$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a334a25a-ff31-4b47-bb80-3256beb8a283.roa File: a334a25a-ff31-4b47-bb80-3256beb8a283.roa (raw, json) Hash identifier: eKPZ4O+3RM9KBVuvCpbhFufOH38uP74kGNgMv15nyxI= Subject key identifier: 70:E9:7D:EA:68:5F:F4:8F:65:37:6E:4F:39:86:D7:F8:31:62:E7:13 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 400BCC9A28ED12E713873F0D1805F821027041AC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a334a25a-ff31-4b47-bb80-3256beb8a283.roa Signing time: Thu 30 Oct 2025 20:54:58 +0000 ROA not before: Thu 30 Oct 2025 20:54:58 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:13ba::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:0b:cc:9a:28:ed:12:e7:13:87:3f:0d:18:05:f8:21:02:70:41:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:54:58 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=aae35a3a0528d52deb1b47927c07d0c78e2a810dec99a4cbb223414403af5897, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:42:73:48:db:3e:df:9b:c1:3f:1e:a8:6c:08: 44:77:d0:8b:86:f7:30:d2:03:12:f3:08:9c:20:b1: 6b:a5:83:2f:90:22:32:d8:35:8e:ed:c0:ab:29:97: 09:ac:8c:61:70:cf:69:18:81:3c:f4:13:6c:c7:9f: c2:67:3b:10:fa:89:b6:79:a3:c5:f0:5c:ff:1b:91: 42:82:e9:47:5a:7c:eb:a6:d0:46:c0:c3:eb:ce:e6: 4f:b6:a3:46:5c:70:97:0c:97:dd:b6:12:fe:fa:c9: e2:6f:88:0a:3d:db:2c:cc:a8:10:de:a1:c8:1f:63: 6b:d9:0f:7f:59:4d:7e:cc:c4:4e:32:8b:90:03:18: bb:6e:fd:f8:07:ff:26:bb:49:ff:9f:df:de:b2:66: e8:a1:1d:6e:77:78:5e:ec:ce:e5:3c:2f:4a:3b:38: 8b:1a:e7:90:92:32:3f:20:d2:a0:7a:65:05:3f:ec: c1:53:00:c1:b2:fe:0f:b0:a2:00:96:82:b4:f5:f2: 5a:92:c7:4b:e8:ad:73:1c:a4:3a:f4:b9:51:6a:13: 84:fe:6a:7d:d6:d0:42:5e:83:67:fd:db:42:87:dd: e9:1c:cd:ec:04:14:a2:c7:ca:ee:1f:e4:29:ca:98: 71:bd:28:5a:8e:d8:92:35:e1:19:64:68:50:30:13: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E9:7D:EA:68:5F:F4:8F:65:37:6E:4F:39:86:D7:F8:31:62:E7:13 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a334a25a-ff31-4b47-bb80-3256beb8a283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:13ba::/47 Signature Algorithm: sha256WithRSAEncryption 2b:12:4a:7a:80:92:5d:9b:80:c1:97:98:66:7c:7c:3d:b8:72: c3:74:cb:04:23:e0:16:d7:f3:70:c1:19:90:f4:2f:8d:c8:4b: 6a:39:e3:d1:64:4e:d7:85:87:34:ad:11:1b:4a:4b:fc:96:70: dc:18:89:e8:53:46:ae:19:ef:a6:d9:f0:d7:a8:12:01:e1:fa: 76:14:4c:3e:ca:5f:36:2e:25:44:02:b9:32:65:fe:c1:fb:13: 62:f8:ce:11:a1:69:16:8b:55:78:3a:db:60:7f:55:61:95:13: 9a:66:6b:24:ca:07:58:d4:a6:9c:5a:24:24:83:cc:80:a6:a9: 8d:11:63:41:09:f6:6e:6f:ad:1c:41:53:5f:5b:a5:86:05:07: 0f:57:ff:90:78:42:c9:bb:f4:d7:9d:91:41:3e:63:c1:8a:8d: 0e:4b:32:90:fb:8e:b5:64:38:fe:7f:38:56:97:3e:54:76:00: 08:4a:8e:c0:eb:cf:fe:6f:0d:4a:e4:92:4e:44:27:ac:64:07: 3e:af:40:99:6a:d9:e9:f4:04:b6:0e:35:28:cf:f4:5f:da:14: e5:08:80:c0:e0:85:fa:e3:b6:79:da:4f:c5:6d:22:59:6e:50: 3e:4a:13:b5:ea:8f:ad:0f:87:a9:66:20:b0:6a:6c:76:86:33: 30:65:7e:fb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQAvMmijtEucThz8NGAX4IQJwQawwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjA1NDU4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYWUzNWEzYTA1MjhkNTJkZWIxYjQ3OTI3YzA3ZDBjNzhl MmE4MTBkZWM5OWE0Y2JiMjIzNDE0NDAzYWY1ODk3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYQnNI2z7fm8E/HqhsCER30IuG9zDSAxLzCJwgsWulgy+Q IjLYNY7twKsplwmsjGFwz2kYgTz0E2zHn8JnOxD6ibZ5o8XwXP8bkUKC6UdafOum 0EbAw+vO5k+2o0ZccJcMl922Ev76yeJviAo92yzMqBDeocgfY2vZD39ZTX7MxE4y i5ADGLtu/fgH/ya7Sf+f396yZuihHW53eF7szuU8L0o7OIsa55CSMj8g0qB6ZQU/ 7MFTAMGy/g+wogCWgrT18lqSx0vorXMcpDr0uVFqE4T+an3W0EJeg2f920KH3ekc zewEFKLHyu4f5CnKmHG9KFqO2JI14RlkaFAwE0PLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcOl96mhf9I9lN25POYbX+DFi5xMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EzMzRhMjVhLWZmMzEtNGI0Ny1iYjgwLTMyNTZiZWI4YTI4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAE7owDQYJKoZIhvcNAQELBQADggEBACsSSnqAkl2bgMGXmGZ8fD24 csN0ywQj4BbX83DBGZD0L43IS2o549FkTteFhzStERtKS/yWcNwYiehTRq4Z76bZ 8NeoEgHh+nYUTD7KXzYuJUQCuTJl/sH7E2L4zhGhaRaLVXg622B/VWGVE5pmayTK B1jUppxaJCSDzICmqY0RY0EJ9m5vrRxBU19bpYYFBw9X/5B4Qsm79NedkUE+Y8GK jQ5LMpD7jrVkOP5/OFaXPlR2AAhKjsDrz/5vDUrkkk5EJ6xkBz6vQJlq2en0BLYO NSjP9F/aFOUIgMDghfrjtnnaT8VtIlluUD5KE7Xqj60Ph6lmILBqbHaGMzBlfvs= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:45 2025 by rpki-client