$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e638be90-1aec-424f-a456-9f1e109fde3f.roa File: e638be90-1aec-424f-a456-9f1e109fde3f.roa (raw, json) Hash identifier: kRKTtxVS4V3jzNkFLZ0Yn/8hRquKRSzbQqlaVc46F28= Subject key identifier: BE:CB:A5:D9:BB:FD:F9:A3:21:FA:98:DB:92:CC:6F:8A:7D:E6:52:63 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 162536E1BB3013E18ECFC22ABBED77515ECFC1D2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e638be90-1aec-424f-a456-9f1e109fde3f.roa Signing time: Thu 30 Oct 2025 20:43:11 +0000 ROA not before: Thu 30 Oct 2025 20:43:11 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1332::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:25:36:e1:bb:30:13:e1:8e:cf:c2:2a:bb:ed:77:51:5e:cf:c1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:43:11 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=71c972ce75bd77b11dec8d486d694563a7d1a86563887691185dfb9fdfac3787, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8b:96:5b:14:c1:02:65:c9:5c:7c:4a:e7:54: ea:dd:e6:df:20:2d:3f:98:dd:cf:3f:b1:a4:bd:73: 5f:26:45:ce:a9:93:f2:6d:58:58:fa:35:02:6a:f0: 76:30:91:18:6c:18:c7:96:db:49:01:52:60:98:17: 72:d7:c8:a8:f2:3b:20:96:6b:3d:c9:fe:ed:6c:53: e8:a5:e4:a2:b0:63:a8:17:9b:8e:8d:1d:67:bc:7a: 7d:88:20:f9:6a:13:71:2c:31:73:d5:30:ad:77:3f: e7:ea:33:ca:77:80:4f:a1:dc:be:07:17:ce:9d:b4: 19:d6:6c:56:8e:f6:f4:6a:60:83:d8:aa:99:6a:62: 0f:41:18:99:0f:5b:85:11:3b:62:50:da:e8:f3:8e: 34:3a:83:15:eb:ae:c2:3b:cd:a8:1f:06:9c:c4:0b: 69:ce:dd:62:0a:3d:9f:b7:19:5b:9c:d5:1b:1f:92: e7:73:28:1f:e8:7e:36:c5:79:6e:be:c5:54:2c:73: af:98:38:75:6f:2b:fc:35:40:e6:03:c0:ba:df:6c: 21:03:7b:04:e9:ec:fc:40:cc:8b:b1:f8:7c:4a:85: 0b:7b:a2:94:d9:bd:62:43:a7:98:61:16:7c:91:bc: a6:ca:37:dc:c1:a5:bf:32:b7:08:67:77:8b:74:7d: 59:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CB:A5:D9:BB:FD:F9:A3:21:FA:98:DB:92:CC:6F:8A:7D:E6:52:63 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e638be90-1aec-424f-a456-9f1e109fde3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1332::/47 Signature Algorithm: sha256WithRSAEncryption 4f:00:5b:02:6d:c7:08:61:6b:c0:80:98:fb:b0:df:da:03:a4: 9a:11:1a:3b:12:d6:74:16:92:d2:d9:b1:53:e9:5e:7c:be:06: 3a:81:f5:0c:88:eb:5d:87:27:d5:01:f1:04:df:71:76:e6:a1: 3b:dd:f3:0b:f4:5f:c2:34:50:b7:90:37:5b:45:5f:dd:e3:86: 81:2f:9a:0b:d0:04:d9:61:5e:a6:7c:12:92:9e:fc:14:a3:be: dd:a6:e4:a2:c2:cc:14:0b:cb:d1:19:b7:31:a1:62:c0:3a:f6: 07:aa:fc:d0:12:cc:4e:39:fd:9c:01:c0:e8:f9:66:7f:1c:41: a4:e4:b6:86:d8:c8:51:56:b2:16:2e:04:8b:aa:13:a8:99:54: f2:ae:c4:87:3a:7d:5c:d6:d2:e5:2d:a4:a3:a5:f7:1f:8b:eb: a9:71:3c:42:f4:80:cd:2b:0f:60:9b:fb:a0:4f:e7:68:46:a6: 20:12:65:2e:f2:0f:f6:bb:97:f1:1a:ed:ac:9b:3c:31:e5:74: c5:a3:c1:3f:77:46:f7:8d:67:2e:cd:29:57:3c:71:f9:36:d9: c3:0c:67:e2:3a:71:3e:08:e0:ca:82:fa:11:34:66:be:d5:a7: 01:38:fc:16:8b:91:f0:63:0e:ca:42:23:94:94:19:c8:c2:48: 98:89:8b:09 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFiU24bswE+GOz8Iqu+13UV7PwdIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjA0MzExWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MWM5NzJjZTc1YmQ3N2IxMWRlYzhkNDg2ZDY5NDU2M2E3 ZDFhODY1NjM4ODc2OTExODVkZmI5ZmRmYWMzNzg3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfi5ZbFMECZclcfErnVOrd5t8gLT+Y3c8/saS9c18mRc6p k/JtWFj6NQJq8HYwkRhsGMeW20kBUmCYF3LXyKjyOyCWaz3J/u1sU+il5KKwY6gX m46NHWe8en2IIPlqE3EsMXPVMK13P+fqM8p3gE+h3L4HF86dtBnWbFaO9vRqYIPY qplqYg9BGJkPW4URO2JQ2ujzjjQ6gxXrrsI7zagfBpzEC2nO3WIKPZ+3GVuc1Rsf kudzKB/ofjbFeW6+xVQsc6+YOHVvK/w1QOYDwLrfbCEDewTp7PxAzIux+HxKhQt7 opTZvWJDp5hhFnyRvKbKN9zBpb8ytwhnd4t0fVkdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvsul2bv9+aMh+pjbksxvin3mUmMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2U2MzhiZTkwLTFhZWMtNDI0Zi1hNDU2LTlmMWUxMDlmZGUzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAEzIwDQYJKoZIhvcNAQELBQADggEBAE8AWwJtxwhha8CAmPuw39oD pJoRGjsS1nQWktLZsVPpXny+BjqB9QyI612HJ9UB8QTfcXbmoTvd8wv0X8I0ULeQ N1tFX93jhoEvmgvQBNlhXqZ8EpKe/BSjvt2m5KLCzBQLy9EZtzGhYsA69geq/NAS zE45/ZwBwOj5Zn8cQaTktobYyFFWshYuBIuqE6iZVPKuxIc6fVzW0uUtpKOl9x+L 66lxPEL0gM0rD2Cb+6BP52hGpiASZS7yD/a7l/Ea7aybPDHldMWjwT93RveNZy7N KVc8cfk22cMMZ+I6cT4I4MqC+hE0Zr7VpwE4/BaLkfBjDspCI5SUGcjCSJiJiwk= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:40 2025 by rpki-client