$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce180c34-7aed-434c-ac06-dc49f110d9a0.roa File: ce180c34-7aed-434c-ac06-dc49f110d9a0.roa (raw, json) Hash identifier: d5nl1zuXEP0kKSy7ElQlw4bb7Y88t8Qx/THAnFCV8a8= Subject key identifier: 05:40:31:D8:26:43:9F:95:E9:08:91:58:21:2A:89:7F:45:BC:BE:13 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 16545A8183625B94768F94301E224A8A20A30F50 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce180c34-7aed-434c-ac06-dc49f110d9a0.roa Signing time: Thu 30 Oct 2025 23:37:05 +0000 ROA not before: Thu 30 Oct 2025 23:37:05 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2e0e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:54:5a:81:83:62:5b:94:76:8f:94:30:1e:22:4a:8a:20:a3:0f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:37:05 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=33b0c1ddffbed359db142b0aa1c7a3e10b0c6b11744930269c8123b123019df7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:25:b2:de:51:9d:2c:53:4e:a0:df:04:ae:ad: e3:12:be:54:93:39:4b:cc:d9:9d:a7:46:f9:66:4e: c5:72:6b:f1:6f:1c:b8:4d:74:67:57:bf:34:2b:f6: e2:07:eb:cd:87:33:1d:1d:18:30:fb:49:da:ca:ba: 3c:18:8b:a3:8f:4e:96:a4:fc:c2:8a:99:43:32:a9: 2b:47:34:e0:b2:85:f3:4c:c9:2a:ee:61:8f:89:6f: d8:ab:42:93:03:28:ef:36:68:7f:77:5c:18:08:62: a3:19:90:fd:22:cb:de:e3:69:3c:d0:ff:24:2b:3b: 52:3c:bd:f1:98:80:e7:75:b2:14:c5:8f:11:d1:f0: 43:30:44:1f:6c:a0:0e:e6:79:92:59:fb:fc:c4:07: a1:92:b4:00:f0:b2:75:e7:22:ae:56:5b:08:5b:48: e4:2f:95:2b:fa:75:3b:91:40:ba:c2:93:42:b2:cb: 38:b6:6f:71:56:25:65:33:b9:48:9b:f1:30:b6:37: c7:80:9c:0c:20:47:21:69:f1:7d:d0:61:04:f5:5c: 8d:bd:63:6c:b3:7a:4b:3b:da:6a:72:ce:e9:cc:86: e7:94:3c:bc:2e:2e:5f:44:fb:7e:87:df:89:05:80: cc:79:ef:ff:07:bf:e1:9b:87:e5:4f:6c:37:33:e9: 0d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:40:31:D8:26:43:9F:95:E9:08:91:58:21:2A:89:7F:45:BC:BE:13 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce180c34-7aed-434c-ac06-dc49f110d9a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2e0e::/47 Signature Algorithm: sha256WithRSAEncryption 9e:f6:93:ac:22:6b:41:f0:a2:29:39:1f:22:af:d3:ca:7c:07: 6a:22:72:0a:03:20:4d:51:fa:af:80:8b:a2:14:87:c8:a6:75: 72:e7:e3:dd:ad:a9:4e:45:7c:11:a5:f0:d1:57:2a:18:ee:76: 84:2e:cf:b7:99:02:ca:aa:b0:87:e5:a7:ad:ba:ca:7a:a6:6d: 4d:c3:55:24:6a:11:aa:c6:9a:9d:2e:24:d2:70:6b:61:46:d9: 7d:3f:8d:11:09:dd:18:db:47:56:dc:1c:f3:71:2a:ae:79:e3: b2:3c:fb:e3:b2:92:87:1b:a8:81:83:5e:93:6c:e3:4e:cf:6a: c3:de:eb:b3:1d:01:58:ca:85:7d:2e:53:c8:55:8b:89:1f:29: f6:a1:70:d6:dc:08:23:c5:1c:0c:b0:51:07:97:15:0b:2d:77: 18:14:f5:7b:f9:ea:f0:e3:4f:63:0a:b2:60:99:68:75:43:48: c1:a0:dc:9a:5c:74:55:dc:6b:10:39:f8:44:9f:33:19:74:a6: 23:89:c4:5a:fc:e4:90:dc:d7:aa:91:bc:e8:10:81:f2:7d:4a: 40:18:8d:23:6d:42:13:2c:32:8d:78:04:f5:28:4b:ad:af:3b: 97:f6:5e:e4:6e:fd:86:e5:7f:9c:f7:b0:19:57:84:a7:db:cc: c0:d4:e2:e7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFlRagYNiW5R2j5QwHiJKiiCjD1AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMzNzA1WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2IwYzFkZGZmYmVkMzU5ZGIxNDJiMGFhMWM3YTNlMTBi MGM2YjExNzQ0OTMwMjY5YzgxMjNiMTIzMDE5ZGY3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTJbLeUZ0sU06g3wSureMSvlSTOUvM2Z2nRvlmTsVya/Fv HLhNdGdXvzQr9uIH682HMx0dGDD7SdrKujwYi6OPTpak/MKKmUMyqStHNOCyhfNM ySruYY+Jb9irQpMDKO82aH93XBgIYqMZkP0iy97jaTzQ/yQrO1I8vfGYgOd1shTF jxHR8EMwRB9soA7meZJZ+/zEB6GStADwsnXnIq5WWwhbSOQvlSv6dTuRQLrCk0Ky yzi2b3FWJWUzuUib8TC2N8eAnAwgRyFp8X3QYQT1XI29Y2yzeks72mpyzunMhueU PLwuLl9E+36H34kFgMx57/8Hv+Gbh+VPbDcz6Q17AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBUAx2CZDn5XpCJFYISqJf0W8vhMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NlMTgwYzM0LTdhZWQtNDM0Yy1hYzA2LWRjNDlmMTEwZDlhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALg4wDQYJKoZIhvcNAQELBQADggEBAJ72k6wia0Hwoik5HyKv08p8 B2oicgoDIE1R+q+Ai6IUh8imdXLn492tqU5FfBGl8NFXKhjudoQuz7eZAsqqsIfl p626ynqmbU3DVSRqEarGmp0uJNJwa2FG2X0/jREJ3RjbR1bcHPNxKq5547I8++Oy kocbqIGDXpNs407PasPe67MdAVjKhX0uU8hVi4kfKfahcNbcCCPFHAywUQeXFQst dxgU9Xv56vDjT2MKsmCZaHVDSMGg3JpcdFXcaxA5+ESfMxl0piOJxFr85JDc16qR vOgQgfJ9SkAYjSNtQhMsMo14BPUoS62vO5f2XuRu/Yblf5z3sBlXhKfbzMDU4uc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:57 2025 by rpki-client