$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9cea951-90f6-44b5-a6dd-aa7a60939e8a.roa File: d9cea951-90f6-44b5-a6dd-aa7a60939e8a.roa (raw, json) Hash identifier: 6MO54uYD3fjt9ycnq1eSP4+oQ8xT6x/HKXEnkhkji0o= Subject key identifier: 06:C1:36:89:D3:B6:18:33:4E:76:69:69:18:25:83:29:56:01:A9:EA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2D3F47CCD1CDB82A677CBEFE13557D6204DEFA8B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9cea951-90f6-44b5-a6dd-aa7a60939e8a.roa Signing time: Fri 31 Oct 2025 00:26:36 +0000 ROA not before: Fri 31 Oct 2025 00:26:36 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:357e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3f:47:cc:d1:cd:b8:2a:67:7c:be:fe:13:55:7d:62:04:de:fa:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:26:36 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=92a72d46d6bcdd34e2544943a49595fc190a86b534548d6401a77912b8264cf8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cf:99:e6:03:df:ac:93:d0:ca:80:fe:c5:ee: df:1c:cb:ab:24:20:c7:f5:5c:d7:e0:0b:0d:7c:1e: b3:5a:c4:3a:4e:cb:91:d2:3e:92:14:56:88:9a:ed: 9f:3c:89:26:91:da:32:33:89:cc:31:4e:a3:0b:54: d9:85:f2:7e:0e:8c:75:9b:1c:bb:34:37:34:b3:03: dd:df:4d:d9:6c:33:c5:90:21:8c:fa:62:e5:5c:c7: fa:89:79:ef:bc:d0:27:bf:4a:0a:ea:92:cc:94:7d: 2a:47:e1:aa:35:86:09:17:63:45:91:25:bf:5d:47: 42:f8:6d:4f:c3:28:55:5a:7e:d4:cf:3e:aa:59:7a: cd:ac:48:14:9d:d4:ac:a0:dc:7a:3b:aa:61:a9:81: aa:3c:b7:2e:5a:09:a6:f8:42:e5:4a:65:49:3d:07: 27:6a:6c:73:90:b1:0f:dc:df:e3:55:0b:c7:ae:78: 53:4d:46:71:67:47:ba:b3:ac:bd:2e:29:d5:5b:53: 73:a1:11:e3:b4:e0:5e:29:af:83:8b:b6:f4:2c:2c: ec:c5:4c:6e:f4:28:24:20:b8:4d:8b:f8:5c:fe:31: 26:e9:ed:97:c2:d5:4d:8b:c4:b3:4d:36:43:8f:a4: c1:00:14:ce:38:f7:e9:6e:3d:33:f5:d8:94:be:b4: 7a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C1:36:89:D3:B6:18:33:4E:76:69:69:18:25:83:29:56:01:A9:EA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9cea951-90f6-44b5-a6dd-aa7a60939e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:357e::/47 Signature Algorithm: sha256WithRSAEncryption 32:db:d6:89:b3:47:5e:23:42:1c:fb:e9:7f:af:ed:c1:ed:55: d1:a9:26:6d:95:78:2b:fb:54:e0:f9:b9:60:66:a7:0a:69:7a: 4a:e2:9f:89:0a:b6:66:da:cb:23:b9:44:bd:d4:d9:d2:30:d1: 72:61:d2:9a:1d:f2:5a:df:51:7d:48:39:5f:e1:96:a5:54:d9: 2c:af:e8:91:7b:b1:6b:8d:67:f3:95:ea:4f:91:54:e7:c0:24: d7:1e:89:27:44:31:59:6c:dc:43:66:85:ae:65:6d:c8:9f:34: 46:af:64:69:63:de:eb:8e:bf:0d:9f:ab:92:82:24:80:71:a6: f9:93:f1:48:ff:f5:93:32:90:43:72:76:24:ed:95:32:15:f1: bb:d2:2c:27:6e:93:05:d9:cf:bf:5f:92:9c:b3:f0:f6:c9:14: 32:7d:f6:f1:19:c5:95:59:e3:a5:c7:8e:96:1e:88:ec:fe:f0: a1:65:ed:00:0d:8f:60:92:50:c5:c8:48:7e:62:96:db:c9:aa: 70:4d:04:2c:69:81:b5:84:d6:07:f7:04:d4:4b:90:b4:e8:39: 97:a3:04:ef:b1:aa:17:b1:7a:70:1c:8d:f3:dd:d8:fc:13:c7: a7:62:35:04:51:a4:1f:86:d1:d0:d1:94:d0:e9:b0:9f:12:d9: d5:48:2c:9b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULT9HzNHNuCpnfL7+E1V9YgTe+oswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyNjM2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MmE3MmQ0NmQ2YmNkZDM0ZTI1NDQ5NDNhNDk1OTVmYzE5 MGE4NmI1MzQ1NDhkNjQwMWE3NzkxMmI4MjY0Y2Y4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgz5nmA9+sk9DKgP7F7t8cy6skIMf1XNfgCw18HrNaxDpO y5HSPpIUVoia7Z88iSaR2jIzicwxTqMLVNmF8n4OjHWbHLs0NzSzA93fTdlsM8WQ IYz6YuVcx/qJee+80Ce/SgrqksyUfSpH4ao1hgkXY0WRJb9dR0L4bU/DKFVaftTP PqpZes2sSBSd1Kyg3Ho7qmGpgao8ty5aCab4QuVKZUk9BydqbHOQsQ/c3+NVC8eu eFNNRnFnR7qzrL0uKdVbU3OhEeO04F4pr4OLtvQsLOzFTG70KCQguE2L+Fz+MSbp 7ZfC1U2LxLNNNkOPpMEAFM449+luPTP12JS+tHoDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBsE2idO2GDNOdmlpGCWDKVYBqeowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Q5Y2VhOTUxLTkwZjYtNDRiNS1hNmRkLWFhN2E2MDkzOWU4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANX4wDQYJKoZIhvcNAQELBQADggEBADLb1omzR14jQhz76X+v7cHt VdGpJm2VeCv7VOD5uWBmpwppekrin4kKtmbayyO5RL3U2dIw0XJh0pod8lrfUX1I OV/hlqVU2Syv6JF7sWuNZ/OV6k+RVOfAJNceiSdEMVls3ENmha5lbcifNEavZGlj 3uuOvw2fq5KCJIBxpvmT8Uj/9ZMykENydiTtlTIV8bvSLCdukwXZz79fkpyz8PbJ FDJ99vEZxZVZ46XHjpYeiOz+8KFl7QANj2CSUMXISH5iltvJqnBNBCxpgbWE1gf3 BNRLkLToOZejBO+xqhexenAcjfPd2PwTx6diNQRRpB+G0dDRlNDpsJ8S2dVILJs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:27 2025 by rpki-client