$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e907aa62-8e5a-4f1c-b812-436ca41b6515.roa File: e907aa62-8e5a-4f1c-b812-436ca41b6515.roa (raw, json) Hash identifier: iD2wLG0krG1CyLrzjRTCl52Jp0oLPv/1G6B/FYlyMnk= Subject key identifier: 75:7D:D3:A3:D5:5B:58:55:0B:0E:5F:C9:29:5C:86:1E:4F:38:77:AA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 334EE42B630F991DA19445DFF5BBF093628F26CC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e907aa62-8e5a-4f1c-b812-436ca41b6515.roa Signing time: Thu 30 Oct 2025 21:08:45 +0000 ROA not before: Thu 30 Oct 2025 21:08:45 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1504::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4e:e4:2b:63:0f:99:1d:a1:94:45:df:f5:bb:f0:93:62:8f:26:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:08:45 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=0e4589376a6f2b425790edbd866f4b769add0486bdee680d25dd976afa759433, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:8e:2b:7f:0d:a9:16:d9:da:c1:a6:b3:51: c5:9c:1e:33:1d:b7:bd:bd:95:24:5a:d5:9f:22:2f: c6:94:ff:46:aa:a0:9f:82:5f:ae:26:4c:58:68:22: a7:27:66:12:19:73:46:26:49:87:d5:d5:cb:f0:19: c0:c8:03:87:2f:97:ea:17:ec:25:1c:8e:20:90:2a: 04:a0:92:90:df:0e:10:0c:09:4f:67:0c:c7:ea:8a: 0a:30:dd:9f:c1:c1:da:63:99:87:ef:2c:c1:7a:89: d6:ae:a0:0d:a9:02:59:64:72:e3:d7:f0:7d:67:4c: 8a:e5:ac:50:8b:ed:24:39:10:f8:c7:60:90:10:ee: 5f:12:6d:19:44:ac:35:31:d0:8e:cb:f3:16:b1:f9: 7d:07:9e:61:b4:d2:41:10:82:0d:bd:6f:65:df:79: e9:81:1c:e3:62:e0:b1:f9:a6:dd:9d:2d:73:14:ee: 36:f5:f7:7f:42:b1:b1:a0:04:66:e1:1b:bb:46:75: 16:a2:48:6d:83:72:9b:f2:e1:23:8a:1f:e3:ec:ae: 64:ed:ba:c3:5c:00:3d:5e:26:10:ac:c2:2b:2f:8e: e3:47:79:f5:18:96:36:73:21:9e:d0:6d:09:b8:a5: 7e:78:eb:09:6a:51:52:26:1c:cd:5f:ae:73:ef:80: 57:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7D:D3:A3:D5:5B:58:55:0B:0E:5F:C9:29:5C:86:1E:4F:38:77:AA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e907aa62-8e5a-4f1c-b812-436ca41b6515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1504::/47 Signature Algorithm: sha256WithRSAEncryption 7b:76:27:e2:a7:38:f9:2d:d8:8e:18:8f:cf:a3:e9:3e:85:93: e6:0e:05:bd:98:95:2a:ad:51:0f:ae:27:8e:e8:2f:17:90:c9: 1c:84:f4:86:05:bb:ce:63:5a:c6:1c:23:39:13:c1:28:b6:bb: 74:6e:b5:af:75:57:91:e6:bd:96:98:5f:a2:c5:7d:05:75:82: b7:2c:16:2c:8f:39:cd:a8:68:60:76:b1:cd:94:05:9e:59:e9: 29:d2:01:74:77:95:75:16:e8:d1:0e:e1:2e:9f:0a:e7:16:49: e3:ac:d6:3a:6e:92:bf:a5:7b:b5:d4:aa:0d:b1:70:2e:92:2c: cc:a3:2d:c5:ea:8d:8e:26:b4:57:69:ce:be:ff:33:96:8c:e1: bc:57:79:a3:f8:89:36:55:88:73:33:ee:23:0e:da:16:0a:64: 84:f2:f7:ad:6b:7c:ae:94:6d:b5:75:8e:26:d2:b2:46:7e:68: ad:92:5d:92:fc:d4:3a:53:68:88:6f:76:4a:b1:f7:58:44:61: 92:b4:5d:93:4f:c5:bb:52:7f:ec:c8:5c:54:3d:a6:58:1b:26: 70:b3:f9:e8:88:9f:60:9e:35:d9:49:77:4f:85:de:23:23:a9: 7d:e5:06:6e:f1:5f:fe:48:9a:68:4d:fa:74:46:46:9e:80:49: c4:ab:b8:23 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM07kK2MPmR2hlEXf9bvwk2KPJswwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEwODQ1WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTQ1ODkzNzZhNmYyYjQyNTc5MGVkYmQ4NjZmNGI3Njlh ZGQwNDg2YmRlZTY4MGQyNWRkOTc2YWZhNzU5NDMzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqZI4rfw2pFtnawaazUcWcHjMdt729lSRa1Z8iL8aU/0aq oJ+CX64mTFhoIqcnZhIZc0YmSYfV1cvwGcDIA4cvl+oX7CUcjiCQKgSgkpDfDhAM CU9nDMfqigow3Z/BwdpjmYfvLMF6idauoA2pAllkcuPX8H1nTIrlrFCL7SQ5EPjH YJAQ7l8SbRlErDUx0I7L8xax+X0HnmG00kEQgg29b2XfeemBHONi4LH5pt2dLXMU 7jb1939CsbGgBGbhG7tGdRaiSG2Dcpvy4SOKH+PsrmTtusNcAD1eJhCswisvjuNH efUYljZzIZ7QbQm4pX546wlqUVImHM1frnPvgFcJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdX3To9VbWFULDl/JKVyGHk84d6owHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2U5MDdhYTYyLThlNWEtNGYxYy1iODEyLTQzNmNhNDFiNjUxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFQQwDQYJKoZIhvcNAQELBQADggEBAHt2J+KnOPkt2I4Yj8+j6T6F k+YOBb2YlSqtUQ+uJ47oLxeQyRyE9IYFu85jWsYcIzkTwSi2u3Ruta91V5HmvZaY X6LFfQV1grcsFiyPOc2oaGB2sc2UBZ5Z6SnSAXR3lXUW6NEO4S6fCucWSeOs1jpu kr+le7XUqg2xcC6SLMyjLcXqjY4mtFdpzr7/M5aM4bxXeaP4iTZViHMz7iMO2hYK ZITy961rfK6UbbV1jibSskZ+aK2SXZL81DpTaIhvdkqx91hEYZK0XZNPxbtSf+zI XFQ9plgbJnCz+eiIn2CeNdlJd0+F3iMjqX3lBm7xX/5ImmhN+nRGRp6AScSruCM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:11 2025 by rpki-client