$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ffed3c24-66f5-45d6-a26e-df7bc9122651.roa File: ffed3c24-66f5-45d6-a26e-df7bc9122651.roa (raw, json) Hash identifier: Dj9mam0ZVZUM/OeVItnoW5zEb54C3IPwftU2Li0EY8o= Subject key identifier: 48:CD:4F:E4:31:ED:D5:62:63:B5:22:DF:61:16:32:F7:0B:26:24:C5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 57D7B0FC50310DF70E57E7096C2063A90F70D856 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ffed3c24-66f5-45d6-a26e-df7bc9122651.roa Signing time: Thu 30 Oct 2025 22:14:03 +0000 ROA not before: Thu 30 Oct 2025 22:14:03 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1c34::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d7:b0:fc:50:31:0d:f7:0e:57:e7:09:6c:20:63:a9:0f:70:d8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:14:03 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=8e2c3f09b76b79f24dc73ad6050fef3693f8bd5aaddb778e400b4361f67bd87e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:93:73:4c:10:ca:35:5f:2e:f2:1f:53:80:bf: 1a:09:f6:64:5f:fa:11:91:be:59:bc:d8:33:07:92: 83:de:31:fd:33:5d:34:1a:39:d2:4e:f2:95:3e:60: 9f:4a:8a:86:df:dd:ad:d1:e6:07:fe:43:db:8f:df: 80:43:e4:d0:ac:98:98:66:79:41:56:4d:80:05:ed: 86:62:89:ae:d9:e6:8d:51:5a:6d:56:72:c7:9c:4b: 6a:01:6f:22:3f:6e:70:87:87:9a:74:d8:ce:8a:1c: a5:3b:f0:54:30:1c:e0:4c:32:9b:f0:1a:a3:13:38: 17:5f:24:21:08:00:1c:a5:0d:0a:17:36:0a:e9:b5: e4:41:b3:62:8e:06:7e:5a:41:19:ed:5c:8d:90:d9: 81:ae:d1:a7:2d:12:0d:96:05:1d:0b:08:b8:27:bd: c7:57:a8:c1:23:47:e2:42:d1:04:88:cb:95:1c:1b: 93:57:6c:bd:f7:bd:08:09:d9:df:9d:19:1f:45:60: 6d:88:17:4b:b2:e5:d4:35:06:68:74:75:03:38:ff: 1e:3a:65:c4:88:c1:76:a0:cc:75:e8:64:76:d1:74: b0:4b:c2:4d:32:77:10:91:58:f9:40:04:af:7a:83: bd:61:10:c1:38:37:83:8e:1c:54:0d:cf:d5:5d:b6: 8a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CD:4F:E4:31:ED:D5:62:63:B5:22:DF:61:16:32:F7:0B:26:24:C5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ffed3c24-66f5-45d6-a26e-df7bc9122651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1c34::/47 Signature Algorithm: sha256WithRSAEncryption 6c:df:b7:8d:48:4b:7d:5e:ee:e4:f4:42:e2:55:49:08:2d:36: 45:a1:a2:b9:19:82:c3:67:06:34:67:f2:ea:98:71:91:43:74: cb:70:67:72:48:74:9b:fb:df:6d:48:bf:89:aa:cb:27:ce:31: ee:03:60:a3:eb:c8:cd:29:1f:67:da:96:bd:e5:c2:e4:47:64: 63:c9:d1:8a:b3:cf:2f:aa:6c:8b:f6:af:5a:b2:8c:54:0d:98: 4a:78:63:e3:d8:ff:51:94:e7:d6:c1:99:84:b5:f0:4d:83:2d: dd:84:13:65:77:fc:a3:9c:a6:4a:01:40:f0:d6:b7:27:96:df: c4:c4:5a:99:f5:87:53:c4:03:a3:83:e3:ae:cb:ae:f1:b7:78: f8:88:ec:32:cc:50:8c:40:49:03:34:ed:a8:25:bc:9a:1b:3c: 01:67:1e:1e:9c:f9:1a:6b:63:27:e5:87:43:1f:5e:1a:f2:fd: cb:80:93:6b:66:09:29:4e:ac:f7:d3:07:10:22:6c:a5:c0:ac: de:47:01:d0:60:88:af:91:2d:c5:93:6a:57:76:f9:08:1b:b7: 89:4d:7f:ad:59:dd:04:61:d4:34:18:5f:ba:d6:f7:75:43:11: 6c:82:3b:dc:0d:dc:0e:43:11:e7:88:9b:bf:b2:13:50:05:73: cb:ba:f9:e5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUV9ew/FAxDfcOV+cJbCBjqQ9w2FYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIxNDAzWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTJjM2YwOWI3NmI3OWYyNGRjNzNhZDYwNTBmZWYzNjkz ZjhiZDVhYWRkYjc3OGU0MDBiNDM2MWY2N2JkODdlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMk3NMEMo1Xy7yH1OAvxoJ9mRf+hGRvlm82DMHkoPeMf0z XTQaOdJO8pU+YJ9Kiobf3a3R5gf+Q9uP34BD5NCsmJhmeUFWTYAF7YZiia7Z5o1R Wm1WcsecS2oBbyI/bnCHh5p02M6KHKU78FQwHOBMMpvwGqMTOBdfJCEIABylDQoX NgrpteRBs2KOBn5aQRntXI2Q2YGu0actEg2WBR0LCLgnvcdXqMEjR+JC0QSIy5Uc G5NXbL33vQgJ2d+dGR9FYG2IF0uy5dQ1Bmh0dQM4/x46ZcSIwXagzHXoZHbRdLBL wk0ydxCRWPlABK96g71hEME4N4OOHFQNz9Vdtoq3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSM1P5DHt1WJjtSLfYRYy9wsmJMUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2ZmZWQzYzI0LTY2ZjUtNDVkNi1hMjZlLWRmN2JjOTEyMjY1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAHDQwDQYJKoZIhvcNAQELBQADggEBAGzft41IS31e7uT0QuJVSQgt NkWhorkZgsNnBjRn8uqYcZFDdMtwZ3JIdJv7321Iv4mqyyfOMe4DYKPryM0pH2fa lr3lwuRHZGPJ0Yqzzy+qbIv2r1qyjFQNmEp4Y+PY/1GU59bBmYS18E2DLd2EE2V3 /KOcpkoBQPDWtyeW38TEWpn1h1PEA6OD467LrvG3ePiI7DLMUIxASQM07aglvJob PAFnHh6c+RprYyflh0MfXhry/cuAk2tmCSlOrPfTBxAibKXArN5HAdBgiK+RLcWT ald2+Qgbt4lNf61Z3QRh1DQYX7rW93VDEWyCO9wN3A5DEeeIm7+yE1AFc8u6+eU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:33 2025 by rpki-client