$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e96c0520-4cb3-4399-bfd2-98558db895b1.roa File: e96c0520-4cb3-4399-bfd2-98558db895b1.roa (raw, json) Hash identifier: 8I4kDIzb2h6e+okJk/5kDMhU0pinh3D+0sdfGOwBXCA= Subject key identifier: B5:22:D3:17:10:4B:1B:92:7C:43:3F:26:C2:3E:D5:3D:F6:12:25:43 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 42A858CC7CF7284D43947B2B142CA21D36CB1227 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e96c0520-4cb3-4399-bfd2-98558db895b1.roa Signing time: Fri 31 Oct 2025 05:28:58 +0000 ROA not before: Fri 31 Oct 2025 05:28:58 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1dd8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a8:58:cc:7c:f7:28:4d:43:94:7b:2b:14:2c:a2:1d:36:cb:12:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:28:58 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=6170478632603a6f1d67a9e80be5aa0079a6d2585429e6f2d29439771b5eee2f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:cf:69:5e:a1:5d:12:30:93:d8:08:19:c2: c6:2a:bd:f7:fb:87:18:0e:01:85:15:3a:7a:5c:53: b1:44:54:b8:b7:a3:68:64:40:e0:6f:89:db:54:e3: d6:1e:1d:b3:a7:ac:1b:13:8c:44:ed:d7:09:35:bd: 74:a3:cc:2a:33:59:30:a2:c3:af:86:41:85:81:2e: 29:d9:89:01:7b:b4:0c:5b:3b:5d:a0:09:ff:cf:a8: 7d:75:15:b8:ef:6b:60:e5:53:ec:6c:16:18:2f:3e: d5:71:93:2d:0b:b6:fc:1a:a7:89:48:60:19:ca:0f: ae:e9:8a:bb:50:cf:44:04:6c:a5:ca:87:d5:39:d7: 88:67:12:bb:c1:6f:32:0c:83:28:d7:97:61:14:7d: 4a:43:2e:fd:aa:c3:d8:df:ba:e0:20:49:05:35:07: c4:91:d4:94:a3:5c:95:b5:98:88:00:d6:d0:0c:ae: bd:fb:46:a6:a9:68:fc:8f:b9:d8:ea:fb:38:b0:b2: 0f:d1:27:e7:b2:8f:a9:69:6d:03:60:ed:8d:d2:88: 5b:f8:1b:b5:1d:46:1a:2f:92:4e:55:3b:9d:93:1f: c0:6b:a5:28:5c:c8:08:f3:3c:0a:51:1b:9b:bc:69: 7b:38:b9:a6:d3:15:2a:95:71:43:90:6c:f8:84:9b: 77:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:22:D3:17:10:4B:1B:92:7C:43:3F:26:C2:3E:D5:3D:F6:12:25:43 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e96c0520-4cb3-4399-bfd2-98558db895b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1dd8::/45 Signature Algorithm: sha256WithRSAEncryption 25:44:8f:58:6d:23:07:7d:f2:55:2f:b6:2e:c4:ce:b6:6d:ca: 6b:c0:8f:ae:07:15:39:59:3d:34:4c:7c:cc:6c:41:0e:93:e3: f5:69:b2:b6:21:16:60:f3:87:02:04:1f:c9:24:69:ed:33:0c: 27:37:60:b9:ed:2c:16:cd:48:0d:8a:04:24:38:fe:c0:db:1e: 9c:43:8f:f6:05:8a:39:38:ff:ce:c0:7a:83:47:8a:f7:12:73: 2a:87:51:48:64:c6:18:0d:6f:ce:b9:33:5b:80:2d:ee:a9:08: 47:63:d1:4e:c2:2e:c1:27:6a:a7:be:16:ee:45:9a:a0:a4:81: 90:97:b7:1c:89:3b:88:ae:fb:82:14:e5:39:5e:31:db:74:46: c0:6a:68:a0:bb:bf:22:78:61:19:8a:44:40:99:7b:97:0d:27: f8:26:32:67:e4:36:62:6d:f0:65:b9:b1:99:f2:2d:1e:ba:ff: a7:d0:c9:7d:ee:c1:a4:98:cd:12:78:b5:35:fd:68:83:6b:7e: c7:e2:01:9a:bd:af:ea:e6:78:13:4a:0d:c4:b3:50:96:32:3d: 45:2b:48:06:10:0a:bc:53:91:59:49:eb:68:6d:d6:72:ad:2e: 30:db:32:20:b2:cd:a0:06:b6:66:7a:b0:43:07:ad:6c:16:05: 25:ca:cb:af -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQqhYzHz3KE1DlHsrFCyiHTbLEicwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyODU4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTcwNDc4NjMyNjAzYTZmMWQ2N2E5ZTgwYmU1YWEwMDc5 YTZkMjU4NTQyOWU2ZjJkMjk0Mzk3NzFiNWVlZTJmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCFjM9pXqFdEjCT2AgZwsYqvff7hxgOAYUVOnpcU7FEVLi3 o2hkQOBvidtU49YeHbOnrBsTjETt1wk1vXSjzCozWTCiw6+GQYWBLinZiQF7tAxb O12gCf/PqH11Fbjva2DlU+xsFhgvPtVxky0Ltvwap4lIYBnKD67pirtQz0QEbKXK h9U514hnErvBbzIMgyjXl2EUfUpDLv2qw9jfuuAgSQU1B8SR1JSjXJW1mIgA1tAM rr37RqapaPyPudjq+ziwsg/RJ+eyj6lpbQNg7Y3SiFv4G7UdRhovkk5VO52TH8Br pShcyAjzPApRG5u8aXs4uabTFSqVcUOQbPiEm3dZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtSLTFxBLG5J8Qz8mwj7VPfYSJUMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2U5NmMwNTIwLTRjYjMtNDM5OS1iZmQyLTk4NTU4ZGI4OTViMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAHdgwDQYJKoZIhvcNAQELBQADggEBACVEj1htIwd98lUvti7EzrZt ymvAj64HFTlZPTRMfMxsQQ6T4/VpsrYhFmDzhwIEH8kkae0zDCc3YLntLBbNSA2K BCQ4/sDbHpxDj/YFijk4/87AeoNHivcScyqHUUhkxhgNb865M1uALe6pCEdj0U7C LsEnaqe+Fu5FmqCkgZCXtxyJO4iu+4IU5TleMdt0RsBqaKC7vyJ4YRmKRECZe5cN J/gmMmfkNmJt8GW5sZnyLR66/6fQyX3uwaSYzRJ4tTX9aINrfsfiAZq9r+rmeBNK DcSzUJYyPUUrSAYQCrxTkVlJ62ht1nKtLjDbMiCyzaAGtmZ6sEMHrWwWBSXKy68= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:40 2025 by rpki-client