$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce9202fe-4528-4041-985f-20fdc9b7563a.roa File: ce9202fe-4528-4041-985f-20fdc9b7563a.roa (raw, json) Hash identifier: eF4O9i3bKG3fKXCJvhTQ/X+5I38Cd1qkSyn1Fwog7Io= Subject key identifier: BE:0E:59:5D:3C:EC:CC:6D:6F:F6:1D:04:F4:DF:68:43:E1:7C:5A:0B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2577E4F789D31C7F4731E50514DBA19AB6354380 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce9202fe-4528-4041-985f-20fdc9b7563a.roa Signing time: Fri 31 Oct 2025 07:55:28 +0000 ROA not before: Fri 31 Oct 2025 07:55:28 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1800::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:77:e4:f7:89:d3:1c:7f:47:31:e5:05:14:db:a1:9a:b6:35:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:55:28 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=67f7ae1e199e30caa3636ea2a03cf059278add705e582ca3e3588b38b60c9427, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:57:ee:97:cb:8e:83:f8:8c:67:fc:62:fc: d1:e7:44:f1:12:fc:88:fb:21:47:10:52:9b:4a:ca: c4:f4:6f:6d:c5:fa:ea:11:ac:19:a9:88:2e:0c:37: af:55:0e:26:62:d4:75:3f:93:d9:72:8d:8a:8e:dd: 04:33:5d:25:56:0a:5a:c6:92:b0:a1:47:17:93:73: f3:8f:4c:a0:04:6f:e6:04:26:8d:7c:8c:3c:85:c1: b8:ad:4a:00:f1:5b:0c:db:b1:52:32:3d:7c:3a:e4: 0b:d2:6b:af:a8:39:a3:9b:64:c6:5a:a1:bd:94:4c: 04:5b:8a:f9:35:8a:47:6a:fc:50:43:90:db:25:b0: 15:1c:83:08:0d:9d:3e:2c:69:98:7b:85:67:bc:43: c8:23:bb:8c:41:fd:6f:5b:a2:e1:a4:23:96:f1:ea: b9:2e:ff:07:6f:e9:b9:6e:61:cf:4a:74:03:bd:1b: 7a:6f:94:87:6d:9f:8b:90:c9:ec:18:b5:4a:0a:e0: dd:60:9d:59:c0:bc:62:a5:75:f5:e1:2d:8e:ef:f7: 25:6a:e0:0b:9e:98:29:f8:50:97:3a:29:d1:3e:04: 47:54:e4:7b:c2:30:fd:62:26:cd:5c:5e:7b:b8:c0: 9d:16:9c:03:2c:f7:bc:6d:ce:a2:ad:c8:0f:ea:5c: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0E:59:5D:3C:EC:CC:6D:6F:F6:1D:04:F4:DF:68:43:E1:7C:5A:0B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce9202fe-4528-4041-985f-20fdc9b7563a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1800::/39 Signature Algorithm: sha256WithRSAEncryption 89:6c:17:45:ea:dc:cd:1b:c2:63:e2:2c:44:6e:9c:ad:c9:36: 9b:ef:5e:47:f3:a1:3f:d7:bf:94:f1:72:30:a4:6f:62:f0:50: d0:34:0e:82:39:cb:0f:35:29:1f:02:1d:dc:c4:75:e0:61:3f: 2a:65:02:84:51:9c:42:06:4e:29:96:fe:41:20:06:73:59:4a: 1c:a0:49:83:82:ce:b9:7c:5a:aa:16:49:55:e0:d3:f8:63:23: dd:70:01:f6:15:bf:44:9b:fd:c7:2c:29:bf:e2:e3:e1:26:ef: e0:11:11:e6:55:66:46:32:58:a9:ea:f6:25:dd:2a:c8:f8:51: c9:16:5d:5a:0f:99:08:2a:ca:92:80:56:28:d6:38:ef:0a:f0: 6a:ce:f4:6f:9e:c5:cf:4c:75:a7:c4:b3:75:ce:bc:36:53:78: a2:ae:37:f7:94:05:e0:4d:eb:b2:3d:96:c4:de:f6:a0:01:20: ff:6f:5b:c2:9e:d7:0d:9a:d9:44:13:d4:73:e8:5a:11:da:27: 05:94:1e:e2:0a:31:3d:5d:f7:15:5d:68:60:7b:bf:2f:bb:2c: ad:0a:04:4f:e1:08:aa:bb:29:f3:4b:8c:0d:64:ac:b3:ab:6f: e7:70:50:4d:f7:18:3d:aa:09:95:e2:a4:b2:2f:69:7b:d5:c8: dd:86:98:0f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJXfk94nTHH9HMeUFFNuhmrY1Q4AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc1NTI4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2N2Y3YWUxZTE5OWUzMGNhYTM2MzZlYTJhMDNjZjA1OTI3 OGFkZDcwNWU1ODJjYTNlMzU4OGIzOGI2MGM5NDI3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvMVful8uOg/iMZ/xi/NHnRPES/Ij7IUcQUptKysT0b23F +uoRrBmpiC4MN69VDiZi1HU/k9lyjYqO3QQzXSVWClrGkrChRxeTc/OPTKAEb+YE Jo18jDyFwbitSgDxWwzbsVIyPXw65AvSa6+oOaObZMZaob2UTARbivk1ikdq/FBD kNslsBUcgwgNnT4saZh7hWe8Q8gju4xB/W9bouGkI5bx6rku/wdv6bluYc9KdAO9 G3pvlIdtn4uQyewYtUoK4N1gnVnAvGKldfXhLY7v9yVq4AuemCn4UJc6KdE+BEdU 5HvCMP1iJs1cXnu4wJ0WnAMs97xtzqKtyA/qXGMLAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUvg5ZXTzszG1v9h0E9N9oQ+F8WgswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NlOTIwMmZlLTQ1MjgtNDA0MS05ODVmLTIwZmRjOWI3NTYzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAJAAGDANBgkqhkiG9w0BAQsFAAOCAQEAiWwXRerczRvCY+IsRG6crck2 m+9eR/OhP9e/lPFyMKRvYvBQ0DQOgjnLDzUpHwId3MR14GE/KmUChFGcQgZOKZb+ QSAGc1lKHKBJg4LOuXxaqhZJVeDT+GMj3XAB9hW/RJv9xywpv+Lj4Sbv4BER5lVm RjJYqer2Jd0qyPhRyRZdWg+ZCCrKkoBWKNY47wrwas70b57Fz0x1p8Szdc68NlN4 oq4395QF4E3rsj2WxN72oAEg/29bwp7XDZrZRBPUc+haEdonBZQe4goxPV33FV1o YHu/L7ssrQoET+EIqrsp80uMDWSss6tv53BQTfcYPaoJleKksi9pe9XI3YaYDw== -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:25 2025 by rpki-client