$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e883280f-7e70-46af-98bb-b1217f128961.roa File: e883280f-7e70-46af-98bb-b1217f128961.roa (raw, json) Hash identifier: AqFOy5mR94AJqeFJLaI86hWK+slV4SGDpXpGrQj227o= Subject key identifier: 15:37:A4:DB:9D:59:F8:0A:2F:3C:12:AB:B9:91:49:EE:8B:33:52:AE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 737CCABBFB1B32855FCF57FE8DFDAE09AAC128DD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e883280f-7e70-46af-98bb-b1217f128961.roa Signing time: Thu 30 Oct 2025 21:06:54 +0000 ROA not before: Thu 30 Oct 2025 21:06:54 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1490::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7c:ca:bb:fb:1b:32:85:5f:cf:57:fe:8d:fd:ae:09:aa:c1:28:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:06:54 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=f3976219b0a9789bb372288ccc976210076f5be73aa1f7fd49edab94cef42812, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9f:d4:7f:8e:d5:2f:51:6a:8f:1f:f2:de:89: d5:c5:99:9a:a8:61:fd:09:5d:84:d0:dc:b5:a6:0c: 46:0f:08:bb:b1:c0:eb:f7:e8:9d:2c:3c:64:e0:ac: 40:0a:e1:25:fa:94:8b:5b:7a:ee:29:55:b6:b1:41: 7c:5d:d6:b5:71:89:82:50:d2:38:5f:18:a0:f7:0a: 8f:06:72:2d:49:36:97:46:23:4b:e1:d9:54:23:ff: 86:be:9e:34:e6:00:1a:a9:ae:88:ad:7b:ea:e6:c2: 9d:7a:de:f8:f0:40:2d:b8:f2:6b:3a:fe:b6:e7:10: e0:a7:a9:f6:dc:18:95:aa:93:95:ec:d0:f1:28:f7: a2:a3:ae:6e:62:10:c9:2b:27:9f:18:0d:94:d9:f6: 08:7e:8a:87:fe:15:cc:3b:d5:ad:14:09:7f:41:36: 56:eb:b9:a5:bf:ec:25:ab:24:3d:59:0e:d4:42:ea: 7e:cd:9b:dd:df:5c:b1:c1:75:e5:b7:58:8c:ad:2d: 82:16:8a:0b:02:f3:74:e3:40:22:35:ce:a3:73:a3: 21:ca:8b:02:21:d9:00:4f:30:9c:db:a3:53:84:75: 12:f2:92:76:74:ab:21:cc:92:79:a5:96:7d:d8:28: 3e:6b:c5:62:b8:ea:38:ae:5e:e6:09:46:73:79:38: 24:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:37:A4:DB:9D:59:F8:0A:2F:3C:12:AB:B9:91:49:EE:8B:33:52:AE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e883280f-7e70-46af-98bb-b1217f128961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1490::/47 Signature Algorithm: sha256WithRSAEncryption 3b:5f:de:a2:5e:25:67:20:4e:c1:bb:bf:f1:12:bf:c3:18:b1: 86:e9:de:41:4e:44:d4:40:a4:9a:5d:21:01:95:f5:3c:ce:b6: b9:22:a6:49:bb:65:54:f0:e1:99:35:97:7d:31:0a:73:1b:b0: 08:e5:3c:e5:d8:0a:9f:56:a3:f6:3b:95:0d:23:7c:fe:79:b4: d8:dd:f9:db:34:81:f8:b6:cf:87:b9:78:7d:f4:ad:c6:28:91: d1:2f:62:0f:c4:79:41:65:74:af:32:39:13:68:d9:39:96:10: e1:50:9e:4b:67:8d:3b:bd:18:7e:9e:cd:35:63:ee:7c:c1:e8: 04:80:bb:ad:5d:c4:9e:a2:68:5b:58:d6:35:91:53:b7:72:d2: 93:67:69:05:13:50:3d:e4:54:5c:88:5c:15:e2:c9:f1:fa:f0: 15:ee:c2:d5:7d:3f:f3:31:b4:b9:eb:42:1b:54:0f:98:57:9d: df:cb:19:8f:3c:19:cf:f2:63:d4:28:23:b0:cb:a8:83:31:77: 5c:d5:6b:58:5a:60:7c:b6:da:fe:63:8e:f5:fb:a4:fe:3f:95: 3c:8c:3c:b6:2a:22:c6:c4:fc:bf:34:08:b3:43:b4:48:fd:42: 7c:21:85:74:49:62:4f:ec:c2:91:e9:7e:ef:ed:66:07:33:3e: ff:6d:1e:d6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUc3zKu/sbMoVfz1f+jf2uCarBKN0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEwNjU0WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzk3NjIxOWIwYTk3ODliYjM3MjI4OGNjYzk3NjIxMDA3 NmY1YmU3M2FhMWY3ZmQ0OWVkYWI5NGNlZjQyODEyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXn9R/jtUvUWqPH/LeidXFmZqoYf0JXYTQ3LWmDEYPCLux wOv36J0sPGTgrEAK4SX6lItbeu4pVbaxQXxd1rVxiYJQ0jhfGKD3Co8Gci1JNpdG I0vh2VQj/4a+njTmABqproite+rmwp163vjwQC248ms6/rbnEOCnqfbcGJWqk5Xs 0PEo96Kjrm5iEMkrJ58YDZTZ9gh+iof+Fcw71a0UCX9BNlbruaW/7CWrJD1ZDtRC 6n7Nm93fXLHBdeW3WIytLYIWigsC83TjQCI1zqNzoyHKiwIh2QBPMJzbo1OEdRLy knZ0qyHMknmlln3YKD5rxWK46jiuXuYJRnN5OCQDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFTek251Z+AovPBKruZFJ7oszUq4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2U4ODMyODBmLTdlNzAtNDZhZi05OGJiLWIxMjE3ZjEyODk2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFJAwDQYJKoZIhvcNAQELBQADggEBADtf3qJeJWcgTsG7v/ESv8MY sYbp3kFORNRApJpdIQGV9TzOtrkipkm7ZVTw4Zk1l30xCnMbsAjlPOXYCp9Wo/Y7 lQ0jfP55tNjd+ds0gfi2z4e5eH30rcYokdEvYg/EeUFldK8yORNo2TmWEOFQnktn jTu9GH6ezTVj7nzB6ASAu61dxJ6iaFtY1jWRU7dy0pNnaQUTUD3kVFyIXBXiyfH6 8BXuwtV9P/MxtLnrQhtUD5hXnd/LGY88Gc/yY9QoI7DLqIMxd1zVa1haYHy22v5j jvX7pP4/lTyMPLYqIsbE/L80CLNDtEj9QnwhhXRJYk/swpHpfu/tZgczPv9tHtY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:23 2025 by rpki-client