$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c124c9d7-0db5-4d3e-ab86-630410199edc.roa File: c124c9d7-0db5-4d3e-ab86-630410199edc.roa (raw, json) Hash identifier: paupOLEh7/nm3z+e+ciatBfhqapDYi3BWYcRbh7yGC4= Subject key identifier: D6:72:E1:6E:3D:88:FE:51:B4:D4:05:AE:F3:2E:2D:7D:EA:79:80:CA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 79C1428E3D60EE45ED7AAB31CAD42D0EB3085811 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c124c9d7-0db5-4d3e-ab86-630410199edc.roa Signing time: Thu 30 Oct 2025 20:23:38 +0000 ROA not before: Thu 30 Oct 2025 20:23:38 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2448::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c1:42:8e:3d:60:ee:45:ed:7a:ab:31:ca:d4:2d:0e:b3:08:58:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:23:38 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=6f6c85e33b420df6febf142f37c2e60ed39dd5df878f65b8a0ac5da2b5e1e598, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:8c:43:e9:6c:37:41:2d:72:4d:59:dd:10: a1:99:91:0e:2d:73:d8:b8:4c:ae:03:61:4a:42:7f: e5:93:4b:43:d8:d7:18:7a:6b:a2:13:49:ef:bb:a2: c1:9e:8d:d3:ed:e0:db:d2:e5:3f:c1:b8:5d:a7:c4: bc:34:e7:80:c6:32:c2:4f:51:e9:c1:be:2a:50:e4: 98:24:a2:e3:e5:dc:ff:8c:cb:0c:48:f8:44:25:a8: fe:cb:c7:66:33:7b:a9:bc:fd:e8:54:6d:03:fc:a9: 14:f7:9b:55:9a:64:ae:33:82:db:e3:5e:38:b8:e7: 02:38:04:38:04:96:1e:73:ef:2c:cc:e2:d8:29:21: d0:dc:ef:6f:e2:35:df:c9:23:37:69:c1:70:ee:bd: 64:87:3f:93:3e:be:d1:01:2e:70:7b:71:33:54:33: 64:4a:19:52:6b:93:1b:98:a5:fb:cc:c6:c6:19:06: f0:07:2e:a8:18:b3:5f:6f:cb:48:a6:4d:68:3a:ca: 16:6c:91:ad:2f:e8:a2:4b:90:ab:b5:7e:64:14:49: 2a:6c:79:6b:c6:c3:a1:6c:24:b2:44:68:bd:c0:1d: 08:13:10:b4:fc:47:62:95:e7:d2:11:17:d8:ad:ad: 6e:5c:a0:66:cd:1d:55:95:00:f7:c7:18:39:b8:53: b5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:72:E1:6E:3D:88:FE:51:B4:D4:05:AE:F3:2E:2D:7D:EA:79:80:CA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c124c9d7-0db5-4d3e-ab86-630410199edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2448::/47 Signature Algorithm: sha256WithRSAEncryption 57:fc:dc:66:4b:e8:bb:13:a7:4f:de:06:a7:26:72:65:d1:12: 3c:fa:14:cb:6b:c1:47:42:07:0d:7b:db:b7:50:06:90:5d:b4: be:0f:ba:cf:96:9e:3f:76:03:d2:cb:5b:ef:e7:c7:5d:8a:58: b9:35:51:d7:f8:cb:ec:11:6d:31:19:b5:d7:61:2d:68:f7:dc: cf:a0:e6:8e:ba:d2:0a:de:f8:dc:6d:31:88:85:a8:b3:73:c8: 1f:27:38:1c:a8:28:42:1e:4e:05:f2:84:6a:1f:12:ff:ea:49: 82:d5:7e:b1:a3:f4:e5:ac:74:d4:83:36:c9:64:ba:f2:c5:84: e0:05:56:a3:d7:f9:c4:05:cc:3c:07:1e:6d:a5:13:23:d6:04: eb:8f:17:9c:42:81:8f:1d:69:22:34:3e:7e:b3:3e:5d:4b:da: af:4c:5d:bc:12:6e:91:bb:99:73:05:05:57:15:47:94:41:51: 25:fb:19:99:3f:83:e5:e2:80:9c:e5:28:33:c4:ed:e2:79:94: 42:d3:30:94:80:05:72:d1:c2:f6:a6:d8:70:78:c2:45:c8:c6: 1c:f8:61:a5:29:b6:ec:ab:75:6d:94:a3:83:14:41:0c:96:fc: 49:51:8e:b0:59:2f:63:7d:7c:87:a9:cb:17:75:b0:60:09:ad: ef:d8:e1:0d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUecFCjj1g7kXteqsxytQtDrMIWBEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjAyMzM4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjZjODVlMzNiNDIwZGY2ZmViZjE0MmYzN2MyZTYwZWQz OWRkNWRmODc4ZjY1YjhhMGFjNWRhMmI1ZTFlNTk4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCna4xD6Ww3QS1yTVndEKGZkQ4tc9i4TK4DYUpCf+WTS0PY 1xh6a6ITSe+7osGejdPt4NvS5T/BuF2nxLw054DGMsJPUenBvipQ5JgkouPl3P+M ywxI+EQlqP7Lx2Yze6m8/ehUbQP8qRT3m1WaZK4zgtvjXji45wI4BDgElh5z7yzM 4tgpIdDc72/iNd/JIzdpwXDuvWSHP5M+vtEBLnB7cTNUM2RKGVJrkxuYpfvMxsYZ BvAHLqgYs19vy0imTWg6yhZska0v6KJLkKu1fmQUSSpseWvGw6FsJLJEaL3AHQgT ELT8R2KV59IRF9itrW5coGbNHVWVAPfHGDm4U7WdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1nLhbj2I/lG01AWu8y4tfep5gMowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2MxMjRjOWQ3LTBkYjUtNGQzZS1hYjg2LTYzMDQxMDE5OWVkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAJEgwDQYJKoZIhvcNAQELBQADggEBAFf83GZL6LsTp0/eBqcmcmXR Ejz6FMtrwUdCBw1727dQBpBdtL4Pus+Wnj92A9LLW+/nx12KWLk1Udf4y+wRbTEZ tddhLWj33M+g5o660gre+NxtMYiFqLNzyB8nOByoKEIeTgXyhGofEv/qSYLVfrGj 9OWsdNSDNslkuvLFhOAFVqPX+cQFzDwHHm2lEyPWBOuPF5xCgY8daSI0Pn6zPl1L 2q9MXbwSbpG7mXMFBVcVR5RBUSX7GZk/g+XigJzlKDPE7eJ5lELTMJSABXLRwvam 2HB4wkXIxhz4YaUptuyrdW2Uo4MUQQyW/ElRjrBZL2N9fIepyxd1sGAJre/Y4Q0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:49:07 2025 by rpki-client