$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9b3af81-29db-42f7-b6c5-f636c906b95b.roa File: d9b3af81-29db-42f7-b6c5-f636c906b95b.roa (raw, json) Hash identifier: xR8jkcy5mgW3eSifNh0I3svgg89OzoLCYtk8BPwlOXs= Subject key identifier: 81:5E:FB:E0:3C:51:C7:19:D7:33:DA:1B:A9:05:24:03:C3:CE:53:84 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 63FD460CCB4045268C4CD7F058A1B878CCC04252 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9b3af81-29db-42f7-b6c5-f636c906b95b.roa Signing time: Fri 31 Oct 2025 07:55:29 +0000 ROA not before: Fri 31 Oct 2025 07:55:29 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1c00::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:fd:46:0c:cb:40:45:26:8c:4c:d7:f0:58:a1:b8:78:cc:c0:42:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:55:29 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e88479a9ba88bac591c0de063fc0a8394850380a963fe5d892111707cbdc0fdf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:e0:8f:9d:6d:dc:f6:ba:ea:d3:e0:44:87: 3e:86:ce:28:f8:7f:61:bc:f0:bc:9c:90:93:d2:49: ca:0b:ba:4b:4f:3f:df:10:68:56:81:b3:8c:5a:0e: ac:a2:52:76:0b:29:54:58:c5:be:3c:7d:00:fe:45: 2b:e4:68:82:46:f2:40:0c:93:2f:fc:75:22:c7:26: 6d:65:8c:ea:33:e3:80:4f:cb:1d:cd:95:99:8b:82: ff:07:9c:2f:a8:d1:05:4e:26:27:84:dd:3c:c3:56: b2:73:e6:3f:ac:a5:71:98:af:02:80:d3:09:b1:53: 25:b2:3b:ab:27:9e:b2:cd:f7:24:2c:5c:95:05:f2: 9a:67:04:f4:2f:65:6f:df:a6:11:2b:d7:45:ef:f9: 71:df:2f:a7:c7:f7:d3:8d:b1:15:e0:24:fb:8f:dc: 4a:c0:46:35:f2:08:49:83:ee:b7:27:5f:55:f4:ab: 56:63:be:13:bd:fb:14:3d:9a:a2:3e:5e:fc:90:8c: 70:f5:2c:df:14:d3:c4:35:8a:6a:f8:a2:23:08:11: 39:64:5c:48:aa:e0:53:f4:18:22:ef:07:41:8e:75: 82:70:da:95:5d:a9:c6:7b:97:f6:42:e0:2f:1a:4f: 94:08:af:75:06:c8:24:52:da:eb:f5:40:98:09:72: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5E:FB:E0:3C:51:C7:19:D7:33:DA:1B:A9:05:24:03:C3:CE:53:84 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9b3af81-29db-42f7-b6c5-f636c906b95b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1c00::/39 Signature Algorithm: sha256WithRSAEncryption 8e:28:25:2c:49:f3:de:47:87:c7:c5:80:e6:7c:6c:bb:66:20: 27:ef:7b:c9:c1:c8:d8:ba:6c:7b:00:25:95:7d:9b:63:b3:de: 8f:74:e9:26:a3:2e:7a:8e:12:ba:8b:e7:5a:65:ef:f0:ed:1f: 29:59:54:eb:3f:d1:86:db:ec:f8:0e:f4:d1:b4:74:b7:a7:50: 7f:1d:75:2b:b9:1c:73:f4:af:7e:17:88:23:55:e2:72:7f:76: 96:1b:2b:9f:e7:a9:1c:77:d6:42:09:95:62:18:01:23:05:08: ad:25:32:c1:c0:60:62:dc:f0:3b:62:5a:01:92:98:5b:e2:4a: 32:4e:2a:ce:98:13:61:a9:f6:4d:74:91:e9:92:80:3c:2d:dd: 83:80:22:47:d5:6c:6b:0b:ce:ec:56:21:c6:4f:38:40:a2:50: b5:04:22:85:c6:be:80:52:56:58:76:ab:1e:51:25:19:a5:f1: d0:03:ee:b1:cd:71:d3:a5:53:ad:e4:f0:be:7b:b3:2b:cb:72: 2b:81:48:7e:78:03:4e:34:9b:f0:30:6e:ad:37:3a:8d:73:f4: 98:32:1e:eb:ff:22:4e:a3:e5:af:2f:5b:b4:87:ef:be:9d:b8: 12:17:9a:c3:a2:73:0b:a2:da:29:83:cc:5b:a7:4d:ee:53:38: 1a:11:a4:e3 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUY/1GDMtARSaMTNfwWKG4eMzAQlIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc1NTI5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlODg0NzlhOWJhODhiYWM1OTFjMGRlMDYzZmMwYTgzOTQ4 NTAzODBhOTYzZmU1ZDg5MjExMTcwN2NiZGMwZmRmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiEeCPnW3c9rrq0+BEhz6Gzij4f2G88LyckJPSScoLuktP P98QaFaBs4xaDqyiUnYLKVRYxb48fQD+RSvkaIJG8kAMky/8dSLHJm1ljOoz44BP yx3NlZmLgv8HnC+o0QVOJieE3TzDVrJz5j+spXGYrwKA0wmxUyWyO6snnrLN9yQs XJUF8ppnBPQvZW/fphEr10Xv+XHfL6fH99ONsRXgJPuP3ErARjXyCEmD7rcnX1X0 q1ZjvhO9+xQ9mqI+XvyQjHD1LN8U08Q1imr4oiMIETlkXEiq4FP0GCLvB0GOdYJw 2pVdqcZ7l/ZC4C8aT5QIr3UGyCRS2uv1QJgJckynAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUgV774DxRxxnXM9obqQUkA8POU4QwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Q5YjNhZjgxLTI5ZGItNDJmNy1iNmM1LWY2MzZjOTA2Yjk1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAJAAHDANBgkqhkiG9w0BAQsFAAOCAQEAjiglLEnz3keHx8WA5nxsu2Yg J+97ycHI2LpsewAllX2bY7Pej3TpJqMueo4SuovnWmXv8O0fKVlU6z/Rhtvs+A70 0bR0t6dQfx11K7kcc/SvfheII1Xicn92lhsrn+epHHfWQgmVYhgBIwUIrSUywcBg YtzwO2JaAZKYW+JKMk4qzpgTYan2TXSR6ZKAPC3dg4AiR9VsawvO7FYhxk84QKJQ tQQihca+gFJWWHarHlElGaXx0APusc1x06VTreTwvnuzK8tyK4FIfngDTjSb8DBu rTc6jXP0mDIe6/8iTqPlry9btIfvvp24Eheaw6JzC6LaKYPMW6dN7lM4GhGk4w== -----END CERTIFICATE-----Generated at Wed Nov 5 15:20:13 2025 by rpki-client