$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c26acaf3-d839-4e55-b32a-0e0545a1b48c.roa File: c26acaf3-d839-4e55-b32a-0e0545a1b48c.roa (raw, json) Hash identifier: yV/UVxMcXXVoYPW2Otk25pHTHtoBldXzxdry/fzwgNQ= Subject key identifier: 96:3C:1D:D2:47:CD:E1:96:FC:A2:60:33:11:B3:2A:C2:D9:B1:2B:14 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1A3DB219DBA799ADD3AF18D7419A4B65A090E8AF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c26acaf3-d839-4e55-b32a-0e0545a1b48c.roa Signing time: Fri 31 Oct 2025 00:26:30 +0000 ROA not before: Fri 31 Oct 2025 00:26:30 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:356e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3d:b2:19:db:a7:99:ad:d3:af:18:d7:41:9a:4b:65:a0:90:e8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:26:30 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=8952faf7e7b51244294e541365578b9b1815cd5abb234c804ea89e52239f5f93, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:34:46:67:2f:1a:ac:70:da:f4:b4:e0:ea: c8:0a:b0:5f:92:fb:f1:4b:72:97:f9:b0:5b:e0:a8: 1a:e2:af:8c:d3:7b:a2:68:85:bd:af:9c:f1:d4:a7: 90:05:d0:93:be:ad:a7:4f:74:a3:ec:c5:fc:ce:e6: 2d:19:6a:54:70:91:7a:36:77:37:36:6c:7a:21:21: 24:61:05:0f:4f:0a:8b:4b:a6:fd:8c:fb:01:9c:eb: 0c:fb:42:4b:0d:6e:ef:a0:7c:7e:9c:42:ea:73:b1: 19:ab:56:54:d6:ca:42:c3:b5:f7:1e:50:c1:db:ea: 1a:a7:3a:62:e5:af:41:db:42:ca:77:a7:bd:2b:01: ef:6b:c1:a7:a3:ac:7b:73:62:f5:bf:ba:75:92:bf: 6b:53:f2:2a:b4:9b:2e:f4:85:9a:04:13:19:4c:49: d5:d5:29:c6:65:5f:e4:7f:14:fc:6c:0a:d4:8b:26: 56:72:c1:9f:49:44:59:53:a2:ce:fb:ca:a1:80:a9: da:cf:ba:b5:1d:74:b0:8d:06:76:3c:99:c3:5d:7a: 83:3e:68:7a:fb:80:d4:c0:94:76:9e:2f:0f:3c:7e: 0d:6d:72:b9:93:51:3e:2f:ca:5e:0e:32:43:32:3c: 98:1f:96:63:99:25:f8:bf:80:0f:75:04:56:f2:2a: 16:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3C:1D:D2:47:CD:E1:96:FC:A2:60:33:11:B3:2A:C2:D9:B1:2B:14 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c26acaf3-d839-4e55-b32a-0e0545a1b48c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:356e::/47 Signature Algorithm: sha256WithRSAEncryption 48:38:4a:2d:8e:15:7d:cf:9b:3c:18:4c:49:20:87:33:7e:8e: 1d:53:d2:b1:60:2a:7d:2b:ce:94:b2:66:16:81:94:db:26:f6: d1:e4:30:6e:c4:42:d9:70:07:61:c6:1d:02:13:8a:02:03:1a: 84:a1:33:82:87:cb:7f:1a:fb:8c:da:11:70:53:4d:25:2b:e7: f0:f7:f8:0d:4b:97:e6:dc:1c:7d:d7:52:53:5d:bf:23:13:2d: 08:2e:36:a0:7c:93:ec:92:23:ec:af:37:fd:ee:4f:6c:d3:c3: bf:d1:c8:7d:e6:85:9a:0e:d1:7c:62:18:dd:6d:af:1e:81:40: 3c:44:ed:e9:69:5f:59:39:29:3f:b5:58:d7:dd:95:b4:2e:69: 9a:8a:55:8b:76:5e:2c:69:4a:67:97:f7:4c:48:1e:9c:58:75: 5c:f5:76:44:4a:21:2b:48:c0:1b:db:94:cd:c1:b4:cf:fb:50: 39:0c:9e:4d:2d:85:cf:a4:53:3b:7c:54:7f:58:41:07:91:2d: f8:40:88:05:cb:2f:0d:57:8b:aa:62:83:1f:01:88:3b:54:04: 0e:d7:1f:62:50:1a:c4:ea:b9:31:fe:d5:94:6e:59:d0:8d:dd: 56:6b:3c:19:14:b8:8b:9e:f1:40:e8:dc:29:20:0c:e1:09:c6: e5:72:e0:9d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGj2yGdunma3TrxjXQZpLZaCQ6K8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyNjMwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTUyZmFmN2U3YjUxMjQ0Mjk0ZTU0MTM2NTU3OGI5YjE4 MTVjZDVhYmIyMzRjODA0ZWE4OWU1MjIzOWY1ZjkzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC81DRGZy8arHDa9LTg6sgKsF+S+/FLcpf5sFvgqBrir4zT e6Johb2vnPHUp5AF0JO+radPdKPsxfzO5i0ZalRwkXo2dzc2bHohISRhBQ9PCotL pv2M+wGc6wz7QksNbu+gfH6cQupzsRmrVlTWykLDtfceUMHb6hqnOmLlr0HbQsp3 p70rAe9rwaejrHtzYvW/unWSv2tT8iq0my70hZoEExlMSdXVKcZlX+R/FPxsCtSL JlZywZ9JRFlTos77yqGAqdrPurUddLCNBnY8mcNdeoM+aHr7gNTAlHaeLw88fg1t crmTUT4vyl4OMkMyPJgflmOZJfi/gA91BFbyKhbFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUljwd0kfN4Zb8omAzEbMqwtmxKxQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2MyNmFjYWYzLWQ4MzktNGU1NS1iMzJhLTBlMDU0NWExYjQ4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANW4wDQYJKoZIhvcNAQELBQADggEBAEg4Si2OFX3PmzwYTEkghzN+ jh1T0rFgKn0rzpSyZhaBlNsm9tHkMG7EQtlwB2HGHQITigIDGoShM4KHy38a+4za EXBTTSUr5/D3+A1Ll+bcHH3XUlNdvyMTLQguNqB8k+ySI+yvN/3uT2zTw7/RyH3m hZoO0XxiGN1trx6BQDxE7elpX1k5KT+1WNfdlbQuaZqKVYt2XixpSmeX90xIHpxY dVz1dkRKIStIwBvblM3BtM/7UDkMnk0thc+kUzt8VH9YQQeRLfhAiAXLLw1Xi6pi gx8BiDtUBA7XH2JQGsTquTH+1ZRuWdCN3VZrPBkUuIue8UDo3CkgDOEJxuVy4J0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:54 2025 by rpki-client