$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f4d26094-5aec-4172-9f47-000fd6ce5523.roa File: f4d26094-5aec-4172-9f47-000fd6ce5523.roa (raw, json) Hash identifier: Om0K30+iJIRJG4/gwGB4hbfo4UzSjvA+oGPhX1d6388= Subject key identifier: 52:61:C9:BE:39:D4:97:50:10:44:3D:AA:D2:8D:1C:09:59:FD:44:9B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5D374D439DB45A7B4CC55A526282DD59867D38FF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f4d26094-5aec-4172-9f47-000fd6ce5523.roa Signing time: Fri 31 Oct 2025 02:57:07 +0000 ROA not before: Fri 31 Oct 2025 02:57:07 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1a94::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:37:4d:43:9d:b4:5a:7b:4c:c5:5a:52:62:82:dd:59:86:7d:38:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:57:07 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c4116183ff17bcb49c100d33a0ad880e8a2bc5855fd20a9099eea9da42189b27, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:90:70:bf:05:ee:0e:52:66:2f:b9:96:dc: 72:8e:dd:46:3f:b8:c7:65:e8:56:5c:0f:00:56:9b: 71:0f:ee:e9:0c:09:32:e1:58:9d:90:9b:e7:1b:b2: 99:09:9c:3e:2b:99:ee:67:02:f5:95:5e:b6:75:01: 6e:41:f6:46:c6:a4:8b:b8:2b:e3:02:58:71:a8:7b: f1:bf:29:cf:ad:db:ea:86:69:4d:1e:d2:03:ae:84: e6:2f:1d:14:de:ae:94:d1:a7:be:ae:95:d4:84:42: 00:79:00:4b:bd:3d:d8:50:b8:d4:c7:a2:eb:bf:b3: 5b:61:e9:ac:6f:f5:e5:bd:aa:42:86:06:30:0d:cf: 75:34:b0:50:c4:26:85:97:d1:01:29:1a:46:f9:46: 76:91:5f:4d:99:a5:63:04:cd:ea:0f:07:51:0f:33: ee:66:de:7f:c3:27:f0:62:c3:b6:49:3c:b6:0d:cd: be:0b:4c:f0:7c:9f:a8:b5:c1:c9:98:f1:0d:24:06: ef:7d:5d:13:4e:32:9b:48:48:28:cd:58:9f:00:97: fa:51:e3:8d:2f:1f:30:39:66:93:2f:17:08:a1:f0: 05:6c:c3:aa:b3:d6:b5:91:cb:ec:74:6f:78:de:9a: d4:07:9f:92:d9:82:c9:13:2c:51:5c:61:0c:87:6b: b5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:61:C9:BE:39:D4:97:50:10:44:3D:AA:D2:8D:1C:09:59:FD:44:9B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f4d26094-5aec-4172-9f47-000fd6ce5523.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1a94::/46 Signature Algorithm: sha256WithRSAEncryption 6b:fd:b5:87:4c:cf:28:90:71:6d:a4:5e:11:de:22:ea:fe:c9: ad:a2:1d:e4:0b:c4:11:da:bc:aa:d1:b2:4c:0c:8b:b3:9c:88: 54:3c:2b:3b:19:7c:cb:62:a2:66:3d:cd:15:40:d4:7a:2f:73: 0c:17:5d:19:e5:e4:b9:de:7d:96:35:f4:d9:b6:2f:38:1f:fd: 56:63:b3:78:e9:da:c4:44:93:ae:e4:6a:eb:cd:d2:38:84:a4: 17:a3:ac:63:bd:80:ae:0b:7f:6d:5d:45:68:50:fc:dd:98:71: cd:22:e4:07:59:b1:1b:f9:52:e1:4e:66:cb:0b:bc:a2:bc:94: d4:2d:43:d3:ef:51:2b:f4:d7:4d:9c:db:95:eb:76:39:dd:fd: 3c:2e:d8:4c:0d:d9:69:7e:a6:d8:8d:b7:32:54:e1:ea:cb:9a: ba:0a:43:29:c1:57:c6:8e:e7:fe:dc:3e:ea:be:1d:96:b0:25: 39:13:06:56:a9:0a:0d:66:7c:5c:46:f3:b5:f6:7e:97:85:2e: 94:d2:30:a2:56:1b:45:ee:ac:34:f2:59:d6:fc:26:8e:22:a1: 3c:cb:47:8e:12:54:aa:76:69:7c:26:02:57:82:bd:23:47:0c: 99:eb:1c:0e:83:6c:a7:2e:1f:02:bc:4f:8f:86:08:87:b7:47: fa:da:52:c5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXTdNQ520WntMxVpSYoLdWYZ9OP8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI1NzA3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNDExNjE4M2ZmMTdiY2I0OWMxMDBkMzNhMGFkODgwZThh MmJjNTg1NWZkMjBhOTA5OWVlYTlkYTQyMTg5YjI3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyOJBwvwXuDlJmL7mW3HKO3UY/uMdl6FZcDwBWm3EP7ukM CTLhWJ2Qm+cbspkJnD4rme5nAvWVXrZ1AW5B9kbGpIu4K+MCWHGoe/G/Kc+t2+qG aU0e0gOuhOYvHRTerpTRp76uldSEQgB5AEu9PdhQuNTHouu/s1th6axv9eW9qkKG BjANz3U0sFDEJoWX0QEpGkb5RnaRX02ZpWMEzeoPB1EPM+5m3n/DJ/Biw7ZJPLYN zb4LTPB8n6i1wcmY8Q0kBu99XRNOMptISCjNWJ8Al/pR440vHzA5ZpMvFwih8AVs w6qz1rWRy+x0b3jemtQHn5LZgskTLFFcYQyHa7UXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUmHJvjnUl1AQRD2q0o0cCVn9RJswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Y0ZDI2MDk0LTVhZWMtNDE3Mi05ZjQ3LTAwMGZkNmNlNTUyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAGpQwDQYJKoZIhvcNAQELBQADggEBAGv9tYdMzyiQcW2kXhHeIur+ ya2iHeQLxBHavKrRskwMi7OciFQ8KzsZfMtiomY9zRVA1HovcwwXXRnl5LnefZY1 9Nm2Lzgf/VZjs3jp2sREk67kauvN0jiEpBejrGO9gK4Lf21dRWhQ/N2Ycc0i5AdZ sRv5UuFOZssLvKK8lNQtQ9PvUSv0102c25Xrdjnd/Twu2EwN2Wl+ptiNtzJU4erL mroKQynBV8aO5/7cPuq+HZawJTkTBlapCg1mfFxG87X2fpeFLpTSMKJWG0XurDTy Wdb8Jo4ioTzLR44SVKp2aXwmAleCvSNHDJnrHA6DbKcuHwK8T4+GCIe3R/raUsU= -----END CERTIFICATE-----Generated at Tue Nov 18 08:22:34 2025 by rpki-client