$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cac97a1c-306b-464b-8f27-69f0033412c6.roa File: cac97a1c-306b-464b-8f27-69f0033412c6.roa (raw, json) Hash identifier: y+vqM6xaWHAENYCagG6viJyV0w2bkDyBfMUqUDa5TKs= Subject key identifier: DE:57:8E:00:F8:3C:C4:8B:E8:F6:20:6F:E7:FB:2B:4A:FE:F4:30:35 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4DC0C1E67E912BC7C55F22C29202811335371814 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cac97a1c-306b-464b-8f27-69f0033412c6.roa Signing time: Fri 31 Oct 2025 05:51:55 +0000 ROA not before: Fri 31 Oct 2025 05:51:55 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2db8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c0:c1:e6:7e:91:2b:c7:c5:5f:22:c2:92:02:81:13:35:37:18:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:51:55 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0541f85c98fcdd8911bd233156ee239828231b181a539e3dfddadbca8bb74eed, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f6:70:68:f9:b7:fd:a2:91:59:e4:c3:de:d9: b1:ff:09:ac:1a:0e:35:c0:39:94:14:88:d6:91:74: 6e:df:78:71:ff:25:ba:9b:0c:d8:35:6d:11:aa:3d: 54:1f:be:30:e3:3e:e4:ff:ac:12:1d:ef:f2:db:29: 91:0c:59:47:85:69:d5:10:7b:d5:64:e4:63:8c:e8: 9e:09:71:98:9a:5d:22:af:be:6d:86:41:d6:ad:20: 0e:f9:43:ba:46:fa:f4:87:55:ad:4f:01:c5:83:a3: 08:16:c7:94:c4:ad:ae:64:d8:d7:0a:ea:94:93:97: d9:c1:da:ef:d3:c3:8c:40:b4:09:92:ae:1c:76:6e: a7:bf:48:5b:63:0a:bb:a4:e4:31:81:2b:6d:7b:68: 38:72:bc:65:13:9f:1c:80:77:21:5d:8a:3b:10:e7: e7:40:01:3f:a2:97:0d:f0:84:70:05:25:4a:51:3a: e3:53:d8:88:8d:b2:46:2c:ab:b5:04:70:30:b4:eb: 23:4b:71:2f:36:c7:07:46:f8:7c:ac:e1:d6:db:ad: 23:25:97:e8:24:24:2f:49:eb:5b:b5:70:08:09:7b: f0:1a:78:20:84:b6:ec:d0:92:86:31:4d:0f:68:73: 17:0d:1a:0c:36:6b:c7:ec:f4:1a:93:f2:4c:11:04: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:57:8E:00:F8:3C:C4:8B:E8:F6:20:6F:E7:FB:2B:4A:FE:F4:30:35 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cac97a1c-306b-464b-8f27-69f0033412c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2db8::/45 Signature Algorithm: sha256WithRSAEncryption 83:9d:75:9b:e5:77:4e:cf:56:69:3e:2b:2c:76:ca:57:a0:90: bc:68:6f:06:a3:af:9c:8f:e4:46:b3:92:38:df:90:71:eb:4c: d4:7b:60:b5:05:08:e1:62:00:b0:15:53:fc:cb:d5:77:7e:e5: 58:bc:01:d9:cb:23:80:ea:4d:2b:3a:b7:2b:e1:81:a7:4b:aa: 03:ed:ee:ad:49:40:80:4e:7a:46:f5:29:f9:79:bd:92:ac:ae: 30:88:70:7d:82:6c:7f:50:c6:26:ff:e9:30:b0:fb:6c:72:fa: 64:ed:8a:b3:43:49:a9:86:78:43:2e:fa:43:87:d5:a1:5d:da: 80:83:28:7f:6b:b1:67:30:81:41:44:10:12:a2:89:4f:e7:70: 71:88:a4:97:9f:76:7a:85:e5:7a:58:fe:62:02:1a:4f:b8:32: b1:d6:71:0d:8f:7d:9d:b2:0d:91:c3:7d:0c:77:a6:53:a9:72: a0:47:52:f4:70:d4:10:07:71:fb:c2:53:bb:65:61:55:db:34: 56:04:84:67:3d:4f:ab:98:10:25:ae:c2:ca:6c:88:3f:0a:67: cd:55:2a:c2:42:13:be:83:89:e7:23:13:00:87:fc:62:a0:bc: 53:0d:e3:db:16:fd:5f:da:1c:84:d7:cd:e0:62:f1:dc:50:f1: 34:5e:3f:02 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTcDB5n6RK8fFXyLCkgKBEzU3GBQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU1MTU1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTQxZjg1Yzk4ZmNkZDg5MTFiZDIzMzE1NmVlMjM5ODI4 MjMxYjE4MWE1MzllM2RmZGRhZGJjYThiYjc0ZWVkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv9nBo+bf9opFZ5MPe2bH/CawaDjXAOZQUiNaRdG7feHH/ JbqbDNg1bRGqPVQfvjDjPuT/rBId7/LbKZEMWUeFadUQe9Vk5GOM6J4JcZiaXSKv vm2GQdatIA75Q7pG+vSHVa1PAcWDowgWx5TEra5k2NcK6pSTl9nB2u/Tw4xAtAmS rhx2bqe/SFtjCruk5DGBK217aDhyvGUTnxyAdyFdijsQ5+dAAT+ilw3whHAFJUpR OuNT2IiNskYsq7UEcDC06yNLcS82xwdG+Hys4dbbrSMll+gkJC9J61u1cAgJe/Aa eCCEtuzQkoYxTQ9ocxcNGgw2a8fs9BqT8kwRBCzdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3leOAPg8xIvo9iBv5/srSv70MDUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NhYzk3YTFjLTMwNmItNDY0Yi04ZjI3LTY5ZjAwMzM0MTJjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALbgwDQYJKoZIhvcNAQELBQADggEBAIOddZvld07PVmk+Kyx2yleg kLxobwajr5yP5EazkjjfkHHrTNR7YLUFCOFiALAVU/zL1Xd+5Vi8AdnLI4DqTSs6 tyvhgadLqgPt7q1JQIBOekb1Kfl5vZKsrjCIcH2CbH9Qxib/6TCw+2xy+mTtirND SamGeEMu+kOH1aFd2oCDKH9rsWcwgUFEEBKiiU/ncHGIpJefdnqF5XpY/mICGk+4 MrHWcQ2PfZ2yDZHDfQx3plOpcqBHUvRw1BAHcfvCU7tlYVXbNFYEhGc9T6uYECWu wspsiD8KZ81VKsJCE76DiecjEwCH/GKgvFMN49sW/V/aHITXzeBi8dxQ8TRePwI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:28:10 2025 by rpki-client