$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/400a8767-b05b-463b-ad85-1232ebe3be7b.roa File: 400a8767-b05b-463b-ad85-1232ebe3be7b.roa (raw, json) Hash identifier: sTeDrdVxxTNdI4ZQwlNvQ2UxN9g+2N0p/kEDMyuYoYQ= Subject key identifier: F4:AE:51:3A:13:2B:1C:8B:27:91:96:04:92:65:89:CA:48:4C:A9:7D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 68DE66709539676106CF188821B7A3E7E19A852F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/400a8767-b05b-463b-ad85-1232ebe3be7b.roa Signing time: Fri 31 Oct 2025 00:57:55 +0000 ROA not before: Fri 31 Oct 2025 00:57:55 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:38d4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:de:66:70:95:39:67:61:06:cf:18:88:21:b7:a3:e7:e1:9a:85:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:57:55 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=29d992b361b8d1c9d7d440f62ce8cf858b8e2285b44ee18d1d1b4a648e8c6c4c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:26:11:f8:67:64:db:33:5d:39:64:39:11: 7c:08:2c:a4:41:47:b0:5b:e2:7b:d6:45:c0:4f:3b: 8c:a1:71:f1:bc:a2:0e:71:19:87:50:04:e6:e1:e3: 4e:e9:65:e8:fd:dc:89:df:64:81:f1:6e:b0:05:48: 26:8f:2e:54:ed:9c:fa:e3:dc:2c:a0:40:06:be:cf: c0:ec:b7:e4:44:43:82:15:13:dd:fb:7e:cd:c7:80: e9:cb:6b:51:90:c6:27:f6:8c:1a:b0:63:1d:6b:0f: 0a:4d:55:b3:a2:f9:89:15:f6:d9:96:c7:cf:d3:aa: a1:65:32:b0:ca:bc:dc:7d:6a:cd:4a:48:37:0a:b9: 28:dd:64:42:80:d4:c4:36:4a:96:d1:86:24:81:3a: 29:c1:04:02:75:9c:e1:d2:1f:cb:82:fa:73:e7:c1: bd:6b:ba:a8:e3:db:e1:0f:dc:5b:60:26:bf:0d:4a: bc:a4:30:3e:a7:30:97:23:af:c9:7b:64:36:2f:65: b8:ee:2b:81:b2:0e:01:7d:d9:f7:5b:e0:3a:a9:27: 82:4a:ea:4e:c3:f7:75:f8:c3:1c:a1:78:fd:26:09: 78:54:95:6d:68:2d:03:75:b1:48:9f:45:11:68:f5: 2b:9e:39:93:c8:6a:95:fa:94:15:63:79:07:25:b7: b3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AE:51:3A:13:2B:1C:8B:27:91:96:04:92:65:89:CA:48:4C:A9:7D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/400a8767-b05b-463b-ad85-1232ebe3be7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:38d4::/47 Signature Algorithm: sha256WithRSAEncryption 3a:31:05:f5:ff:f0:6d:a0:9d:24:d3:b7:7b:ec:75:9b:f9:68: 63:6a:0c:fe:4b:b2:cd:18:38:d4:0a:1d:0b:e1:b4:99:3d:f7: 7d:18:d1:fa:e0:37:e6:d4:4b:a7:fa:e3:ff:b6:15:31:f4:ca: 24:41:cc:d0:3d:44:7f:01:60:6c:1d:25:69:39:16:77:90:35: d2:58:d2:37:b9:e5:c7:47:47:c9:6c:a9:67:2a:c5:68:3d:7b: 3a:7c:4e:6b:1c:6f:39:78:ab:46:ff:dc:0b:c7:41:9f:ff:1e: dc:b1:a2:1b:6e:d3:31:19:16:f8:bf:72:a0:7b:d1:e6:d4:89: 9d:31:c9:28:7e:44:1b:2d:45:dd:6a:39:c2:a1:de:e6:31:10: ba:83:2c:f1:9b:91:66:c2:d7:16:0f:c3:71:19:69:77:a5:6e: 94:9f:6a:e1:68:cc:9e:52:6d:e9:e1:c6:99:06:78:20:16:06: be:ed:82:f8:82:05:04:e7:31:a9:56:21:1f:e0:92:b4:63:f2: 68:85:fe:9c:5d:97:c5:42:fc:39:7d:17:25:b9:a9:88:0a:0a: fd:06:ea:e1:39:12:53:fb:9f:e4:c9:aa:f2:e9:bb:b6:18:1b: e9:68:60:ff:0c:79:7c:3a:7c:49:5f:e3:fb:cf:b1:fc:74:e5: 35:6e:ce:67 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaN5mcJU5Z2EGzxiIIbej5+GahS8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1NzU1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWQ5OTJiMzYxYjhkMWM5ZDdkNDQwZjYyY2U4Y2Y4NThi OGUyMjg1YjQ0ZWUxOGQxZDFiNGE2NDhlOGM2YzRjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWwyYR+Gdk2zNdOWQ5EXwILKRBR7Bb4nvWRcBPO4yhcfG8 og5xGYdQBObh407pZej93InfZIHxbrAFSCaPLlTtnPrj3CygQAa+z8Dst+REQ4IV E937fs3HgOnLa1GQxif2jBqwYx1rDwpNVbOi+YkV9tmWx8/TqqFlMrDKvNx9as1K SDcKuSjdZEKA1MQ2SpbRhiSBOinBBAJ1nOHSH8uC+nPnwb1ruqjj2+EP3FtgJr8N SrykMD6nMJcjr8l7ZDYvZbjuK4GyDgF92fdb4DqpJ4JK6k7D93X4wxyheP0mCXhU lW1oLQN1sUifRRFo9SueOZPIapX6lBVjeQclt7N/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9K5ROhMrHIsnkZYEkmWJykhMqX0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQwMGE4NzY3LWIwNWItNDYzYi1hZDg1LTEyMzJlYmUzYmU3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAONQwDQYJKoZIhvcNAQELBQADggEBADoxBfX/8G2gnSTTt3vsdZv5 aGNqDP5Lss0YONQKHQvhtJk9930Y0frgN+bUS6f64/+2FTH0yiRBzNA9RH8BYGwd JWk5FneQNdJY0je55cdHR8lsqWcqxWg9ezp8Tmscbzl4q0b/3AvHQZ//Htyxohtu 0zEZFvi/cqB70ebUiZ0xySh+RBstRd1qOcKh3uYxELqDLPGbkWbC1xYPw3EZaXel bpSfauFozJ5SbenhxpkGeCAWBr7tgviCBQTnMalWIR/gkrRj8miF/pxdl8VC/Dl9 FyW5qYgKCv0G6uE5ElP7n+TJqvLpu7YYG+loYP8MeXw6fElf4/vPsfx05TVuzmc= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:22 2025 by rpki-client