$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd0d679f-b172-4a89-b59e-43a5b2812de5.roa File: bd0d679f-b172-4a89-b59e-43a5b2812de5.roa (raw, json) Hash identifier: IyMxVPbKbpru5q9OD8ZBNvUjFJJIDSlbqQglhB1+jHs= Subject key identifier: 9E:8D:97:AF:8B:AE:4E:6B:17:A6:0C:89:6A:93:8D:BD:FB:7A:82:CD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2B84BD28F20C25D66B5790C3A076E4C343458A8A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd0d679f-b172-4a89-b59e-43a5b2812de5.roa Signing time: Thu 30 Oct 2025 21:40:28 +0000 ROA not before: Thu 30 Oct 2025 21:40:28 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1840::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:84:bd:28:f2:0c:25:d6:6b:57:90:c3:a0:76:e4:c3:43:45:8a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:40:28 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=df6e2a515579425d3ac7892ade371ed0686e56d2fa7414d9ef50744e00917b01, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:76:19:b2:2d:95:0e:f0:fe:f9:d2:5e:d2:47: 44:2a:c4:e7:9b:d2:a8:69:c2:6c:80:70:f1:78:b6: f3:9a:3d:36:a0:54:2a:09:53:1c:ad:67:8f:92:3a: ee:01:5a:ed:89:f0:cd:23:7f:54:01:7c:a0:c6:3e: 18:78:41:1c:5d:cb:8f:b4:d5:96:50:e9:65:2f:86: 49:f3:31:19:10:61:b3:e0:45:80:db:28:e6:fa:f8: 55:96:32:c8:15:9e:1e:76:86:07:a9:26:c8:a5:53: b4:e3:8d:f3:82:ac:cf:fd:c4:54:75:82:fe:09:91: 0e:3b:35:5a:1b:14:4f:4e:a0:ba:a8:fb:fc:ac:29: 12:3e:eb:ef:4d:99:6a:47:f5:63:28:40:bd:c6:c8: d6:a5:8e:59:a0:7f:dd:07:e3:c8:a7:f4:8c:71:09: e1:1c:8c:8f:70:fa:ac:91:d1:86:b9:c4:53:53:cb: 80:3b:fe:d4:1d:5f:0e:cf:4b:f0:4c:f5:d2:7d:a1: f1:13:ff:6c:dc:c0:29:26:a2:36:88:73:3f:38:c5: 89:ef:83:1e:07:2b:c6:d3:08:ab:bb:14:a8:d3:42: 0f:2a:93:84:5d:f9:7c:c4:75:e4:23:3d:36:46:1b: 9d:87:76:2e:65:1b:37:f2:c5:c8:44:cc:a0:da:a7: f8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8D:97:AF:8B:AE:4E:6B:17:A6:0C:89:6A:93:8D:BD:FB:7A:82:CD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd0d679f-b172-4a89-b59e-43a5b2812de5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1840::/47 Signature Algorithm: sha256WithRSAEncryption 79:18:21:b1:ac:bf:e7:e3:cd:9e:43:62:73:30:89:3b:be:54: b9:65:43:36:a9:51:1c:73:b3:ce:d5:01:3f:e1:04:7e:cd:83: 31:22:93:16:33:e2:7f:03:b0:ae:a5:18:38:e9:14:b5:fc:c2: 05:0e:ef:20:72:30:00:ab:06:1e:01:61:d3:ee:44:f5:be:91: 71:57:84:67:a8:f3:8f:11:bf:89:49:bf:d1:cd:31:1b:c0:e4: ac:86:b8:1c:ab:2d:85:ef:ed:2a:3d:a7:f9:7b:fe:34:e7:2a: 8a:8f:d4:4e:8c:7b:94:dc:70:9b:7e:24:1e:27:6e:84:7a:8d: 04:f0:4d:b8:ca:ab:14:fa:ba:1c:ca:6b:f6:5f:b5:e2:d6:77: 16:da:de:2a:6b:a9:49:c7:d8:31:3e:c1:f0:e8:fb:74:7c:71: a1:71:15:6f:09:8d:db:35:c1:3c:9a:0d:3d:e3:b0:66:7c:d2: 15:b3:61:92:40:cb:77:c5:28:17:ab:47:fd:a5:a3:30:0c:21: f6:bb:04:c4:7a:8b:69:6d:9e:f5:ac:13:e5:e5:e6:89:09:17: c3:92:26:b8:76:60:b3:10:7d:8e:87:1d:49:f6:58:0e:23:76: 9f:98:f4:0b:26:d2:f0:a2:f9:96:4f:72:06:8d:75:57:03:9b: a7:ac:f0:7b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK4S9KPIMJdZrV5DDoHbkw0NFioowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE0MDI4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjZlMmE1MTU1Nzk0MjVkM2FjNzg5MmFkZTM3MWVkMDY4 NmU1NmQyZmE3NDE0ZDllZjUwNzQ0ZTAwOTE3YjAxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOdhmyLZUO8P750l7SR0QqxOeb0qhpwmyAcPF4tvOaPTag VCoJUxytZ4+SOu4BWu2J8M0jf1QBfKDGPhh4QRxdy4+01ZZQ6WUvhknzMRkQYbPg RYDbKOb6+FWWMsgVnh52hgepJsilU7TjjfOCrM/9xFR1gv4JkQ47NVobFE9OoLqo +/ysKRI+6+9NmWpH9WMoQL3GyNaljlmgf90H48in9IxxCeEcjI9w+qyR0Ya5xFNT y4A7/tQdXw7PS/BM9dJ9ofET/2zcwCkmojaIcz84xYnvgx4HK8bTCKu7FKjTQg8q k4Rd+XzEdeQjPTZGG52Hdi5lGzfyxchEzKDap/gfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUno2Xr4uuTmsXpgyJapONvft6gs0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JkMGQ2NzlmLWIxNzItNGE4OS1iNTllLTQzYTViMjgxMmRlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGEAwDQYJKoZIhvcNAQELBQADggEBAHkYIbGsv+fjzZ5DYnMwiTu+ VLllQzapURxzs87VAT/hBH7NgzEikxYz4n8DsK6lGDjpFLX8wgUO7yByMACrBh4B YdPuRPW+kXFXhGeo848Rv4lJv9HNMRvA5KyGuByrLYXv7So9p/l7/jTnKoqP1E6M e5TccJt+JB4nboR6jQTwTbjKqxT6uhzKa/ZfteLWdxba3iprqUnH2DE+wfDo+3R8 caFxFW8Jjds1wTyaDT3jsGZ80hWzYZJAy3fFKBerR/2lozAMIfa7BMR6i2ltnvWs E+Xl5okJF8OSJrh2YLMQfY6HHUn2WA4jdp+Y9Asm0vCi+ZZPcgaNdVcDm6es8Hs= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:28 2025 by rpki-client