$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d018856b-cd30-49d7-a753-5df996f0a50a.roa File: d018856b-cd30-49d7-a753-5df996f0a50a.roa (raw, json) Hash identifier: QsFScxzYuUvUB6+IrpvqeADGkKMRj/pENuMun6Hn7CY= Subject key identifier: B7:7F:71:9A:1F:B0:74:AB:1F:A6:5F:04:F1:D4:37:46:F7:37:26:CB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 049395B5ABF98024304D6FE61E2D3017167691A5 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d018856b-cd30-49d7-a753-5df996f0a50a.roa Signing time: Thu 30 Oct 2025 23:28:50 +0000 ROA not before: Thu 30 Oct 2025 23:28:50 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2d98::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:93:95:b5:ab:f9:80:24:30:4d:6f:e6:1e:2d:30:17:16:76:91:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:28:50 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=e3753e93b3712a4db04966298a60d07d913cb64fdc551ecb9dc786a7e2983b1e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:fa:54:d7:82:82:bf:ea:b1:7d:d0:7c:5b: 30:a9:19:5a:c5:54:b2:1c:03:c2:e4:5b:3a:2f:b9: 97:3c:37:e0:c2:31:99:ad:90:0f:e5:12:da:7d:a0: 0d:9a:c8:73:19:f1:6a:5e:a3:2d:68:f1:ca:12:fa: f6:42:ec:74:01:7b:5f:eb:df:12:a3:85:ef:ea:34: f6:49:db:58:88:9d:e3:34:df:df:8c:cb:ff:5e:88: d5:9d:e3:96:d2:e0:8a:ce:6d:89:c5:e1:55:ff:9a: 75:03:e4:40:03:cb:76:ca:0e:09:9c:82:c0:87:95: 98:7b:3b:d4:27:5e:d7:8a:1f:5b:65:4f:d6:d7:c0: 5d:af:36:3f:74:e3:d8:87:93:15:7d:5d:d6:81:70: 80:c5:f5:94:28:5d:13:fe:90:44:cb:2f:42:21:a6: ac:d1:d5:c6:d5:2a:ea:84:c2:4b:07:22:94:0a:1b: f0:40:4b:8c:e4:b4:6c:3c:d7:98:25:16:01:b4:1d: f2:60:b8:7e:a4:6d:ae:c1:33:62:2d:d6:42:a8:5f: ee:23:aa:93:46:8c:5c:bf:78:a5:36:d2:cb:2c:b7: f2:ea:7c:b2:c1:ad:f8:12:d6:18:7c:30:4f:00:30: 7c:85:09:b9:72:3d:16:c0:b2:ef:5e:39:96:1a:eb: 72:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7F:71:9A:1F:B0:74:AB:1F:A6:5F:04:F1:D4:37:46:F7:37:26:CB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d018856b-cd30-49d7-a753-5df996f0a50a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2d98::/47 Signature Algorithm: sha256WithRSAEncryption 6e:72:a5:33:38:c3:17:e8:8e:a4:ab:90:e1:1c:cf:7b:09:a1: 1e:56:45:25:1d:76:9b:3f:de:76:75:4d:02:a8:72:c5:74:f6: 7e:23:69:81:6a:d1:53:73:e0:88:06:ac:ae:0a:e7:2b:b1:87: ea:da:9a:a3:1a:84:6e:51:d9:08:3b:5d:b6:7b:9d:7d:6e:e1: f6:82:2c:21:3c:7d:63:c8:f2:77:6b:08:7e:ed:ac:9c:98:d3: 21:59:1c:ee:a7:99:f5:50:7e:f5:7a:25:19:89:da:9e:b3:77: 76:51:e6:63:cf:f9:76:7a:3f:6b:68:bc:2c:d0:5f:d3:36:b8: b9:10:4c:57:39:3c:19:83:4a:68:ca:0f:5b:ee:4b:a8:b9:cf: d7:01:94:aa:9d:c2:e8:dd:90:ec:4f:cd:59:0a:be:9f:fc:ae: fa:8b:d1:08:30:5a:13:73:35:69:28:e8:19:f0:cc:0a:ec:ee: 12:c3:55:5d:e1:50:a9:89:ce:85:8d:e0:f7:c2:dc:3b:b7:18: 47:8e:b2:a4:b5:49:aa:fa:c4:8f:c2:3e:46:c4:cc:b9:e6:ae: b6:f7:9e:b2:b0:fb:3f:3a:87:9c:39:41:02:56:c0:f5:e8:b2: d9:84:c6:e6:15:f7:75:a7:ab:b3:44:3a:cc:78:8b:3c:e5:d3: c3:db:68:89 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBJOVtav5gCQwTW/mHi0wFxZ2kaUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMyODUwWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzc1M2U5M2IzNzEyYTRkYjA0OTY2Mjk4YTYwZDA3ZDkx M2NiNjRmZGM1NTFlY2I5ZGM3ODZhN2UyOTgzYjFlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY2/pU14KCv+qxfdB8WzCpGVrFVLIcA8LkWzovuZc8N+DC MZmtkA/lEtp9oA2ayHMZ8Wpeoy1o8coS+vZC7HQBe1/r3xKjhe/qNPZJ21iIneM0 39+My/9eiNWd45bS4IrObYnF4VX/mnUD5EADy3bKDgmcgsCHlZh7O9QnXteKH1tl T9bXwF2vNj9049iHkxV9XdaBcIDF9ZQoXRP+kETLL0IhpqzR1cbVKuqEwksHIpQK G/BAS4zktGw815glFgG0HfJguH6kba7BM2It1kKoX+4jqpNGjFy/eKU20ssst/Lq fLLBrfgS1hh8ME8AMHyFCblyPRbAsu9eOZYa63JjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUt39xmh+wdKsfpl8E8dQ3Rvc3JsswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2QwMTg4NTZiLWNkMzAtNDlkNy1hNzUzLTVkZjk5NmYwYTUwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALZgwDQYJKoZIhvcNAQELBQADggEBAG5ypTM4wxfojqSrkOEcz3sJ oR5WRSUddps/3nZ1TQKocsV09n4jaYFq0VNz4IgGrK4K5yuxh+ramqMahG5R2Qg7 XbZ7nX1u4faCLCE8fWPI8ndrCH7trJyY0yFZHO6nmfVQfvV6JRmJ2p6zd3ZR5mPP +XZ6P2tovCzQX9M2uLkQTFc5PBmDSmjKD1vuS6i5z9cBlKqdwujdkOxPzVkKvp/8 rvqL0QgwWhNzNWko6BnwzArs7hLDVV3hUKmJzoWN4PfC3Du3GEeOsqS1Sar6xI/C PkbEzLnmrrb3nrKw+z86h5w5QQJWwPXostmExuYV93Wnq7NEOsx4izzl08PbaIk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:57:31 2025 by rpki-client