$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7a914db-742c-4be8-a34f-45b0dc0984e2.roa File: b7a914db-742c-4be8-a34f-45b0dc0984e2.roa (raw, json) Hash identifier: S13vZsa7uf+XBnlOnvISGrmMfKd8VgHHRZbgzj7z8H4= Subject key identifier: 3E:02:C0:9C:18:29:DD:7B:7F:95:EF:9B:3B:CE:AE:B3:CD:28:E1:A9 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0B212E8399F6F68D25DF7260371DFD4C844159DF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7a914db-742c-4be8-a34f-45b0dc0984e2.roa Signing time: Thu 30 Oct 2025 22:23:48 +0000 ROA not before: Thu 30 Oct 2025 22:23:48 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1ca8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:21:2e:83:99:f6:f6:8d:25:df:72:60:37:1d:fd:4c:84:41:59:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:23:48 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=0c60513a52855b70f982eaa1ac6f301f843b9c995f49bd6eb21b2c5b963d2359, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:05:1c:f0:90:4e:9c:14:d5:dd:5a:25:af: a4:f4:b2:ce:ba:4f:90:c3:04:d6:ba:45:34:6b:20: fe:e9:93:9a:a0:78:89:80:0d:6e:eb:9d:b7:0f:2b: f6:cd:5a:f2:1c:ab:33:d4:b3:93:08:f5:f0:32:f2: a4:4f:8a:a1:b4:ff:9a:ab:e8:6e:07:f6:e6:1c:a8: ca:da:03:2d:3e:79:46:03:b8:f9:0d:31:f1:55:64: bf:ce:d0:7d:09:6f:47:41:11:71:21:0e:0f:e5:71: 33:03:72:7c:a5:e1:04:56:2b:3c:3d:08:fd:a8:2e: 31:9b:ed:0f:44:45:46:9b:b7:af:1f:ad:e0:e5:32: 21:a9:12:5b:fe:8c:dc:57:c0:25:c3:f4:0b:e1:d4: 00:f3:c9:05:0b:d5:ab:1b:50:2b:be:a8:4d:6d:e2: eb:30:e2:b4:13:90:5b:c1:dc:46:f6:1d:a0:78:4d: c1:14:8b:b8:c8:92:b1:a3:a2:07:cf:69:29:6f:4e: 16:cb:30:06:37:6f:19:50:d5:81:02:0c:73:0c:98: a1:19:9a:e3:bc:43:7d:5c:43:f9:52:9e:a9:24:27: 28:9e:e7:b3:3e:1d:b9:e9:a4:8d:f1:79:15:26:f4: ca:dc:e6:01:23:6a:63:41:c3:55:58:8e:8e:18:43: fa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:02:C0:9C:18:29:DD:7B:7F:95:EF:9B:3B:CE:AE:B3:CD:28:E1:A9 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7a914db-742c-4be8-a34f-45b0dc0984e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1ca8::/47 Signature Algorithm: sha256WithRSAEncryption 0f:bb:82:a0:1c:67:60:c4:e0:eb:3d:8d:54:d6:06:42:82:e2: 85:83:11:49:75:45:47:dc:50:f9:4b:01:03:db:c5:94:fb:39: 8e:7a:6c:aa:52:08:88:0e:96:25:5a:e6:1c:89:88:cb:33:45: f6:e8:dd:47:c3:c2:9e:e6:9c:35:91:a0:7d:fe:b1:51:30:dc: 63:60:80:fb:c6:e0:7e:94:9b:04:bb:bb:73:09:92:cc:d1:f4: 0a:77:0e:c1:e5:4a:23:e3:83:35:4c:4f:a7:a8:d8:23:13:64: 6e:f9:04:ec:eb:f4:e9:e1:7d:39:38:d9:70:fd:07:83:02:37: a8:2f:59:35:f4:6e:d6:ee:87:b0:c5:15:5e:4a:90:20:ed:38: 6a:09:25:21:da:70:c1:73:3c:11:2f:82:be:eb:d2:f6:fe:d6: 29:f2:dc:dc:45:42:16:37:0c:e1:d9:24:ba:89:d1:35:f5:93: 80:15:99:05:21:29:82:ad:bd:b0:64:ab:5f:65:b6:9c:00:2d: 2a:c6:36:b2:d0:1f:9b:99:17:16:6b:1d:43:1c:49:6d:99:18: 8a:41:bf:b0:fb:08:e4:0b:6c:e7:3b:44:5e:23:76:fc:dd:0c: 8c:e6:42:29:72:d9:dc:33:05:dc:ea:e0:30:c5:70:a9:b0:e3: e6:83:97:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCyEug5n29o0l33JgNx39TIRBWd8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIyMzQ4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYzYwNTEzYTUyODU1YjcwZjk4MmVhYTFhYzZmMzAxZjg0 M2I5Yzk5NWY0OWJkNmViMjFiMmM1Yjk2M2QyMzU5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH9wUc8JBOnBTV3Volr6T0ss66T5DDBNa6RTRrIP7pk5qg eImADW7rnbcPK/bNWvIcqzPUs5MI9fAy8qRPiqG0/5qr6G4H9uYcqMraAy0+eUYD uPkNMfFVZL/O0H0Jb0dBEXEhDg/lcTMDcnyl4QRWKzw9CP2oLjGb7Q9ERUabt68f reDlMiGpElv+jNxXwCXD9Avh1ADzyQUL1asbUCu+qE1t4usw4rQTkFvB3Eb2HaB4 TcEUi7jIkrGjogfPaSlvThbLMAY3bxlQ1YECDHMMmKEZmuO8Q31cQ/lSnqkkJyie 57M+HbnppI3xeRUm9Mrc5gEjamNBw1VYjo4YQ/pHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPgLAnBgp3Xt/le+bO86us80o4akwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I3YTkxNGRiLTc0MmMtNGJlOC1hMzRmLTQ1YjBkYzA5ODRlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAHKgwDQYJKoZIhvcNAQELBQADggEBAA+7gqAcZ2DE4Os9jVTWBkKC 4oWDEUl1RUfcUPlLAQPbxZT7OY56bKpSCIgOliVa5hyJiMszRfbo3UfDwp7mnDWR oH3+sVEw3GNggPvG4H6UmwS7u3MJkszR9Ap3DsHlSiPjgzVMT6eo2CMTZG75BOzr 9OnhfTk42XD9B4MCN6gvWTX0btbuh7DFFV5KkCDtOGoJJSHacMFzPBEvgr7r0vb+ 1iny3NxFQhY3DOHZJLqJ0TX1k4AVmQUhKYKtvbBkq19ltpwALSrGNrLQH5uZFxZr HUMcSW2ZGIpBv7D7COQLbOc7RF4jdvzdDIzmQily2dwzBdzq4DDFcKmw4+aDl30= -----END CERTIFICATE-----Generated at Wed Nov 5 15:20:15 2025 by rpki-client