$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0a95aaf-0a2e-4cde-a41f-44cda7a0a639.roa File: b0a95aaf-0a2e-4cde-a41f-44cda7a0a639.roa (raw, json) Hash identifier: dNXckEr35UrH78Pyi0k3uI2sYarGnU+dh/+1Klihuc4= Subject key identifier: 7B:C4:DB:E0:49:A2:5C:5E:6D:83:89:E0:2C:4A:82:01:35:11:2B:6A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 27F95E07F069457E5EF7C0B974566557A790F517 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0a95aaf-0a2e-4cde-a41f-44cda7a0a639.roa Signing time: Fri 31 Oct 2025 00:54:53 +0000 ROA not before: Fri 31 Oct 2025 00:54:53 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3832::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f9:5e:07:f0:69:45:7e:5e:f7:c0:b9:74:56:65:57:a7:90:f5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:54:53 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=71c0105149e6d737d95b86641834e9987c46e2e63b04a6e0f7a759fb757b17c8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:d4:f7:2d:94:8a:88:6b:f8:89:2f:51:b6: c0:4e:81:9b:fa:08:21:bc:a1:b2:1b:d6:29:f8:47: f9:f3:0d:29:89:2e:11:3d:bc:db:80:e0:f2:55:a5: ff:11:44:d4:7e:34:77:c5:85:99:2a:48:7f:9e:bb: bc:f1:b6:fa:ca:23:f7:db:b9:0f:c0:0a:f4:24:fc: 36:40:27:0a:7b:4c:fd:3d:b0:19:9a:94:bc:d6:a3: 74:13:68:d1:a1:da:e3:cb:48:5e:6d:b1:97:45:6d: 3d:00:ab:2b:c5:8a:07:ac:20:1d:2d:92:d1:af:81: 91:c7:d5:02:bd:89:2c:6b:09:b9:ba:66:95:29:39: 78:91:71:86:24:b9:93:8d:d7:37:fc:5f:be:eb:42: b3:0a:ef:ec:96:79:dc:72:43:81:88:fa:ce:42:91: 70:6d:7a:f3:2e:71:41:49:9d:a9:cf:87:ec:3a:1a: b9:ce:c7:f0:8f:4b:c6:82:ff:ae:eb:bd:db:76:0b: df:ef:89:ba:8a:1b:86:86:b8:a2:7c:f5:40:b3:9c: 3e:e4:2d:90:59:f3:7b:36:3a:4b:a2:b0:1d:56:4e: 1e:1d:09:17:ff:1c:ad:f7:fe:b1:ba:7b:0e:7c:73: f2:96:93:61:d8:a5:a2:6f:80:4a:a6:54:b4:88:1d: 60:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C4:DB:E0:49:A2:5C:5E:6D:83:89:E0:2C:4A:82:01:35:11:2B:6A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b0a95aaf-0a2e-4cde-a41f-44cda7a0a639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3832::/47 Signature Algorithm: sha256WithRSAEncryption 0b:6d:f0:b6:a6:2c:99:5c:07:5d:fa:27:19:f9:85:f5:6e:93: 0a:75:e8:06:55:90:72:89:66:52:1c:9c:e0:be:63:1e:bd:98: 5f:07:a3:c5:9f:a5:c9:6a:0d:cf:92:dc:ba:6c:b9:33:98:ee: fd:20:78:21:48:5e:aa:46:0d:ea:ba:98:85:ee:35:bb:6d:47: b0:80:2a:b8:ce:f4:56:b6:2b:76:c9:b0:25:a0:63:a4:60:22: c4:8a:d8:32:21:75:79:ea:7d:13:fa:fe:ee:3a:e9:63:53:dc: 84:99:85:73:c4:38:df:50:ec:b0:92:53:dd:18:a6:ab:0a:b3: e0:76:46:77:df:84:0d:b3:da:b5:2e:1a:c0:a7:db:31:a1:79: 77:d1:48:72:83:0d:47:e3:a4:61:5d:fd:9c:a1:06:50:65:22: 52:e6:b5:ca:2b:dd:3f:42:d1:60:d4:c2:3e:fe:73:4d:c4:2a: d6:85:0d:10:ef:31:b6:7f:3a:50:91:f6:15:2e:5b:25:fa:cc: a4:65:2c:1c:13:8b:aa:91:f6:15:5b:a8:8c:b4:fb:2d:a8:b2: 82:59:fc:a5:12:60:d7:63:e7:aa:b0:66:ca:97:0e:e0:3a:b7: 45:4a:39:9a:2c:14:9f:90:15:34:66:f6:16:7e:55:b2:b1:81: d5:7c:a4:47 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJ/leB/BpRX5e98C5dFZlV6eQ9RcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1NDUzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MWMwMTA1MTQ5ZTZkNzM3ZDk1Yjg2NjQxODM0ZTk5ODdj NDZlMmU2M2IwNGE2ZTBmN2E3NTlmYjc1N2IxN2M4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+k9T3LZSKiGv4iS9RtsBOgZv6CCG8obIb1in4R/nzDSmJ LhE9vNuA4PJVpf8RRNR+NHfFhZkqSH+eu7zxtvrKI/fbuQ/ACvQk/DZAJwp7TP09 sBmalLzWo3QTaNGh2uPLSF5tsZdFbT0AqyvFigesIB0tktGvgZHH1QK9iSxrCbm6 ZpUpOXiRcYYkuZON1zf8X77rQrMK7+yWedxyQ4GI+s5CkXBtevMucUFJnanPh+w6 GrnOx/CPS8aC/67rvdt2C9/vibqKG4aGuKJ89UCznD7kLZBZ83s2OkuisB1WTh4d CRf/HK33/rG6ew58c/KWk2HYpaJvgEqmVLSIHWBxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUe8Tb4EmiXF5tg4ngLEqCATURK2owHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2IwYTk1YWFmLTBhMmUtNGNkZS1hNDFmLTQ0Y2RhN2EwYTYzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAODIwDQYJKoZIhvcNAQELBQADggEBAAtt8LamLJlcB136Jxn5hfVu kwp16AZVkHKJZlIcnOC+Yx69mF8Ho8WfpclqDc+S3LpsuTOY7v0geCFIXqpGDeq6 mIXuNbttR7CAKrjO9Fa2K3bJsCWgY6RgIsSK2DIhdXnqfRP6/u466WNT3ISZhXPE ON9Q7LCSU90YpqsKs+B2RnffhA2z2rUuGsCn2zGheXfRSHKDDUfjpGFd/ZyhBlBl IlLmtcor3T9C0WDUwj7+c03EKtaFDRDvMbZ/OlCR9hUuWyX6zKRlLBwTi6qR9hVb qIy0+y2osoJZ/KUSYNdj56qwZsqXDuA6t0VKOZosFJ+QFTRm9hZ+VbKxgdV8pEc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:56:09 2025 by rpki-client