$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a938efa0-cb25-4ad9-8c42-a4147cfd980f.roa File: a938efa0-cb25-4ad9-8c42-a4147cfd980f.roa (raw, json) Hash identifier: u9vb8Tc5OSUIVKIALQ8pJ14Sy4pb6VjdR8g1hH8KAls= Subject key identifier: CF:3A:CF:D6:47:97:A0:47:13:D0:70:BF:6B:D0:4E:41:2D:45:19:04 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 36EB942DF712D68F29BD8C04EFF1CCEE135698AF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a938efa0-cb25-4ad9-8c42-a4147cfd980f.roa Signing time: Fri 31 Oct 2025 07:25:37 +0000 ROA not before: Fri 31 Oct 2025 07:25:37 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2fc0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:eb:94:2d:f7:12:d6:8f:29:bd:8c:04:ef:f1:cc:ee:13:56:98:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:25:37 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=148b6a45592df9dfdf52bdde2ad93035d8b7ee6707c07b28c536feb3b2dc5a8f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:8c:01:e1:bb:ae:03:79:ce:db:90:3d:bf: 7a:8f:47:54:c1:36:77:12:02:fd:45:b8:a1:1e:c3: b6:41:b5:02:04:b3:a3:ca:1d:95:70:3b:6c:f3:45: ea:5f:43:dc:73:e8:82:46:aa:ee:cb:60:df:3e:c4: 49:ca:bb:71:2b:06:c0:18:46:80:b4:b2:27:22:56: cc:c2:86:45:95:b2:84:ad:60:83:d4:91:5f:01:1e: 3d:c3:2e:aa:8f:f6:a2:4a:90:0c:38:39:e0:74:05: 72:93:c0:90:05:bc:f0:d4:22:7d:69:d0:62:42:b1: a1:fc:d0:78:ab:d5:a8:bc:c8:b8:2f:35:00:c2:39: 31:59:49:9e:d5:58:45:0b:cf:cb:9c:cc:eb:8d:e9: 75:50:d2:e7:57:1a:d1:ae:04:d5:d6:e1:ac:c8:b7: ae:f6:74:09:64:e1:19:da:70:79:ea:60:1b:0f:61: 38:0c:97:0e:c2:bc:24:f1:27:3b:8e:50:63:f7:71: a3:55:fa:af:50:cf:55:a8:6a:bd:96:72:4d:c1:28: 67:87:11:b4:e1:66:ae:6f:1a:31:ff:1b:ce:87:1d: c6:5d:88:32:d6:2f:38:8d:e6:67:48:12:a6:d0:fb: 71:30:5b:0b:d3:96:30:32:99:aa:c7:3d:3f:2c:42: 9c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3A:CF:D6:47:97:A0:47:13:D0:70:BF:6B:D0:4E:41:2D:45:19:04 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a938efa0-cb25-4ad9-8c42-a4147cfd980f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2fc0::/43 Signature Algorithm: sha256WithRSAEncryption 52:46:b5:ff:af:6d:aa:86:b6:fd:5d:17:3f:74:5f:3b:fc:6d: c7:56:3c:7b:41:64:63:12:5b:4c:f5:e3:69:5b:13:52:29:6e: ed:38:ab:28:a7:27:99:fa:08:b6:f8:4f:46:31:96:6d:c3:0a: 44:55:38:e5:1e:4c:83:66:8c:94:71:b7:58:50:fc:56:30:f0: ba:a5:97:eb:9a:c1:6b:ad:ce:bd:1b:93:a7:7c:e6:a3:66:71: 2c:c4:a4:39:d5:9a:3c:f0:c2:f6:b7:f3:ac:a4:96:03:92:c1: 4b:02:00:21:2d:ae:ba:8b:1b:66:49:60:5b:85:cd:74:2d:cc: 6b:5c:d4:87:f5:e9:b2:86:6d:52:8b:b5:34:f7:43:15:d0:73: da:85:23:16:af:c8:c2:e0:ac:f4:fc:55:62:e2:68:c7:f4:d0: 2e:f0:4a:17:c3:d7:77:2a:99:e8:80:53:c8:d3:96:0d:fc:3b: fa:bd:ee:a4:cd:1c:36:83:2d:b4:f9:64:22:64:be:42:58:f9: b0:a4:5c:01:c7:37:c1:bf:b7:71:ee:4d:da:44:2b:91:0f:07: db:84:d5:7a:19:19:df:ef:71:ff:5e:1d:10:56:b2:d5:4d:b0: 4d:80:45:25:f8:d5:51:c8:e5:5a:6c:34:5c:bb:fe:e8:84:0e: f7:86:3a:80 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNuuULfcS1o8pvYwE7/HM7hNWmK8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcyNTM3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDhiNmE0NTU5MmRmOWRmZGY1MmJkZGUyYWQ5MzAzNWQ4 YjdlZTY3MDdjMDdiMjhjNTM2ZmViM2IyZGM1YThmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr9IwB4buuA3nO25A9v3qPR1TBNncSAv1FuKEew7ZBtQIE s6PKHZVwO2zzRepfQ9xz6IJGqu7LYN8+xEnKu3ErBsAYRoC0siciVszChkWVsoSt YIPUkV8BHj3DLqqP9qJKkAw4OeB0BXKTwJAFvPDUIn1p0GJCsaH80Hir1ai8yLgv NQDCOTFZSZ7VWEULz8uczOuN6XVQ0udXGtGuBNXW4azIt672dAlk4RnacHnqYBsP YTgMlw7CvCTxJzuOUGP3caNV+q9Qz1Woar2Wck3BKGeHEbThZq5vGjH/G86HHcZd iDLWLziN5mdIEqbQ+3EwWwvTljAymarHPT8sQpxHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzzrP1keXoEcT0HC/a9BOQS1FGQQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E5MzhlZmEwLWNiMjUtNGFkOS04YzQyLWE0MTQ3Y2ZkOTgwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAL8AwDQYJKoZIhvcNAQELBQADggEBAFJGtf+vbaqGtv1dFz90Xzv8 bcdWPHtBZGMSW0z142lbE1Ipbu04qyinJ5n6CLb4T0Yxlm3DCkRVOOUeTINmjJRx t1hQ/FYw8Lqll+uawWutzr0bk6d85qNmcSzEpDnVmjzwwva386yklgOSwUsCACEt rrqLG2ZJYFuFzXQtzGtc1If16bKGbVKLtTT3QxXQc9qFIxavyMLgrPT8VWLiaMf0 0C7wShfD13cqmeiAU8jTlg38O/q97qTNHDaDLbT5ZCJkvkJY+bCkXAHHN8G/t3Hu TdpEK5EPB9uE1XoZGd/vcf9eHRBWstVNsE2ARSX41VHI5VpsNFy7/uiEDveGOoA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:26:57 2025 by rpki-client