$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba4776f5-e23c-4cdb-9aa7-d620352592e8.roa File: ba4776f5-e23c-4cdb-9aa7-d620352592e8.roa (raw, json) Hash identifier: Mu76jadpZ/MOO1e8v80Np/zU0fTACFN2hf2yn+GKBJg= Subject key identifier: 85:E6:3A:B1:43:63:73:69:42:F8:B2:5D:5E:8A:D7:36:77:C0:35:09 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2AD4670F5F2576C7AB6329377C757081F55DA0FE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba4776f5-e23c-4cdb-9aa7-d620352592e8.roa Signing time: Fri 31 Oct 2025 03:56:35 +0000 ROA not before: Fri 31 Oct 2025 03:56:35 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3238::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d4:67:0f:5f:25:76:c7:ab:63:29:37:7c:75:70:81:f5:5d:a0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:56:35 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=7b93a0d9e76c3e58b4adfab75581d4d602ba405d4cbda7ef73cfaaf639775afb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:bd:be:30:ae:d3:63:44:7c:6c:d7:c2:f2: 88:57:4b:28:8d:d1:60:0b:e3:63:86:68:35:16:88: a3:79:20:be:2a:75:03:3a:1c:ad:b4:7f:d4:64:02: b7:d5:b9:aa:d8:78:a2:9a:34:83:15:de:e6:60:b7: d9:7d:6f:5a:11:aa:6c:f9:00:56:5b:bd:1d:4f:12: 22:c4:9d:13:59:4c:9d:00:63:3d:d7:b8:38:13:ef: 21:69:6e:2d:e9:31:7a:da:57:ff:49:89:38:b9:9e: 99:26:6c:4e:00:53:57:3a:7e:45:b3:73:38:b4:3c: c5:a7:c9:79:01:fc:55:23:c1:4b:5c:16:5c:3a:db: 47:51:18:3f:92:39:cc:fd:9d:10:54:e9:f9:e8:ab: 4b:58:e5:46:a9:7b:60:75:95:e7:f8:0d:35:3e:d6: 99:7a:5b:d5:4b:ba:3f:cc:98:9f:87:71:b7:8e:eb: 04:2e:8f:18:0e:7a:63:5d:0e:94:f6:c5:3e:94:6c: 8d:63:86:a5:12:16:6f:64:4c:ba:be:f5:dc:27:63: 74:d8:06:6f:7e:3b:99:c7:b8:c7:e3:d6:01:d3:0f: 82:08:27:a3:92:06:81:46:0e:b5:2f:ba:e1:85:99: 7f:eb:56:b0:9f:c2:1e:83:d5:4b:db:d7:ce:5c:d7: a0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E6:3A:B1:43:63:73:69:42:F8:B2:5D:5E:8A:D7:36:77:C0:35:09 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba4776f5-e23c-4cdb-9aa7-d620352592e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3238::/46 Signature Algorithm: sha256WithRSAEncryption 7e:ec:0c:96:e1:84:58:4a:29:ab:c0:7c:dc:b8:52:91:42:fc: 4d:3e:1a:53:3c:7f:1d:c0:c8:22:f2:24:99:a1:3c:c6:be:15: 47:fe:2b:cc:16:05:d0:89:a7:f1:67:ea:4f:a0:58:7c:42:5c: 75:93:c6:6d:c3:5f:5f:2a:e1:0d:c6:60:ae:37:31:cf:93:27: 10:ce:23:20:63:16:40:9f:86:25:57:74:2b:ec:81:66:5c:9c: 2f:d2:a8:28:09:47:1f:a9:f4:86:83:ae:ff:53:fa:f3:bf:46: 32:cd:16:3a:96:d4:c7:33:45:f0:e0:04:2f:d8:19:77:89:0d: 95:70:44:ec:04:22:2a:1e:ad:68:0b:ef:55:b0:dd:da:be:5c: 3d:77:25:3b:5c:43:9e:96:01:03:fc:7c:f9:4a:53:42:62:52: a7:3f:de:c0:68:3f:29:e8:52:be:63:f2:d3:65:70:a5:b1:25: c4:41:cb:7e:9d:d1:16:3d:85:84:5b:12:f4:47:fd:63:22:7c: e9:bc:5f:b1:35:78:40:b5:9b:5e:66:98:5f:dc:ad:9a:58:2e: 4f:5e:b0:5a:e8:65:f8:fc:49:43:98:fc:df:c9:b8:e7:06:ee: 8c:2e:9b:c7:5c:d3:80:17:ab:b2:48:e7:53:ab:2f:82:2b:7f: aa:34:0d:16 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKtRnD18ldserYyk3fHVwgfVdoP4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDM1NjM1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjkzYTBkOWU3NmMzZTU4YjRhZGZhYjc1NTgxZDRkNjAy YmE0MDVkNGNiZGE3ZWY3M2NmYWFmNjM5Nzc1YWZiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmKr2+MK7TY0R8bNfC8ohXSyiN0WAL42OGaDUWiKN5IL4q dQM6HK20f9RkArfVuarYeKKaNIMV3uZgt9l9b1oRqmz5AFZbvR1PEiLEnRNZTJ0A Yz3XuDgT7yFpbi3pMXraV/9JiTi5npkmbE4AU1c6fkWzczi0PMWnyXkB/FUjwUtc Flw620dRGD+SOcz9nRBU6fnoq0tY5Uape2B1lef4DTU+1pl6W9VLuj/MmJ+HcbeO 6wQujxgOemNdDpT2xT6UbI1jhqUSFm9kTLq+9dwnY3TYBm9+O5nHuMfj1gHTD4II J6OSBoFGDrUvuuGFmX/rVrCfwh6D1Uvb185c16ANAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUheY6sUNjc2lC+LJdXorXNnfANQkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JhNDc3NmY1LWUyM2MtNGNkYi05YWE3LWQ2MjAzNTI1OTJlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAMjgwDQYJKoZIhvcNAQELBQADggEBAH7sDJbhhFhKKavAfNy4UpFC /E0+GlM8fx3AyCLyJJmhPMa+FUf+K8wWBdCJp/Fn6k+gWHxCXHWTxm3DX18q4Q3G YK43Mc+TJxDOIyBjFkCfhiVXdCvsgWZcnC/SqCgJRx+p9IaDrv9T+vO/RjLNFjqW 1MczRfDgBC/YGXeJDZVwROwEIioerWgL71Ww3dq+XD13JTtcQ56WAQP8fPlKU0Ji Uqc/3sBoPynoUr5j8tNlcKWxJcRBy36d0RY9hYRbEvRH/WMifOm8X7E1eEC1m15m mF/crZpYLk9esFroZfj8SUOY/N/JuOcG7owum8dc04AXq7JI51OrL4Irf6o0DRY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:50 2025 by rpki-client