$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ec842fe0-3fc1-4a0f-b6f6-e40960e9cc84.roa File: ec842fe0-3fc1-4a0f-b6f6-e40960e9cc84.roa (raw, json) Hash identifier: 4oy1577g7uS7twMzvW9uDf/Duvr4MfNtiZjToIcivBY= Subject key identifier: D9:87:05:2F:35:97:0A:5F:22:84:F5:03:BE:C3:5D:77:0B:13:8C:48 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 224BC3158E51EBAC2F418C1460DF5DBB8AB961C1 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ec842fe0-3fc1-4a0f-b6f6-e40960e9cc84.roa Signing time: Fri 31 Oct 2025 06:52:02 +0000 ROA not before: Fri 31 Oct 2025 06:52:02 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2d60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4b:c3:15:8e:51:eb:ac:2f:41:8c:14:60:df:5d:bb:8a:b9:61:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:52:02 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e53719ac738e1a72c730e032e7847f5c6c83400d9b7d031a5be7f2a313d920a2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:00:b3:fc:93:03:cb:4f:84:af:86:9d:f7: cc:b9:94:a6:85:49:a5:c1:c5:c0:03:a0:83:3a:0f: 18:9f:d0:21:35:49:29:c2:df:ae:96:02:20:63:e6: 42:fb:94:44:ea:ad:4c:8e:b6:f9:68:28:64:fa:42: e1:c8:4f:2c:92:7f:f5:3f:52:84:87:51:ff:2a:e9: 59:05:27:dd:d9:dc:a8:19:10:f8:ee:16:7d:ef:e3: 98:67:da:1c:1f:fa:3e:be:54:d5:de:e1:7a:05:66: ca:b8:9b:8e:2a:cc:6e:30:fb:04:e0:eb:14:99:ef: 72:9a:fe:8a:a1:ee:5a:85:aa:21:d2:e5:f2:af:e5: 69:1d:6f:4c:c0:42:a5:c2:b4:ae:e9:54:91:80:63: 36:1c:cf:3f:20:9e:90:43:a7:0e:aa:12:8a:ea:c7: 16:9a:8a:bb:5f:2e:03:42:04:d3:f9:76:ae:d1:29: 4b:d8:9f:41:bd:3a:f1:1d:cb:74:a1:09:95:96:b8: ed:22:ac:c2:42:ab:2b:5f:31:36:fa:99:3b:c3:21: 32:70:a3:19:95:16:f9:2c:2e:c2:4f:7d:0b:78:a5: 02:11:8f:d3:a6:b0:87:bf:11:c9:f1:af:94:ef:9c: 49:85:51:08:07:b3:53:28:b9:33:bb:2c:5f:f8:5a: af:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:87:05:2F:35:97:0A:5F:22:84:F5:03:BE:C3:5D:77:0B:13:8C:48 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ec842fe0-3fc1-4a0f-b6f6-e40960e9cc84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2d60::/44 Signature Algorithm: sha256WithRSAEncryption 6a:06:eb:8e:d9:e2:93:d4:c0:f0:95:9d:30:a4:40:37:de:92: 10:d7:56:33:be:d5:3b:19:84:89:9d:25:91:66:65:25:6c:17: 2b:8d:21:75:23:a8:3f:04:c9:3d:1e:fd:fb:d8:c7:fb:c7:26: d5:3a:53:63:d3:69:cb:c6:3b:47:27:d1:b8:39:d6:5e:5c:2d: 12:ff:11:31:ce:0b:36:7f:d9:66:f7:10:04:37:04:34:e1:c4: d4:a0:a9:99:2e:f9:c8:e7:ec:dc:f5:61:09:d9:9b:bf:5a:7e: 8f:76:fb:3e:d0:9e:66:28:2b:46:7d:99:03:3d:3a:f6:c9:84: 60:6c:8a:96:7c:dd:cf:0e:cd:c8:e7:12:05:bf:be:d5:da:c6: a4:f8:0c:42:01:6c:37:c2:35:6a:f3:83:a3:85:ff:72:eb:86: 82:94:09:10:6d:e5:bf:fb:e5:09:26:e7:cf:bc:d7:9b:71:69: a7:04:a5:cc:a1:0a:cd:7b:e6:60:ee:25:10:d5:fc:a8:8e:16: ba:2a:4c:d6:90:f9:9c:4a:d1:81:e1:4b:e0:99:50:23:ae:8f: 75:29:04:e8:2d:d3:f0:f9:74:99:f7:7c:af:4f:79:69:7c:29: 29:a8:20:65:b8:9d:5b:ad:dd:35:a9:0d:08:8b:6c:42:c0:bd: 36:5a:3d:37 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIkvDFY5R66wvQYwUYN9du4q5YcEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY1MjAyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTM3MTlhYzczOGUxYTcyYzczMGUwMzJlNzg0N2Y1YzZj ODM0MDBkOWI3ZDAzMWE1YmU3ZjJhMzEzZDkyMGEyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5rACz/JMDy0+Er4ad98y5lKaFSaXBxcADoIM6Dxif0CE1 SSnC366WAiBj5kL7lETqrUyOtvloKGT6QuHITyySf/U/UoSHUf8q6VkFJ93Z3KgZ EPjuFn3v45hn2hwf+j6+VNXe4XoFZsq4m44qzG4w+wTg6xSZ73Ka/oqh7lqFqiHS 5fKv5Wkdb0zAQqXCtK7pVJGAYzYczz8gnpBDpw6qEorqxxaairtfLgNCBNP5dq7R KUvYn0G9OvEdy3ShCZWWuO0irMJCqytfMTb6mTvDITJwoxmVFvksLsJPfQt4pQIR j9OmsIe/Ecnxr5TvnEmFUQgHs1MouTO7LF/4Wq9VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2YcFLzWXCl8ihPUDvsNddwsTjEgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2VjODQyZmUwLTNmYzEtNGEwZi1iNmY2LWU0MDk2MGU5Y2M4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAALWAwDQYJKoZIhvcNAQELBQADggEBAGoG647Z4pPUwPCVnTCkQDfe khDXVjO+1TsZhImdJZFmZSVsFyuNIXUjqD8EyT0e/fvYx/vHJtU6U2PTacvGO0cn 0bg51l5cLRL/ETHOCzZ/2Wb3EAQ3BDThxNSgqZku+cjn7Nz1YQnZm79afo92+z7Q nmYoK0Z9mQM9OvbJhGBsipZ83c8OzcjnEgW/vtXaxqT4DEIBbDfCNWrzg6OF/3Lr hoKUCRBt5b/75Qkm58+815txaacEpcyhCs175mDuJRDV/KiOFroqTNaQ+ZxK0YHh S+CZUCOuj3UpBOgt0/D5dJn3fK9PeWl8KSmoIGW4nVut3TWpDQiLbELAvTZaPTc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:24 2025 by rpki-client