$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2d80f72-1692-4ca5-9e7b-85f521c5df46.roa File: a2d80f72-1692-4ca5-9e7b-85f521c5df46.roa (raw, json) Hash identifier: J/urX41gd3/8zprhvprXlJJ6bhhVsuZ9kOwQ0d1S5X8= Subject key identifier: 1A:88:7A:85:19:BE:00:09:BB:0E:D6:85:4C:F1:10:16:BE:8A:1A:38 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0BC1DA630B0AD81CC2DF3821676D25415465BC44 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2d80f72-1692-4ca5-9e7b-85f521c5df46.roa Signing time: Fri 31 Oct 2025 05:12:18 +0000 ROA not before: Fri 31 Oct 2025 05:12:18 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1620::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c1:da:63:0b:0a:d8:1c:c2:df:38:21:67:6d:25:41:54:65:bc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:12:18 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=8d5c52ef6c82ad43edc97edc39e97dc3e811355b06ddfe29f12751d9596f52f0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:1f:76:36:25:96:fc:2d:51:aa:df:c3:24: af:e2:bf:29:da:d1:60:1b:f9:c6:e8:83:89:f3:c0: c9:e9:58:39:4a:be:5d:ad:5f:de:c0:14:c4:13:4d: 69:81:cb:51:7f:30:71:b9:f3:37:b2:ce:0c:1d:7f: f8:c8:88:c9:1d:62:fd:4a:16:4c:70:dd:d0:bd:62: 95:6e:e5:60:29:d7:7f:01:dd:8b:99:15:f3:53:4b: 42:d4:d2:05:f6:fc:12:78:9e:92:89:46:7f:89:6d: 3d:5a:3e:f1:9e:a6:5d:3d:36:4e:e2:9d:53:4b:cf: c5:ce:d6:80:af:a6:20:85:2d:0f:e0:49:c1:e2:ea: 0e:20:9c:8b:94:6b:bd:2f:c2:71:10:4b:5f:1a:fc: d4:42:f3:1e:52:06:aa:ea:19:f7:4d:f7:1d:14:2f: ec:3b:f8:06:a3:8a:ec:91:5e:83:0e:e8:0a:38:44: ad:f0:07:4c:36:84:05:3c:3e:3c:1f:eb:ae:df:93: f7:34:17:6a:f6:6a:18:0f:f0:ca:1e:ba:85:8e:bd: f6:db:85:64:6f:63:85:73:ce:e4:c5:92:dd:01:1c: c2:56:2d:1b:ef:2b:3f:7c:b1:03:e7:7d:f9:6d:a1: 66:53:7e:82:7b:a5:8d:b3:a3:7d:82:bc:85:b1:e5: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:88:7A:85:19:BE:00:09:BB:0E:D6:85:4C:F1:10:16:BE:8A:1A:38 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2d80f72-1692-4ca5-9e7b-85f521c5df46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1620::/45 Signature Algorithm: sha256WithRSAEncryption 86:1b:4b:c4:9c:42:60:7e:09:14:a9:b5:74:0a:a4:fe:9d:23: 10:1e:9e:99:2a:03:25:06:1d:ab:f4:74:b8:33:d1:67:b8:6a: 96:c0:84:b9:be:c5:be:96:48:de:2e:64:b0:b8:2b:fa:be:d3: 6b:37:34:7b:f4:c4:60:03:6f:6f:6d:da:14:38:5a:d3:54:a8: 26:be:7a:31:91:92:81:7e:e1:a5:16:16:af:bd:df:2d:89:65: 83:4b:14:43:5b:48:b5:e6:48:67:34:88:7b:0a:ed:d6:02:01: 7c:1b:0b:87:0d:67:46:63:fe:3e:9a:a1:a7:f8:a9:e1:e1:2e: 8f:7b:4b:cc:5b:c7:d7:e1:62:4b:50:1a:13:c5:b4:1d:59:b7: 5d:fe:60:bd:12:1a:a9:a5:0e:68:87:55:6a:a5:81:32:0a:79: d9:fc:28:da:d3:37:70:46:8a:e6:62:20:71:4c:98:86:17:56: db:56:2b:7e:f3:11:26:0c:a8:7c:30:85:74:3b:57:b6:9e:3e: 79:56:fa:d3:2b:8a:6b:c1:2c:2b:26:84:24:d0:dd:97:10:d3: b0:c0:fc:5a:6b:b3:72:48:d7:40:7e:19:d7:eb:24:de:0f:fc: 9a:11:29:64:70:35:52:5f:47:4a:5d:e9:b6:01:77:84:b4:d1: 55:de:0e:fd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC8HaYwsK2BzC3zghZ20lQVRlvEQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUxMjE4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDVjNTJlZjZjODJhZDQzZWRjOTdlZGMzOWU5N2RjM2U4 MTEzNTViMDZkZGZlMjlmMTI3NTFkOTU5NmY1MmYwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUXR92NiWW/C1Rqt/DJK/ivyna0WAb+cbog4nzwMnpWDlK vl2tX97AFMQTTWmBy1F/MHG58zeyzgwdf/jIiMkdYv1KFkxw3dC9YpVu5WAp138B 3YuZFfNTS0LU0gX2/BJ4npKJRn+JbT1aPvGepl09Nk7inVNLz8XO1oCvpiCFLQ/g ScHi6g4gnIuUa70vwnEQS18a/NRC8x5SBqrqGfdN9x0UL+w7+AajiuyRXoMO6Ao4 RK3wB0w2hAU8Pjwf667fk/c0F2r2ahgP8MoeuoWOvfbbhWRvY4VzzuTFkt0BHMJW LRvvKz98sQPnffltoWZTfoJ7pY2zo32CvIWx5YMLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGoh6hRm+AAm7DtaFTPEQFr6KGjgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EyZDgwZjcyLTE2OTItNGNhNS05ZTdiLTg1ZjUyMWM1ZGY0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAFiAwDQYJKoZIhvcNAQELBQADggEBAIYbS8ScQmB+CRSptXQKpP6d IxAenpkqAyUGHav0dLgz0We4apbAhLm+xb6WSN4uZLC4K/q+02s3NHv0xGADb29t 2hQ4WtNUqCa+ejGRkoF+4aUWFq+93y2JZYNLFENbSLXmSGc0iHsK7dYCAXwbC4cN Z0Zj/j6aoaf4qeHhLo97S8xbx9fhYktQGhPFtB1Zt13+YL0SGqmlDmiHVWqlgTIK edn8KNrTN3BGiuZiIHFMmIYXVttWK37zESYMqHwwhXQ7V7aePnlW+tMrimvBLCsm hCTQ3ZcQ07DA/Fprs3JI10B+GdfrJN4P/JoRKWRwNVJfR0pd6bYBd4S00VXeDv0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:23 2025 by rpki-client