$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dde3a139-9b9e-459a-8c51-085ec1f3824f.roa File: dde3a139-9b9e-459a-8c51-085ec1f3824f.roa (raw, json) Hash identifier: hjSfpR5U0Rh1FFF9TnnOCpgzTeJtRYVo6xe8NAv4wI0= Subject key identifier: DD:EB:C0:A9:EC:51:65:B7:E3:51:44:60:59:2E:E7:8F:28:0D:B8:35 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0590C3D014109AD6624985B7CD866664E14ABF45 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dde3a139-9b9e-459a-8c51-085ec1f3824f.roa Signing time: Fri 31 Oct 2025 02:43:19 +0000 ROA not before: Fri 31 Oct 2025 02:43:19 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1804::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:90:c3:d0:14:10:9a:d6:62:49:85:b7:cd:86:66:64:e1:4a:bf:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:43:19 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0a1b71e416fdae0c6bd209edb3a64e57329235421d1ab0cb9098c38b4dbc30fb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:27:f9:d0:6e:4b:48:1e:5d:36:d6:8b:64:85: ef:d8:58:fa:91:73:3f:b7:23:a1:dd:d9:38:c6:05: fe:05:91:63:e8:01:ea:7f:a6:1b:b7:dd:b8:54:4b: 71:54:fa:f6:72:c0:c4:88:8f:49:04:81:04:7c:11: bd:92:ba:33:47:45:8a:7c:de:68:65:47:c1:f9:70: cb:62:d2:66:e9:49:09:e4:4a:cb:e4:6f:5b:8b:63: 67:63:14:63:f8:4f:af:9c:cb:ff:29:cb:16:8c:cf: 54:ca:58:6a:67:36:58:b5:2b:77:88:e2:10:9e:8e: 9d:66:4b:24:c3:87:79:76:f7:c7:e4:d3:40:65:ef: a6:cc:9f:53:a8:2a:01:e9:af:67:53:95:e4:e2:3d: 22:be:7a:3d:fa:d3:42:d5:ce:a8:3b:ac:55:3f:b7: c6:7c:e8:55:b1:16:aa:70:88:87:9c:07:98:14:a7: 40:43:37:b7:e5:70:1f:da:65:aa:cd:be:62:ed:85: 9c:b5:f6:38:8c:48:b6:b6:a1:58:cf:b4:64:cf:05: 5b:07:bc:85:07:58:be:81:ba:ba:81:f3:4d:f0:17: 6d:48:47:cf:65:97:36:88:25:9b:48:9b:87:3a:71: 7d:1d:e6:0a:4f:77:d1:8b:64:97:a8:af:fa:09:ab: a9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EB:C0:A9:EC:51:65:B7:E3:51:44:60:59:2E:E7:8F:28:0D:B8:35 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dde3a139-9b9e-459a-8c51-085ec1f3824f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1804::/46 Signature Algorithm: sha256WithRSAEncryption 03:e4:25:20:e3:22:5c:a3:7c:54:ca:26:75:61:27:3f:3e:0e: 63:41:43:ca:7b:9e:9c:92:d2:46:bd:94:80:8e:26:b9:8c:5c: 08:14:9e:c4:4a:a2:11:db:b0:83:9f:96:13:ed:fc:28:8a:da: 5b:21:c0:66:37:0f:02:70:31:81:e0:03:86:3f:57:45:c6:4a: 39:7e:7f:18:fa:67:8e:25:45:88:57:b6:98:f1:fb:71:b3:1b: 57:e5:15:78:9d:e8:a4:a6:be:f7:cb:8f:1a:be:04:49:96:22: 41:31:94:b3:37:70:84:b4:dc:82:cb:04:7e:b0:32:1c:32:d0: e1:94:d9:3a:2d:fd:4f:d4:29:d0:40:24:15:2f:f0:c8:34:e9: c8:6f:ef:74:0b:c0:a9:d8:bb:a6:0e:bb:a5:e6:d0:2c:46:b2: f3:30:3d:ae:50:4a:49:a8:9f:0e:7a:2c:13:dd:ee:f8:3f:00: f5:f6:65:ad:58:89:1d:cf:99:ab:d1:c9:19:20:42:a7:3c:ad: e5:5e:df:b2:34:2d:72:a5:01:39:ac:ec:bd:cf:59:85:e8:df: 82:91:5d:83:23:73:7f:5f:57:54:99:6b:0a:4e:e0:ea:cc:53: 02:e0:54:6b:87:ec:1f:6e:54:3a:28:f9:d8:21:6a:5f:8d:8d: 5b:b1:f8:d6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBZDD0BQQmtZiSYW3zYZmZOFKv0UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI0MzE5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTFiNzFlNDE2ZmRhZTBjNmJkMjA5ZWRiM2E2NGU1NzMy OTIzNTQyMWQxYWIwY2I5MDk4YzM4YjRkYmMzMGZiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMJ/nQbktIHl021otkhe/YWPqRcz+3I6Hd2TjGBf4FkWPo Aep/phu33bhUS3FU+vZywMSIj0kEgQR8Eb2SujNHRYp83mhlR8H5cMti0mbpSQnk Ssvkb1uLY2djFGP4T6+cy/8pyxaMz1TKWGpnNli1K3eI4hCejp1mSyTDh3l298fk 00Bl76bMn1OoKgHpr2dTleTiPSK+ej3600LVzqg7rFU/t8Z86FWxFqpwiIecB5gU p0BDN7flcB/aZarNvmLthZy19jiMSLa2oVjPtGTPBVsHvIUHWL6BurqB803wF21I R89llzaIJZtIm4c6cX0d5gpPd9GLZJeor/oJq6l5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3evAqexRZbfjUURgWS7njygNuDUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RkZTNhMTM5LTliOWUtNDU5YS04YzUxLTA4NWVjMWYzODI0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAGAQwDQYJKoZIhvcNAQELBQADggEBAAPkJSDjIlyjfFTKJnVhJz8+ DmNBQ8p7npyS0ka9lICOJrmMXAgUnsRKohHbsIOflhPt/CiK2lshwGY3DwJwMYHg A4Y/V0XGSjl+fxj6Z44lRYhXtpjx+3GzG1flFXid6KSmvvfLjxq+BEmWIkExlLM3 cIS03ILLBH6wMhwy0OGU2Tot/U/UKdBAJBUv8Mg06chv73QLwKnYu6YOu6Xm0CxG svMwPa5QSkmonw56LBPd7vg/APX2Za1YiR3PmavRyRkgQqc8reVe37I0LXKlATms 7L3PWYXo34KRXYMjc39fV1SZawpO4OrMUwLgVGuH7B9uVDoo+dghal+NjVux+NY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:54 2025 by rpki-client