$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c943d4e4-0e02-4385-8861-fdb802670ff2.roa File: c943d4e4-0e02-4385-8861-fdb802670ff2.roa (raw, json) Hash identifier: olPeiL4vvEvq95aQb4B/Z3P/ESIQ4Z0igEo5ffdY5rM= Subject key identifier: DE:21:78:EB:EC:A5:9B:9F:5E:20:EA:E7:9A:E1:01:D9:F1:93:80:03 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 21E35152BBFE1CE87D0F059D969F8DEE876EEC4C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c943d4e4-0e02-4385-8861-fdb802670ff2.roa Signing time: Fri 31 Oct 2025 05:25:27 +0000 ROA not before: Fri 31 Oct 2025 05:25:27 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1b78::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e3:51:52:bb:fe:1c:e8:7d:0f:05:9d:96:9f:8d:ee:87:6e:ec:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:25:27 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0d8d0dd394c29e43457f6c3b5ec2a9e5c49b0cf5309a6035f9759675fb222896, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:7b:71:ec:71:13:79:d5:37:43:71:86:16: 49:c0:db:11:d9:71:84:55:ea:69:2f:34:fc:d0:7b: c1:c8:42:6a:8f:c5:ff:44:63:da:57:54:c1:c5:4a: 3a:2d:5c:ca:2d:8f:c8:d7:77:14:2b:35:45:c1:77: 34:f8:40:31:ed:c5:89:3d:37:c9:35:c6:2e:a5:ce: bd:55:ef:60:44:44:0d:a2:4e:b0:18:98:f9:85:86: f1:51:84:9f:0c:88:4f:6c:e5:32:22:4e:aa:39:f2: 82:fe:e3:f8:dc:0d:83:9b:6b:53:59:7b:97:7c:34: 9f:ed:b3:f2:bd:40:89:b7:96:2c:df:aa:1c:0e:ef: 69:a7:14:13:65:ca:5f:2d:01:03:33:f3:8c:b0:3a: 6b:37:a3:be:7d:58:1d:ac:22:5c:bf:9c:f7:3c:40: 9a:2d:42:c2:46:da:85:51:30:5d:80:aa:83:ed:ac: 4c:e0:89:81:3f:78:b1:db:61:f2:46:d6:e8:1e:c4: 36:8c:ef:ef:18:e9:18:07:5f:ed:d3:f6:5b:67:e7: 62:2c:e5:5d:d7:06:23:14:28:e6:72:a9:53:16:75: 17:14:53:63:ef:42:45:e0:1f:e9:88:c7:cc:fc:36: 03:38:b1:a5:4b:ff:2c:cd:f9:cc:91:19:e9:0a:1a: d3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:21:78:EB:EC:A5:9B:9F:5E:20:EA:E7:9A:E1:01:D9:F1:93:80:03 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c943d4e4-0e02-4385-8861-fdb802670ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1b78::/45 Signature Algorithm: sha256WithRSAEncryption 77:87:2e:e4:6e:9a:9e:7e:d7:88:d6:f1:db:7a:e5:66:8d:b7: 72:86:50:cb:74:c1:80:31:a8:44:55:e0:4e:2f:35:09:ec:ad: ee:14:9c:82:c2:f3:a0:aa:2d:94:d3:4e:1a:2f:1c:5b:7e:01: 98:c3:cb:0e:77:6f:e0:5e:a5:b9:56:fc:e2:ab:8b:0e:7d:d7: 04:17:9e:88:6f:ce:f8:0c:aa:25:d7:9f:2d:0c:7b:49:19:14: 7e:a8:e6:2e:06:1f:09:a1:c8:25:b7:84:15:2c:2c:72:75:59: 39:97:4c:ca:4b:fd:57:11:ac:2c:9d:3f:13:00:84:79:6d:85: 32:89:22:18:78:9b:e4:25:4c:f0:25:df:31:8f:29:39:6c:88: 78:7c:c2:1b:37:10:49:00:0a:71:bc:cc:26:8a:25:12:6b:0a: bb:76:f9:c1:ea:74:81:b9:23:88:1f:b9:a6:03:e4:bd:ed:80: 8c:8c:3e:7b:f2:51:6a:cb:39:e0:f0:bf:fd:af:30:32:e5:b2: 73:01:3f:9e:9e:50:89:21:80:08:80:4c:3b:33:2f:e5:64:33: e1:55:93:a4:d6:f8:4d:2d:b9:32:35:c2:a1:c5:e8:05:f9:03: a5:a6:a2:f1:23:df:32:b3:24:1b:01:6d:ec:db:7d:96:23:b0: 2c:b4:3a:19 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIeNRUrv+HOh9DwWdlp+N7odu7EwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyNTI3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDhkMGRkMzk0YzI5ZTQzNDU3ZjZjM2I1ZWMyYTllNWM0 OWIwY2Y1MzA5YTYwMzVmOTc1OTY3NWZiMjIyODk2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClsntx7HETedU3Q3GGFknA2xHZcYRV6mkvNPzQe8HIQmqP xf9EY9pXVMHFSjotXMotj8jXdxQrNUXBdzT4QDHtxYk9N8k1xi6lzr1V72BERA2i TrAYmPmFhvFRhJ8MiE9s5TIiTqo58oL+4/jcDYOba1NZe5d8NJ/ts/K9QIm3lizf qhwO72mnFBNlyl8tAQMz84ywOms3o759WB2sIly/nPc8QJotQsJG2oVRMF2AqoPt rEzgiYE/eLHbYfJG1ugexDaM7+8Y6RgHX+3T9ltn52Is5V3XBiMUKOZyqVMWdRcU U2PvQkXgH+mIx8z8NgM4saVL/yzN+cyRGekKGtPfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3iF46+ylm59eIOrnmuEB2fGTgAMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M5NDNkNGU0LTBlMDItNDM4NS04ODYxLWZkYjgwMjY3MGZmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAG3gwDQYJKoZIhvcNAQELBQADggEBAHeHLuRump5+14jW8dt65WaN t3KGUMt0wYAxqERV4E4vNQnsre4UnILC86CqLZTTThovHFt+AZjDyw53b+BepblW /OKriw591wQXnohvzvgMqiXXny0Me0kZFH6o5i4GHwmhyCW3hBUsLHJ1WTmXTMpL /VcRrCydPxMAhHlthTKJIhh4m+QlTPAl3zGPKTlsiHh8whs3EEkACnG8zCaKJRJr Crt2+cHqdIG5I4gfuaYD5L3tgIyMPnvyUWrLOeDwv/2vMDLlsnMBP56eUIkhgAiA TDszL+VkM+FVk6TW+E0tuTI1wqHF6AX5A6WmovEj3zKzJBsBbezbfZYjsCy0Ohk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:47 2025 by rpki-client