$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0ce2c5b-12a4-468d-ad7b-110691b26684.roa File: c0ce2c5b-12a4-468d-ad7b-110691b26684.roa (raw, json) Hash identifier: cA+JFiTBN/0mqn0FZhxe0fyHW7tXM9tfsiJpqth3jRY= Subject key identifier: C7:57:A3:26:4F:DC:7B:04:95:3F:C3:CA:45:77:87:06:27:8B:61:12 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 36DC64DD9AD37C16CE5689264599D7A540BBABAB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0ce2c5b-12a4-468d-ad7b-110691b26684.roa Signing time: Fri 31 Oct 2025 03:28:18 +0000 ROA not before: Fri 31 Oct 2025 03:28:18 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2b10::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:dc:64:dd:9a:d3:7c:16:ce:56:89:26:45:99:d7:a5:40:bb:ab:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:28:18 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e68056dd0aecab7fcc3e33718da1bd7fa122e8215499201d7ca8e1343e27dbe5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:03:38:fe:76:be:f9:98:31:52:b9:af:c8:6c: f0:a7:5f:3e:ef:8a:9b:25:4c:35:ee:55:a6:98:b8: 79:0f:d4:d4:11:bd:c2:20:5d:b6:fa:12:53:ee:84: 1a:fc:dd:ce:3f:a9:66:a8:68:66:06:57:44:96:c8: 75:6f:d0:32:e2:96:1c:44:60:6e:0c:a3:98:eb:83: fc:49:31:4d:50:ba:f0:a8:d3:b7:fa:26:e1:1e:d1: cd:29:e0:08:1a:c9:bf:ff:27:1c:f7:25:a9:37:12: 1d:5d:de:96:3b:29:93:e9:ab:88:9f:1c:7e:7b:e4: e4:2c:16:c2:e9:d4:66:ac:b8:c8:49:07:36:cc:e2: e3:a5:d3:53:a3:3e:b0:b1:56:85:be:da:c0:2f:17: 6b:d7:44:a2:6d:1a:13:fa:60:d5:e3:51:66:87:69: c9:cd:e9:ca:1b:cb:a9:3c:34:a0:d3:4f:35:f7:72: a0:ab:2c:2a:e2:70:8c:f7:20:d9:92:60:bd:3f:20: 26:1f:c3:ec:3b:06:ee:2d:80:76:ea:f4:1b:25:bf: ab:d5:a1:df:39:fb:1d:cd:e7:13:49:2b:2b:2b:db: cc:c1:0c:0d:76:f1:fb:50:02:a7:e9:7b:7a:59:ca: 16:ba:4c:f3:49:8c:74:45:ca:b5:c8:b9:de:b0:71: 06:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:57:A3:26:4F:DC:7B:04:95:3F:C3:CA:45:77:87:06:27:8B:61:12 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c0ce2c5b-12a4-468d-ad7b-110691b26684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2b10::/46 Signature Algorithm: sha256WithRSAEncryption 9e:24:02:2b:95:46:a1:57:70:da:b6:56:63:be:2c:2d:7e:32: fb:79:26:d0:af:c7:2e:cf:d1:54:3e:f2:df:14:16:e9:3b:aa: 47:d0:ec:4d:4a:8c:1d:c0:25:e2:d1:20:5e:0b:3c:de:21:b1: eb:8f:34:04:60:53:73:50:74:a0:ce:83:a3:96:67:81:d5:ba: 51:4a:6c:74:c2:79:f6:dd:43:ef:bb:b6:4d:f5:0f:7d:93:a9: 16:7e:c1:65:e9:c6:40:03:cc:0f:59:ec:db:1a:c9:2c:b3:ed: bb:8e:e9:e1:54:ab:70:a1:79:5c:35:b0:b8:6a:41:8f:39:a3: fd:3a:87:19:d9:a8:26:05:ea:05:aa:c8:03:33:a9:dc:d3:30: 8f:a4:57:0f:55:99:3c:41:68:c2:a0:87:76:3d:bc:5c:63:b2: 50:47:c5:2f:12:19:1e:11:cc:ab:fd:89:73:77:2b:7e:c1:ac: 0b:35:2e:d2:d6:36:8a:49:db:37:15:28:ec:33:34:01:13:8d: b2:e4:90:48:69:e4:b5:5c:fc:07:96:f6:2b:7c:13:59:7c:e7: 5e:48:35:8c:0c:60:da:c4:79:43:a5:d5:ae:7f:a0:b8:f9:5d: 94:3d:05:f0:b2:cb:d1:e2:f6:10:43:3a:62:4d:ac:3e:46:fa: 09:14:88:0f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNtxk3ZrTfBbOVokmRZnXpUC7q6swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMyODE4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjgwNTZkZDBhZWNhYjdmY2MzZTMzNzE4ZGExYmQ3ZmEx MjJlODIxNTQ5OTIwMWQ3Y2E4ZTEzNDNlMjdkYmU1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVAzj+dr75mDFSua/IbPCnXz7vipslTDXuVaaYuHkP1NQR vcIgXbb6ElPuhBr83c4/qWaoaGYGV0SWyHVv0DLilhxEYG4Mo5jrg/xJMU1QuvCo 07f6JuEe0c0p4Agayb//Jxz3Jak3Eh1d3pY7KZPpq4ifHH575OQsFsLp1GasuMhJ BzbM4uOl01OjPrCxVoW+2sAvF2vXRKJtGhP6YNXjUWaHacnN6coby6k8NKDTTzX3 cqCrLCricIz3INmSYL0/ICYfw+w7Bu4tgHbq9Bslv6vVod85+x3N5xNJKysr28zB DA128ftQAqfpe3pZyha6TPNJjHRFyrXIud6wcQbtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUx1ejJk/cewSVP8PKRXeHBieLYRIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2MwY2UyYzViLTEyYTQtNDY4ZC1hZDdiLTExMDY5MWIyNjY4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAKxAwDQYJKoZIhvcNAQELBQADggEBAJ4kAiuVRqFXcNq2VmO+LC1+ Mvt5JtCvxy7P0VQ+8t8UFuk7qkfQ7E1KjB3AJeLRIF4LPN4hseuPNARgU3NQdKDO g6OWZ4HVulFKbHTCefbdQ++7tk31D32TqRZ+wWXpxkADzA9Z7NsaySyz7buO6eFU q3CheVw1sLhqQY85o/06hxnZqCYF6gWqyAMzqdzTMI+kVw9VmTxBaMKgh3Y9vFxj slBHxS8SGR4RzKv9iXN3K37BrAs1LtLWNopJ2zcVKOwzNAETjbLkkEhp5LVc/AeW 9it8E1l8515INYwMYNrEeUOl1a5/oLj5XZQ9BfCyy9Hi9hBDOmJNrD5G+gkUiA8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:29:00 2025 by rpki-client