$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c96972c8-de3a-4eb0-8770-c0090322230b.roa File: c96972c8-de3a-4eb0-8770-c0090322230b.roa (raw, json) Hash identifier: s6KlDQu4QG32hd35au3BMJ6bi4+lY0OXqvPqIHuAKdw= Subject key identifier: E1:3F:95:42:0D:21:10:F9:6E:D7:12:1D:C3:FD:20:73:AF:80:DA:18 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4DA0ED197DABE04E5B1D93AA435A3BF878BFA803 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c96972c8-de3a-4eb0-8770-c0090322230b.roa Signing time: Fri 31 Oct 2025 06:40:32 +0000 ROA not before: Fri 31 Oct 2025 06:40:32 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1ed0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a0:ed:19:7d:ab:e0:4e:5b:1d:93:aa:43:5a:3b:f8:78:bf:a8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:40:32 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=670e7e7fd966b49d7018593e6934f1613ed37bee47764702a66b498359e6c93b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:55:33:0f:18:d8:04:2d:fc:5b:fa:46:af:e0: 37:6b:8f:44:01:7a:a6:52:58:ac:88:e5:53:22:33: 48:72:02:88:07:fd:0c:7c:74:01:56:9a:ae:b3:05: 1d:0f:e3:a3:e2:8d:21:ee:ba:63:11:40:8f:ae:41: f0:5b:03:20:ea:4b:97:a2:f6:20:05:78:d8:00:bd: 2e:f0:01:6b:46:d4:23:b5:86:ab:7c:44:83:87:63: e3:cf:00:46:cc:0b:30:ad:67:d5:78:8b:57:4d:92: 77:cd:04:8f:61:7f:1a:4b:e9:8d:50:25:76:96:38: a2:3d:ae:de:aa:2f:28:e7:5a:5c:39:27:1f:a5:b2: 6e:d2:0e:3f:fb:d0:c4:2c:92:b4:7f:53:6d:4b:2c: 96:dc:7d:9c:0f:d8:c5:33:f1:44:c2:4d:9d:61:97: 33:77:58:3d:61:49:24:12:5f:96:3a:a6:ea:f7:53: 8f:97:33:8a:8f:d9:49:45:47:98:2e:8e:5f:70:11: c8:1b:57:a0:56:93:da:6a:d0:87:1d:85:4d:89:5e: d7:4d:ed:82:6d:73:c8:80:df:74:c7:8c:a5:f6:62: 16:fe:56:42:f2:4c:b1:85:fc:e4:5e:69:8c:c8:4c: f3:b3:96:f8:5c:ec:30:97:2f:55:e0:0f:38:e8:90: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3F:95:42:0D:21:10:F9:6E:D7:12:1D:C3:FD:20:73:AF:80:DA:18 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c96972c8-de3a-4eb0-8770-c0090322230b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1ed0::/44 Signature Algorithm: sha256WithRSAEncryption 04:9c:ea:9e:59:9c:ef:71:0c:97:80:76:9d:e5:e8:55:39:8d: ee:63:6a:57:f6:d5:07:42:ed:30:a4:99:bb:9d:77:88:48:7c: 52:5e:db:e5:e0:d1:d8:28:2c:68:b8:d6:80:f9:29:29:75:7e: 46:92:2d:75:27:2c:55:8f:59:55:75:5e:86:32:9c:86:fe:df: b7:9c:44:c7:6c:15:1e:fc:85:61:af:83:bc:ad:a7:26:69:b5: 86:26:55:4b:3e:f3:97:1e:59:6d:b2:e2:0a:90:df:d2:81:38: 10:8f:fa:cd:13:29:9f:ba:d9:1e:25:b4:f7:84:c5:d3:6a:9d: c9:8a:ce:a6:0f:4f:87:a1:32:ee:d8:76:f2:57:20:44:3f:6b: 85:c4:88:da:8a:29:66:40:40:90:e0:da:48:c5:3f:9d:08:ce: bf:ea:a9:4f:74:a5:3f:bb:4e:0e:35:08:02:57:2e:22:df:8e: 00:87:34:49:0c:3d:20:4a:e8:e3:21:f0:b8:0f:6a:2e:eb:09: e2:64:e9:4f:e7:c6:6b:30:ee:de:fd:8f:cb:07:5a:d4:04:30: 72:89:98:e3:39:2a:85:8c:94:8b:52:d8:9f:29:75:99:bf:26: be:e0:68:29:1b:f0:46:0a:47:04:fe:a2:c9:de:75:6e:ab:55: 50:46:71:73 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTaDtGX2r4E5bHZOqQ1o7+Hi/qAMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY0MDMyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzBlN2U3ZmQ5NjZiNDlkNzAxODU5M2U2OTM0ZjE2MTNl ZDM3YmVlNDc3NjQ3MDJhNjZiNDk4MzU5ZTZjOTNiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjVTMPGNgELfxb+kav4Ddrj0QBeqZSWKyI5VMiM0hyAogH /Qx8dAFWmq6zBR0P46PijSHuumMRQI+uQfBbAyDqS5ei9iAFeNgAvS7wAWtG1CO1 hqt8RIOHY+PPAEbMCzCtZ9V4i1dNknfNBI9hfxpL6Y1QJXaWOKI9rt6qLyjnWlw5 Jx+lsm7SDj/70MQskrR/U21LLJbcfZwP2MUz8UTCTZ1hlzN3WD1hSSQSX5Y6pur3 U4+XM4qP2UlFR5gujl9wEcgbV6BWk9pq0IcdhU2JXtdN7YJtc8iA33THjKX2Yhb+ VkLyTLGF/OReaYzITPOzlvhc7DCXL1XgDzjokHhTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4T+VQg0hEPlu1xIdw/0gc6+A2hgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M5Njk3MmM4LWRlM2EtNGViMC04NzcwLWMwMDkwMzIyMjMwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAHtAwDQYJKoZIhvcNAQELBQADggEBAASc6p5ZnO9xDJeAdp3l6FU5 je5jalf21QdC7TCkmbudd4hIfFJe2+Xg0dgoLGi41oD5KSl1fkaSLXUnLFWPWVV1 XoYynIb+37ecRMdsFR78hWGvg7ytpyZptYYmVUs+85ceWW2y4gqQ39KBOBCP+s0T KZ+62R4ltPeExdNqncmKzqYPT4ehMu7YdvJXIEQ/a4XEiNqKKWZAQJDg2kjFP50I zr/qqU90pT+7Tg41CAJXLiLfjgCHNEkMPSBK6OMh8LgPai7rCeJk6U/nxmsw7t79 j8sHWtQEMHKJmOM5KoWMlItS2J8pdZm/Jr7gaCkb8EYKRwT+osnedW6rVVBGcXM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:28:07 2025 by rpki-client