$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cce9895a-7abd-4df1-a217-2a2758ebbb28.roa File: cce9895a-7abd-4df1-a217-2a2758ebbb28.roa (raw, json) Hash identifier: J+uFNLGgjCiDHgHK5BXzAu1CyA34eapC/uAbG+jx+CI= Subject key identifier: 5F:32:2C:8B:47:EF:40:DD:CF:00:38:0E:1B:E2:38:D1:9C:AC:30:BF Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 480CD4ED0B94D61EAE604772D805BB6396DE90B6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cce9895a-7abd-4df1-a217-2a2758ebbb28.roa Signing time: Thu 30 Oct 2025 22:08:57 +0000 ROA not before: Thu 30 Oct 2025 22:08:57 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1b40::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0c:d4:ed:0b:94:d6:1e:ae:60:47:72:d8:05:bb:63:96:de:90:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:08:57 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=a690e0b5c16abc21ec5de592285e2e2646a576e807c80d172fbda317a18cf96c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:e8:28:d1:fd:75:4a:53:5d:ac:d8:5e:42: d1:b8:8a:38:d8:5f:c5:a5:42:0a:9a:5b:bc:2a:15: 38:52:30:8b:2b:7b:ee:c8:be:f9:75:61:c3:23:ba: 1c:9b:3e:bb:e5:59:29:eb:19:d1:d8:b9:94:85:0b: 5c:ce:6c:a3:98:0f:8f:ca:14:d4:f2:a9:3b:d8:b6: 02:99:ea:63:36:c8:1a:d8:06:3c:97:2f:d2:7c:4f: c9:0d:c7:dc:9e:3e:dd:b6:b9:c8:1d:65:f9:d0:fb: a4:c8:48:7e:bd:65:27:b7:0e:9c:36:4e:91:90:c5: c4:44:2c:af:cf:13:20:2b:f5:28:7d:95:3a:8f:2d: ac:8d:bc:37:5d:97:d0:21:e1:b0:93:91:e0:46:5a: 5a:c5:85:ad:27:d4:b2:95:3d:cc:74:55:69:5b:c6: 28:5c:84:7d:28:64:d9:50:78:a7:e9:7a:11:b1:cc: 09:6c:8a:b4:3f:97:ae:01:2a:07:6d:6e:f9:74:a3: 95:59:2d:da:24:67:75:58:65:03:ca:84:4d:db:4d: ff:e9:71:31:3b:24:ec:de:0f:b0:a9:63:af:31:f9: b0:c7:c5:c1:83:de:39:df:2b:bf:d2:68:1f:1d:78: 9b:a9:8c:14:d7:90:ea:b4:79:31:3b:5a:2f:53:e1: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:32:2C:8B:47:EF:40:DD:CF:00:38:0E:1B:E2:38:D1:9C:AC:30:BF X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cce9895a-7abd-4df1-a217-2a2758ebbb28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1b40::/47 Signature Algorithm: sha256WithRSAEncryption 75:b2:70:c6:be:d1:e4:4d:20:57:2c:25:8a:60:c3:bc:5b:a0: 6c:24:0c:be:12:c8:dd:c0:d4:fa:c2:2e:26:7e:41:b8:01:67: c5:cd:ae:a8:de:ed:b9:13:8e:1b:3a:7d:1a:6a:c0:db:59:aa: 9b:d3:5f:45:7d:ad:4a:a0:0b:20:ce:04:02:48:33:41:a8:8d: c8:5f:ce:55:f7:ae:c4:9c:35:b1:b4:e3:45:cf:1d:f9:9a:1d: e7:ab:cb:53:f2:dc:ac:57:ef:ca:cf:f5:76:73:cb:50:30:d1: b3:d7:1f:20:70:39:a9:14:60:58:b4:bd:b8:80:4f:86:57:81: 4e:aa:2c:73:e9:07:39:37:0f:3c:5d:aa:0b:83:2d:35:92:14: 50:5e:6a:eb:0b:02:3f:30:b8:59:77:42:97:62:9c:36:c9:57: ab:a3:6b:15:14:1f:8f:e1:e2:ac:f8:bc:14:fb:1d:32:3c:50: 95:2d:27:44:7a:da:2c:c9:1b:17:26:80:b4:00:99:98:b5:3d: a4:7d:c3:d9:4f:2a:bc:e6:81:7f:97:97:30:b0:ea:3d:6d:18: 59:71:d9:d1:29:7b:5c:0f:ef:2a:e1:6e:7b:4f:ca:dc:ce:32: d3:af:02:a9:27:e3:f1:e6:a3:03:5f:8c:cd:ce:54:bf:32:2c: 37:d4:8f:66 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSAzU7QuU1h6uYEdy2AW7Y5bekLYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIwODU3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjkwZTBiNWMxNmFiYzIxZWM1ZGU1OTIyODVlMmUyNjQ2 YTU3NmU4MDdjODBkMTcyZmJkYTMxN2ExOGNmOTZjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9E+go0f11SlNdrNheQtG4ijjYX8WlQgqaW7wqFThSMIsr e+7Ivvl1YcMjuhybPrvlWSnrGdHYuZSFC1zObKOYD4/KFNTyqTvYtgKZ6mM2yBrY BjyXL9J8T8kNx9yePt22ucgdZfnQ+6TISH69ZSe3Dpw2TpGQxcRELK/PEyAr9Sh9 lTqPLayNvDddl9Ah4bCTkeBGWlrFha0n1LKVPcx0VWlbxihchH0oZNlQeKfpehGx zAlsirQ/l64BKgdtbvl0o5VZLdokZ3VYZQPKhE3bTf/pcTE7JOzeD7CpY68x+bDH xcGD3jnfK7/SaB8deJupjBTXkOq0eTE7Wi9T4QsPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXzIsi0fvQN3PADgOG+I40ZysML8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NjZTk4OTVhLTdhYmQtNGRmMS1hMjE3LTJhMjc1OGViYmIyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAG0AwDQYJKoZIhvcNAQELBQADggEBAHWycMa+0eRNIFcsJYpgw7xb oGwkDL4SyN3A1PrCLiZ+QbgBZ8XNrqje7bkTjhs6fRpqwNtZqpvTX0V9rUqgCyDO BAJIM0GojchfzlX3rsScNbG040XPHfmaHeery1Py3KxX78rP9XZzy1Aw0bPXHyBw OakUYFi0vbiAT4ZXgU6qLHPpBzk3DzxdqguDLTWSFFBeausLAj8wuFl3QpdinDbJ V6ujaxUUH4/h4qz4vBT7HTI8UJUtJ0R62izJGxcmgLQAmZi1PaR9w9lPKrzmgX+X lzCw6j1tGFlx2dEpe1wP7yrhbntPytzOMtOvAqkn4/HmowNfjM3OVL8yLDfUj2Y= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:42 2025 by rpki-client