$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce1b39d1-b24c-40e3-a346-87d3ce861bda.roa File: ce1b39d1-b24c-40e3-a346-87d3ce861bda.roa (raw, json) Hash identifier: AjZJoirIyRgrO619DNjfAb31UmMWVJdIOTHXhbDiUH0= Subject key identifier: 18:D2:68:5A:EE:AF:FE:E9:53:42:2B:59:0F:FC:41:0A:82:03:2C:95 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0398EFC4C7FDE868337EFDCFCA646A9F6DFB54FB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce1b39d1-b24c-40e3-a346-87d3ce861bda.roa Signing time: Fri 31 Oct 2025 05:44:02 +0000 ROA not before: Fri 31 Oct 2025 05:44:02 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2d20::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:98:ef:c4:c7:fd:e8:68:33:7e:fd:cf:ca:64:6a:9f:6d:fb:54:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:44:02 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=1cf152a60d766d81e0a663354b5c362f7089590cf11f8a2581fc39aa0a4fac57, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:c9:1d:30:d9:e6:2e:76:8e:4b:d9:51:77: 03:53:db:99:5d:fa:0b:04:75:f6:86:8d:2d:f7:99: 90:65:ef:3f:9b:b9:c8:27:ab:40:34:78:a6:58:91: 9a:1a:27:9c:dd:9a:ca:e2:53:89:87:87:98:bd:6c: eb:c5:9b:59:ae:c9:8e:02:6e:a6:f2:4b:c4:ad:5a: 73:e6:f6:b6:44:b6:6d:4e:17:5e:9d:b6:db:a8:49: 3c:e9:e9:bf:6e:95:f7:9b:ad:5d:f5:52:9f:59:10: 12:4d:3b:3e:98:ff:0c:1b:65:44:35:7c:75:cd:01: 53:41:e9:01:4d:4f:e0:f2:49:d0:10:fd:a2:ad:3b: 3b:cc:e9:33:0f:53:b9:85:44:bf:67:be:48:af:00: c0:ac:0f:ec:32:69:1a:db:a9:b3:c1:2f:df:15:51: 9f:41:02:76:66:4b:06:5f:ed:8f:9f:4e:42:98:bb: 6c:29:95:f7:74:a8:8e:4c:ce:c5:68:c8:b0:4e:0d: 26:f4:d4:d9:c1:6c:c0:c0:fe:c1:3a:7f:b8:d8:ae: e4:10:70:40:54:5f:24:42:99:c5:90:0f:8f:ef:cf: 99:bb:ef:23:ba:80:1c:c3:c3:c9:f9:6e:66:ff:9f: 7d:d3:2e:85:31:ee:05:58:6b:47:d5:9e:03:be:05: 7c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D2:68:5A:EE:AF:FE:E9:53:42:2B:59:0F:FC:41:0A:82:03:2C:95 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce1b39d1-b24c-40e3-a346-87d3ce861bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2d20::/45 Signature Algorithm: sha256WithRSAEncryption 8a:01:d7:71:f2:9a:7e:31:e4:54:3a:37:3d:40:91:da:e8:e4: cc:6d:35:47:e2:76:5f:cd:93:f0:51:4d:cd:c2:20:dd:59:40: 81:3e:43:77:b0:4d:c7:74:f7:a7:b4:08:ac:82:33:2d:51:38: c7:9b:b9:0c:08:6c:58:ac:e7:27:a2:42:13:38:e2:c0:47:3d: d0:ab:fa:0a:63:ab:35:87:f5:de:c0:4d:d6:6a:8a:fe:60:86: f0:cc:0a:a6:2c:0f:ee:49:59:a7:ba:7b:03:bb:ef:55:3f:e2: ba:53:0c:bc:15:84:60:3d:24:c2:d2:1e:02:3a:95:4f:25:7c: ac:05:ea:9f:1c:5a:92:aa:21:7e:92:d2:a4:5a:bd:db:d1:f4: 78:36:e3:03:f6:d0:a3:1d:7e:b4:2f:bb:f7:62:13:5e:9c:d4: 6c:0d:f7:f3:3d:22:6e:35:95:f5:4b:58:66:88:3f:e0:70:1b: 6d:2c:96:3c:d6:05:2e:63:1d:f0:86:60:cd:25:14:7d:f1:a9: 22:ef:dc:c8:dc:ab:17:2b:39:f9:2f:8f:e8:06:3d:82:10:1b: 17:17:e1:21:ec:16:4f:77:36:a4:73:b3:11:55:33:49:76:dd: bb:e8:f8:0f:01:cf:f8:b0:5b:3d:6d:65:2e:2a:b4:ce:89:7d: 11:ff:b7:16 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA5jvxMf96Ggzfv3PymRqn237VPswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU0NDAyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxY2YxNTJhNjBkNzY2ZDgxZTBhNjYzMzU0YjVjMzYyZjcw ODk1OTBjZjExZjhhMjU4MWZjMzlhYTBhNGZhYzU3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpLckdMNnmLnaOS9lRdwNT25ld+gsEdfaGjS33mZBl7z+b ucgnq0A0eKZYkZoaJ5zdmsriU4mHh5i9bOvFm1muyY4CbqbyS8StWnPm9rZEtm1O F16dttuoSTzp6b9ulfebrV31Up9ZEBJNOz6Y/wwbZUQ1fHXNAVNB6QFNT+DySdAQ /aKtOzvM6TMPU7mFRL9nvkivAMCsD+wyaRrbqbPBL98VUZ9BAnZmSwZf7Y+fTkKY u2wplfd0qI5MzsVoyLBODSb01NnBbMDA/sE6f7jYruQQcEBUXyRCmcWQD4/vz5m7 7yO6gBzDw8n5bmb/n33TLoUx7gVYa0fVngO+BXwlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGNJoWu6v/ulTQitZD/xBCoIDLJUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NlMWIzOWQxLWIyNGMtNDBlMy1hMzQ2LTg3ZDNjZTg2MWJkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALSAwDQYJKoZIhvcNAQELBQADggEBAIoB13Hymn4x5FQ6Nz1Akdro 5MxtNUfidl/Nk/BRTc3CIN1ZQIE+Q3ewTcd096e0CKyCMy1ROMebuQwIbFis5yei QhM44sBHPdCr+gpjqzWH9d7ATdZqiv5ghvDMCqYsD+5JWae6ewO771U/4rpTDLwV hGA9JMLSHgI6lU8lfKwF6p8cWpKqIX6S0qRavdvR9Hg24wP20KMdfrQvu/diE16c 1GwN9/M9Im41lfVLWGaIP+BwG20sljzWBS5jHfCGYM0lFH3xqSLv3MjcqxcrOfkv j+gGPYIQGxcX4SHsFk93NqRzsxFVM0l23bvo+A8Bz/iwWz1tZS4qtM6JfRH/txY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:39 2025 by rpki-client