$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dafcb88a-af27-4dd8-8c0e-7c5d164aaaf2.roa File: dafcb88a-af27-4dd8-8c0e-7c5d164aaaf2.roa (raw, json) Hash identifier: JLjg8+E6lrW7GYd0XEW1YM1Eu3WzTIOZKY8/FAbtGF0= Subject key identifier: 1C:39:3F:62:54:BA:49:73:A9:D4:79:76:C4:A5:A4:6B:8D:01:FA:EC Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 484A18C9CDBF2C459EBABE5B3241A017206DF108 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dafcb88a-af27-4dd8-8c0e-7c5d164aaaf2.roa Signing time: Fri 31 Oct 2025 07:44:17 +0000 ROA not before: Fri 31 Oct 2025 07:44:17 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1800::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4a:18:c9:cd:bf:2c:45:9e:ba:be:5b:32:41:a0:17:20:6d:f1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:44:17 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=64c5d7b2d4e4cf34a32beecd6c4dcccce6248cfc6a656f0643ce0b442374ff9b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:c6:27:9e:f4:6a:af:1f:d6:7c:25:42:ff: 05:07:79:34:49:c1:e9:b7:54:19:c2:42:3c:30:4d: 3d:99:94:4b:46:ca:ac:66:f6:0e:2e:bb:d1:64:30: a7:42:3d:aa:02:65:41:77:05:54:e5:1b:67:aa:6e: 16:81:85:35:f9:d1:af:37:e3:4a:5c:1c:3a:ad:7d: 03:06:87:ef:55:0a:1d:48:06:56:84:2b:98:99:58: 08:36:15:df:93:d6:75:84:7b:27:fb:c8:34:51:54: 76:28:45:1c:58:3b:97:76:b4:18:23:c6:3f:4a:d6: 8b:52:bb:00:44:92:a0:79:a8:1e:4a:50:b3:74:17: e9:51:45:91:6f:ff:82:db:e2:3d:c9:77:5d:07:3a: d5:68:17:81:92:0c:1a:65:c8:3f:a2:5b:77:45:40: 83:2a:8a:15:1f:37:bc:e5:cd:a2:0a:ed:6d:f2:18: 0f:b1:bc:68:6d:a1:ca:3f:cd:9d:60:33:40:4a:a2: 45:48:25:54:80:9a:a6:a9:46:5e:d1:f8:34:f3:21: fd:ea:03:e3:5c:f1:8f:b3:89:6b:cb:bb:d4:18:b4: 27:ce:d9:ea:68:2d:b6:77:3c:fe:f8:c1:a7:2e:44: 43:e0:d9:1b:34:4f:bb:22:ea:60:76:c6:5a:07:05: 1e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:39:3F:62:54:BA:49:73:A9:D4:79:76:C4:A5:A4:6B:8D:01:FA:EC X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dafcb88a-af27-4dd8-8c0e-7c5d164aaaf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1800::/41 Signature Algorithm: sha256WithRSAEncryption 75:03:04:14:2e:0b:df:26:26:d4:01:0f:2e:e2:0d:6d:24:8f: c3:a0:82:21:cc:76:95:5e:fc:4d:f1:aa:d7:f1:0e:68:c9:84: 46:f8:f2:8f:e5:1b:fd:57:d8:af:81:6c:03:cc:af:d6:b6:3c: dd:e4:ea:5b:7d:98:83:c6:f9:31:7d:b7:5f:2f:36:8b:44:65: e1:60:a8:88:8e:4b:e3:e8:dc:a7:eb:47:61:92:6f:9b:b3:61: d7:78:0b:dc:3a:1d:47:32:8a:70:1b:1c:63:3d:9a:1c:67:48: 1b:a3:73:23:d9:8c:39:49:33:3d:07:b8:51:7f:29:6c:d1:d8: 37:1d:06:11:64:7c:04:5b:70:14:8d:b0:c6:26:c4:62:8a:d2: a9:e5:bf:38:18:37:f2:62:f0:2b:fc:2c:0b:90:03:8f:4e:d9: 9a:5d:8b:7b:91:58:3e:f4:28:70:09:8c:57:16:c5:d5:28:63: 39:06:47:16:7b:d9:b6:39:fc:73:9d:6c:c5:81:94:05:58:bb: 9b:bd:f7:74:8b:ad:0b:fa:5f:cf:09:9e:99:36:c6:79:d3:a5: 94:4c:ea:83:fa:11:b6:0d:27:92:ae:59:ad:95:d3:f4:82:73: 39:f5:0d:5b:1e:ab:95:30:92:ce:ce:e3:b3:d5:ed:ff:0a:c3: 38:61:1d:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSEoYyc2/LEWeur5bMkGgFyBt8QgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc0NDE3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NGM1ZDdiMmQ0ZTRjZjM0YTMyYmVlY2Q2YzRkY2NjY2U2 MjQ4Y2ZjNmE2NTZmMDY0M2NlMGI0NDIzNzRmZjliMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyyMYnnvRqrx/WfCVC/wUHeTRJwem3VBnCQjwwTT2ZlEtG yqxm9g4uu9FkMKdCPaoCZUF3BVTlG2eqbhaBhTX50a8340pcHDqtfQMGh+9VCh1I BlaEK5iZWAg2Fd+T1nWEeyf7yDRRVHYoRRxYO5d2tBgjxj9K1otSuwBEkqB5qB5K ULN0F+lRRZFv/4Lb4j3Jd10HOtVoF4GSDBplyD+iW3dFQIMqihUfN7zlzaIK7W3y GA+xvGhtoco/zZ1gM0BKokVIJVSAmqapRl7R+DTzIf3qA+Nc8Y+ziWvLu9QYtCfO 2epoLbZ3PP74wacuREPg2Rs0T7si6mB2xloHBR6/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHDk/YlS6SXOp1Hl2xKWka40B+uwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RhZmNiODhhLWFmMjctNGRkOC04YzBlLTdjNWQxNjRhYWFmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwcmAJAAGAAwDQYJKoZIhvcNAQELBQADggEBAHUDBBQuC98mJtQBDy7iDW0k j8OggiHMdpVe/E3xqtfxDmjJhEb48o/lG/1X2K+BbAPMr9a2PN3k6lt9mIPG+TF9 t18vNotEZeFgqIiOS+Po3KfrR2GSb5uzYdd4C9w6HUcyinAbHGM9mhxnSBujcyPZ jDlJMz0HuFF/KWzR2DcdBhFkfARbcBSNsMYmxGKK0qnlvzgYN/Ji8Cv8LAuQA49O 2Zpdi3uRWD70KHAJjFcWxdUoYzkGRxZ72bY5/HOdbMWBlAVYu5u993SLrQv6X88J npk2xnnTpZRM6oP6EbYNJ5KuWa2V0/SCczn1DVseq5Uwks7O47PV7f8KwzhhHdE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:55 2025 by rpki-client