$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/da0d9c4e-7286-4d21-adb0-418c19526a7f.roa File: da0d9c4e-7286-4d21-adb0-418c19526a7f.roa (raw, json) Hash identifier: 3njKuoxbU4Lvuebum+mN8XRFkGXC893r2FH+T9aQZPU= Subject key identifier: B9:67:EE:AB:B9:FB:52:76:11:3E:D6:AA:93:33:B5:0F:C7:44:2D:44 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2D7949A541A37953B4C09D6DD662C813347C0F10 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/da0d9c4e-7286-4d21-adb0-418c19526a7f.roa Signing time: Fri 31 Oct 2025 05:21:52 +0000 ROA not before: Fri 31 Oct 2025 05:21:52 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1868::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:79:49:a5:41:a3:79:53:b4:c0:9d:6d:d6:62:c8:13:34:7c:0f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:21:52 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=1127334a7960b1761dc3181bd3846920cb53778ab88c9ddf41e76b8f49145881, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:ab:d7:1d:2a:bd:85:6f:37:45:ce:47:24: df:a7:40:98:93:4f:52:0c:33:b3:c6:42:64:61:2a: ad:d7:e3:41:bc:38:bf:5a:0c:ce:a8:de:85:04:90: a4:74:c6:b4:ba:4c:d9:bf:0b:c2:32:e9:3f:7e:46: 84:50:24:4e:28:34:45:85:88:d7:23:14:5a:3a:ab: f5:fe:7e:ed:2e:3b:a0:cb:b0:12:ce:23:8d:4a:e8: c4:cd:5c:d6:92:ff:a2:36:90:c5:95:02:84:1a:59: 1d:d9:95:2f:98:5b:4d:09:67:fe:a4:f4:ed:a1:94: f1:3d:51:d5:e7:ee:b8:bd:6b:db:48:48:a3:a3:91: f3:c6:63:1a:30:19:c9:ca:ef:7c:00:b7:b4:c5:d9: 71:d1:fc:30:c3:0d:82:8d:3b:70:d0:73:38:3b:a6: 47:07:0c:e6:b3:8a:32:98:46:fa:e5:71:64:98:f5: 2b:d3:31:75:0d:6e:8b:52:a5:65:38:c5:ac:f7:63: 97:c0:a0:94:62:37:74:b8:51:de:54:b7:b9:6c:aa: ee:80:96:2c:31:b2:18:b7:26:31:58:24:3d:05:3d: 9b:03:78:62:d0:7d:9d:0d:60:39:1d:d2:ff:97:6b: 6c:06:68:bf:28:57:ac:62:64:19:61:e3:1a:a9:10: 6a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:67:EE:AB:B9:FB:52:76:11:3E:D6:AA:93:33:B5:0F:C7:44:2D:44 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/da0d9c4e-7286-4d21-adb0-418c19526a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1868::/45 Signature Algorithm: sha256WithRSAEncryption 28:25:a2:40:70:54:03:5e:8f:a1:7e:9b:6d:f7:92:76:96:c8: 13:87:24:19:1c:15:e6:2e:6c:c4:fa:5b:51:bb:ce:4a:13:3e: 89:05:55:80:2e:c9:e8:43:82:9b:29:36:bc:a6:1c:c0:92:24: 55:10:0c:6d:eb:5d:ce:70:c9:a1:98:82:e8:03:cd:73:45:54: 93:f6:2e:6b:41:14:9c:1a:5c:94:29:f9:9d:f2:58:d2:50:1e: 69:bb:6e:4b:72:57:97:39:15:df:2c:53:e0:f0:81:d2:46:d1: 4b:1e:a2:b7:ad:3f:0b:06:43:f7:f2:1f:38:52:3e:1d:6f:46: 8f:4f:d7:94:f4:50:05:36:5b:cd:74:0b:28:56:5e:6b:79:72: e7:97:8e:33:55:04:14:f6:c5:de:ae:1f:f3:ac:71:2e:52:f1: 48:26:53:b6:cf:9a:a1:cb:44:c2:ce:1d:11:86:84:c3:92:01: 7c:85:b7:d9:b0:c3:6a:94:b1:1c:1b:49:fb:4e:95:73:7e:6b: b9:fb:c1:a7:9e:c1:12:64:f4:ed:2f:f5:f5:64:da:44:ee:d0: 69:d2:f3:03:d6:75:01:59:84:09:9c:4a:59:22:3d:d7:a7:86: 48:16:ad:05:94:48:af:a7:1b:56:64:2c:14:34:c4:34:a2:e5: 93:7f:b0:b2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULXlJpUGjeVO0wJ1t1mLIEzR8DxAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyMTUyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTI3MzM0YTc5NjBiMTc2MWRjMzE4MWJkMzg0NjkyMGNi NTM3NzhhYjg4YzlkZGY0MWU3NmI4ZjQ5MTQ1ODgxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnM6vXHSq9hW83Rc5HJN+nQJiTT1IMM7PGQmRhKq3X40G8 OL9aDM6o3oUEkKR0xrS6TNm/C8Iy6T9+RoRQJE4oNEWFiNcjFFo6q/X+fu0uO6DL sBLOI41K6MTNXNaS/6I2kMWVAoQaWR3ZlS+YW00JZ/6k9O2hlPE9UdXn7ri9a9tI SKOjkfPGYxowGcnK73wAt7TF2XHR/DDDDYKNO3DQczg7pkcHDOazijKYRvrlcWSY 9SvTMXUNbotSpWU4xaz3Y5fAoJRiN3S4Ud5Ut7lsqu6Aliwxshi3JjFYJD0FPZsD eGLQfZ0NYDkd0v+Xa2wGaL8oV6xiZBlh4xqpEGqFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuWfuq7n7UnYRPtaqkzO1D8dELUQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RhMGQ5YzRlLTcyODYtNGQyMS1hZGIwLTQxOGMxOTUyNmE3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAGGgwDQYJKoZIhvcNAQELBQADggEBACglokBwVANej6F+m233knaW yBOHJBkcFeYubMT6W1G7zkoTPokFVYAuyehDgpspNrymHMCSJFUQDG3rXc5wyaGY gugDzXNFVJP2LmtBFJwaXJQp+Z3yWNJQHmm7bktyV5c5Fd8sU+DwgdJG0Useoret PwsGQ/fyHzhSPh1vRo9P15T0UAU2W810CyhWXmt5cueXjjNVBBT2xd6uH/OscS5S 8UgmU7bPmqHLRMLOHRGGhMOSAXyFt9mww2qUsRwbSftOlXN+a7n7waeewRJk9O0v 9fVk2kTu0GnS8wPWdQFZhAmcSlkiPdenhkgWrQWUSK+nG1ZkLBQ0xDSi5ZN/sLI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:45 2025 by rpki-client