$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b841857b-b3cf-4ea1-bfe2-a311265b37bd.roa File: b841857b-b3cf-4ea1-bfe2-a311265b37bd.roa (raw, json) Hash identifier: Ez/T5uLByB0PPhoDKnRpZO6233cPl62kTw3FMc6Aeq4= Subject key identifier: 0A:3F:15:DD:96:16:91:58:2E:9D:1C:25:8A:F4:8D:16:14:E9:A0:77 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 26E14D47A2B2DF5521D4E77FD5426448D47F4372 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b841857b-b3cf-4ea1-bfe2-a311265b37bd.roa Signing time: Thu 30 Oct 2025 23:29:04 +0000 ROA not before: Thu 30 Oct 2025 23:29:04 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2dd6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e1:4d:47:a2:b2:df:55:21:d4:e7:7f:d5:42:64:48:d4:7f:43:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:29:04 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=f383167703192467aae59f0833c6c33f840038dd16a1c624abee37b358e5852e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:8f:76:ac:38:28:a2:26:50:22:34:0b:7c: 22:c6:28:cd:24:2b:fa:b0:9a:f2:00:29:dc:cf:13: 21:7a:63:c4:20:4d:8f:8b:2e:f7:9f:28:55:92:ab: 1b:ae:4d:91:e8:9c:e0:d5:9d:9a:b0:1a:b7:69:78: 31:0b:0d:24:be:85:c3:3b:3f:21:b5:a8:e3:7b:18: 33:de:da:0b:be:12:b4:5c:29:a4:b8:1c:c8:27:4a: a1:9f:79:bf:71:01:1d:79:a8:e8:3a:f5:94:8a:32: ec:e6:30:84:71:cc:1d:94:b8:67:c2:48:01:de:73: 35:fa:94:53:96:1f:e6:18:d0:99:92:54:0f:4a:a9: 6b:f8:df:76:0d:b4:2b:92:bb:f2:f6:02:6d:dc:7c: e5:cf:60:3e:70:85:65:3f:9e:23:de:d9:b2:fe:89: e7:a1:a4:53:94:a1:db:08:14:6a:3a:85:a7:82:9a: 94:de:12:f4:ce:10:78:9e:7c:55:70:e3:cd:76:bb: 58:dc:ed:5d:d0:6c:b6:1d:cb:eb:8b:e0:89:b1:55: 82:d7:48:9f:98:30:1e:20:28:4c:97:6a:88:ec:ba: e9:55:ce:b2:6e:31:ed:5c:d3:71:3a:eb:7a:09:dc: 53:59:e1:d3:24:6d:6e:95:56:4e:59:07:5d:ee:ff: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3F:15:DD:96:16:91:58:2E:9D:1C:25:8A:F4:8D:16:14:E9:A0:77 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b841857b-b3cf-4ea1-bfe2-a311265b37bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2dd6::/47 Signature Algorithm: sha256WithRSAEncryption 85:dc:e4:a2:5b:4b:4e:ea:e2:76:9a:df:69:01:8b:30:3f:1f: 5c:04:74:08:1c:4a:81:83:18:15:b7:5c:96:88:68:ed:43:aa: 4e:5e:24:28:c6:b1:61:f1:0f:28:70:84:a8:27:56:63:11:f5: e5:6f:24:e5:ae:20:1e:05:fc:a0:b5:91:8e:ef:8c:19:e0:e5: fd:54:67:d4:da:b7:92:c3:bb:e6:a1:4a:3c:11:f2:1d:61:e8: d7:3d:19:9e:97:e3:c9:f4:31:bc:a5:b4:7c:04:8d:af:9e:75: e3:80:1a:36:91:07:75:ca:c5:f4:11:5f:3b:b1:9f:a5:3a:c5: 8f:10:27:74:1c:28:73:6a:a5:30:dc:c4:91:2c:45:51:e0:fa: aa:32:4a:0f:24:10:79:10:68:6e:4b:01:1f:f9:1f:1d:5e:fa: cb:36:62:f2:85:0d:b7:f4:fb:47:e8:44:c0:08:a1:3c:b3:69: 89:5b:b2:d8:a1:b3:16:7a:84:35:08:f1:86:c4:cf:ce:7f:4a: 45:c1:40:34:80:6f:1e:42:4d:58:01:b6:c5:b0:33:82:25:3a: a8:73:aa:8a:13:6e:89:79:0f:aa:bb:8f:72:de:7a:97:4d:13: 4b:be:a0:a7:86:b8:9f:5a:39:a4:45:e5:41:b2:3a:7e:a2:b8: 91:ed:e3:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJuFNR6Ky31Uh1Od/1UJkSNR/Q3IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMyOTA0WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzgzMTY3NzAzMTkyNDY3YWFlNTlmMDgzM2M2YzMzZjg0 MDAzOGRkMTZhMWM2MjRhYmVlMzdiMzU4ZTU4NTJlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHOo92rDgooiZQIjQLfCLGKM0kK/qwmvIAKdzPEyF6Y8Qg TY+LLvefKFWSqxuuTZHonODVnZqwGrdpeDELDSS+hcM7PyG1qON7GDPe2gu+ErRc KaS4HMgnSqGfeb9xAR15qOg69ZSKMuzmMIRxzB2UuGfCSAHeczX6lFOWH+YY0JmS VA9KqWv433YNtCuSu/L2Am3cfOXPYD5whWU/niPe2bL+ieehpFOUodsIFGo6haeC mpTeEvTOEHiefFVw4812u1jc7V3QbLYdy+uL4ImxVYLXSJ+YMB4gKEyXaojsuulV zrJuMe1c03E663oJ3FNZ4dMkbW6VVk5ZB13u/4X5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCj8V3ZYWkVgunRwlivSNFhTpoHcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I4NDE4NTdiLWIzY2YtNGVhMS1iZmUyLWEzMTEyNjViMzdiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALdYwDQYJKoZIhvcNAQELBQADggEBAIXc5KJbS07q4naa32kBizA/ H1wEdAgcSoGDGBW3XJaIaO1Dqk5eJCjGsWHxDyhwhKgnVmMR9eVvJOWuIB4F/KC1 kY7vjBng5f1UZ9Tat5LDu+ahSjwR8h1h6Nc9GZ6X48n0MbyltHwEja+edeOAGjaR B3XKxfQRXzuxn6U6xY8QJ3QcKHNqpTDcxJEsRVHg+qoySg8kEHkQaG5LAR/5Hx1e +ss2YvKFDbf0+0foRMAIoTyzaYlbstihsxZ6hDUI8YbEz85/SkXBQDSAbx5CTVgB tsWwM4IlOqhzqooTbol5D6q7j3LeepdNE0u+oKeGuJ9aOaRF5UGyOn6iuJHt4+I= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:29 2025 by rpki-client