$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1a0e2eb-a406-43a8-9e97-7566a1f49d99.roa File: a1a0e2eb-a406-43a8-9e97-7566a1f49d99.roa (raw, json) Hash identifier: 6kgpHzFN7wmp7JRVTLssI0F6tdfiNKlX5Eto9cuG9HA= Subject key identifier: 1A:AB:92:53:D6:A7:B5:FE:23:6B:26:B3:E9:08:F2:3F:F5:6A:0D:4D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 650DE6B95779373E950146E09B5FEA0030D44164 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1a0e2eb-a406-43a8-9e97-7566a1f49d99.roa Signing time: Fri 31 Oct 2025 01:26:29 +0000 ROA not before: Fri 31 Oct 2025 01:26:29 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3bc6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0d:e6:b9:57:79:37:3e:95:01:46:e0:9b:5f:ea:00:30:d4:41:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:26:29 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=20a9cd8f124a0231c8f98c39e7ee40a082cb1d7147bc12a413b7b0406e85e19f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:e1:f5:7b:c3:ae:aa:bb:96:11:8c:45:81: cc:2f:f9:be:34:53:34:31:52:a7:42:4a:24:03:18: 2d:7f:68:e7:52:dd:ee:a9:d7:c6:1a:78:c3:c8:cc: 88:97:08:46:e7:f4:ad:cd:8b:aa:fa:80:e6:ab:03: 65:0e:d3:0c:98:1c:af:2a:07:1b:61:c0:1f:75:d0: 1a:49:a3:a2:fa:98:bb:ce:0b:e4:9a:56:50:47:56: e5:c7:e9:cb:b5:77:a5:9c:fc:73:63:6e:df:c4:66: d2:fb:a2:47:0a:b8:cc:62:0f:bf:1a:ad:80:ca:61: 75:88:49:a5:d4:6c:8f:be:2b:40:fe:e5:1f:62:5d: 2c:9c:de:96:94:67:89:95:63:41:87:b0:da:d6:90: e7:f0:c5:60:c5:78:c1:f7:03:87:9f:cc:f0:bf:b6: 17:24:7b:0f:2a:eb:fd:0e:0b:88:86:48:88:36:ed: 10:ea:f4:cc:70:2f:d4:18:95:da:8b:3b:09:23:d8: 87:18:3c:f1:28:25:f1:65:43:09:c4:a6:b1:31:f6: 5a:98:2a:a1:d9:84:99:15:63:0b:fb:a3:a3:db:23: df:a3:49:b5:ac:aa:79:7c:08:f0:ce:34:47:79:6b: ef:fb:71:bc:5a:52:74:65:e0:5f:b5:ef:29:0a:b5: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AB:92:53:D6:A7:B5:FE:23:6B:26:B3:E9:08:F2:3F:F5:6A:0D:4D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a1a0e2eb-a406-43a8-9e97-7566a1f49d99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3bc6::/47 Signature Algorithm: sha256WithRSAEncryption 1d:d3:a8:75:2d:c4:cf:04:5b:57:32:38:01:6c:6f:b9:17:f2: 93:c9:5b:76:a7:2e:51:93:42:16:41:d9:36:11:8c:c5:a5:2b: 4c:b6:e3:a1:c6:8d:08:10:dc:0d:48:f3:10:91:1a:cc:83:05: b0:13:ff:e9:5f:26:3b:9b:5b:4a:37:b6:78:84:63:ff:f6:28: 3e:97:1a:9d:46:8f:0f:8a:43:8d:a1:f6:e3:34:74:5a:2b:0e: d8:57:bb:fb:dc:d7:ec:d5:2f:54:7b:1f:2e:d6:c7:b5:c7:02: 44:df:36:a8:5c:b6:62:88:4f:87:4e:1c:49:6d:ca:0b:ac:13: c3:33:03:07:3d:a0:cc:76:cb:d9:92:d4:5b:85:3b:0d:cc:97: cf:c2:7b:33:50:cd:57:ca:01:44:0e:4e:b4:45:a9:d1:1a:d0: 43:13:f2:43:f5:a3:03:d1:ad:a7:a2:dc:92:83:a2:b8:47:5b: d7:4c:74:4a:91:cd:84:2c:88:97:e2:57:24:d1:91:af:aa:90: f3:ac:5b:ac:d2:c1:9e:48:df:d4:ee:8a:e6:df:33:ac:2d:ae: 2c:eb:19:4d:38:3a:7a:6b:2c:38:6f:44:42:93:52:7c:db:6c: 8e:fb:53:64:2a:03:b9:d4:5f:65:b8:b9:61:36:8a:a4:8e:74: 4d:40:b1:64 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZQ3muVd5Nz6VAUbgm1/qADDUQWQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEyNjI5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGE5Y2Q4ZjEyNGEwMjMxYzhmOThjMzllN2VlNDBhMDgy Y2IxZDcxNDdiYzEyYTQxM2I3YjA0MDZlODVlMTlmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYeOH1e8OuqruWEYxFgcwv+b40UzQxUqdCSiQDGC1/aOdS 3e6p18YaeMPIzIiXCEbn9K3Ni6r6gOarA2UO0wyYHK8qBxthwB910BpJo6L6mLvO C+SaVlBHVuXH6cu1d6Wc/HNjbt/EZtL7okcKuMxiD78arYDKYXWISaXUbI++K0D+ 5R9iXSyc3paUZ4mVY0GHsNrWkOfwxWDFeMH3A4efzPC/thckew8q6/0OC4iGSIg2 7RDq9MxwL9QYldqLOwkj2IcYPPEoJfFlQwnEprEx9lqYKqHZhJkVYwv7o6PbI9+j SbWsqnl8CPDONEd5a+/7cbxaUnRl4F+17ykKtc9zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGquSU9antf4jayaz6QjyP/VqDU0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2ExYTBlMmViLWE0MDYtNDNhOC05ZTk3LTc1NjZhMWY0OWQ5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAO8YwDQYJKoZIhvcNAQELBQADggEBAB3TqHUtxM8EW1cyOAFsb7kX 8pPJW3anLlGTQhZB2TYRjMWlK0y246HGjQgQ3A1I8xCRGsyDBbAT/+lfJjubW0o3 tniEY//2KD6XGp1Gjw+KQ42h9uM0dForDthXu/vc1+zVL1R7Hy7Wx7XHAkTfNqhc tmKIT4dOHEltygusE8MzAwc9oMx2y9mS1FuFOw3Ml8/CezNQzVfKAUQOTrRFqdEa 0EMT8kP1owPRraei3JKDorhHW9dMdEqRzYQsiJfiVyTRka+qkPOsW6zSwZ5I39Tu iubfM6wtrizrGU04OnprLDhvREKTUnzbbI77U2QqA7nUX2W4uWE2iqSOdE1AsWQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:33 2025 by rpki-client