$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2036de97-cef5-420b-9c31-f7592757d9d3.roa File: 2036de97-cef5-420b-9c31-f7592757d9d3.roa (raw, json) Hash identifier: tS9p7Mvhz6DWNhSSYPqyknyoMmCr7bIUDAQgjfWvSFY= Subject key identifier: 03:51:23:7B:28:D1:F7:10:CB:C7:8E:AF:89:00:4F:EE:A3:99:1E:D7 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 38C95B4CFA91E205F1B4FF5AFA56D240C655F5D6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2036de97-cef5-420b-9c31-f7592757d9d3.roa Signing time: Thu 30 Oct 2025 22:43:40 +0000 ROA not before: Thu 30 Oct 2025 22:43:40 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1ffa::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c9:5b:4c:fa:91:e2:05:f1:b4:ff:5a:fa:56:d2:40:c6:55:f5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:43:40 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=f4edf28360604da9252a4fa60d6899d525e9f97e5e4ad42af72349f6c79af0fa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:86:1a:41:61:11:22:16:d5:44:58:07:fc:b6: 7c:41:88:dc:25:8e:db:b8:57:5d:a1:f5:4c:23:08: a0:86:a6:02:14:93:73:10:1e:8f:d4:93:76:f5:7a: f4:b9:e2:88:d6:c7:cb:3f:3d:c2:ce:02:ab:a1:e9: b3:55:1a:88:6f:e9:ec:eb:b8:e7:68:55:ac:ec:3e: a5:0b:f9:b8:03:23:1d:cb:4d:a1:b1:10:ce:89:3d: 17:7c:59:c4:03:d6:92:64:ce:06:4e:e2:6d:5a:17: 24:67:74:2a:66:ae:72:12:bf:13:59:33:78:04:47: be:f4:64:a4:c2:41:e0:6b:7f:a3:67:ba:0d:c0:44: 53:c0:c0:77:95:af:e7:9d:74:ef:e3:fc:76:50:a0: 39:99:e2:51:a0:2c:3b:ec:d0:c6:76:ac:01:70:39: 0a:5a:3b:20:a3:9a:09:ee:f2:a5:2c:cf:da:87:d6: 49:ee:9c:5b:8d:6e:c6:a2:d1:53:bd:0a:61:9d:0a: c9:d5:a4:4c:13:53:06:bd:2c:cd:cc:00:4f:4d:bd: ce:38:fb:e8:38:9c:b0:59:c2:77:0b:9e:5e:cd:2e: bb:75:16:28:97:f5:30:80:61:31:4c:29:bb:2b:16: 35:ae:c7:92:56:84:94:93:9b:a3:86:c2:65:e8:ca: 46:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:51:23:7B:28:D1:F7:10:CB:C7:8E:AF:89:00:4F:EE:A3:99:1E:D7 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2036de97-cef5-420b-9c31-f7592757d9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1ffa::/47 Signature Algorithm: sha256WithRSAEncryption 83:15:2b:a0:cd:0d:75:18:fd:46:8f:97:f6:8a:cb:de:c9:3c: 5d:c2:fe:d2:e3:ef:8f:a7:e7:1c:d0:06:90:e8:db:f7:51:e7: 06:fe:73:0b:b3:9e:56:d8:9b:5d:26:eb:e8:78:25:0a:c9:3c: 98:94:b4:fb:76:6e:f2:56:7e:64:31:4e:fd:6e:48:f1:c2:bc: 68:f6:6d:6a:48:a2:f3:fb:39:cb:3b:ba:0a:37:bd:9d:f5:3a: 06:96:4f:c3:8f:10:80:48:63:d5:47:e2:94:ed:ba:81:a9:ce: bb:1c:b4:a2:6d:aa:22:cc:33:c1:9c:6c:76:f3:8a:f4:76:14: 7f:95:71:9d:02:0e:61:1c:15:69:23:13:d5:86:b8:27:a9:14: 22:4a:d4:d5:a4:10:cb:72:56:f8:23:e4:2b:74:81:b9:15:a9: 1e:10:2c:64:39:b6:77:4c:78:ab:93:33:d3:4e:be:0f:be:df: f1:2d:5f:19:50:7b:1c:b7:81:44:98:e0:1e:d4:63:37:14:7d: 19:09:85:85:38:2a:90:52:b0:06:78:cc:5f:1d:a3:6c:d3:9a: d6:18:5e:2c:b8:4f:11:7d:53:cd:e9:d9:35:f2:f9:37:61:e6: fd:29:60:b1:55:be:75:b3:f6:18:89:d2:09:01:b2:f3:8f:83: 33:74:48:bf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOMlbTPqR4gXxtP9a+lbSQMZV9dYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI0MzQwWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGVkZjI4MzYwNjA0ZGE5MjUyYTRmYTYwZDY4OTlkNTI1 ZTlmOTdlNWU0YWQ0MmFmNzIzNDlmNmM3OWFmMGZhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbhhpBYREiFtVEWAf8tnxBiNwljtu4V12h9UwjCKCGpgIU k3MQHo/Uk3b1evS54ojWx8s/PcLOAquh6bNVGohv6ezruOdoVazsPqUL+bgDIx3L TaGxEM6JPRd8WcQD1pJkzgZO4m1aFyRndCpmrnISvxNZM3gER770ZKTCQeBrf6Nn ug3ARFPAwHeVr+eddO/j/HZQoDmZ4lGgLDvs0MZ2rAFwOQpaOyCjmgnu8qUsz9qH 1knunFuNbsai0VO9CmGdCsnVpEwTUwa9LM3MAE9Nvc44++g4nLBZwncLnl7NLrt1 FiiX9TCAYTFMKbsrFjWux5JWhJSTm6OGwmXoykYDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUA1EjeyjR9xDLx46viQBP7qOZHtcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIwMzZkZTk3LWNlZjUtNDIwYi05YzMxLWY3NTkyNzU3ZDlkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAH/owDQYJKoZIhvcNAQELBQADggEBAIMVK6DNDXUY/UaPl/aKy97J PF3C/tLj74+n5xzQBpDo2/dR5wb+cwuznlbYm10m6+h4JQrJPJiUtPt2bvJWfmQx Tv1uSPHCvGj2bWpIovP7Ocs7ugo3vZ31OgaWT8OPEIBIY9VH4pTtuoGpzrsctKJt qiLMM8GcbHbzivR2FH+VcZ0CDmEcFWkjE9WGuCepFCJK1NWkEMtyVvgj5Ct0gbkV qR4QLGQ5tndMeKuTM9NOvg++3/EtXxlQexy3gUSY4B7UYzcUfRkJhYU4KpBSsAZ4 zF8do2zTmtYYXiy4TxF9U83p2TXy+Tdh5v0pYLFVvnWz9hiJ0gkBsvOPgzN0SL8= -----END CERTIFICATE-----Generated at Tue Nov 18 05:41:42 2025 by rpki-client