$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2ce7e32-6797-4af1-8016-74223c344406.roa File: e2ce7e32-6797-4af1-8016-74223c344406.roa (raw, json) Hash identifier: QymeJPmT0NS1lT+Bvj7xD9j28FUFdd2s7+NB9XXEuzY= Subject key identifier: 2A:1D:97:61:80:81:C9:84:DF:BF:16:4F:CC:9A:F5:C8:C1:7D:1D:3E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 69338C6C60BEE516FC9DE6D4814A5C68E6CE532D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2ce7e32-6797-4af1-8016-74223c344406.roa Signing time: Fri 31 Oct 2025 00:53:15 +0000 ROA not before: Fri 31 Oct 2025 00:53:15 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:37d8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:33:8c:6c:60:be:e5:16:fc:9d:e6:d4:81:4a:5c:68:e6:ce:53:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:53:15 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a021eaa818c6d20a650ffe60a8a0059f58abf91e34261f3df1c86c03e4106cd9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:07:f9:4d:69:01:a1:86:aa:9a:af:48:09: 26:57:93:94:b3:2e:0e:b7:af:5c:d6:82:93:f6:ad: b6:a7:d1:4a:b1:21:0a:48:1b:b8:fa:24:6c:02:c9: 45:5e:a3:21:27:a6:48:3c:37:00:33:cf:13:2e:68: 6d:c6:82:1b:7d:2c:23:4c:e5:23:72:74:85:78:d6: 7a:f5:f0:b3:a8:8b:da:a3:22:98:50:d9:a4:45:35: 0d:63:52:9f:a3:da:12:26:27:95:1d:93:b2:ec:a9: 41:83:29:3d:c0:74:50:a6:44:9d:eb:89:cb:41:0f: b7:d9:d4:51:c1:f3:34:e0:98:91:b2:3d:56:11:6d: 14:64:b7:6a:85:fb:1a:ee:48:e2:fc:33:d2:d1:9d: 3d:d5:f0:9a:1e:33:5a:44:36:fa:7b:c6:2b:64:c3: 9e:82:47:ba:b4:f7:7b:c8:41:f1:3b:a7:f5:4b:3d: 96:6c:38:c7:2c:a8:7b:a7:20:21:72:fb:83:ba:57: 75:bc:ec:8e:c9:03:7d:f9:df:32:d2:99:4c:3f:e3: a8:4e:29:a4:6f:58:27:02:c2:1b:d9:e3:ff:cc:a7: ab:b7:15:8e:76:49:d4:a4:46:5d:e4:c9:82:06:b2: e8:bc:a7:c7:6e:e0:4a:d8:75:75:84:96:e5:d9:bc: 9a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1D:97:61:80:81:C9:84:DF:BF:16:4F:CC:9A:F5:C8:C1:7D:1D:3E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2ce7e32-6797-4af1-8016-74223c344406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:37d8::/47 Signature Algorithm: sha256WithRSAEncryption 70:c4:61:08:e5:03:7f:6c:49:09:e2:27:f9:e3:1e:54:bf:a8: 27:c8:82:d0:79:c2:19:8a:5c:eb:9e:90:19:f1:c5:6c:ff:f4: 18:cc:48:aa:02:36:63:08:16:23:54:99:02:99:c5:eb:af:63: d0:7b:b5:74:50:8a:d2:81:6a:8f:19:92:66:8d:9f:12:15:ac: 49:ea:c6:a4:ec:a2:b2:2c:ba:b8:c9:f0:51:7e:02:c0:99:48: 55:fe:e1:cf:d2:7b:54:67:ba:05:7c:41:31:6a:e3:ad:15:71: e8:79:fe:d6:f3:6b:98:1d:8d:14:62:48:7a:1e:ef:fe:61:f4: f0:24:0a:69:04:75:91:2e:3a:83:de:d2:cf:07:25:a9:4b:8e: b9:9e:94:2e:b0:c5:79:c3:8c:2a:8e:50:e8:e1:69:65:0f:34: 88:d1:45:3e:de:08:53:ad:a0:5b:53:a6:f5:22:22:72:f2:f9: bf:73:7f:ef:a4:2a:81:51:9b:c9:4d:99:32:4f:6a:7a:06:9e: 60:d7:1e:41:50:ea:f7:f5:68:4c:d6:c7:e4:f5:72:ab:57:64: 92:c8:cf:ce:46:be:d4:e2:8e:4f:e1:cf:28:6a:bc:12:3e:77: 59:67:f9:25:1c:ba:db:ad:ce:69:f0:41:1e:bf:46:94:35:29: 2b:34:03:1b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaTOMbGC+5Rb8nebUgUpcaObOUy0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1MzE1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDIxZWFhODE4YzZkMjBhNjUwZmZlNjBhOGEwMDU5ZjU4 YWJmOTFlMzQyNjFmM2RmMWM4NmMwM2U0MTA2Y2Q5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCztAf5TWkBoYaqmq9ICSZXk5SzLg63r1zWgpP2rban0Uqx IQpIG7j6JGwCyUVeoyEnpkg8NwAzzxMuaG3Gght9LCNM5SNydIV41nr18LOoi9qj IphQ2aRFNQ1jUp+j2hImJ5Udk7LsqUGDKT3AdFCmRJ3rictBD7fZ1FHB8zTgmJGy PVYRbRRkt2qF+xruSOL8M9LRnT3V8JoeM1pENvp7xitkw56CR7q093vIQfE7p/VL PZZsOMcsqHunICFy+4O6V3W87I7JA3353zLSmUw/46hOKaRvWCcCwhvZ4//Mp6u3 FY52SdSkRl3kyYIGsui8p8du4ErYdXWEluXZvJpHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKh2XYYCByYTfvxZPzJr1yMF9HT4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2UyY2U3ZTMyLTY3OTctNGFmMS04MDE2LTc0MjIzYzM0NDQwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAN9gwDQYJKoZIhvcNAQELBQADggEBAHDEYQjlA39sSQniJ/njHlS/ qCfIgtB5whmKXOuekBnxxWz/9BjMSKoCNmMIFiNUmQKZxeuvY9B7tXRQitKBao8Z kmaNnxIVrEnqxqTsorIsurjJ8FF+AsCZSFX+4c/Se1RnugV8QTFq460Vceh5/tbz a5gdjRRiSHoe7/5h9PAkCmkEdZEuOoPe0s8HJalLjrmelC6wxXnDjCqOUOjhaWUP NIjRRT7eCFOtoFtTpvUiInLy+b9zf++kKoFRm8lNmTJPanoGnmDXHkFQ6vf1aEzW x+T1cqtXZJLIz85GvtTijk/hzyhqvBI+d1ln+SUcututzmnwQR6/RpQ1KSs0Axs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:15 2025 by rpki-client