$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd45e636-d18c-44cf-9b7f-e7ba163df752.roa File: dd45e636-d18c-44cf-9b7f-e7ba163df752.roa (raw, json) Hash identifier: kKb9v8YHfC5ndXmhofQTmdhaZeAK5UO6+Qy5l2Dm9Is= Subject key identifier: F2:CD:29:C2:B1:CB:8A:AA:8B:60:E4:28:05:64:AA:ED:F3:A3:8D:7F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 54074292DA850C002F6235BD63536AF7A30588AB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd45e636-d18c-44cf-9b7f-e7ba163df752.roa Signing time: Fri 31 Oct 2025 07:09:59 +0000 ROA not before: Fri 31 Oct 2025 07:09:59 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:11a0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:07:42:92:da:85:0c:00:2f:62:35:bd:63:53:6a:f7:a3:05:88:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:09:59 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=cca4f79dc36462cc99abd999fa1401203c8ab0bc4b1a2a63858d5b3083db8506, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b2:bd:61:e1:c5:91:bb:16:84:88:91:97:eb: 8b:c3:6c:e0:39:05:49:88:91:65:37:92:67:03:db: 1b:60:df:5e:73:8a:70:37:5c:82:32:5e:9a:37:2e: 95:db:d9:40:55:67:1c:6d:07:7e:af:ac:b9:10:ac: 3e:57:ab:ef:31:c9:fc:18:0d:02:e1:af:f9:6b:fd: 9d:4b:7c:b7:17:bb:66:86:4f:e9:75:53:c2:92:f8: 17:fd:63:49:fe:13:94:ad:cb:a8:d0:e5:2e:45:4c: 91:91:f2:76:12:6c:3e:19:24:6f:2f:45:63:a6:c3: e8:69:ef:df:8b:b0:b3:aa:7a:96:d7:00:ce:82:60: 76:c3:47:7a:61:37:f3:7a:80:79:9d:78:53:73:0e: 68:36:8c:35:ed:99:49:2b:e6:ee:16:9f:ed:bf:8a: 8e:0a:e5:1f:c7:f7:17:dc:f6:b8:45:5b:e4:36:dc: 50:df:62:8f:a3:e5:8c:46:02:86:51:d5:fe:f5:b4: 7e:a7:87:29:c8:dd:34:28:0a:7e:f1:19:82:0a:b6: 60:a5:84:bd:a1:42:67:52:38:c6:6e:bb:23:d7:df: b4:5b:ae:ac:a9:6c:8f:af:4d:dd:3a:0f:a7:40:5e: 3a:0f:f9:37:05:b6:0e:6d:77:73:64:08:a5:7d:e3: 4c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CD:29:C2:B1:CB:8A:AA:8B:60:E4:28:05:64:AA:ED:F3:A3:8D:7F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd45e636-d18c-44cf-9b7f-e7ba163df752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:11a0::/43 Signature Algorithm: sha256WithRSAEncryption 0f:d3:a3:ce:e2:6a:22:bf:6a:8a:40:ec:49:ef:b8:43:6e:40: a4:cb:6d:0d:77:37:de:f4:77:3b:5d:5b:7e:c2:9c:c4:19:dc: c6:a3:4b:f6:2c:2c:0f:30:fd:e6:92:4e:2d:2a:6c:74:74:a2: 90:57:8c:48:cf:b3:3c:2e:18:66:58:92:56:d5:9c:6f:e4:57: 69:3d:65:85:33:84:da:6f:53:46:f8:e7:4d:19:2b:de:8e:cd: 32:66:79:e5:36:e4:e1:c0:ec:e0:97:38:d3:5e:c5:d7:60:2a: 1c:d4:79:f9:69:b5:fa:bd:7c:66:fa:84:91:82:38:40:90:60: 66:9f:c4:18:98:8a:48:f8:c6:14:2a:37:73:57:55:00:25:d8: b2:0f:6b:f5:4e:d1:4b:34:eb:d1:4e:9d:99:30:25:cb:af:14: 0b:d2:af:e4:9b:ca:46:51:c9:39:08:7a:ce:72:13:b4:e9:bb: 96:8c:0f:2a:f8:90:c2:d1:73:e1:4d:f7:d8:0e:f3:84:7c:c9: 41:68:22:aa:4f:69:b3:eb:5c:46:7a:51:e1:76:a6:fe:d8:17: e1:4a:10:d2:52:0e:75:87:7d:28:87:09:18:db:03:5b:2e:20: 3b:37:1c:4a:d4:d9:44:18:11:64:b0:a8:cb:7f:56:7f:59:62: 24:b7:5b:85 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVAdCktqFDAAvYjW9Y1Nq96MFiKswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcwOTU5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjY2E0Zjc5ZGMzNjQ2MmNjOTlhYmQ5OTlmYTE0MDEyMDNj OGFiMGJjNGIxYTJhNjM4NThkNWIzMDgzZGI4NTA2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUsr1h4cWRuxaEiJGX64vDbOA5BUmIkWU3kmcD2xtg315z inA3XIIyXpo3LpXb2UBVZxxtB36vrLkQrD5Xq+8xyfwYDQLhr/lr/Z1LfLcXu2aG T+l1U8KS+Bf9Y0n+E5Sty6jQ5S5FTJGR8nYSbD4ZJG8vRWOmw+hp79+LsLOqepbX AM6CYHbDR3phN/N6gHmdeFNzDmg2jDXtmUkr5u4Wn+2/io4K5R/H9xfc9rhFW+Q2 3FDfYo+j5YxGAoZR1f71tH6nhynI3TQoCn7xGYIKtmClhL2hQmdSOMZuuyPX37Rb rqypbI+vTd06D6dAXjoP+TcFtg5td3NkCKV940xrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8s0pwrHLiqqLYOQoBWSq7fOjjX8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RkNDVlNjM2LWQxOGMtNDRjZi05YjdmLWU3YmExNjNkZjc1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAEaAwDQYJKoZIhvcNAQELBQADggEBAA/To87iaiK/aopA7EnvuENu QKTLbQ13N970dztdW37CnMQZ3MajS/YsLA8w/eaSTi0qbHR0opBXjEjPszwuGGZY klbVnG/kV2k9ZYUzhNpvU0b4500ZK96OzTJmeeU25OHA7OCXONNexddgKhzUeflp tfq9fGb6hJGCOECQYGafxBiYikj4xhQqN3NXVQAl2LIPa/VO0Us069FOnZkwJcuv FAvSr+SbykZRyTkIes5yE7Tpu5aMDyr4kMLRc+FN99gO84R8yUFoIqpPabPrXEZ6 UeF2pv7YF+FKENJSDnWHfSiHCRjbA1suIDs3HErU2UQYEWSwqMt/Vn9ZYiS3W4U= -----END CERTIFICATE-----Generated at Wed Nov 5 07:37:49 2025 by rpki-client