$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e1a870f9-05d3-476d-8dca-4dd7ed10f9c6.roa File: e1a870f9-05d3-476d-8dca-4dd7ed10f9c6.roa (raw, json) Hash identifier: yABVlN6hD4CBMexFr30+IP5wn2Vy/gh9OhjaF9+De+M= Subject key identifier: 34:0A:32:EF:A4:B3:DB:45:25:63:1F:47:CF:68:0D:9B:63:1C:D2:EA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5AD85CEFFC61EA215AEDABDF5334BCCDE8D183F2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e1a870f9-05d3-476d-8dca-4dd7ed10f9c6.roa Signing time: Thu 30 Oct 2025 22:10:28 +0000 ROA not before: Thu 30 Oct 2025 22:10:28 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1b72::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d8:5c:ef:fc:61:ea:21:5a:ed:ab:df:53:34:bc:cd:e8:d1:83:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:10:28 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=cd33ac370ef9b7dc1ba1eaf5cc0c5d55f67b45bb8ef76ed36713bdf7ef48e9c8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7d:62:0b:3a:63:47:91:ac:54:2b:ab:37:17: 7d:b9:29:af:55:97:a1:c8:f3:d8:95:c1:96:44:d4: c1:f2:74:11:18:10:41:cf:5a:e4:27:21:70:4f:1c: 64:b9:4b:a8:0c:6b:2e:36:9c:f6:69:be:90:24:25: 2d:12:20:c6:e0:ae:5c:c8:36:ee:da:b5:26:4f:c1: 0c:35:40:95:fa:ce:d1:3e:f8:6f:f3:28:30:bf:f3: 1b:a1:f8:af:93:bb:af:4b:47:1c:02:8c:36:80:00: 91:7f:f5:1d:5e:64:06:75:62:a2:48:90:ab:d7:b1: fd:20:46:05:60:82:e1:cc:7f:05:19:08:f2:39:1c: c3:5f:36:62:18:d7:2b:b3:3e:77:af:8c:cd:2d:23: e3:77:7a:ac:75:8f:79:68:69:1f:3b:d3:bd:fb:6f: cc:7d:61:d1:70:bb:6f:06:37:ed:e8:4c:c9:f1:d7: 67:82:6c:e4:20:54:fd:d1:92:bf:06:14:80:89:47: 6f:ff:28:bd:36:40:95:17:49:90:0c:c2:d7:f9:26: 0e:fe:65:43:49:d3:9c:7d:01:77:f7:d1:e0:83:e7: 5f:c5:cb:b2:c7:99:68:90:46:e2:d8:d1:ca:e8:fc: 24:06:a1:46:36:bd:8f:3c:9b:6d:0d:71:af:b0:27: 0d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0A:32:EF:A4:B3:DB:45:25:63:1F:47:CF:68:0D:9B:63:1C:D2:EA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e1a870f9-05d3-476d-8dca-4dd7ed10f9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1b72::/47 Signature Algorithm: sha256WithRSAEncryption 9a:1b:5a:8d:ab:a9:43:94:e9:78:fa:51:73:8e:0d:5f:96:17: ce:c9:e3:44:51:61:4f:8e:d3:ed:1c:33:12:69:48:34:88:ed: 8d:15:89:18:d4:53:6e:01:90:88:dd:ba:fd:1d:f6:d7:39:fb: 97:5b:d1:dd:41:d9:7c:f3:ac:08:9b:c8:1d:89:be:f3:35:c3: 3c:19:d2:e6:be:57:80:42:d0:6c:87:cd:25:79:b0:99:cb:21: 21:dd:86:46:33:0a:b1:ff:89:c5:9c:07:2f:53:ba:5e:0e:5d: d4:13:78:97:0c:44:59:25:c3:ee:53:15:65:b6:56:98:51:bf: b5:ae:ec:28:99:45:61:ce:0b:b1:49:fd:75:85:d1:dd:24:9e: 31:01:e1:f0:f2:4d:f3:d4:5e:3d:8d:5d:23:00:b0:62:b7:0c: 20:c0:6d:a4:95:de:17:42:3c:b0:f7:ed:30:67:08:6a:e9:f8: d2:f7:ff:9d:38:76:a7:92:3f:d9:93:63:0e:14:e9:08:f3:a6: 53:d6:a4:b4:f2:c8:ad:c6:7a:1e:80:ab:83:12:1c:74:b2:43: 18:11:37:2c:43:88:12:0a:5c:d9:4a:a3:5b:a3:33:51:63:d5: ff:9b:d8:e3:df:35:6c:60:01:46:fd:16:33:51:ef:02:f0:a8: 36:12:8f:a0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWthc7/xh6iFa7avfUzS8zejRg/IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIxMDI4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDMzYWMzNzBlZjliN2RjMWJhMWVhZjVjYzBjNWQ1NWY2 N2I0NWJiOGVmNzZlZDM2NzEzYmRmN2VmNDhlOWM4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1fWILOmNHkaxUK6s3F325Ka9Vl6HI89iVwZZE1MHydBEY EEHPWuQnIXBPHGS5S6gMay42nPZpvpAkJS0SIMbgrlzINu7atSZPwQw1QJX6ztE+ +G/zKDC/8xuh+K+Tu69LRxwCjDaAAJF/9R1eZAZ1YqJIkKvXsf0gRgVgguHMfwUZ CPI5HMNfNmIY1yuzPnevjM0tI+N3eqx1j3loaR870737b8x9YdFwu28GN+3oTMnx 12eCbOQgVP3Rkr8GFICJR2//KL02QJUXSZAMwtf5Jg7+ZUNJ05x9AXf30eCD51/F y7LHmWiQRuLY0cro/CQGoUY2vY88m20Nca+wJw3LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNAoy76Sz20UlYx9Hz2gNm2Mc0uowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2UxYTg3MGY5LTA1ZDMtNDc2ZC04ZGNhLTRkZDdlZDEwZjljNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAG3IwDQYJKoZIhvcNAQELBQADggEBAJobWo2rqUOU6Xj6UXOODV+W F87J40RRYU+O0+0cMxJpSDSI7Y0ViRjUU24BkIjduv0d9tc5+5db0d1B2XzzrAib yB2JvvM1wzwZ0ua+V4BC0GyHzSV5sJnLISHdhkYzCrH/icWcBy9Tul4OXdQTeJcM RFklw+5TFWW2VphRv7Wu7CiZRWHOC7FJ/XWF0d0knjEB4fDyTfPUXj2NXSMAsGK3 DCDAbaSV3hdCPLD37TBnCGrp+NL3/504dqeSP9mTYw4U6QjzplPWpLTyyK3Geh6A q4MSHHSyQxgRNyxDiBIKXNlKo1ujM1Fj1f+b2OPfNWxgAUb9FjNR7wLwqDYSj6A= -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:00 2025 by rpki-client