$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae95a965-bc28-4d5a-a484-88c611b77ee2.roa File: ae95a965-bc28-4d5a-a484-88c611b77ee2.roa (raw, json) Hash identifier: pz4nJeRkGKtsOlm32ds8ePYEMex0mn/91KSEjK8VyjY= Subject key identifier: 17:AC:5D:9C:2E:7E:92:E9:16:0B:30:3A:D8:9B:AA:29:74:63:19:E3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2FC97E51F420C4E1CB4CFDF1C2BD29B5AF182DA4 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae95a965-bc28-4d5a-a484-88c611b77ee2.roa Signing time: Thu 30 Oct 2025 23:53:51 +0000 ROA not before: Thu 30 Oct 2025 23:53:51 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2fe4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c9:7e:51:f4:20:c4:e1:cb:4c:fd:f1:c2:bd:29:b5:af:18:2d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:53:51 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=bc4a3c9c036cfc37c45aa1c8d9214d57a5a55be7920614b7c6a842568e1dd042, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:04:ca:4e:69:f0:90:3c:8a:df:61:17:af: bf:1a:c3:33:27:18:ec:8d:0e:fc:e5:38:6c:5e:3f: 8f:6b:3d:6e:5a:1e:e3:a8:10:70:26:24:4b:a2:e5: 73:9b:24:cd:ee:f7:3e:c6:46:a2:2e:fc:47:ce:1f: 25:1c:c1:10:8b:26:d8:a5:07:c4:ed:dd:b2:b2:80: 96:49:f7:5c:d2:d2:53:a3:3c:58:1c:e2:22:54:9e: 94:1f:7a:eb:64:60:11:3f:a9:36:c5:cf:a9:fb:15: de:f1:9c:db:f0:b8:c2:e2:a5:11:e6:f9:bf:f0:78: f8:b6:89:20:e8:3d:ca:9c:94:96:a8:e5:e9:6c:67: 4c:44:3c:98:ac:5d:e9:d6:84:36:bc:36:49:bd:45: 46:e1:97:4d:e4:28:fc:70:b7:7f:cb:cd:a9:5a:43: c5:93:62:6a:1a:e1:a2:36:a2:5d:82:6e:c5:c6:ea: 30:69:71:73:b4:06:cc:40:b4:a9:4c:a2:5b:b2:9e: 40:03:b2:a1:30:83:d7:e0:d0:86:5a:ee:4d:a1:51: 50:5a:e2:07:b3:76:83:1e:08:cb:ab:c1:c5:33:b4: 39:b1:f7:fe:ae:2c:7c:c9:b4:56:0e:36:53:2b:9e: ce:15:eb:52:a2:5f:04:65:09:b4:92:77:f4:9d:9d: a9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AC:5D:9C:2E:7E:92:E9:16:0B:30:3A:D8:9B:AA:29:74:63:19:E3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ae95a965-bc28-4d5a-a484-88c611b77ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2fe4::/47 Signature Algorithm: sha256WithRSAEncryption 59:e3:ee:8a:4c:9e:57:2c:9c:48:70:03:d0:c5:59:3c:89:61: de:f6:a4:26:e6:d9:85:bf:d6:11:ad:26:06:94:5b:46:6c:a4: 1a:10:85:f7:80:1f:a1:fb:51:00:77:01:d2:67:78:04:9d:03: 40:ea:b6:07:9f:15:5e:d5:92:37:d4:e3:72:37:f6:1a:a4:78: a6:0e:cd:1c:71:ad:00:f3:ab:09:cf:a1:65:71:fc:21:c8:4e: e3:7a:74:10:04:57:07:70:17:07:b6:aa:a2:89:09:94:58:84: 5a:20:71:d9:4d:2c:0f:62:fe:f5:c7:00:66:eb:69:6f:94:f8: a1:85:f6:22:2f:4c:5b:42:33:b9:e5:da:1c:bc:50:d0:a5:4a: 0a:5d:d6:1e:a2:14:cf:7c:55:ff:1e:5f:10:2d:8a:02:4d:ac: 6b:c7:78:18:1b:46:19:f0:69:62:51:bd:87:f3:89:c8:8a:c1: 97:94:c1:aa:15:5c:54:40:97:13:c3:1b:15:f1:e3:07:2e:4f: c1:57:f5:01:ef:6e:d3:78:22:4b:9b:cc:fb:5e:03:7f:22:4b: 10:46:4c:60:cc:e4:36:1a:44:3f:4f:de:54:2f:44:93:0b:21: fa:17:58:f5:7a:bb:66:b9:f2:46:1a:71:90:ef:6b:10:81:6a: 2e:aa:3f:ba -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUL8l+UfQgxOHLTP3xwr0pta8YLaQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjM1MzUxWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzRhM2M5YzAzNmNmYzM3YzQ1YWExYzhkOTIxNGQ1N2E1 YTU1YmU3OTIwNjE0YjdjNmE4NDI1NjhlMWRkMDQyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCghQTKTmnwkDyK32EXr78awzMnGOyNDvzlOGxeP49rPW5a HuOoEHAmJEui5XObJM3u9z7GRqIu/EfOHyUcwRCLJtilB8Tt3bKygJZJ91zS0lOj PFgc4iJUnpQfeutkYBE/qTbFz6n7Fd7xnNvwuMLipRHm+b/wePi2iSDoPcqclJao 5elsZ0xEPJisXenWhDa8Nkm9RUbhl03kKPxwt3/LzalaQ8WTYmoa4aI2ol2CbsXG 6jBpcXO0BsxAtKlMoluynkADsqEwg9fg0IZa7k2hUVBa4gezdoMeCMurwcUztDmx 9/6uLHzJtFYONlMrns4V61KiXwRlCbSSd/SdnamPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUF6xdnC5+kukWCzA62JuqKXRjGeMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FlOTVhOTY1LWJjMjgtNGQ1YS1hNDg0LTg4YzYxMWI3N2VlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAL+QwDQYJKoZIhvcNAQELBQADggEBAFnj7opMnlcsnEhwA9DFWTyJ Yd72pCbm2YW/1hGtJgaUW0ZspBoQhfeAH6H7UQB3AdJneASdA0DqtgefFV7VkjfU 43I39hqkeKYOzRxxrQDzqwnPoWVx/CHITuN6dBAEVwdwFwe2qqKJCZRYhFogcdlN LA9i/vXHAGbraW+U+KGF9iIvTFtCM7nl2hy8UNClSgpd1h6iFM98Vf8eXxAtigJN rGvHeBgbRhnwaWJRvYfziciKwZeUwaoVXFRAlxPDGxXx4wcuT8FX9QHvbtN4Ikub zPteA38iSxBGTGDM5DYaRD9P3lQvRJMLIfoXWPV6u2a58kYacZDvaxCBai6qP7o= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:19 2025 by rpki-client