$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e396c157-3264-4ac2-93fd-dd7110b4fc83.roa File: e396c157-3264-4ac2-93fd-dd7110b4fc83.roa (raw, json) Hash identifier: 4XQNIukL5OmpB0RBFcFMgZyUaKrQ7XB03lFOj+qwx0s= Subject key identifier: 40:3F:41:DB:E8:94:6A:4F:88:41:25:F7:43:97:EB:C3:51:61:76:07 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5B53CC8C95FFB575BE4D86B00594049FA669DD25 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e396c157-3264-4ac2-93fd-dd7110b4fc83.roa Signing time: Fri 31 Oct 2025 05:27:23 +0000 ROA not before: Fri 31 Oct 2025 05:27:23 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1d40::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:53:cc:8c:95:ff:b5:75:be:4d:86:b0:05:94:04:9f:a6:69:dd:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:27:23 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0fe5236450d2defbb897dbe4d67e057f458b8126b2b8162f07a5424c6a48e384, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:9b:e7:8b:d4:6f:d9:01:f1:8c:78:33:1d: 8e:67:11:b3:59:3a:db:2d:bc:bd:fd:02:92:82:e7: 62:5c:e8:e4:6d:ed:3d:63:24:e0:d2:e0:0c:ac:00: 11:6b:75:e3:b3:b4:16:fc:57:df:48:50:4e:d3:9f: 6a:55:c4:a9:a1:c7:b0:4c:67:fb:eb:cb:fb:0f:38: d6:64:f6:ff:12:69:f3:58:43:8e:80:ed:1e:9a:2f: 27:5b:a1:df:9b:6d:52:d4:66:3a:d2:8c:e6:ae:6e: b0:5f:48:7a:c0:b4:18:44:1c:03:0b:5b:b3:d4:2a: 72:b9:41:47:5e:31:f0:b9:9a:03:50:d6:7d:cb:60: 7f:a2:4a:52:2d:64:8e:33:8e:a3:1d:a5:bc:08:61: f7:51:5b:dc:bb:94:ce:6c:62:ca:d9:f8:20:c3:6f: 07:ca:2a:1e:c7:5b:5e:e2:1e:26:81:e8:6c:5f:3e: 9c:77:ee:3b:83:93:0d:c0:9c:3b:2a:1d:74:6a:ee: fd:14:63:c3:17:7c:12:76:0d:06:9a:df:78:16:82: 0a:80:f7:8a:ce:a7:1a:82:2e:2d:24:77:6c:62:c0: 8e:50:d2:35:18:09:34:4b:30:58:68:e5:17:0a:0a: 70:5c:81:77:39:c9:ff:95:4a:1f:dc:f5:5d:af:40: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3F:41:DB:E8:94:6A:4F:88:41:25:F7:43:97:EB:C3:51:61:76:07 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e396c157-3264-4ac2-93fd-dd7110b4fc83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1d40::/45 Signature Algorithm: sha256WithRSAEncryption 1f:6e:c1:7c:5c:8d:fa:f7:4f:3f:8f:a8:56:e2:66:64:9e:81: 31:7b:88:a4:d4:12:88:e4:cc:1e:75:27:58:e5:b8:8a:a7:5b: 90:88:c1:2d:19:d6:b7:ff:e9:02:67:16:d0:6b:0e:75:70:8f: d0:71:ed:e5:64:3b:77:f7:29:5b:00:91:a7:43:65:b4:72:ee: 0b:9e:84:12:1c:b6:58:3d:01:46:3a:ed:1a:7d:b1:13:b5:97: bc:8e:35:ab:0e:f7:01:9b:f7:47:e2:d1:2d:5c:90:d8:68:79: d2:7d:a3:36:e4:16:e9:b2:38:b0:b4:e7:5b:2e:59:11:99:dd: ea:4e:59:a6:27:e0:53:33:9b:ca:9b:cb:6a:f3:9a:80:42:f0: fb:5a:8d:ba:34:cb:5a:74:c9:3f:3c:d7:b2:1f:2a:10:99:b5: b8:48:08:62:b3:ff:61:a9:5a:bb:f5:31:1a:01:af:25:e1:f7: 38:e5:b2:5e:ab:7d:9f:c4:4e:db:a4:e5:50:b7:2a:23:d6:5a: 06:6b:99:9a:06:4f:89:7f:bd:60:e9:33:6c:e3:b0:91:53:81: 4c:f1:fe:9f:4f:42:c6:b5:14:e5:6a:69:07:5a:be:c1:2b:0d: 13:09:72:88:94:fb:e2:bb:d7:a3:0e:c6:97:32:e5:ef:75:9b: 9a:f4:3d:36 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUW1PMjJX/tXW+TYawBZQEn6Zp3SUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyNzIzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmU1MjM2NDUwZDJkZWZiYjg5N2RiZTRkNjdlMDU3ZjQ1 OGI4MTI2YjJiODE2MmYwN2E1NDI0YzZhNDhlMzg0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgy5vni9Rv2QHxjHgzHY5nEbNZOtstvL39ApKC52Jc6ORt 7T1jJODS4AysABFrdeOztBb8V99IUE7Tn2pVxKmhx7BMZ/vry/sPONZk9v8SafNY Q46A7R6aLydbod+bbVLUZjrSjOaubrBfSHrAtBhEHAMLW7PUKnK5QUdeMfC5mgNQ 1n3LYH+iSlItZI4zjqMdpbwIYfdRW9y7lM5sYsrZ+CDDbwfKKh7HW17iHiaB6Gxf Ppx37juDkw3AnDsqHXRq7v0UY8MXfBJ2DQaa33gWggqA94rOpxqCLi0kd2xiwI5Q 0jUYCTRLMFho5RcKCnBcgXc5yf+VSh/c9V2vQHa5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQD9B2+iUak+IQSX3Q5frw1FhdgcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2UzOTZjMTU3LTMyNjQtNGFjMi05M2ZkLWRkNzExMGI0ZmM4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAHUAwDQYJKoZIhvcNAQELBQADggEBAB9uwXxcjfr3Tz+PqFbiZmSe gTF7iKTUEojkzB51J1jluIqnW5CIwS0Z1rf/6QJnFtBrDnVwj9Bx7eVkO3f3KVsA kadDZbRy7guehBIctlg9AUY67Rp9sRO1l7yONasO9wGb90fi0S1ckNhoedJ9ozbk FumyOLC051suWRGZ3epOWaYn4FMzm8qby2rzmoBC8Ptajbo0y1p0yT8817IfKhCZ tbhICGKz/2GpWrv1MRoBryXh9zjlsl6rfZ/ETtuk5VC3KiPWWgZrmZoGT4l/vWDp M2zjsJFTgUzx/p9PQsa1FOVqaQdavsErDRMJcoiU++K716MOxpcy5e91m5r0PTY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:40:23 2025 by rpki-client