$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7399d525-3ed1-4b1e-81bf-ffb79816d7a4.roa File: 7399d525-3ed1-4b1e-81bf-ffb79816d7a4.roa (raw, json) Hash identifier: ED7ZKlhn92pi5OATtPm775CSK7mSRGzhfhEv6gP0IOc= Subject key identifier: 38:96:16:2F:B6:B0:B7:FD:47:D5:1D:5C:86:11:10:EE:5B:EC:F4:DA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4F7A3248F7D8B5DEF1FBCEE8E3D41F56FD7ED2DD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7399d525-3ed1-4b1e-81bf-ffb79816d7a4.roa Signing time: Fri 31 Oct 2025 00:23:27 +0000 ROA not before: Fri 31 Oct 2025 00:23:27 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:34be::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7a:32:48:f7:d8:b5:de:f1:fb:ce:e8:e3:d4:1f:56:fd:7e:d2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:23:27 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=7caa861dbd175a46be40ec39e1d1dca3bd0952a2eca2a019e38f3a7ed5ce8be7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ae:10:c1:15:ab:89:c3:24:0c:fa:24:e5:fd: 0b:b0:4e:58:0c:7c:23:1c:ea:12:c8:ef:2c:eb:c0: 83:6a:63:bf:a7:73:df:94:e9:1a:c0:50:06:b6:1b: 7c:49:e8:0f:52:67:eb:0d:f2:02:71:2f:2d:61:c1: 04:91:7a:12:46:9b:f6:3e:c0:e8:92:99:32:b1:c9: 72:50:55:76:bd:b1:54:da:42:27:a0:b0:39:2f:1b: 84:b4:ae:57:19:a0:b8:99:f7:f5:21:8c:b1:8a:c0: 52:bd:7a:07:1f:2d:7b:9a:9c:c1:3d:fc:d8:9d:65: a1:64:2c:3c:2f:21:0e:f4:5c:46:19:1e:a6:88:af: 67:3b:4d:cd:78:98:12:9f:3b:71:4c:84:c2:dc:a1: 5a:9d:ce:29:24:0a:a7:4c:3d:66:23:8f:58:20:8a: 01:79:0e:75:82:af:5a:c2:a0:83:b7:47:af:23:57: bf:d1:9b:c2:27:bc:5c:12:b6:cf:52:2e:59:b2:bc: cd:ae:9f:e9:64:b0:e6:1f:ac:16:16:8a:d4:b6:1d: 25:37:59:1f:00:f0:37:7d:13:ca:12:e4:fd:ad:91: 26:d4:1e:28:6c:27:ae:3a:2e:d7:1d:31:73:8c:86: 6b:95:9f:ca:3a:c3:2a:9c:2b:85:c3:26:5f:87:cb: 38:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:96:16:2F:B6:B0:B7:FD:47:D5:1D:5C:86:11:10:EE:5B:EC:F4:DA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7399d525-3ed1-4b1e-81bf-ffb79816d7a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:34be::/47 Signature Algorithm: sha256WithRSAEncryption 5a:73:34:6d:fd:76:ca:14:ab:3b:8c:06:82:42:6f:80:44:30: 82:c0:cd:ba:f2:0a:cf:8e:d3:22:d6:d4:ad:bf:a9:c5:74:1b: d2:46:bf:98:ff:78:25:ca:dd:ca:28:36:0c:2f:da:ea:cb:3a: bb:d0:37:42:9e:29:14:e0:91:ab:03:49:0d:de:bd:27:e0:fd: 65:01:96:28:fc:31:6c:f6:cd:8a:e8:e8:09:51:e8:43:77:fe: 9a:13:d3:34:ca:f2:62:8e:18:8f:e8:f5:98:48:69:e2:c5:4b: 5b:c3:dd:da:3b:1c:2b:9b:ef:07:74:61:82:3a:1a:50:00:e4: 0b:3b:1c:91:64:a3:d3:40:da:b2:d6:10:d2:f5:84:bf:91:bb: fe:aa:ff:0a:c8:34:ed:64:d0:56:22:c4:00:a3:84:df:ab:dd: 27:c9:7e:b3:63:7d:dd:9c:72:75:83:ee:76:65:4a:99:63:96: 91:89:ea:f4:12:93:fb:1e:91:1a:f5:1c:de:4c:2e:1a:91:6a: 06:ab:8c:c0:d9:02:28:37:30:3e:2e:86:72:60:68:bf:b8:a5: ab:53:a9:79:3e:af:49:b7:39:a8:1c:0a:73:9e:5d:f6:f2:4e: 09:f4:e5:dc:44:ed:98:8c:df:aa:64:50:7d:70:8d:92:ce:4b: 61:35:52:0a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT3oySPfYtd7x+87o49QfVv1+0t0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyMzI3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2FhODYxZGJkMTc1YTQ2YmU0MGVjMzllMWQxZGNhM2Jk MDk1MmEyZWNhMmEwMTllMzhmM2E3ZWQ1Y2U4YmU3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCarhDBFauJwyQM+iTl/QuwTlgMfCMc6hLI7yzrwINqY7+n c9+U6RrAUAa2G3xJ6A9SZ+sN8gJxLy1hwQSRehJGm/Y+wOiSmTKxyXJQVXa9sVTa QiegsDkvG4S0rlcZoLiZ9/UhjLGKwFK9egcfLXuanME9/NidZaFkLDwvIQ70XEYZ HqaIr2c7Tc14mBKfO3FMhMLcoVqdzikkCqdMPWYjj1ggigF5DnWCr1rCoIO3R68j V7/Rm8InvFwSts9SLlmyvM2un+lksOYfrBYWitS2HSU3WR8A8Dd9E8oS5P2tkSbU HihsJ646LtcdMXOMhmuVn8o6wyqcK4XDJl+Hyzi3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOJYWL7awt/1H1R1chhEQ7lvs9NowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzczOTlkNTI1LTNlZDEtNGIxZS04MWJmLWZmYjc5ODE2ZDdhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANL4wDQYJKoZIhvcNAQELBQADggEBAFpzNG39dsoUqzuMBoJCb4BE MILAzbryCs+O0yLW1K2/qcV0G9JGv5j/eCXK3cooNgwv2urLOrvQN0KeKRTgkasD SQ3evSfg/WUBlij8MWz2zYro6AlR6EN3/poT0zTK8mKOGI/o9ZhIaeLFS1vD3do7 HCub7wd0YYI6GlAA5As7HJFko9NA2rLWENL1hL+Ru/6q/wrINO1k0FYixACjhN+r 3SfJfrNjfd2ccnWD7nZlSpljlpGJ6vQSk/sekRr1HN5MLhqRagarjMDZAig3MD4u hnJgaL+4patTqXk+r0m3OagcCnOeXfbyTgn05dxE7ZiM36pkUH1wjZLOS2E1Ugo= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:57 2025 by rpki-client