$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1d1ee7a-c347-4571-8b12-74fc8473c40e.roa File: f1d1ee7a-c347-4571-8b12-74fc8473c40e.roa (raw, json) Hash identifier: z/UFmRQUbMkqABSmd0veGhNtanuLebAdloIX1RDDAcM= Subject key identifier: 76:B3:C8:7B:43:E5:FA:E1:78:38:C9:5C:F6:04:60:C1:37:DA:26:CB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 792868FC71288E78D8D841D906948B5A155D57E8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1d1ee7a-c347-4571-8b12-74fc8473c40e.roa Signing time: Thu 30 Oct 2025 21:40:34 +0000 ROA not before: Thu 30 Oct 2025 21:40:34 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1858::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:28:68:fc:71:28:8e:78:d8:d8:41:d9:06:94:8b:5a:15:5d:57:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:40:34 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=a3b2c64ea0816f09cbe8288c1d1f209c816274c00eb470ef607afbcb4f872e76, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:69:d7:73:ca:30:45:c4:85:79:50:07:43: 62:22:07:93:8e:1a:37:0b:47:9f:00:f0:5b:9d:e3: 11:59:95:4a:b9:fb:52:52:55:fe:7f:2e:d2:1e:ab: fd:77:04:56:56:b6:11:f1:e1:36:4d:85:08:7f:f2: f7:2e:eb:c1:e8:57:c5:70:68:69:92:d2:61:74:a3: 72:76:16:0a:91:3c:75:e4:62:9c:8e:ac:9a:0e:30: 0b:85:c2:7f:3f:f4:94:6e:78:17:45:20:51:d5:7f: e3:cf:16:69:c9:84:a3:23:35:0f:89:91:d3:9d:35: 48:da:39:78:1e:16:08:2e:ea:71:db:e2:18:a1:4e: 42:c6:3c:2b:0d:21:a4:d0:58:39:21:b9:77:ab:74: 29:36:f0:a9:93:7d:aa:aa:c4:78:2f:2e:b6:ad:7b: 37:b2:5f:44:df:da:70:98:8d:cd:b5:14:c1:18:7a: b3:d7:bc:bc:7f:d2:e2:7f:af:da:c8:9c:35:ca:a9: fe:e0:a5:57:92:9d:50:91:08:29:29:13:40:09:01: 60:32:a0:36:cf:3a:c8:f5:08:35:35:a8:b1:e0:8f: 09:dd:33:23:6e:c3:90:be:c1:1a:2d:62:94:27:f3: b4:88:db:e8:25:3c:f7:9e:f7:bb:b6:7e:82:d0:8e: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B3:C8:7B:43:E5:FA:E1:78:38:C9:5C:F6:04:60:C1:37:DA:26:CB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1d1ee7a-c347-4571-8b12-74fc8473c40e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1858::/47 Signature Algorithm: sha256WithRSAEncryption 89:a3:32:2c:fa:86:dd:7a:95:49:93:3e:a9:97:25:16:90:3e: cb:19:b1:43:35:a2:5a:48:26:c7:1f:b2:04:88:b8:e4:9a:3c: 1c:4f:b7:7f:9f:e6:95:7d:d2:c4:e6:01:d2:3c:f7:00:2f:1b: 76:1b:55:11:01:5b:47:4e:27:77:b6:99:e9:8d:26:08:16:26: 80:96:b1:b0:4d:d7:39:8c:a4:63:0a:e8:e0:4b:fe:cc:44:71: da:e7:e1:fb:5a:95:3d:2a:73:e6:bc:4e:f2:c7:7d:87:3d:c2: 25:26:91:9b:4f:06:7d:cd:c0:24:bb:00:e0:3e:0d:d1:41:af: 4b:4a:eb:0a:7f:8e:38:95:5a:45:fd:3c:e3:9f:da:56:a7:8a: 1c:de:4a:cd:59:01:07:a3:13:11:e2:8f:41:77:4d:8f:d5:04: 45:4a:1a:04:03:db:43:97:d0:fa:d9:03:d5:46:50:85:97:ac: a8:61:c5:0a:fd:dc:64:0b:fa:cc:a5:dd:ae:1a:3a:00:af:51: 00:b9:12:f7:e6:d9:e1:f1:a6:9d:ef:f5:7e:fb:8e:bf:e1:e1: c9:ea:67:b1:bc:82:20:de:66:29:92:15:92:43:5e:53:25:11: 79:7e:e4:7d:1e:8b:70:ff:ee:2c:f7:41:fc:8a:05:ad:e8:95: 57:dd:0f:4c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeSho/HEojnjY2EHZBpSLWhVdV+gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE0MDM0WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2IyYzY0ZWEwODE2ZjA5Y2JlODI4OGMxZDFmMjA5Yzgx NjI3NGMwMGViNDcwZWY2MDdhZmJjYjRmODcyZTc2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3I2nXc8owRcSFeVAHQ2IiB5OOGjcLR58A8Fud4xFZlUq5 +1JSVf5/LtIeq/13BFZWthHx4TZNhQh/8vcu68HoV8VwaGmS0mF0o3J2FgqRPHXk YpyOrJoOMAuFwn8/9JRueBdFIFHVf+PPFmnJhKMjNQ+JkdOdNUjaOXgeFggu6nHb 4hihTkLGPCsNIaTQWDkhuXerdCk28KmTfaqqxHgvLratezeyX0Tf2nCYjc21FMEY erPXvLx/0uJ/r9rInDXKqf7gpVeSnVCRCCkpE0AJAWAyoDbPOsj1CDU1qLHgjwnd MyNuw5C+wRotYpQn87SI2+glPPee97u2foLQjvGxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdrPIe0Pl+uF4OMlc9gRgwTfaJsswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2YxZDFlZTdhLWMzNDctNDU3MS04YjEyLTc0ZmM4NDczYzQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGFgwDQYJKoZIhvcNAQELBQADggEBAImjMiz6ht16lUmTPqmXJRaQ PssZsUM1olpIJscfsgSIuOSaPBxPt3+f5pV90sTmAdI89wAvG3YbVREBW0dOJ3e2 memNJggWJoCWsbBN1zmMpGMK6OBL/sxEcdrn4ftalT0qc+a8TvLHfYc9wiUmkZtP Bn3NwCS7AOA+DdFBr0tK6wp/jjiVWkX9POOf2lanihzeSs1ZAQejExHij0F3TY/V BEVKGgQD20OX0PrZA9VGUIWXrKhhxQr93GQL+syl3a4aOgCvUQC5Evfm2eHxpp3v 9X77jr/h4cnqZ7G8giDeZimSFZJDXlMlEXl+5H0ei3D/7iz3QfyKBa3olVfdD0w= -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:27 2025 by rpki-client