$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc88fdfc-3804-4448-83b5-a07c7f1d40ea.roa File: cc88fdfc-3804-4448-83b5-a07c7f1d40ea.roa (raw, json) Hash identifier: Keef6wriYLQWNgWrmzi/p4JBH6DOYsYgQ+rqvBHbkjg= Subject key identifier: E0:E5:2D:05:C3:FD:A7:C0:54:E7:99:63:BB:2A:5D:87:B8:6F:57:DE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 65C42FFCAF7F22665E3D602B7F77A9737ED18F74 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc88fdfc-3804-4448-83b5-a07c7f1d40ea.roa Signing time: Fri 31 Oct 2025 21:53:32 +0000 ROA not before: Fri 31 Oct 2025 21:53:32 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:a1c0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c4:2f:fc:af:7f:22:66:5e:3d:60:2b:7f:77:a9:73:7e:d1:8f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 21:53:32 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=9aeecb25a13688e0f785d6b4b1916c8ba72ff4cc6ad91e640fdc6f8aa3dc09b4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ee:08:9c:12:63:05:ee:8f:63:c6:40:e3:32: ce:e6:56:a2:3b:9c:c2:6b:df:0e:58:c9:a0:4b:b2: 69:20:d3:1f:3b:ff:85:ea:70:b8:14:fc:cc:3b:5a: 24:5a:f6:84:3b:cf:72:f8:fb:ac:d0:c9:2b:04:b8: 44:a2:f0:94:cb:66:8e:61:95:68:ea:49:bf:5a:57: 69:c8:6b:ef:dd:e7:f6:b4:92:ed:07:65:2c:3f:1a: 0e:30:56:c0:41:c9:be:cb:08:4b:67:58:21:bd:94: 77:b0:39:7e:59:e0:9b:f8:83:93:70:56:fc:eb:c2: 8b:e5:c1:41:40:ce:24:2e:97:65:a3:ac:d7:38:6b: fa:05:26:0e:0b:7d:ec:47:85:7b:79:50:0a:0e:03: 81:f9:94:81:48:54:cf:c9:09:f2:7a:7a:1f:5f:6d: fa:9f:68:23:5f:6e:50:38:c0:ac:d4:ff:26:13:69: 83:4f:42:b0:e5:b2:5d:45:d1:f8:bf:7f:4e:04:f7: 9b:ed:94:b8:68:de:43:d5:97:97:a2:4d:4c:7d:1b: 05:6a:21:0f:b0:16:cb:23:39:1c:07:88:dd:c1:15: dc:29:3e:90:fc:8b:f0:2b:81:02:02:a0:cb:84:ef: 2f:21:3f:90:d3:61:de:0f:2a:11:0f:9e:3d:78:28: 02:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E5:2D:05:C3:FD:A7:C0:54:E7:99:63:BB:2A:5D:87:B8:6F:57:DE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc88fdfc-3804-4448-83b5-a07c7f1d40ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:a1c0::/43 Signature Algorithm: sha256WithRSAEncryption 6a:d5:50:70:20:8b:95:4c:8e:1c:a1:94:a9:c9:7c:08:5c:a8: cf:d0:ef:15:d2:69:66:8b:65:20:e3:a5:cb:41:af:ac:42:86: 88:b8:3f:d3:47:0c:e4:75:16:3d:4c:01:33:b7:22:2c:76:61: 42:ce:59:d2:81:05:6c:ac:47:1d:fb:a0:c3:3d:46:74:ea:19: e7:2f:7c:de:d8:85:43:c6:e9:34:48:ad:a6:89:ea:b3:09:ca: 2a:c3:e3:a6:7b:30:54:57:d2:22:74:a2:8e:22:d5:3a:e4:ff: 6c:01:fd:2e:74:c4:61:fb:01:05:6a:a6:75:51:9f:98:42:84: 8d:38:b3:58:2e:78:00:0c:98:91:61:f8:fa:06:fd:84:af:20: be:a9:48:fc:b5:dc:b1:c4:61:f8:6c:56:ab:31:0f:a2:ea:90: 64:af:14:b9:ca:ed:d4:a2:c7:5f:30:bf:18:c5:67:2f:09:d8: 9b:70:66:48:bb:79:22:9d:ef:aa:29:b9:76:e1:38:90:d9:1e: 4a:3f:fc:9e:e6:99:a7:42:06:75:c7:66:10:01:09:24:2c:9b: 05:51:7b:9a:f9:2a:16:ad:d8:6a:40:03:d9:32:fc:7b:e8:92: ed:72:f4:80:11:74:e0:a8:a6:88:e1:e0:2e:45:fb:77:4e:cc: 6f:68:21:a5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZcQv/K9/ImZePWArf3epc37Rj3QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMjE1MzMyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YWVlY2IyNWExMzY4OGUwZjc4NWQ2YjRiMTkxNmM4YmE3 MmZmNGNjNmFkOTFlNjQwZmRjNmY4YWEzZGMwOWI0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDk7gicEmMF7o9jxkDjMs7mVqI7nMJr3w5YyaBLsmkg0x87 /4XqcLgU/Mw7WiRa9oQ7z3L4+6zQySsEuESi8JTLZo5hlWjqSb9aV2nIa+/d5/a0 ku0HZSw/Gg4wVsBByb7LCEtnWCG9lHewOX5Z4Jv4g5NwVvzrwovlwUFAziQul2Wj rNc4a/oFJg4LfexHhXt5UAoOA4H5lIFIVM/JCfJ6eh9fbfqfaCNfblA4wKzU/yYT aYNPQrDlsl1F0fi/f04E95vtlLho3kPVl5eiTUx9GwVqIQ+wFssjORwHiN3BFdwp PpD8i/ArgQICoMuE7y8hP5DTYd4PKhEPnj14KAK5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4OUtBcP9p8BU55ljuypdh7hvV94wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NjODhmZGZjLTM4MDQtNDQ0OC04M2I1LWEwN2M3ZjFkNDBlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAocAwDQYJKoZIhvcNAQELBQADggEBAGrVUHAgi5VMjhyhlKnJfAhc qM/Q7xXSaWaLZSDjpctBr6xChoi4P9NHDOR1Fj1MATO3Iix2YULOWdKBBWysRx37 oMM9RnTqGecvfN7YhUPG6TRIraaJ6rMJyirD46Z7MFRX0iJ0oo4i1Trk/2wB/S50 xGH7AQVqpnVRn5hChI04s1gueAAMmJFh+PoG/YSvIL6pSPy13LHEYfhsVqsxD6Lq kGSvFLnK7dSix18wvxjFZy8J2JtwZki7eSKd76opuXbhOJDZHko//J7mmadCBnXH ZhABCSQsmwVRe5r5Khat2GpAA9ky/Hvoku1y9IARdOCopojh4C5F+3dOzG9oIaU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:43 2025 by rpki-client