$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e970b978-473a-45f0-8b24-13f79ddd8695.roa File: e970b978-473a-45f0-8b24-13f79ddd8695.roa (raw, json) Hash identifier: geGfCwTHcSEI8vQE+Unpi8O1tffTS4uLPSajn5UwU3o= Subject key identifier: 81:B4:3A:CD:E5:AF:16:10:23:1D:43:B5:69:AD:FF:07:7E:0C:D0:A1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7E8262179F05EF8C7842F6C181478D47A8228FE6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e970b978-473a-45f0-8b24-13f79ddd8695.roa Signing time: Thu 30 Oct 2025 23:22:04 +0000 ROA not before: Thu 30 Oct 2025 23:22:04 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2c8a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:82:62:17:9f:05:ef:8c:78:42:f6:c1:81:47:8d:47:a8:22:8f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:22:04 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=22e24395f164247574b8c52c5b85d75afafc8cfcfcbf50bc72212ccbb0a68016, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:36:7b:fb:29:bd:43:af:9f:35:04:23:6b: 45:1d:f3:f7:b1:2b:1e:47:67:95:d3:7b:09:41:b8: 1f:23:12:d6:37:95:ea:76:24:79:f5:ec:53:81:95: a5:9f:86:84:64:27:ca:b4:49:eb:90:d0:d9:8c:71: 37:53:fe:bd:58:16:82:f7:b1:5f:b1:b2:ac:24:a8: bb:5e:df:31:f3:d7:2c:1f:9e:31:b2:18:de:e7:c0: b7:53:37:eb:aa:65:08:04:45:cf:80:13:1e:cf:e7: e3:48:71:6a:33:72:7a:97:af:a7:94:55:5a:bb:ff: c7:0f:d1:fc:4f:0c:95:d9:30:bb:fa:41:1e:6c:64: cd:1d:76:31:9f:17:c5:fc:9b:4c:e2:9a:c6:d4:a7: 8e:82:8c:ef:e6:44:f8:df:ae:37:97:07:cc:10:ec: 18:a2:10:82:4a:bf:35:0c:32:c0:12:30:fa:d6:12: ef:c1:7d:e0:64:3d:5b:3e:c0:4d:42:cc:60:30:a6: 87:5a:8c:46:c5:61:f9:30:38:ef:e7:3e:d5:51:32: 3c:f2:79:9b:46:15:94:b8:3a:0d:90:83:8d:76:77: 94:60:90:19:f3:90:68:aa:a1:41:e3:50:5c:b3:9d: 2e:ea:5f:7d:0b:37:32:90:aa:ee:4d:b9:c3:80:e9: e6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B4:3A:CD:E5:AF:16:10:23:1D:43:B5:69:AD:FF:07:7E:0C:D0:A1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e970b978-473a-45f0-8b24-13f79ddd8695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2c8a::/47 Signature Algorithm: sha256WithRSAEncryption 7c:25:41:64:62:92:e4:62:24:f4:c3:c1:d9:cc:8f:d2:39:31: b2:1b:53:02:02:81:c6:29:00:96:d3:54:ef:be:6b:a0:70:cb: 61:d7:36:3f:39:96:46:3d:13:5b:ef:47:b3:9a:fa:c1:45:09: e4:ac:e7:0f:e1:e3:27:75:33:30:cb:3b:eb:c8:0b:65:a8:5f: 86:db:c9:55:db:a7:62:22:43:ef:30:34:f4:07:64:68:3f:22: f9:31:97:29:62:3d:7f:10:2d:e5:f8:ba:36:a7:50:29:01:6c: a5:15:fa:a8:57:cc:dc:e5:79:1d:1f:a2:1f:57:ba:84:fb:1b: 38:98:2a:fb:4e:95:10:bd:5f:f1:42:1e:7b:a6:87:9b:35:ec: ee:8d:8f:20:26:e1:d9:88:d7:bf:d8:87:b1:be:fa:57:61:46: 42:42:71:6a:df:a5:cd:2d:20:04:2b:20:d0:dc:f8:fe:3a:41: 21:d7:b3:75:30:0b:9f:cf:86:b9:d5:5a:2f:a0:46:ef:e1:dc: bd:36:17:41:00:69:68:71:c4:e5:ed:b8:99:40:24:cb:c3:32: cb:b0:2c:00:2d:56:c3:ac:19:51:ef:c2:19:68:9e:cf:df:3f: 5b:c5:86:22:17:72:4a:e9:88:ec:b6:e5:53:7d:79:71:14:db: 14:c5:1c:7e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfoJiF58F74x4QvbBgUeNR6gij+YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMyMjA0WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMmUyNDM5NWYxNjQyNDc1NzRiOGM1MmM1Yjg1ZDc1YWZh ZmM4Y2ZjZmNiZjUwYmM3MjIxMmNjYmIwYTY4MDE2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCI/jZ7+ym9Q6+fNQQja0Ud8/exKx5HZ5XTewlBuB8jEtY3 lep2JHn17FOBlaWfhoRkJ8q0SeuQ0NmMcTdT/r1YFoL3sV+xsqwkqLte3zHz1ywf njGyGN7nwLdTN+uqZQgERc+AEx7P5+NIcWozcnqXr6eUVVq7/8cP0fxPDJXZMLv6 QR5sZM0ddjGfF8X8m0zimsbUp46CjO/mRPjfrjeXB8wQ7BiiEIJKvzUMMsASMPrW Eu/BfeBkPVs+wE1CzGAwpodajEbFYfkwOO/nPtVRMjzyeZtGFZS4Og2Qg412d5Rg kBnzkGiqoUHjUFyznS7qX30LNzKQqu5NucOA6eavAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgbQ6zeWvFhAjHUO1aa3/B34M0KEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2U5NzBiOTc4LTQ3M2EtNDVmMC04YjI0LTEzZjc5ZGRkODY5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALIowDQYJKoZIhvcNAQELBQADggEBAHwlQWRikuRiJPTDwdnMj9I5 MbIbUwICgcYpAJbTVO++a6Bwy2HXNj85lkY9E1vvR7Oa+sFFCeSs5w/h4yd1MzDL O+vIC2WoX4bbyVXbp2IiQ+8wNPQHZGg/IvkxlyliPX8QLeX4ujanUCkBbKUV+qhX zNzleR0foh9XuoT7GziYKvtOlRC9X/FCHnumh5s17O6NjyAm4dmI17/Yh7G++ldh RkJCcWrfpc0tIAQrINDc+P46QSHXs3UwC5/PhrnVWi+gRu/h3L02F0EAaWhxxOXt uJlAJMvDMsuwLAAtVsOsGVHvwhlons/fP1vFhiIXckrpiOy25VN9eXEU2xTFHH4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:26:52 2025 by rpki-client