$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca71e725-d521-46bc-ac84-04ca1684c3a1.roa File: ca71e725-d521-46bc-ac84-04ca1684c3a1.roa (raw, json) Hash identifier: 3Bd5KuvVyMO20rPZ5jTximB6EWaUyzaHm37GU3LmNBs= Subject key identifier: D2:29:66:D3:8D:AD:83:51:94:B6:A3:39:2C:39:1A:DC:6D:FE:A6:D0 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7DFBBDF55313E881E7DCBD6CA982676C3F8CDBEA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca71e725-d521-46bc-ac84-04ca1684c3a1.roa Signing time: Fri 31 Oct 2025 06:22:17 +0000 ROA not before: Fri 31 Oct 2025 06:22:17 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3da0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fb:bd:f5:53:13:e8:81:e7:dc:bd:6c:a9:82:67:6c:3f:8c:db:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:22:17 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a41a53b719675c589d2c9a6adff8a17fe9ddf4ef7f5fa64c8fecf6cff4bdb391, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d8:3d:0c:a6:ff:53:81:43:ff:4d:c6:6f:f9: 60:cc:2b:1f:96:30:c9:58:2f:bc:ee:0d:fe:76:e9: 8b:52:a2:bf:e1:5f:32:0b:4e:52:6d:30:19:2c:45: 24:3b:19:10:f1:be:a6:99:8b:29:7b:c1:ef:a2:67: eb:73:dc:3b:61:40:5e:41:d3:ac:0e:65:82:20:5a: 56:43:77:a8:65:37:32:f7:a4:8d:5c:9b:a4:ac:82: c4:36:07:f5:ed:c4:61:dc:be:8b:bd:03:28:79:b5: b3:90:65:f8:ab:7d:0b:dc:24:86:00:77:66:e6:c3: 95:8a:f7:95:f1:a5:b9:ff:99:cc:b4:cd:46:64:26: ec:a9:ea:19:46:07:1e:bc:57:e7:a1:22:1f:d2:d8: 04:6e:85:3d:07:e3:ee:d8:c0:74:f3:4c:7c:46:cb: 88:8f:f4:57:a1:da:16:54:a7:8d:8a:b7:42:90:24: 0c:2b:44:1a:4e:3a:4d:58:bb:68:0b:05:6f:21:c9: ee:ae:54:8e:a5:8d:27:24:b1:a1:92:b1:47:31:6b: be:3c:3b:6c:33:18:c2:00:38:53:fa:25:3b:04:8a: 71:bd:8f:be:3d:08:85:d1:e4:21:1e:4a:59:33:e8: fd:2d:0f:26:c7:3a:a6:e5:6d:c5:34:85:c8:6b:1b: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:29:66:D3:8D:AD:83:51:94:B6:A3:39:2C:39:1A:DC:6D:FE:A6:D0 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca71e725-d521-46bc-ac84-04ca1684c3a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3da0::/45 Signature Algorithm: sha256WithRSAEncryption 05:1f:b7:46:93:e0:7c:18:8f:3a:53:48:90:b8:58:62:fb:19: a9:72:3c:c8:14:a9:4f:3f:0e:da:2a:9b:27:69:f3:5a:4c:66: c1:de:8c:41:23:0c:fd:38:75:88:fc:4b:81:17:65:65:ad:34: aa:a7:c3:ad:1e:d9:66:76:ec:a0:cb:e0:b5:9b:6d:a4:0a:75: be:89:de:31:72:6b:aa:5d:38:86:ba:d8:4f:79:88:53:58:e7: 3d:15:5b:b4:22:8d:5f:e5:5c:1c:65:ed:69:e7:ba:f5:2f:fa: 35:bb:12:79:fa:e2:60:3c:c0:11:ec:5b:89:62:4c:da:18:dd: fc:c5:f4:73:fd:6e:c9:a1:c1:60:67:24:ad:93:28:53:5f:01: 1c:28:88:83:2d:04:04:1b:4b:c7:0e:7d:72:b9:7e:02:2a:77: 07:c8:7e:11:ec:83:88:35:f3:ff:f5:4a:e6:65:e2:47:45:79: 12:c8:86:cd:9f:32:a6:8d:0f:ec:cd:ef:8b:1e:fc:4c:34:50: 5b:87:11:00:7d:ae:33:f4:d9:88:92:dc:41:8d:00:05:63:8a: 17:42:67:93:46:f4:2c:2e:24:db:6b:e5:c7:0c:82:b4:5c:86: 3a:10:4d:6e:92:41:b9:13:aa:29:3e:39:8a:f7:14:c1:a0:e3: de:00:a1:4c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUffu99VMT6IHn3L1sqYJnbD+M2+owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYyMjE3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDFhNTNiNzE5Njc1YzU4OWQyYzlhNmFkZmY4YTE3ZmU5 ZGRmNGVmN2Y1ZmE2NGM4ZmVjZjZjZmY0YmRiMzkxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC22D0Mpv9TgUP/TcZv+WDMKx+WMMlYL7zuDf526YtSor/h XzILTlJtMBksRSQ7GRDxvqaZiyl7we+iZ+tz3DthQF5B06wOZYIgWlZDd6hlNzL3 pI1cm6SsgsQ2B/XtxGHcvou9Ayh5tbOQZfirfQvcJIYAd2bmw5WK95Xxpbn/mcy0 zUZkJuyp6hlGBx68V+ehIh/S2ARuhT0H4+7YwHTzTHxGy4iP9Feh2hZUp42Kt0KQ JAwrRBpOOk1Yu2gLBW8hye6uVI6ljScksaGSsUcxa748O2wzGMIAOFP6JTsEinG9 j749CIXR5CEeSlkz6P0tDybHOqblbcU0hchrG/yXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0ilm042tg1GUtqM5LDka3G3+ptAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NhNzFlNzI1LWQ1MjEtNDZiYy1hYzg0LTA0Y2ExNjg0YzNhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAPaAwDQYJKoZIhvcNAQELBQADggEBAAUft0aT4HwYjzpTSJC4WGL7 GalyPMgUqU8/Dtoqmydp81pMZsHejEEjDP04dYj8S4EXZWWtNKqnw60e2WZ27KDL 4LWbbaQKdb6J3jFya6pdOIa62E95iFNY5z0VW7QijV/lXBxl7WnnuvUv+jW7Enn6 4mA8wBHsW4liTNoY3fzF9HP9bsmhwWBnJK2TKFNfARwoiIMtBAQbS8cOfXK5fgIq dwfIfhHsg4g18//1SuZl4kdFeRLIhs2fMqaND+zN74se/Ew0UFuHEQB9rjP02YiS 3EGNAAVjihdCZ5NG9CwuJNtr5ccMgrRchjoQTW6SQbkTqik+OYr3FMGg494AoUw= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:18 2025 by rpki-client