$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba2230bb-5597-4561-8aeb-4ff853bcaef8.roa File: ba2230bb-5597-4561-8aeb-4ff853bcaef8.roa (raw, json) Hash identifier: q/VDBCqfTawInxngRdNYouwFaUzwS5HqjfH+owBSFrQ= Subject key identifier: 99:9C:58:73:ED:7C:D6:44:D5:91:2E:E5:87:0D:B9:71:BB:B1:33:B5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0B4C1442BA6264A257F83C09614B587D164FB0A3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba2230bb-5597-4561-8aeb-4ff853bcaef8.roa Signing time: Fri 31 Oct 2025 06:29:00 +0000 ROA not before: Fri 31 Oct 2025 06:29:00 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:15e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4c:14:42:ba:62:64:a2:57:f8:3c:09:61:4b:58:7d:16:4f:b0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:29:00 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=fe2b3da2da44ca58c17c3ee743a1853d9000252d0abf07a23f7c82b3d825fc95, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:c2:b2:41:1b:e9:1e:bc:3e:37:42:55:e3: f3:fe:50:53:dd:b9:1b:36:49:fe:ae:44:e8:e4:d3: 62:6d:35:6f:bf:84:28:fb:4d:90:06:95:86:65:47: 2e:27:08:e2:fe:0e:52:88:8e:20:ad:e1:78:50:46: 2f:60:aa:5e:c4:41:a7:84:94:8d:d9:2b:42:84:50: b2:1c:ee:e0:35:8e:48:37:6f:25:1e:d2:d6:03:5a: bd:a5:f1:96:fa:bb:2b:ae:ac:0d:b0:58:4f:22:c0: cc:83:ce:a1:a1:de:0c:bb:49:d1:1f:ad:17:d6:7f: 4f:cc:91:dd:f7:34:2b:40:d3:77:67:d9:99:7b:02: ed:e8:e0:e1:b2:fe:51:bd:ee:1e:d1:0a:2e:f5:f2: 19:f1:b4:c9:58:d7:01:79:32:b1:e9:5b:4f:4d:3d: 4b:91:7e:35:08:5d:1c:bc:3c:a7:9b:dc:d0:d0:f8: 63:0b:1d:20:b1:a5:12:1a:b9:03:5e:a9:e1:62:d4: 33:ca:7c:a4:e5:0d:af:07:96:ed:24:fc:f7:b5:52: 1e:c8:96:6d:42:32:e9:cb:24:91:45:48:25:4b:9c: d9:8e:6c:18:d2:7c:41:b3:ec:d6:7d:94:34:f2:e4: e8:22:ba:2f:fd:a4:88:ef:27:bd:4b:cf:0c:65:da: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9C:58:73:ED:7C:D6:44:D5:91:2E:E5:87:0D:B9:71:BB:B1:33:B5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba2230bb-5597-4561-8aeb-4ff853bcaef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:15e0::/44 Signature Algorithm: sha256WithRSAEncryption 59:de:cc:2b:a8:63:98:bd:04:42:0c:2e:57:0e:34:6a:98:81: da:b8:12:53:fb:3c:10:f4:7a:08:67:ec:39:4e:9f:c5:0e:79: 2b:87:e7:68:c1:dc:d4:19:53:44:e2:ba:c6:47:f5:e5:29:37: cd:f2:72:23:87:07:0b:15:45:d7:dd:98:3e:13:19:d2:de:65: f5:32:85:d4:01:78:0b:e0:92:a1:b7:94:00:62:be:12:ee:b8: 92:ac:39:e3:f0:c4:b5:52:a9:d0:21:33:45:c9:1a:37:ad:6d: 95:47:16:49:79:68:bb:09:92:0a:35:19:70:0c:01:8c:d7:f6: 7a:41:54:a6:da:d0:92:5c:2a:76:17:9a:57:bf:a3:79:ff:02: 6e:0e:b4:85:06:45:25:a8:7c:27:dc:87:69:23:0b:0c:44:24: a0:ad:cb:cb:fa:2e:0e:af:70:9a:9a:fe:ce:09:1d:8d:7e:bc: f6:c4:1e:57:f3:60:9f:a2:13:5a:57:9b:64:0f:44:e8:56:74: dc:b2:be:df:76:cb:11:22:d0:7c:fd:88:d0:eb:2c:fc:76:0e: 23:55:46:e7:23:b3:b9:4c:c2:ca:6d:08:0e:81:b2:a6:ba:ed: 40:41:0d:cb:53:cf:b8:b4:7c:88:4c:f1:84:a1:20:2e:63:ad: 69:45:01:a9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC0wUQrpiZKJX+DwJYUtYfRZPsKMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYyOTAwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTJiM2RhMmRhNDRjYTU4YzE3YzNlZTc0M2ExODUzZDkw MDAyNTJkMGFiZjA3YTIzZjdjODJiM2Q4MjVmYzk1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnCMKyQRvpHrw+N0JV4/P+UFPduRs2Sf6uROjk02JtNW+/ hCj7TZAGlYZlRy4nCOL+DlKIjiCt4XhQRi9gql7EQaeElI3ZK0KEULIc7uA1jkg3 byUe0tYDWr2l8Zb6uyuurA2wWE8iwMyDzqGh3gy7SdEfrRfWf0/Mkd33NCtA03dn 2Zl7Au3o4OGy/lG97h7RCi718hnxtMlY1wF5MrHpW09NPUuRfjUIXRy8PKeb3NDQ +GMLHSCxpRIauQNeqeFi1DPKfKTlDa8Hlu0k/Pe1Uh7Ilm1CMunLJJFFSCVLnNmO bBjSfEGz7NZ9lDTy5Ogiui/9pIjvJ71Lzwxl2i/vAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmZxYc+181kTVkS7lhw25cbuxM7UwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JhMjIzMGJiLTU1OTctNDU2MS04YWViLTRmZjg1M2JjYWVmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAFeAwDQYJKoZIhvcNAQELBQADggEBAFnezCuoY5i9BEIMLlcONGqY gdq4ElP7PBD0eghn7DlOn8UOeSuH52jB3NQZU0TiusZH9eUpN83yciOHBwsVRdfd mD4TGdLeZfUyhdQBeAvgkqG3lABivhLuuJKsOePwxLVSqdAhM0XJGjetbZVHFkl5 aLsJkgo1GXAMAYzX9npBVKba0JJcKnYXmle/o3n/Am4OtIUGRSWofCfch2kjCwxE JKCty8v6Lg6vcJqa/s4JHY1+vPbEHlfzYJ+iE1pXm2QPROhWdNyyvt92yxEi0Hz9 iNDrLPx2DiNVRucjs7lMwsptCA6Bsqa67UBBDctTz7i0fIhM8YShIC5jrWlFAak= -----END CERTIFICATE-----Generated at Tue Nov 18 05:41:43 2025 by rpki-client