$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9f7f9f3-bae2-4694-bb6d-f4070e033efd.roa File: c9f7f9f3-bae2-4694-bb6d-f4070e033efd.roa (raw, json) Hash identifier: 2F9bSzm7+VmKYP+zuLhYrm1KuBEJJzsb5sA2GjZSnSE= Subject key identifier: 8A:03:15:75:8B:E7:57:81:6B:8C:3A:5C:36:C8:C3:B3:70:00:AC:92 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4839D7732B1EF4C06AA4C0F7327EDE621B7830FD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9f7f9f3-bae2-4694-bb6d-f4070e033efd.roa Signing time: Fri 31 Oct 2025 00:42:59 +0000 ROA not before: Fri 31 Oct 2025 00:42:59 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3744::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:39:d7:73:2b:1e:f4:c0:6a:a4:c0:f7:32:7e:de:62:1b:78:30:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:42:59 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=836d2ec2acaec4fd94edc00eb16b59a66f905773246e6ea2d1a5127be14f6f76, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0b:95:69:e1:70:d3:8d:f1:7b:ea:f0:dd:c6: 01:6e:8d:87:75:88:98:4f:3c:59:1e:3e:0a:fe:77: d5:28:d3:92:a7:dd:8b:49:9f:ac:b8:ab:7c:35:df: 3f:ba:4a:ca:1e:c4:d9:e8:2b:fa:b4:ca:ed:2c:dd: 72:66:0d:12:ad:0c:33:e0:90:18:f6:06:8f:c4:60: 8d:5d:de:37:9d:3f:63:1b:87:63:bc:ff:7d:60:8d: 04:b9:82:91:70:3d:2e:f4:17:0d:f9:fc:71:dd:fa: 7b:88:88:0b:60:d4:c0:00:b8:33:04:86:38:ed:b2: 42:97:f3:da:35:13:1f:23:6c:91:c8:85:6b:e9:ec: bd:6d:1a:1c:c1:20:13:14:35:b9:7a:aa:d6:1c:70: 66:a1:37:59:54:18:ab:58:22:56:e9:27:61:38:06: 79:3d:8e:a1:ab:ae:95:9d:7c:c9:69:22:74:0d:ad: b3:fe:25:fd:33:57:40:72:ee:71:ed:ec:74:53:80: 8f:09:c0:77:5f:3a:ea:d2:f9:b5:b1:0a:19:5d:22: ee:80:ad:48:5a:ca:64:75:1f:46:27:8f:d5:7c:4a: 54:ea:4e:e3:8b:18:e6:1e:b7:38:08:da:9c:f9:87: 66:05:f0:90:91:df:65:49:db:51:0e:b4:97:35:06: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:15:75:8B:E7:57:81:6B:8C:3A:5C:36:C8:C3:B3:70:00:AC:92 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9f7f9f3-bae2-4694-bb6d-f4070e033efd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3744::/47 Signature Algorithm: sha256WithRSAEncryption 01:68:bc:f1:8f:17:20:d6:15:a6:00:59:11:ee:f5:b7:1a:63: 69:8b:aa:45:3a:65:2f:1b:22:31:b3:ac:52:ac:f4:23:06:b3: 1e:16:a1:72:00:a0:c5:ff:e6:a8:25:2c:a8:15:be:3c:fe:17: e9:8b:40:4f:f6:1b:cb:fa:b6:88:72:7a:c9:e3:a3:0e:52:63: 7f:4a:d7:3a:9d:81:a7:5f:d6:63:ba:f5:47:c3:d9:f0:d3:e0: 20:57:c4:ce:ad:8b:f5:ba:ac:5a:8b:3c:e3:d5:36:3e:77:a7: 6c:d6:d1:65:90:aa:65:a5:4e:e2:e5:bb:bf:cf:4a:7a:e2:db: 94:bf:36:7c:72:a4:ef:17:fe:a0:94:20:e1:e7:9c:00:6c:9f: a9:e8:a3:53:58:1f:9b:08:b2:a6:03:0d:2e:6c:a3:e5:d1:94: 2d:b1:d5:c1:74:20:53:9a:67:e3:b1:b9:16:fd:ce:2c:bf:c3: 0e:c0:51:9c:1e:16:2a:11:55:19:d7:81:b4:95:0d:cc:ac:ad: 32:9c:8e:5b:ae:06:d9:d5:29:73:52:4b:a9:0a:86:d9:58:26: d2:da:ab:a2:f4:d1:a7:c2:34:52:8c:30:41:88:7d:fc:aa:7c: 1b:10:e1:a0:d9:90:47:2a:97:9c:fd:3d:bb:0f:06:cd:70:41: 61:62:0c:e8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSDnXcyse9MBqpMD3Mn7eYht4MP0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA0MjU5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzZkMmVjMmFjYWVjNGZkOTRlZGMwMGViMTZiNTlhNjZm OTA1NzczMjQ2ZTZlYTJkMWE1MTI3YmUxNGY2Zjc2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaC5Vp4XDTjfF76vDdxgFujYd1iJhPPFkePgr+d9Uo05Kn 3YtJn6y4q3w13z+6SsoexNnoK/q0yu0s3XJmDRKtDDPgkBj2Bo/EYI1d3jedP2Mb h2O8/31gjQS5gpFwPS70Fw35/HHd+nuIiAtg1MAAuDMEhjjtskKX89o1Ex8jbJHI hWvp7L1tGhzBIBMUNbl6qtYccGahN1lUGKtYIlbpJ2E4Bnk9jqGrrpWdfMlpInQN rbP+Jf0zV0By7nHt7HRTgI8JwHdfOurS+bWxChldIu6ArUhaymR1H0Ynj9V8SlTq TuOLGOYetzgI2pz5h2YF8JCR32VJ21EOtJc1BhM7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUigMVdYvnV4FrjDpcNsjDs3AArJIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M5ZjdmOWYzLWJhZTItNDY5NC1iYjZkLWY0MDcwZTAzM2VmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAN0QwDQYJKoZIhvcNAQELBQADggEBAAFovPGPFyDWFaYAWRHu9bca Y2mLqkU6ZS8bIjGzrFKs9CMGsx4WoXIAoMX/5qglLKgVvjz+F+mLQE/2G8v6tohy esnjow5SY39K1zqdgadf1mO69UfD2fDT4CBXxM6ti/W6rFqLPOPVNj53p2zW0WWQ qmWlTuLlu7/PSnri25S/NnxypO8X/qCUIOHnnABsn6noo1NYH5sIsqYDDS5so+XR lC2x1cF0IFOaZ+OxuRb9ziy/ww7AUZweFioRVRnXgbSVDcysrTKcjluuBtnVKXNS S6kKhtlYJtLaq6L00afCNFKMMEGIffyqfBsQ4aDZkEcql5z9PbsPBs1wQWFiDOg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:29 2025 by rpki-client