$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c169bf0b-f663-4078-9951-4a6099bcd66b.roa File: c169bf0b-f663-4078-9951-4a6099bcd66b.roa (raw, json) Hash identifier: yP8l9aMCjSjg6UdQrtfLsxAMSObXFZTKtVPqxn+QKVs= Subject key identifier: 84:F0:D2:6C:E3:A2:59:F6:35:5A:57:39:73:E1:CD:E8:96:E8:27:B0 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 21377346A277617A46AD282DF19D8CC219548190 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c169bf0b-f663-4078-9951-4a6099bcd66b.roa Signing time: Fri 31 Oct 2025 07:06:44 +0000 ROA not before: Fri 31 Oct 2025 07:06:44 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3a80::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:37:73:46:a2:77:61:7a:46:ad:28:2d:f1:9d:8c:c2:19:54:81:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:06:44 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=8dab67e37b4a38cab6ec16ff1bd414d203e2df49f85f5c7df1d7ea270f9d8b3f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:57:d8:47:74:e6:65:5d:05:49:5a:86:85: 82:73:42:8c:04:7c:e0:41:bd:61:dd:2c:e8:56:d9: 17:68:db:f3:e0:f9:75:5e:38:66:52:d5:65:68:9c: a1:d1:3f:73:81:e3:3e:e7:e6:88:bb:6b:01:4a:d7: 1c:ba:82:6b:13:4b:36:98:0f:7b:4e:74:ed:a3:43: 03:1f:63:80:3b:53:e1:46:26:9d:b7:e5:19:34:b5: c3:8c:cf:c8:97:2e:00:19:9a:64:11:09:e8:e0:15: b6:82:86:51:73:fc:9c:9f:98:d8:da:74:73:1f:75: 99:46:e6:17:fb:33:ab:d8:63:81:ac:f4:74:b2:a2: d1:a5:84:81:45:fe:47:ad:ad:74:04:21:c8:ed:88: 5d:3d:ce:7a:b2:c0:bc:28:80:f2:5e:97:18:8c:e5: 5d:05:22:fb:e8:fb:ce:48:f1:85:97:12:62:89:36: 37:9e:21:b4:b1:13:82:1e:ed:f7:04:42:95:ab:ba: 2c:08:e5:40:05:91:93:9f:1d:e0:18:5f:d2:05:e5: 36:9a:b2:01:d0:aa:c8:b4:2b:1c:13:80:44:1f:4d: a7:86:88:60:6c:5c:95:fd:df:24:10:e0:21:7e:f4: d7:e5:0b:f6:3f:42:03:03:1d:e3:24:a0:7d:d3:13: 62:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F0:D2:6C:E3:A2:59:F6:35:5A:57:39:73:E1:CD:E8:96:E8:27:B0 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c169bf0b-f663-4078-9951-4a6099bcd66b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3a80::/44 Signature Algorithm: sha256WithRSAEncryption 2d:6e:75:74:6f:aa:8c:37:51:ac:bd:a2:b4:8e:2f:7b:98:a1: f3:c1:24:b4:bf:a1:85:b2:b2:e6:e1:aa:4f:6d:78:45:be:ca: 0a:8b:a9:0d:fd:b8:03:c9:d3:61:10:d2:2b:9a:20:ed:d0:82: 2a:85:df:c4:4b:ef:c2:3c:c2:c9:dd:0a:99:b5:04:e1:3e:5b: bc:4a:00:c4:f5:bf:b0:15:00:d3:f4:c5:08:43:0a:c3:db:d0: e5:ef:b9:eb:50:bf:59:76:76:0f:1f:6b:87:08:ba:0d:d5:96: 44:25:3a:38:4f:5e:6b:14:83:a8:d4:71:69:aa:88:c4:f6:85: 7e:3f:29:c9:9f:53:33:e0:a3:90:fd:5c:fb:12:f6:58:06:58: a3:d4:f3:db:81:8f:99:53:d8:48:8a:4c:8d:21:b2:ab:c6:81: c8:f9:16:4d:4c:d4:a5:98:47:0c:dc:03:a8:27:5b:bc:8f:5c: ae:49:9f:d3:aa:b8:0c:09:2b:89:b9:2d:27:73:57:8e:b0:3b: 88:fc:ea:d8:32:61:4c:f0:22:7e:90:be:42:5b:2c:d6:df:bc: 88:3c:c0:61:ed:cc:e5:a2:df:b8:39:33:52:a8:b8:5e:db:21: 7d:1d:93:d3:a9:78:e4:01:2a:7e:2e:b8:1a:ce:d2:3f:6c:3f: 9a:53:79:58 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUITdzRqJ3YXpGrSgt8Z2MwhlUgZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcwNjQ0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGFiNjdlMzdiNGEzOGNhYjZlYzE2ZmYxYmQ0MTRkMjAz ZTJkZjQ5Zjg1ZjVjN2RmMWQ3ZWEyNzBmOWQ4YjNmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1w1fYR3TmZV0FSVqGhYJzQowEfOBBvWHdLOhW2Rdo2/Pg +XVeOGZS1WVonKHRP3OB4z7n5oi7awFK1xy6gmsTSzaYD3tOdO2jQwMfY4A7U+FG Jp235Rk0tcOMz8iXLgAZmmQRCejgFbaChlFz/JyfmNjadHMfdZlG5hf7M6vYY4Gs 9HSyotGlhIFF/ketrXQEIcjtiF09znqywLwogPJelxiM5V0FIvvo+85I8YWXEmKJ NjeeIbSxE4Ie7fcEQpWruiwI5UAFkZOfHeAYX9IF5TaasgHQqsi0KxwTgEQfTaeG iGBsXJX93yQQ4CF+9NflC/Y/QgMDHeMkoH3TE2IpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhPDSbOOiWfY1Wlc5c+HN6JboJ7AwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2MxNjliZjBiLWY2NjMtNDA3OC05OTUxLTRhNjA5OWJjZDY2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAOoAwDQYJKoZIhvcNAQELBQADggEBAC1udXRvqow3Uay9orSOL3uY ofPBJLS/oYWysubhqk9teEW+ygqLqQ39uAPJ02EQ0iuaIO3QgiqF38RL78I8wsnd Cpm1BOE+W7xKAMT1v7AVANP0xQhDCsPb0OXvuetQv1l2dg8fa4cIug3VlkQlOjhP XmsUg6jUcWmqiMT2hX4/KcmfUzPgo5D9XPsS9lgGWKPU89uBj5lT2EiKTI0hsqvG gcj5Fk1M1KWYRwzcA6gnW7yPXK5Jn9OquAwJK4m5LSdzV46wO4j86tgyYUzwIn6Q vkJbLNbfvIg8wGHtzOWi37g5M1KouF7bIX0dk9OpeOQBKn4uuBrO0j9sP5pTeVg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:57:32 2025 by rpki-client