$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a7d8d4e7-14e9-4664-946f-c43e7c751bb6.roa File: a7d8d4e7-14e9-4664-946f-c43e7c751bb6.roa (raw, json) Hash identifier: rUXSDBnuDn2KOj9UX7wi+xObZPJekgRw+AFvlBl9ODQ= Subject key identifier: A3:AB:8F:A5:19:56:37:05:97:9F:11:84:A6:B8:63:8F:21:D7:03:18 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4F8923A7F8F1221F1E2E86C021D3E1A5365C84 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a7d8d4e7-14e9-4664-946f-c43e7c751bb6.roa Signing time: Fri 31 Oct 2025 00:23:34 +0000 ROA not before: Fri 31 Oct 2025 00:23:34 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:34e0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:89:23:a7:f8:f1:22:1f:1e:2e:86:c0:21:d3:e1:a5:36:5c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:23:34 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0992a56600d95f2a297a2836ca62c4d14236ca496f6c4b60b817467b70d7152c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:43:7b:6c:4b:b3:de:50:dc:a6:72:80:1b: ac:05:03:0b:9e:b7:57:fd:6b:88:36:35:fc:04:1a: cb:54:c7:02:9b:92:d7:10:1d:cf:58:db:08:e9:95: 3b:d4:23:2c:eb:13:5e:16:5d:22:1e:19:eb:2c:3e: f0:ea:e0:1a:8d:6a:23:e8:b8:01:5f:fb:2d:dd:7a: 36:14:a3:84:e8:d9:64:11:10:86:86:db:83:bd:e8: 68:5e:c3:2a:f6:84:74:a8:c3:73:0a:2c:a8:1f:cd: d7:8b:cd:b4:52:1d:6c:c3:78:5f:c9:44:8c:eb:42: 6b:03:08:77:75:ad:78:58:ac:8b:b6:95:32:6f:3b: b2:57:02:57:5b:38:b3:66:00:63:e9:7d:eb:d9:16: 0f:6c:82:aa:70:39:a1:f8:21:e6:36:39:9f:f1:36: 40:7e:c5:ba:dd:70:6d:18:60:7b:29:77:d1:ea:e1: e5:89:10:b5:58:2d:24:4d:b3:bc:df:35:6f:12:d4: ad:60:ee:bf:e8:6a:19:5a:6d:bc:2a:f1:eb:18:8a: 48:af:41:6a:ed:ac:08:47:ed:df:3d:1b:17:25:e0: 0a:5c:92:6d:3d:9e:95:4d:9d:38:e7:f5:a7:e9:a8: 0e:a7:d0:2a:b6:62:e9:5c:aa:18:51:ff:81:c2:1d: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AB:8F:A5:19:56:37:05:97:9F:11:84:A6:B8:63:8F:21:D7:03:18 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a7d8d4e7-14e9-4664-946f-c43e7c751bb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:34e0::/47 Signature Algorithm: sha256WithRSAEncryption 33:46:92:7a:1a:92:46:b7:f6:a8:24:44:15:2a:d4:37:52:6b: d8:1d:70:e0:ba:5e:21:7e:fc:34:4a:7e:39:33:70:c1:e6:b6: af:ee:e2:21:23:83:6f:16:3d:77:18:58:c6:bc:71:02:14:66: 2d:b6:3b:0a:32:ae:b6:0e:a2:7c:fb:85:69:20:70:47:04:a3: 6d:de:6e:7a:d1:bf:5e:30:38:2d:76:b9:fc:a3:34:38:6f:a5: 45:cb:b6:8e:32:69:50:82:d1:75:e1:77:70:9a:6a:86:ba:47: ae:4b:16:ed:30:3b:be:be:e8:72:0b:84:9d:09:d8:51:bb:10: e3:7c:18:25:fd:b1:ea:bf:4e:49:7e:64:20:b3:58:b4:5b:a1: 4d:a1:be:a7:ff:7e:1c:d6:b4:3a:c7:a2:1f:3f:3c:8a:2c:f2: fd:f6:6b:e2:77:d2:c1:86:fb:18:58:bf:d0:65:aa:76:e6:77: 01:46:03:40:fd:67:02:b7:7a:2b:ce:8e:fa:29:ed:8e:23:53: f3:dc:b4:31:b7:30:2e:da:32:37:49:43:c1:a8:dc:98:b8:5d: f4:a6:e3:e2:d7:da:44:fc:08:1f:ea:b8:7c:bf:90:5b:f9:89: 00:dc:a4:c2:a8:a5:80:f9:af:29:dd:ed:e6:12:e3:9a:00:ac: 0b:6b:eb:f6 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITT4kjp/jxIh8eLobAIdPhpTZchDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTEwMzEwMDIzMzRaFw0yNTEyMDUyMzU5NTla MHoxSTBHBgNVBAUTQDA5OTJhNTY2MDBkOTVmMmEyOTdhMjgzNmNhNjJjNGQxNDIz NmNhNDk2ZjZjNGI2MGI4MTc0NjdiNzBkNzE1MmMxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMFxQ3tsS7PeUNymcoAbrAUDC563V/1riDY1/AQay1THApuS 1xAdz1jbCOmVO9QjLOsTXhZdIh4Z6yw+8OrgGo1qI+i4AV/7Ld16NhSjhOjZZBEQ hobbg73oaF7DKvaEdKjDcwosqB/N14vNtFIdbMN4X8lEjOtCawMId3WteFisi7aV Mm87slcCV1s4s2YAY+l969kWD2yCqnA5ofgh5jY5n/E2QH7Fut1wbRhgeyl30erh 5YkQtVgtJE2zvN81bxLUrWDuv+hqGVptvCrx6xiKSK9Bau2sCEft3z0bFyXgClyS bT2elU2dOOf1p+moDqfQKrZi6VyqGFH/gcId8WECAwEAAaOCArQwggKwMB0GA1Ud DgQWBBSjq4+lGVY3BZefEYSmuGOPIdcDGDAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvYTdkOGQ0ZTctMTRlOS00NjY0LTk0NmYtYzQzZTdjNzUxYmI2LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHASYAkAA04DANBgkqhkiG9w0BAQsFAAOCAQEAM0aSehqSRrf2qCREFSrUN1Jr 2B1w4LpeIX78NEp+OTNwwea2r+7iISODbxY9dxhYxrxxAhRmLbY7CjKutg6ifPuF aSBwRwSjbd5uetG/XjA4LXa5/KM0OG+lRcu2jjJpUILRdeF3cJpqhrpHrksW7TA7 vr7ocguEnQnYUbsQ43wYJf2x6r9OSX5kILNYtFuhTaG+p/9+HNa0OseiHz88iizy /fZr4nfSwYb7GFi/0GWqduZ3AUYDQP1nArd6K86O+intjiNT89y0MbcwLtoyN0lD wajcmLhd9Kbj4tfaRPwIH+q4fL+QW/mJANykwqilgPmvKd3t5hLjmgCsC2vr9g== -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:20 2025 by rpki-client