$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c84efd02-b5a6-4120-9a45-65439b4a3a08.roa File: c84efd02-b5a6-4120-9a45-65439b4a3a08.roa (raw, json) Hash identifier: ev5djD+PtcebPiaXsIUfCB7Rq+RKBjy2YMxD+US2ctw= Subject key identifier: C8:02:E5:17:EE:8C:A8:D4:3F:C0:35:C0:FD:9E:A6:0F:63:7F:C9:49 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 50FA57CEEF00E07FBD280ABD9C14C7B2CD5628C4 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c84efd02-b5a6-4120-9a45-65439b4a3a08.roa Signing time: Fri 31 Oct 2025 04:25:10 +0000 ROA not before: Fri 31 Oct 2025 04:25:10 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3824::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:fa:57:ce:ef:00:e0:7f:bd:28:0a:bd:9c:14:c7:b2:cd:56:28:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:25:10 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=de50beb921063a25bc6e83706c9bac30ae42face4f0ec9bf09a391a1bd47efe9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:d3:55:01:bf:79:c1:72:84:70:4a:1c:46: 1e:73:5b:4e:2f:e3:1a:79:ac:31:ed:c9:bb:90:50: 78:ee:cb:ca:05:28:05:26:4b:32:d8:51:3d:5a:92: af:f3:d0:0b:7f:2f:07:43:fb:49:22:60:e3:60:73: ff:80:20:a9:4f:41:ad:68:ef:7d:a8:63:c5:e4:4e: 75:88:32:fb:51:75:4e:29:a8:56:f4:a4:9a:80:b5: 3b:43:db:f7:d2:45:7d:02:36:75:a1:b4:e5:c9:e0: 19:d4:02:91:da:ba:37:93:23:ef:1a:16:19:21:c1: 1c:02:a0:bb:27:f1:aa:77:19:eb:4e:43:81:1a:9a: 05:bd:01:c8:40:38:b1:2f:c6:f9:8b:5c:41:39:da: 1d:88:2e:5f:e2:22:d2:15:a3:ca:70:3f:c7:a0:55: 70:72:bb:b1:55:ab:bc:83:09:19:09:21:cd:b5:d3: 38:11:06:c1:95:c5:57:ce:c8:51:28:19:c0:47:a2: aa:ae:aa:ef:e3:e6:1f:f5:8a:e6:a4:5f:1b:ad:4b: ab:e3:70:ac:0e:14:14:48:f3:c3:11:39:04:b9:f0: 79:54:51:ff:37:1b:e3:52:da:7a:75:88:dd:7e:af: 4f:5b:72:2c:c8:40:d0:45:d3:93:89:32:31:58:44: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:02:E5:17:EE:8C:A8:D4:3F:C0:35:C0:FD:9E:A6:0F:63:7F:C9:49 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c84efd02-b5a6-4120-9a45-65439b4a3a08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3824::/46 Signature Algorithm: sha256WithRSAEncryption 4c:52:e4:58:37:0e:ab:1f:d9:80:22:39:1f:5e:7c:55:e4:39: 8b:10:cb:7e:94:da:cb:bc:24:58:6a:90:44:30:0d:e8:b5:ff: a3:ae:a5:fe:f5:9f:47:e3:4f:95:07:d1:fc:8f:df:7d:2e:7d: 03:d2:28:b6:74:b1:92:e0:11:85:c8:bf:7b:6a:04:3f:8a:1b: 37:c3:24:82:b3:60:31:32:2a:44:e3:16:2c:b2:4b:a6:f8:ae: e0:d9:7f:49:c2:d4:c3:10:45:fc:83:d2:29:86:f7:c2:4c:f7: 27:6e:a9:e0:46:57:16:6e:33:45:32:e0:8e:e0:9d:5a:79:96: eb:f2:ec:0b:66:8d:1a:03:26:40:35:ba:ae:88:95:f8:90:eb: cd:ae:b2:61:05:94:ee:bd:3f:a0:a6:68:7b:03:8a:0f:88:b4: 8b:5c:8c:42:1a:22:41:97:94:72:12:d6:f6:7f:90:fc:af:41: f9:ef:14:56:e7:7f:67:0e:6c:67:73:9c:cf:85:b8:fd:d2:2e: b5:63:b1:49:0e:e0:3e:ec:21:b0:65:71:14:4f:68:77:ea:96: 2e:04:4f:38:6a:76:50:af:24:90:e5:23:6e:3e:d9:d5:60:32: f3:62:03:28:52:28:e9:d8:7a:b3:ac:17:d1:87:2a:68:de:f1: 9d:3f:28:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUPpXzu8A4H+9KAq9nBTHss1WKMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQyNTEwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTUwYmViOTIxMDYzYTI1YmM2ZTgzNzA2YzliYWMzMGFl NDJmYWNlNGYwZWM5YmYwOWEzOTFhMWJkNDdlZmU5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr2dNVAb95wXKEcEocRh5zW04v4xp5rDHtybuQUHjuy8oF KAUmSzLYUT1akq/z0At/LwdD+0kiYONgc/+AIKlPQa1o732oY8XkTnWIMvtRdU4p qFb0pJqAtTtD2/fSRX0CNnWhtOXJ4BnUApHaujeTI+8aFhkhwRwCoLsn8ap3GetO Q4EamgW9AchAOLEvxvmLXEE52h2ILl/iItIVo8pwP8egVXByu7FVq7yDCRkJIc21 0zgRBsGVxVfOyFEoGcBHoqququ/j5h/1iuakXxutS6vjcKwOFBRI88MROQS58HlU Uf83G+NS2np1iN1+r09bcizIQNBF05OJMjFYRD5PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyALlF+6MqNQ/wDXA/Z6mD2N/yUkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M4NGVmZDAyLWI1YTYtNDEyMC05YTQ1LTY1NDM5YjRhM2EwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAOCQwDQYJKoZIhvcNAQELBQADggEBAExS5Fg3Dqsf2YAiOR9efFXk OYsQy36U2su8JFhqkEQwDei1/6Oupf71n0fjT5UH0fyP330ufQPSKLZ0sZLgEYXI v3tqBD+KGzfDJIKzYDEyKkTjFiyyS6b4ruDZf0nC1MMQRfyD0imG98JM9yduqeBG VxZuM0Uy4I7gnVp5luvy7AtmjRoDJkA1uq6IlfiQ682usmEFlO69P6CmaHsDig+I tItcjEIaIkGXlHIS1vZ/kPyvQfnvFFbnf2cObGdznM+FuP3SLrVjsUkO4D7sIbBl cRRPaHfqli4ETzhqdlCvJJDlI24+2dVgMvNiAyhSKOnYerOsF9GHKmje8Z0/KCs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:56:13 2025 by rpki-client