d5:12:fd:e6:bf:56:6d:94:e3:fb:5c:90:2c:72:54:19:45:15: f0:c1:75:36:ca:27:d9:29:fc:b9:51:9d:84:f6:8a:fe:12:2c: 8c:fb:71:d9:92:18:e7:3e:76:8b:30:28:5c:f8:d1:16:e6:51: 6d:72:61:25:98:f0:4d:da:20:b9:20:16:b7:0b:40:d6:50:ab: 2a:e8:ea:99:f9:0a:c8:2b:d5:09:5b:19:c6:18:7c:85:b6:4f: fb:be:a8:34:10:cb:95:90:ab:67:85:fa:54:ac:ff:fb:05:1b: c2:d1:f4:ce:cd:3a:fd:5e:a8:15:87:01:56:67:f9:b2:57:b1: d0:ec:f2:f6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEylIQ/BqeYrLYCBn5CmKyqk/LUMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMyNjM0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzFlYzMyNzMzNWI1MDVkZGQwNTk4NTQyMzc5ZGQ0OTBm MzBjMDE5ODFmOGQ0MjZhNDNmNjY1MmNlMDU5ZTYwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDknznhJPSh5HJNsNH4jh4gf7YjohKigYbfbyMWt9g+ry+e KQaubFC2ynxGca5/x/648QajATS/VemE9idKCv7WJwK7IGKqOdNoDqCiqFpjIwvP fV5GUngp9ZpZdBdDjxRnzSjpmcxIGy8YcgyYFz2kdwdPojRlGzW0Idin3ULLfjvv 25Sn+SzOloCvbZAkQydQ6aNiPYAp5dGv7AMq1gOwGplkMQ5ojUXctLJwQQtiRhzt IdbEc7288E72CrNVUWwbjf4CeZGva1RCgBmUS3Zpl/GFKC75KaH4mr6Kl/DL1647 J9lB2no58oQnfR8Nw7xTVvmhkU+KxnypYh+acxOjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSHQYmNkhQJPraLZBzFrqr5nWMkIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2ExMzk2YWMwLWQ0YmQtNDlkYi05MjRjLTkzZTRmMjE0YzRiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAKgwwDQYJKoZIhvcNAQELBQADggEBAI8yUr8Px3M82UPGdLrs2ZU5 iEjcTnxGkpkoBTTTizGvw6+3/XgoUWc+tQneElgOkWiCKUgAnA5b5Rw39WbmHjut 35KeLyJy6Cg2TlQW5yL/0/+ODskM5UFEC9futFmPNT0mPo9KrX+p6cB6+jK6fT6L kp2Zcv8fEyvUhgNoq9US/ea/Vm2U4/tckCxyVBlFFfDBdTbKJ9kp/LlRnYT2iv4S LIz7cdmSGOc+doswKFz40RbmUW1yYSWY8E3aILkgFrcLQNZQqyro6pn5Csgr1Qlb GcYYfIW2T/u+qDQQy5WQq2eF+lSs//sFG8LR9M7NOv1eqBWHAVZn+bJXsdDs8vY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:22 2025 by rpki-client