$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dcfbc1d0-af5d-4668-bd25-540cdc413dd6.roa File: dcfbc1d0-af5d-4668-bd25-540cdc413dd6.roa (raw, json) Hash identifier: DxckgeGJqtv+/WEj1uh78HCi90YShE3X1yZw/NTGdc4= Subject key identifier: E8:5D:B2:83:89:25:1D:88:06:FD:37:91:C5:27:88:5C:E2:05:DD:89 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 062BCA5587E1A898D9E6544E08A36E4628AA29C3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dcfbc1d0-af5d-4668-bd25-540cdc413dd6.roa Signing time: Fri 31 Oct 2025 01:36:46 +0000 ROA not before: Fri 31 Oct 2025 01:36:46 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3c62::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2b:ca:55:87:e1:a8:98:d9:e6:54:4e:08:a3:6e:46:28:aa:29:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:36:46 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c1c4ae50412bdf4b78b7921ab393d8404caaf64e6d293f37ae29d4d7774813d4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:68:ca:87:ad:8e:fe:e2:c8:be:17:c8:92:47: c6:3c:c3:bd:7b:8d:57:bc:c9:2c:86:96:c9:f4:c9: 3e:6b:63:b8:2c:64:00:fe:89:19:52:62:46:4f:ae: b9:0d:b7:69:fc:fd:3c:c3:e5:25:5e:8f:9b:79:fc: 10:79:81:92:a9:15:98:30:05:27:b7:b1:da:a6:bd: 2a:85:0d:39:5f:a7:f2:bf:ce:53:7d:6c:ee:89:3b: 82:b1:4a:36:30:34:2c:8b:ee:d2:fa:31:5c:90:6e: e4:70:b2:16:fb:49:b9:4c:31:35:f1:09:d9:87:1c: 74:1b:d0:b5:26:29:a5:0a:b9:7f:ab:95:e6:89:5a: d0:dc:57:4a:1d:1c:32:30:d7:48:98:6d:12:d5:3c: 64:10:2c:97:1f:8e:b1:c1:e3:c8:ab:b3:79:d0:58: b8:d7:c7:17:55:7b:42:be:a7:ab:77:10:e7:0f:7d: 32:53:8a:c9:88:e4:c9:ac:bd:03:23:49:d3:f3:82: b1:5a:59:99:68:92:00:46:5a:cc:d4:17:db:89:8f: 56:24:9a:bd:90:32:06:ee:81:70:cc:db:77:21:a8: d7:63:2c:6e:bb:f8:ea:51:14:2b:e4:f5:87:a4:bf: ec:a6:0a:6d:d0:4c:ba:79:c9:8a:7e:18:e0:2b:e4: bf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5D:B2:83:89:25:1D:88:06:FD:37:91:C5:27:88:5C:E2:05:DD:89 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dcfbc1d0-af5d-4668-bd25-540cdc413dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3c62::/47 Signature Algorithm: sha256WithRSAEncryption 17:c8:34:9b:54:6b:70:11:8b:e8:15:f2:6c:a5:22:32:59:5d: 1d:64:72:81:40:9d:61:62:ba:aa:30:47:9c:c9:e1:46:24:e2: 60:68:37:7e:67:89:b8:07:e9:0b:ec:1b:47:5f:8b:91:60:02: b6:e0:f0:9c:e5:81:c8:62:07:50:34:86:62:90:db:db:f8:cb: 64:e8:e8:2e:41:49:f3:66:10:a5:3e:35:0e:77:52:b6:51:f1: fc:38:c8:1a:47:70:e7:58:a1:27:8d:cf:7d:91:86:67:ce:c2: 57:13:8d:01:fe:e7:c2:ee:95:11:ce:fe:c4:a9:e9:4b:01:49: 03:11:85:7e:2e:12:25:4f:ce:59:ea:74:4f:22:66:c7:e8:e7: d0:d1:16:8b:f5:ce:e4:53:32:16:bb:d2:39:c6:12:f5:1d:c6: bd:05:21:c6:8b:38:b3:c3:c3:88:20:da:35:68:a4:5a:e9:3d: 99:fe:50:4e:12:3a:ec:7a:10:a4:65:d9:ac:2c:fd:36:ba:2a: c5:49:6e:94:fc:61:44:2a:24:af:11:91:47:52:48:89:b4:db: 5e:57:13:b3:b4:68:b5:0a:eb:61:ca:5c:bf:86:af:7e:e9:08: 95:eb:f3:08:dc:64:23:70:2f:cc:93:a6:7c:69:e8:5f:37:b8: 5c:56:5d:58 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBivKVYfhqJjZ5lROCKNuRiiqKcMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEzNjQ2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWM0YWU1MDQxMmJkZjRiNzhiNzkyMWFiMzkzZDg0MDRj YWFmNjRlNmQyOTNmMzdhZTI5ZDRkNzc3NDgxM2Q0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbaMqHrY7+4si+F8iSR8Y8w717jVe8ySyGlsn0yT5rY7gs ZAD+iRlSYkZPrrkNt2n8/TzD5SVej5t5/BB5gZKpFZgwBSe3sdqmvSqFDTlfp/K/ zlN9bO6JO4KxSjYwNCyL7tL6MVyQbuRwshb7SblMMTXxCdmHHHQb0LUmKaUKuX+r leaJWtDcV0odHDIw10iYbRLVPGQQLJcfjrHB48irs3nQWLjXxxdVe0K+p6t3EOcP fTJTismI5MmsvQMjSdPzgrFaWZlokgBGWszUF9uJj1Ykmr2QMgbugXDM23chqNdj LG67+OpRFCvk9Yekv+ymCm3QTLp5yYp+GOAr5L91AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6F2yg4klHYgG/TeRxSeIXOIF3YkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RjZmJjMWQwLWFmNWQtNDY2OC1iZDI1LTU0MGNkYzQxM2RkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPGIwDQYJKoZIhvcNAQELBQADggEBABfINJtUa3ARi+gV8mylIjJZ XR1kcoFAnWFiuqowR5zJ4UYk4mBoN35nibgH6QvsG0dfi5FgArbg8JzlgchiB1A0 hmKQ29v4y2To6C5BSfNmEKU+NQ53UrZR8fw4yBpHcOdYoSeNz32RhmfOwlcTjQH+ 58LulRHO/sSp6UsBSQMRhX4uEiVPzlnqdE8iZsfo59DRFov1zuRTMha70jnGEvUd xr0FIcaLOLPDw4gg2jVopFrpPZn+UE4SOux6EKRl2aws/Ta6KsVJbpT8YUQqJK8R kUdSSIm0215XE7O0aLUK62HKXL+Gr37pCJXr8wjcZCNwL8yTpnxp6F83uFxWXVg= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:55 2025 by rpki-client