$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a76ac745-2130-4ae4-bea8-742a1977b9a5.roa File: a76ac745-2130-4ae4-bea8-742a1977b9a5.roa (raw, json) Hash identifier: J+5Tr11MS4wNawTK+s1ICSDPmbznmORC56SBc/sJxRw= Subject key identifier: 68:23:91:19:FC:C1:40:05:8C:71:AA:37:80:33:7E:94:8E:19:18:BC Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1D39144FA88A90A8DBF17794BB06F5238F92D02D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a76ac745-2130-4ae4-bea8-742a1977b9a5.roa Signing time: Thu 30 Oct 2025 22:07:03 +0000 ROA not before: Thu 30 Oct 2025 22:07:03 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1ad4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:39:14:4f:a8:8a:90:a8:db:f1:77:94:bb:06:f5:23:8f:92:d0:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:07:03 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=42e3ad77b639f2aa51af38d63bb5066a2fe28077d93ad6861ebdd797727ec905, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:fa:13:95:1f:b8:ac:a9:9b:b7:28:12:40: 34:46:c7:c6:1f:7d:63:23:98:b5:a2:06:27:8b:0b: b1:34:22:6e:80:92:2e:17:47:93:79:b4:1f:5d:96: bc:81:31:6b:cb:15:8a:72:bc:a0:6c:09:53:64:cd: ad:42:d4:c7:5f:05:1a:8f:97:b9:ec:fe:4b:52:e3: 94:fb:c6:cb:eb:36:24:45:92:f3:aa:06:bf:e2:32: 14:2f:48:d6:a7:7e:21:f4:5e:46:b9:de:35:9d:f3: ec:18:50:57:03:1c:bd:05:87:3e:f4:b6:43:22:c0: a7:f2:36:cd:19:09:80:c0:eb:5e:d5:1c:6b:ed:58: 01:f4:e7:fc:01:c4:14:84:78:dc:3b:e5:d9:45:f3: 8a:22:18:13:e9:1b:1c:db:f7:20:c3:17:1c:80:01: df:67:6f:3e:2e:dc:1e:bd:7e:7d:b8:d2:10:b0:88: 69:10:97:6d:0c:08:ef:4e:65:04:a5:75:09:c3:d2: 42:0b:b8:02:8d:16:ff:d2:67:80:59:40:0f:4a:0f: 7e:23:6e:37:48:60:0b:99:50:26:2e:04:97:fe:11: 4e:79:ba:61:18:03:d8:35:fe:39:ef:3d:7e:ab:08: 3b:4b:44:66:37:7b:0f:fe:32:b7:a3:8e:02:aa:6f: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:23:91:19:FC:C1:40:05:8C:71:AA:37:80:33:7E:94:8E:19:18:BC X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a76ac745-2130-4ae4-bea8-742a1977b9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1ad4::/47 Signature Algorithm: sha256WithRSAEncryption 03:2f:48:45:77:24:f4:38:66:18:e1:8a:e3:47:ca:28:b5:86: ca:79:24:89:1f:f8:ef:10:20:bb:75:b9:7d:78:91:9a:9e:e8: d3:28:99:cc:1a:11:c5:1c:60:98:46:27:0c:e4:f8:8c:8d:84: 96:f0:6a:ea:6a:cf:00:bd:67:02:b3:e7:81:6c:cb:cb:71:4b: 4c:95:39:86:d6:11:87:51:dc:eb:6a:8b:96:d0:80:ac:57:f1: 74:24:d4:38:62:20:d8:47:af:e8:2d:05:35:90:0f:01:02:84: 59:86:a2:e7:e3:77:17:04:7d:79:f5:e2:23:35:7d:8b:41:bb: e6:3d:be:9f:75:c6:25:69:ca:0e:75:e4:a2:42:0c:93:88:2c: fc:e6:07:3e:4c:b8:71:10:39:d2:ee:2b:e4:21:24:09:14:99: 2a:b9:0c:b4:7a:2c:c3:e5:fd:ac:da:ca:47:17:f5:ba:5e:d0: c8:66:5c:78:71:3c:90:b8:51:20:ac:42:1e:73:7f:72:8d:b9: e3:19:c0:eb:0f:3e:d0:49:fb:51:37:25:94:4b:7e:3f:2a:e4: f9:63:d3:22:45:73:37:b2:0a:69:d5:c5:0f:0a:f0:86:65:22: 01:f4:b0:7b:88:65:4e:a7:d1:c6:ad:6c:54:a3:78:f9:93:bd: 8d:93:58:a5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHTkUT6iKkKjb8XeUuwb1I4+S0C0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIwNzAzWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmUzYWQ3N2I2MzlmMmFhNTFhZjM4ZDYzYmI1MDY2YTJm ZTI4MDc3ZDkzYWQ2ODYxZWJkZDc5NzcyN2VjOTA1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1HvoTlR+4rKmbtygSQDRGx8YffWMjmLWiBieLC7E0Im6A ki4XR5N5tB9dlryBMWvLFYpyvKBsCVNkza1C1MdfBRqPl7ns/ktS45T7xsvrNiRF kvOqBr/iMhQvSNanfiH0Xka53jWd8+wYUFcDHL0Fhz70tkMiwKfyNs0ZCYDA617V HGvtWAH05/wBxBSEeNw75dlF84oiGBPpGxzb9yDDFxyAAd9nbz4u3B69fn240hCw iGkQl20MCO9OZQSldQnD0kILuAKNFv/SZ4BZQA9KD34jbjdIYAuZUCYuBJf+EU55 umEYA9g1/jnvPX6rCDtLRGY3ew/+MrejjgKqb6vNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaCORGfzBQAWMcao3gDN+lI4ZGLwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E3NmFjNzQ1LTIxMzAtNGFlNC1iZWE4LTc0MmExOTc3YjlhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGtQwDQYJKoZIhvcNAQELBQADggEBAAMvSEV3JPQ4ZhjhiuNHyii1 hsp5JIkf+O8QILt1uX14kZqe6NMomcwaEcUcYJhGJwzk+IyNhJbwaupqzwC9ZwKz 54Fsy8txS0yVOYbWEYdR3Otqi5bQgKxX8XQk1DhiINhHr+gtBTWQDwEChFmGoufj dxcEfXn14iM1fYtBu+Y9vp91xiVpyg515KJCDJOILPzmBz5MuHEQOdLuK+QhJAkU mSq5DLR6LMPl/azaykcX9bpe0MhmXHhxPJC4USCsQh5zf3KNueMZwOsPPtBJ+1E3 JZRLfj8q5Plj0yJFczeyCmnVxQ8K8IZlIgH0sHuIZU6n0catbFSjePmTvY2TWKU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:52 2025 by rpki-client