$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0a161ad-d80e-49e6-8974-d2c0d54c7089.roa File: c0a161ad-d80e-49e6-8974-d2c0d54c7089.roa (raw, json) Hash identifier: 9eoGXFXYqI+jbw4rrQu9xpmSx2d6iZjr1HpFqPMytsQ= Subject key identifier: B2:29:6D:9B:57:46:07:A8:79:A9:60:47:53:C2:0B:E5:A4:DF:34:48 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0482965484C4820C2DABEF4A72E0FBE4AF3EAEBC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0a161ad-d80e-49e6-8974-d2c0d54c7089.roa Signing time: Thu 30 Oct 2025 22:08:42 +0000 ROA not before: Thu 30 Oct 2025 22:08:42 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1b08::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:82:96:54:84:c4:82:0c:2d:ab:ef:4a:72:e0:fb:e4:af:3e:ae:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:08:42 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=8078ebfdb5b635076e818c7fcc2f2bb92137abc3f64895dd86cdf706068e06ae, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:bd:2f:99:7b:c0:fe:77:d3:07:c4:2f:14: b2:b5:5f:6a:7f:e9:99:e4:2f:31:09:98:fa:d4:08: 21:8d:d1:ed:5d:bb:3a:68:3a:6e:89:a6:96:6e:87: 85:8c:c9:9c:a7:d9:d5:05:26:9b:41:06:ea:5c:3f: 32:15:d0:b2:b5:4b:82:81:4c:96:2d:79:c7:e4:8d: 5d:e6:6f:45:93:0a:c7:d0:2d:bf:e0:66:81:95:b2: a1:db:e4:c0:78:cb:65:59:38:3d:8d:c6:c7:b1:9a: ac:00:e2:84:46:58:fc:76:90:54:90:c2:9b:7e:18: 81:a2:c4:55:2b:d4:93:ef:f4:fe:fb:b7:ec:73:4b: 8e:4d:b4:32:99:db:b5:a3:2a:1b:17:c3:8b:2a:fd: 2b:25:a8:cc:52:24:b7:7e:bd:12:e8:ea:5e:46:c4: d7:57:c5:34:98:5d:92:ac:e8:d6:3b:3b:b0:ad:16: 01:f3:be:01:39:96:92:c9:0b:34:c1:54:61:ac:c5: 57:c9:9d:f3:3c:37:3b:06:85:5e:c7:7d:e0:7c:1c: 77:9a:1a:7a:27:fc:03:03:cc:da:db:e2:50:d4:d0: 79:7b:85:02:c3:21:ef:50:42:6a:f7:f2:27:f0:95: 51:1b:ac:29:39:df:07:62:ef:5f:9f:08:9c:02:58: c5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:29:6D:9B:57:46:07:A8:79:A9:60:47:53:C2:0B:E5:A4:DF:34:48 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0a161ad-d80e-49e6-8974-d2c0d54c7089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1b08::/47 Signature Algorithm: sha256WithRSAEncryption 59:71:bd:23:04:2a:85:ca:23:a1:33:df:fd:d2:1c:6e:8d:5e: f7:b0:78:72:92:51:f7:55:f8:07:a4:26:f5:11:79:7b:c6:37: d9:d9:d4:84:8a:89:a1:5d:3f:44:63:8f:7e:a9:7a:35:0c:73: 23:85:47:af:e6:84:48:f5:bc:91:93:e7:97:6e:5f:2a:3d:b5: b1:d6:77:12:ab:a5:57:72:a3:5a:fa:78:c8:36:d0:aa:df:e1: 7c:3c:69:d5:40:15:43:a2:e0:16:57:7c:86:6f:1f:3c:c1:d0: 66:9d:68:5a:4b:f0:77:65:ea:7a:fe:4f:4e:48:a0:54:63:1a: c2:f4:31:86:13:74:0e:82:c9:b9:07:71:9d:13:fe:51:d6:aa: e4:78:b2:85:ba:45:85:f4:d4:1e:99:13:69:0f:4a:57:78:f9: 0b:e1:8b:82:fd:aa:14:7f:3e:f9:44:b1:5a:48:d2:ff:73:ca: 75:e4:05:9b:d0:b8:67:90:c3:a2:14:19:ae:fd:ed:a3:2e:cc: f4:ac:de:76:da:80:93:86:46:9e:d1:80:c2:b4:19:58:b9:2a: b0:3b:db:f5:2b:4b:78:81:9c:1d:56:ab:ab:7e:26:a1:10:a3: 4f:b6:59:a2:8f:69:1c:0f:61:07:f5:0c:03:0d:33:25:c7:6a: 68:61:f1:d6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBIKWVITEggwtq+9KcuD75K8+rrwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIwODQyWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDc4ZWJmZGI1YjYzNTA3NmU4MThjN2ZjYzJmMmJiOTIx MzdhYmMzZjY0ODk1ZGQ4NmNkZjcwNjA2OGUwNmFlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC5L0vmXvA/nfTB8QvFLK1X2p/6ZnkLzEJmPrUCCGN0e1d uzpoOm6JppZuh4WMyZyn2dUFJptBBupcPzIV0LK1S4KBTJYtecfkjV3mb0WTCsfQ Lb/gZoGVsqHb5MB4y2VZOD2NxsexmqwA4oRGWPx2kFSQwpt+GIGixFUr1JPv9P77 t+xzS45NtDKZ27WjKhsXw4sq/SslqMxSJLd+vRLo6l5GxNdXxTSYXZKs6NY7O7Ct FgHzvgE5lpLJCzTBVGGsxVfJnfM8NzsGhV7HfeB8HHeaGnon/AMDzNrb4lDU0Hl7 hQLDIe9QQmr38ifwlVEbrCk53wdi71+fCJwCWMV1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsiltm1dGB6h5qWBHU8IL5aTfNEgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2MwYTE2MWFkLWQ4MGUtNDllNi04OTc0LWQyYzBkNTRjNzA4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGwgwDQYJKoZIhvcNAQELBQADggEBAFlxvSMEKoXKI6Ez3/3SHG6N XveweHKSUfdV+AekJvUReXvGN9nZ1ISKiaFdP0Rjj36pejUMcyOFR6/mhEj1vJGT 55duXyo9tbHWdxKrpVdyo1r6eMg20Krf4Xw8adVAFUOi4BZXfIZvHzzB0GadaFpL 8Hdl6nr+T05IoFRjGsL0MYYTdA6CybkHcZ0T/lHWquR4soW6RYX01B6ZE2kPSld4 +Qvhi4L9qhR/PvlEsVpI0v9zynXkBZvQuGeQw6IUGa797aMuzPSs3nbagJOGRp7R gMK0GVi5KrA72/UrS3iBnB1Wq6t+JqEQo0+2WaKPaRwPYQf1DAMNMyXHamhh8dY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:19 2025 by rpki-client