$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aaa17d7e-e450-454c-ba8b-ce027b876544.roa File: aaa17d7e-e450-454c-ba8b-ce027b876544.roa (raw, json) Hash identifier: CDUMKHJJI3W93ZdF3hA1NPsP1k6tcFONIpkK/c8jqhA= Subject key identifier: AF:2A:27:B5:C7:64:96:B9:65:A6:07:99:B6:69:D0:12:23:EF:2B:93 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 24FE16A91DADCAE460401BB17BDCA237B8CDF927 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aaa17d7e-e450-454c-ba8b-ce027b876544.roa Signing time: Fri 31 Oct 2025 06:25:39 +0000 ROA not before: Fri 31 Oct 2025 06:25:39 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3fe0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fe:16:a9:1d:ad:ca:e4:60:40:1b:b1:7b:dc:a2:37:b8:cd:f9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:25:39 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=88b1d66566fb468d0cbfe196f419953e576085fc314e08bd1533e55638dc9aca, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:c2:e1:dc:8d:69:4b:ae:b3:d5:65:89:5b: 48:cd:39:e7:9d:7c:16:e0:03:fe:89:b3:54:61:28: 90:d8:77:86:96:d2:33:18:b3:51:25:e9:fc:46:44: 5a:99:da:59:91:21:49:0d:0b:81:72:1b:c6:b3:b5: 3a:20:7e:8a:ae:db:1b:07:a7:ae:83:3e:d2:ca:ad: 81:da:49:3f:17:a0:71:78:27:52:cd:4e:93:87:57: 35:0a:e0:d8:57:39:54:84:cf:03:cb:bd:65:47:24: 49:c8:79:db:48:92:12:27:b6:cf:ea:0e:04:97:e9: b2:7b:cd:a0:18:6a:00:37:83:27:60:c0:7a:12:95: 68:0a:4d:e5:4d:e4:58:61:64:3b:c3:b9:3f:7a:6d: ae:83:1a:3b:3c:f0:21:15:a9:6c:2d:7e:91:62:c9: 01:91:c0:42:c6:d1:7b:c2:f8:f0:b0:5f:f5:48:af: d4:e4:af:74:4e:d7:4b:ab:49:c0:06:00:6c:ab:8b: 4d:76:45:d7:dd:21:99:35:f6:88:5f:74:eb:52:c5: 6d:5e:72:14:6d:8a:c8:45:e1:b6:6d:da:ab:5a:38: c4:a8:64:dc:ae:c4:35:e7:6f:46:0b:2a:3d:99:41: f6:b8:ff:78:12:5e:36:b6:46:9b:26:76:9a:a2:c6: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2A:27:B5:C7:64:96:B9:65:A6:07:99:B6:69:D0:12:23:EF:2B:93 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aaa17d7e-e450-454c-ba8b-ce027b876544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3fe0::/45 Signature Algorithm: sha256WithRSAEncryption 58:1a:61:56:2d:4d:b7:4f:1f:d3:f3:c0:e0:9c:3e:ee:70:f2: d9:47:50:72:44:82:75:0f:c7:08:01:ab:80:8c:bb:c0:6d:a2: 9b:06:25:9b:1d:17:fc:58:60:52:a1:c5:35:f1:f9:c0:db:85: 7c:14:07:43:f5:d4:de:5e:54:53:c4:6b:4e:31:9a:79:54:e6: c0:28:58:7a:96:e7:36:21:91:cf:8c:71:9a:d3:18:99:ff:26: dd:30:84:56:30:d1:4e:24:7c:2b:ee:48:55:dd:0c:a8:3c:26: 79:29:6f:08:0f:83:6d:ac:f6:d9:e8:d2:01:e0:70:74:af:36: 8c:e9:f7:2b:3d:62:d5:dd:a4:08:7b:fc:09:76:26:0d:95:e0: 9c:f8:ad:4d:04:41:c3:d7:b1:dc:81:e5:eb:d2:3d:43:22:03: 5a:42:6c:a3:2f:a5:0a:de:a8:b0:ab:68:72:a8:75:3a:bb:ae: 3d:17:86:49:93:c5:e2:5b:cc:6e:ee:9e:ac:df:f3:ec:7b:28: 00:9b:4f:c5:df:76:82:e9:72:ae:9a:4f:45:bc:20:c4:14:0f: c8:00:12:02:8d:1b:c2:52:8f:34:08:c9:4e:56:9a:bf:cb:30: 84:e2:be:a3:89:5b:e6:9b:a6:4b:5a:d7:a2:9f:f1:68:c4:f2: 5b:54:cc:51 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJP4WqR2tyuRgQBuxe9yiN7jN+ScwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYyNTM5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGIxZDY2NTY2ZmI0NjhkMGNiZmUxOTZmNDE5OTUzZTU3 NjA4NWZjMzE0ZTA4YmQxNTMzZTU1NjM4ZGM5YWNhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8rMLh3I1pS66z1WWJW0jNOeedfBbgA/6Js1RhKJDYd4aW 0jMYs1El6fxGRFqZ2lmRIUkNC4FyG8aztTogfoqu2xsHp66DPtLKrYHaST8XoHF4 J1LNTpOHVzUK4NhXOVSEzwPLvWVHJEnIedtIkhInts/qDgSX6bJ7zaAYagA3gydg wHoSlWgKTeVN5FhhZDvDuT96ba6DGjs88CEVqWwtfpFiyQGRwELG0XvC+PCwX/VI r9Tkr3RO10urScAGAGyri012RdfdIZk19ohfdOtSxW1echRtishF4bZt2qtaOMSo ZNyuxDXnb0YLKj2ZQfa4/3gSXja2RpsmdpqixsTnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUryontcdklrllpgeZtmnQEiPvK5MwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FhYTE3ZDdlLWU0NTAtNDU0Yy1iYThiLWNlMDI3Yjg3NjU0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAP+AwDQYJKoZIhvcNAQELBQADggEBAFgaYVYtTbdPH9PzwOCcPu5w 8tlHUHJEgnUPxwgBq4CMu8BtopsGJZsdF/xYYFKhxTXx+cDbhXwUB0P11N5eVFPE a04xmnlU5sAoWHqW5zYhkc+McZrTGJn/Jt0whFYw0U4kfCvuSFXdDKg8JnkpbwgP g22s9tno0gHgcHSvNozp9ys9YtXdpAh7/Al2Jg2V4Jz4rU0EQcPXsdyB5evSPUMi A1pCbKMvpQreqLCraHKodTq7rj0XhkmTxeJbzG7unqzf8+x7KACbT8XfdoLpcq6a T0W8IMQUD8gAEgKNG8JSjzQIyU5Wmr/LMITivqOJW+abpkta16Kf8WjE8ltUzFE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:51 2025 by rpki-client