$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aaa86e44-4d9e-4603-9aab-03f0ebe4fd50.roa File: aaa86e44-4d9e-4603-9aab-03f0ebe4fd50.roa (raw, json) Hash identifier: fIFTd4UhDgj7Y7iNFJ4AziZW294apcbEfPS9DYbNK54= Subject key identifier: DF:42:A3:03:9A:A1:F5:79:8E:42:68:03:68:A4:C2:7E:72:D9:F8:97 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0555EEBFE4959819691308608DBE3608FB1EFD4F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aaa86e44-4d9e-4603-9aab-03f0ebe4fd50.roa Signing time: Fri 31 Oct 2025 06:12:08 +0000 ROA not before: Fri 31 Oct 2025 06:12:08 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3ae8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:55:ee:bf:e4:95:98:19:69:13:08:60:8d:be:36:08:fb:1e:fd:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:12:08 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=9c458d6316824c31566cae30cb465fac1ebe9f3b1127eaa4357fec370f90e83e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:92:b2:68:eb:48:7d:6a:eb:9f:9b:df:a7: b9:25:c0:89:b4:08:0a:74:c5:aa:00:ec:aa:71:0c: b6:cf:42:12:76:fe:8a:14:27:9c:03:3a:e2:38:ea: 4c:ca:52:88:28:67:a0:2e:c2:d3:a3:83:e8:d7:b3: c7:27:9a:dc:33:4a:30:52:02:ea:a3:0c:bb:2c:b8: d0:1e:9f:3b:a8:ec:ac:2a:c8:c5:3c:15:68:d5:f8: 19:e2:4f:00:f6:4d:9a:e7:ac:e9:01:1e:91:5c:cb: 3c:3a:b0:a9:be:2a:6f:d2:c1:9a:09:e9:ad:a3:a3: 15:c2:cf:50:69:a8:6a:27:2c:99:b9:6d:9b:55:da: 84:e2:63:c0:e4:fe:12:c8:a2:a8:b8:f1:c6:69:86: 7f:40:f7:05:cb:d3:07:a5:3c:a3:ab:9f:49:22:69: 65:15:47:5d:a9:2e:24:aa:db:a6:15:d6:1c:58:e2: 33:41:e4:68:ad:b2:57:b8:87:ef:c1:79:2b:4c:4b: f6:c3:b3:ac:26:a2:04:8b:a8:e7:2a:aa:c8:06:67: ac:f5:f5:93:67:d8:ed:0e:f8:96:5e:8c:af:03:2c: ec:5d:07:7c:11:4c:e2:2b:04:25:85:d2:c0:ae:0a: eb:b6:05:c9:f1:2d:a3:b5:83:9a:02:17:34:60:4d: 08:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:42:A3:03:9A:A1:F5:79:8E:42:68:03:68:A4:C2:7E:72:D9:F8:97 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aaa86e44-4d9e-4603-9aab-03f0ebe4fd50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3ae8::/45 Signature Algorithm: sha256WithRSAEncryption 6c:ca:ef:c8:67:10:d8:c7:d6:18:90:f1:c3:70:77:ed:93:b7: 76:0b:88:a1:77:bc:86:a1:cc:8f:fd:5c:4a:0c:d7:3d:ae:ca: 83:ab:64:6c:ef:8e:fd:36:2e:1c:92:01:a9:b6:04:21:6a:d4: 0c:30:16:f8:27:7c:51:6a:e9:b8:b7:f9:da:b2:dc:d1:9f:06: 19:fd:b9:aa:b9:f7:09:a4:8f:7d:11:3b:3b:19:c0:d7:d1:b5: 7b:5f:8d:e0:48:8c:2e:ba:8d:ea:48:1c:54:7c:a9:2e:af:db: 3b:ea:e0:ce:ba:1e:68:58:30:18:6f:b4:4b:93:cf:69:5a:de: 66:f8:56:90:ea:88:a8:09:d2:e3:98:0b:3a:b2:f3:7d:d7:05: 2c:5b:c0:de:b6:26:0d:19:d0:e2:28:7e:44:1f:51:88:a3:b1: e8:8c:15:c6:c0:d2:7e:24:d1:68:a5:19:89:61:93:d2:20:a7: 80:a0:d8:3e:0f:94:0b:bf:e8:02:e8:bb:85:3b:04:7d:5c:e2: 27:e0:c1:95:c4:b2:15:6e:ba:27:bc:cc:1b:3f:97:28:d2:90: 38:d6:6e:5c:39:f6:b0:d0:1c:73:17:91:a3:51:1f:83:e9:3f: 89:af:d0:b6:fa:c5:f6:71:2e:66:48:44:fe:92:4e:7e:db:62: 1f:4a:70:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBVXuv+SVmBlpEwhgjb42CPse/U8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYxMjA4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YzQ1OGQ2MzE2ODI0YzMxNTY2Y2FlMzBjYjQ2NWZhYzFl YmU5ZjNiMTEyN2VhYTQzNTdmZWMzNzBmOTBlODNlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEUZKyaOtIfWrrn5vfp7klwIm0CAp0xaoA7KpxDLbPQhJ2 /ooUJ5wDOuI46kzKUogoZ6AuwtOjg+jXs8cnmtwzSjBSAuqjDLssuNAenzuo7Kwq yMU8FWjV+BniTwD2TZrnrOkBHpFcyzw6sKm+Km/SwZoJ6a2joxXCz1BpqGonLJm5 bZtV2oTiY8Dk/hLIoqi48cZphn9A9wXL0welPKOrn0kiaWUVR12pLiSq26YV1hxY 4jNB5Gitsle4h+/BeStMS/bDs6wmogSLqOcqqsgGZ6z19ZNn2O0O+JZejK8DLOxd B3wRTOIrBCWF0sCuCuu2BcnxLaO1g5oCFzRgTQhBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU30KjA5qh9XmOQmgDaKTCfnLZ+JcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FhYTg2ZTQ0LTRkOWUtNDYwMy05YWFiLTAzZjBlYmU0ZmQ1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAOugwDQYJKoZIhvcNAQELBQADggEBAGzK78hnENjH1hiQ8cNwd+2T t3YLiKF3vIahzI/9XEoM1z2uyoOrZGzvjv02LhySAam2BCFq1AwwFvgnfFFq6bi3 +dqy3NGfBhn9uaq59wmkj30ROzsZwNfRtXtfjeBIjC66jepIHFR8qS6v2zvq4M66 HmhYMBhvtEuTz2la3mb4VpDqiKgJ0uOYCzqy833XBSxbwN62Jg0Z0OIofkQfUYij seiMFcbA0n4k0WilGYlhk9Igp4Cg2D4PlAu/6ALou4U7BH1c4ifgwZXEshVuuie8 zBs/lyjSkDjWblw59rDQHHMXkaNRH4PpP4mv0Lb6xfZxLmZIRP6STn7bYh9KcFo= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:39 2025 by rpki-client