$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c7a3029e-90ca-4d34-a531-89692b895981.roa File: c7a3029e-90ca-4d34-a531-89692b895981.roa (raw, json) Hash identifier: hl90qf5qHl9sjfD2qxuncGXQ5/r78IEdCvSv7hz8ISY= Subject key identifier: 8A:BC:E2:82:C4:AB:AE:66:AD:B7:BA:2A:CD:F2:3B:C4:B8:03:74:12 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 16D363EC8C1260A6CE816358D1A2F985AB13DCEC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c7a3029e-90ca-4d34-a531-89692b895981.roa Signing time: Thu 30 Oct 2025 20:09:38 +0000 ROA not before: Thu 30 Oct 2025 20:09:38 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2660::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d3:63:ec:8c:12:60:a6:ce:81:63:58:d1:a2:f9:85:ab:13:dc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:09:38 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=d805e634e72a54e59881bea06a33a2505673c4a09b32a98b2ed66d05487cdf0e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:ad:b7:3b:7d:35:c4:be:64:83:59:f3:77: 00:b0:65:11:c5:1e:6c:c6:05:c8:a6:66:6e:04:cd: 73:04:49:09:84:72:fd:d6:36:ed:11:e1:b6:c5:1c: c2:62:20:ca:05:b9:1b:e3:26:fe:90:c6:73:e4:75: bc:ef:6c:52:6b:b6:f7:65:f3:ec:c8:fc:a9:3d:6d: 43:c5:52:ab:cc:5f:ec:74:90:5c:68:93:1a:47:83: 7e:36:7f:31:d5:8e:12:f5:24:db:cf:0e:b7:87:ec: 7d:cc:0f:9d:b5:3f:d0:0e:d2:af:83:fe:00:13:2e: 20:17:a7:d6:c0:72:ff:d0:04:b2:23:af:1d:1f:b3: 05:8b:50:26:9c:7f:0e:be:d5:b8:31:97:08:00:ba: 9b:78:1e:29:ec:22:3d:f0:59:39:62:b5:57:8a:d5: 60:4d:c3:3e:13:e7:e5:a8:ca:62:b2:67:76:f7:13: 98:c0:44:67:d8:dd:e1:ad:9e:f5:19:42:9e:61:6e: cd:d8:71:50:1f:56:a9:44:e7:29:fb:7b:8e:6f:db: b4:9e:ab:e3:31:d8:05:c9:01:98:46:73:bf:c1:1c: 08:77:77:07:17:3a:b5:47:4d:0a:be:6a:9e:f0:8c: d7:34:a2:ed:81:8e:f6:9a:2f:e2:e0:67:d8:0b:ef: 8b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BC:E2:82:C4:AB:AE:66:AD:B7:BA:2A:CD:F2:3B:C4:B8:03:74:12 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c7a3029e-90ca-4d34-a531-89692b895981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2660::/44 Signature Algorithm: sha256WithRSAEncryption 5b:0e:3b:74:46:d9:64:7f:0e:f3:21:3a:79:55:5a:cb:31:f2: eb:bc:a6:e4:43:38:93:5b:bb:f5:3e:e8:7e:ae:1c:6d:96:c7: 24:08:01:77:f1:a1:9d:ca:26:ef:d1:42:e0:4d:61:60:86:66: 12:ed:b2:2d:47:df:62:f2:b8:05:5b:84:68:b1:8a:16:7e:72: bb:ff:73:6f:21:a5:f6:5b:a9:44:5d:62:82:7b:31:3e:5e:18: 7b:ac:cc:fd:ad:fa:4f:eb:f6:2b:4d:00:ab:38:63:d2:44:4f: cf:1f:7e:e6:74:35:fa:12:7b:64:02:c4:3d:d2:1b:06:8b:f9: 1a:47:ca:cb:f1:ac:6c:fe:37:85:19:89:96:32:60:45:65:85: e8:81:09:de:4c:0e:a0:eb:31:37:c1:13:31:b0:fc:58:6a:cc: 06:98:fc:05:1c:5d:d5:34:59:ee:b2:e5:ef:cf:28:fb:ac:c0: 50:34:1f:2a:4c:87:64:0a:a9:f9:e3:6d:16:a3:24:2e:92:b2: d4:68:fb:62:e8:43:24:9f:fd:bf:12:e5:a0:e1:d9:3c:05:bb: 15:48:e8:d4:bb:07:10:bd:36:f2:39:1b:72:c0:40:40:85:5f: d7:14:cd:99:f2:aa:c9:67:18:80:2b:c0:d9:1c:e1:ef:d4:20: 85:a4:9c:59 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFtNj7IwSYKbOgWNY0aL5hasT3OwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjAwOTM4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODA1ZTYzNGU3MmE1NGU1OTg4MWJlYTA2YTMzYTI1MDU2 NzNjNGEwOWIzMmE5OGIyZWQ2NmQwNTQ4N2NkZjBlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/yq23O301xL5kg1nzdwCwZRHFHmzGBcimZm4EzXMESQmE cv3WNu0R4bbFHMJiIMoFuRvjJv6QxnPkdbzvbFJrtvdl8+zI/Kk9bUPFUqvMX+x0 kFxokxpHg342fzHVjhL1JNvPDreH7H3MD521P9AO0q+D/gATLiAXp9bAcv/QBLIj rx0fswWLUCacfw6+1bgxlwgAupt4HinsIj3wWTlitVeK1WBNwz4T5+WoymKyZ3b3 E5jARGfY3eGtnvUZQp5hbs3YcVAfVqlE5yn7e45v27Seq+Mx2AXJAZhGc7/BHAh3 dwcXOrVHTQq+ap7wjNc0ou2BjvaaL+LgZ9gL74tnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUirzigsSrrmatt7oqzfI7xLgDdBIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M3YTMwMjllLTkwY2EtNGQzNC1hNTMxLTg5NjkyYjg5NTk4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAJmAwDQYJKoZIhvcNAQELBQADggEBAFsOO3RG2WR/DvMhOnlVWssx 8uu8puRDOJNbu/U+6H6uHG2WxyQIAXfxoZ3KJu/RQuBNYWCGZhLtsi1H32LyuAVb hGixihZ+crv/c28hpfZbqURdYoJ7MT5eGHuszP2t+k/r9itNAKs4Y9JET88ffuZ0 NfoSe2QCxD3SGwaL+RpHysvxrGz+N4UZiZYyYEVlheiBCd5MDqDrMTfBEzGw/Fhq zAaY/AUcXdU0We6y5e/PKPuswFA0HypMh2QKqfnjbRajJC6SstRo+2LoQySf/b8S 5aDh2TwFuxVI6NS7BxC9NvI5G3LAQECFX9cUzZnyqslnGIArwNkc4e/UIIWknFk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:40:21 2025 by rpki-client