$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d368f638-83cc-4761-bc26-7beeaed413e2.roa File: d368f638-83cc-4761-bc26-7beeaed413e2.roa (raw, json) Hash identifier: 4Ir5WqMTqhBvZ8LV2y3K945Sz88YiddUYlkXUO6Ku7A= Subject key identifier: 18:A2:B5:BA:17:E4:F9:56:BE:71:FA:1D:B3:A3:C8:55:29:A8:7A:5C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 61ECB23D8B19DF36AC515353C77BE7D651D059EF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d368f638-83cc-4761-bc26-7beeaed413e2.roa Signing time: Thu 30 Oct 2025 20:27:30 +0000 ROA not before: Thu 30 Oct 2025 20:27:30 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:28ce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ec:b2:3d:8b:19:df:36:ac:51:53:53:c7:7b:e7:d6:51:d0:59:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:27:30 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=538535db484eb4111f23a63cef1a5275c19ccb096344f8dd3e5e4d96e381e7cc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5b:49:e6:16:21:1d:ec:32:60:da:e6:d7:f3: 34:7e:1f:52:48:69:7c:45:d1:67:b7:e4:67:7d:7e: 01:90:20:e5:99:06:48:0f:27:65:1d:88:f5:ff:82: e5:72:59:21:fb:05:7a:29:da:bf:07:0d:15:57:9f: c1:d8:ae:1b:43:42:54:3c:9b:e8:54:09:0d:0a:e2: 49:66:88:c6:f0:48:4e:f0:82:84:44:cb:e4:8f:02: 70:5e:de:69:42:31:51:5c:aa:cf:56:76:8f:9a:5b: e7:16:13:81:63:05:6b:e1:8b:fb:b6:a7:a9:a1:87: 5f:05:08:77:57:0c:15:88:e8:91:0b:b8:b9:e8:5f: 5b:fc:a2:96:ae:42:26:35:40:6b:dd:26:ee:47:8c: da:15:b2:ff:0d:a8:2f:60:cd:71:ba:8d:9b:6b:d9: 05:3d:1c:2c:15:3f:b1:7d:c9:79:3d:10:87:10:46: 20:f4:62:c1:c9:bb:63:93:91:9b:fe:4f:8e:84:25: 16:62:fb:dd:eb:c7:1f:e9:b4:40:28:96:2a:d9:8e: 8e:a1:19:d3:d6:85:b4:6d:d2:28:03:00:f1:59:8c: cf:8a:d3:50:b6:2a:99:6c:53:ad:b4:00:ec:12:38: b8:51:e0:53:ca:db:d6:f0:6c:3f:b9:1f:d4:2d:11: 63:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A2:B5:BA:17:E4:F9:56:BE:71:FA:1D:B3:A3:C8:55:29:A8:7A:5C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d368f638-83cc-4761-bc26-7beeaed413e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:28ce::/48 Signature Algorithm: sha256WithRSAEncryption b3:35:83:9d:b7:e5:66:07:eb:f1:ec:5e:bf:7a:91:20:d1:88: 73:f5:ee:61:e6:8c:80:82:da:8d:cc:fb:7a:37:a4:5c:9b:f6: 0b:61:d6:47:d0:25:b1:0b:31:26:f3:03:48:7f:1e:e4:55:39: d7:4e:60:cf:e0:61:93:7f:40:f2:38:7f:2a:30:6c:74:79:de: c8:2c:ac:ba:23:0e:48:a9:3e:87:52:ff:2c:6c:99:05:e4:2a: 58:c2:04:6c:f9:9b:ea:42:fa:12:a5:29:52:1f:39:a7:3c:7d: f8:25:63:fc:72:7d:1f:52:ff:bd:b2:bb:24:3d:f7:f9:95:1a: 5e:f0:6c:cd:50:94:ab:80:44:df:e1:24:fe:20:b4:f9:d9:d3: 5b:d0:5b:f5:4f:34:ff:41:e9:c1:f0:85:16:f0:66:d7:5b:79: 74:de:8b:c0:b3:63:05:d6:59:26:1f:7c:3c:3d:b1:70:6d:85: d1:a3:c1:47:3c:84:a0:1b:f3:73:54:d1:f2:c4:11:b7:36:3a: 40:ca:ed:e6:50:2e:43:fa:50:c1:ff:25:e1:2d:a2:f0:1f:50: 80:e1:7d:02:68:70:ad:f1:b1:62:ad:e1:d5:80:7d:b6:31:4e: d6:4a:46:49:7f:13:3e:41:45:a1:c1:b0:fa:35:3c:10:dd:02: 0f:ab:47:ac -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYeyyPYsZ3zasUVNTx3vn1lHQWe8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjAyNzMwWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Mzg1MzVkYjQ4NGViNDExMWYyM2E2M2NlZjFhNTI3NWMx OWNjYjA5NjM0NGY4ZGQzZTVlNGQ5NmUzODFlN2NjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwW0nmFiEd7DJg2ubX8zR+H1JIaXxF0We35Gd9fgGQIOWZ BkgPJ2UdiPX/guVyWSH7BXop2r8HDRVXn8HYrhtDQlQ8m+hUCQ0K4klmiMbwSE7w goREy+SPAnBe3mlCMVFcqs9Wdo+aW+cWE4FjBWvhi/u2p6mhh18FCHdXDBWI6JEL uLnoX1v8opauQiY1QGvdJu5HjNoVsv8NqC9gzXG6jZtr2QU9HCwVP7F9yXk9EIcQ RiD0YsHJu2OTkZv+T46EJRZi+93rxx/ptEAolirZjo6hGdPWhbRt0igDAPFZjM+K 01C2KplsU620AOwSOLhR4FPK29bwbD+5H9QtEWNNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGKK1uhfk+Va+cfods6PIVSmoelwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2QzNjhmNjM4LTgzY2MtNDc2MS1iYzI2LTdiZWVhZWQ0MTNlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAKM4wDQYJKoZIhvcNAQELBQADggEBALM1g5235WYH6/HsXr96kSDR iHP17mHmjICC2o3M+3o3pFyb9gth1kfQJbELMSbzA0h/HuRVOddOYM/gYZN/QPI4 fyowbHR53sgsrLojDkipPodS/yxsmQXkKljCBGz5m+pC+hKlKVIfOac8ffglY/xy fR9S/72yuyQ99/mVGl7wbM1QlKuARN/hJP4gtPnZ01vQW/VPNP9B6cHwhRbwZtdb eXTei8CzYwXWWSYffDw9sXBthdGjwUc8hKAb83NU0fLEEbc2OkDK7eZQLkP6UMH/ JeEtovAfUIDhfQJocK3xsWKt4dWAfbYxTtZKRkl/Ez5BRaHBsPo1PBDdAg+rR6w= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:47 2025 by rpki-client