$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20eb5a64-6da6-463a-b661-8f15c8302061.roa File: 20eb5a64-6da6-463a-b661-8f15c8302061.roa (raw, json) Hash identifier: GI9CekSDw+TrZSjYH6hHNFrOW2/cDEa7gzRhPEMK9Q8= Subject key identifier: B8:CE:EB:A3:0C:63:15:9A:C1:72:E7:A4:72:93:96:33:0B:4B:9F:EF Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 42E003425DF67DD1C52EA37CD4F5F3E8D8A7A0A3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20eb5a64-6da6-463a-b661-8f15c8302061.roa Signing time: Fri 31 Oct 2025 01:13:16 +0000 ROA not before: Fri 31 Oct 2025 01:13:16 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3a84::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e0:03:42:5d:f6:7d:d1:c5:2e:a3:7c:d4:f5:f3:e8:d8:a7:a0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:13:16 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=dfa5d113cbabde60bee249d92da60079fa053c50de151f0b7959452c2814edfe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:c5:ea:e3:2e:10:64:08:84:fb:db:66:47: b6:26:20:96:46:a7:d1:a4:a8:13:e4:3a:c2:c8:b1: 34:f8:f7:7b:2d:21:79:1e:0c:c1:a9:85:92:e3:9c: fe:ef:e7:7d:58:f9:96:f8:f9:e2:fb:59:a7:d5:74: 3a:0c:b1:4d:c0:2a:1e:8e:c4:35:cc:04:36:ee:5e: 7f:5c:ab:9b:16:a0:78:75:e6:40:69:ef:13:26:0d: 93:67:19:19:1d:1f:a4:b0:85:50:ca:b4:c8:c4:7a: 03:8c:03:ea:5f:49:9c:0d:49:4e:aa:99:8a:16:70: a9:60:1d:2f:34:27:29:f4:f5:a6:54:ec:e6:ba:7e: 3f:16:00:19:2f:c3:3b:f7:7c:d5:20:fc:e6:23:c8: 3a:f9:6b:d4:dd:37:9d:9d:43:6e:b0:8a:92:7b:fd: ee:e4:30:0c:82:88:a1:d6:f0:bc:22:23:7f:58:87: 1e:89:73:02:2f:44:00:1c:d9:38:8f:25:f7:3a:26: dc:46:c0:fd:e1:4b:e2:98:62:85:a4:b7:49:1a:51: ea:c4:a7:c2:45:44:a2:84:dd:51:a1:e5:0d:6d:f9: da:17:5b:d1:40:59:96:84:1d:6c:54:60:92:ca:9e: 0d:77:8b:67:82:05:a8:3a:4e:4f:81:43:76:7c:06: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CE:EB:A3:0C:63:15:9A:C1:72:E7:A4:72:93:96:33:0B:4B:9F:EF X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/20eb5a64-6da6-463a-b661-8f15c8302061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3a84::/47 Signature Algorithm: sha256WithRSAEncryption a7:c8:30:99:8a:6f:9a:14:bc:58:33:49:ab:76:54:85:5d:c1: 4c:81:29:bf:9e:d8:a2:3f:0f:82:a4:82:a8:d3:c9:17:1a:c2: 08:4e:6e:34:18:0b:58:0a:d5:8c:e6:9b:fd:0a:53:32:c7:ba: 42:43:8d:59:7a:d4:8a:ee:2e:e7:98:9a:b8:b5:8b:1a:db:15: be:68:f9:34:e4:7d:84:7d:1f:ee:4a:e6:7a:d3:d9:cc:fa:e9: 98:61:0e:00:0e:99:e1:64:a8:8b:1b:74:dc:00:c3:7a:a7:74: f8:30:53:c8:a2:b1:ce:c8:d3:81:7b:60:8f:5d:4c:aa:e0:d5: 96:6f:50:5b:f7:f0:f9:d4:8a:92:a8:e6:21:83:35:ae:9a:da: cc:50:74:13:eb:ec:d9:ee:cd:4a:37:b8:b6:5c:03:40:02:54: 19:5d:cc:56:28:7c:d6:ed:50:a7:35:c2:ee:60:86:96:9f:e0: 0c:60:89:f0:b6:6f:a6:08:0c:05:d1:41:a2:bf:24:f8:c1:09: 3e:4d:fe:2c:f5:1a:d1:53:46:51:56:0d:92:4f:25:3d:db:f0: 3d:df:a7:0e:1f:a4:58:b6:6a:f4:59:a9:a8:53:91:73:b8:9f: 23:ef:10:70:4f:9a:da:17:d3:92:dd:e6:68:46:fa:d4:fd:ea: 32:2a:aa:10 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQuADQl32fdHFLqN81PXz6NinoKMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDExMzE2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmE1ZDExM2NiYWJkZTYwYmVlMjQ5ZDkyZGE2MDA3OWZh MDUzYzUwZGUxNTFmMGI3OTU5NDUyYzI4MTRlZGZlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiucXq4y4QZAiE+9tmR7YmIJZGp9GkqBPkOsLIsTT493st IXkeDMGphZLjnP7v531Y+Zb4+eL7WafVdDoMsU3AKh6OxDXMBDbuXn9cq5sWoHh1 5kBp7xMmDZNnGRkdH6SwhVDKtMjEegOMA+pfSZwNSU6qmYoWcKlgHS80Jyn09aZU 7Oa6fj8WABkvwzv3fNUg/OYjyDr5a9TdN52dQ26wipJ7/e7kMAyCiKHW8LwiI39Y hx6JcwIvRAAc2TiPJfc6JtxGwP3hS+KYYoWkt0kaUerEp8JFRKKE3VGh5Q1t+doX W9FAWZaEHWxUYJLKng13i2eCBag6Tk+BQ3Z8BkL1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuM7rowxjFZrBcuekcpOWMwtLn+8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIwZWI1YTY0LTZkYTYtNDYzYS1iNjYxLThmMTVjODMwMjA2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOoQwDQYJKoZIhvcNAQELBQADggEBAKfIMJmKb5oUvFgzSat2VIVd wUyBKb+e2KI/D4KkgqjTyRcawghObjQYC1gK1Yzmm/0KUzLHukJDjVl61IruLueY mri1ixrbFb5o+TTkfYR9H+5K5nrT2cz66ZhhDgAOmeFkqIsbdNwAw3qndPgwU8ii sc7I04F7YI9dTKrg1ZZvUFv38PnUipKo5iGDNa6a2sxQdBPr7NnuzUo3uLZcA0AC VBldzFYofNbtUKc1wu5ghpaf4AxgifC2b6YIDAXRQaK/JPjBCT5N/iz1GtFTRlFW DZJPJT3b8D3fpw4fpFi2avRZqahTkXO4nyPvEHBPmtoX05Ld5mhG+tT96jIqqhA= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:36 2025 by rpki-client