$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03b3ade5-8010-45e5-b4da-e933ad2812c2.roa File: 03b3ade5-8010-45e5-b4da-e933ad2812c2.roa (raw, json) Hash identifier: ICu82Oo+ytsh86FDmrpHSfxihcUqPXWA1vgLytxWL1Q= Subject key identifier: D8:11:6A:2F:47:BD:96:36:48:19:0F:26:6D:7C:61:5F:EA:AE:5E:EB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 200DFB99CD08B9AF80C36E30760080081668326F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03b3ade5-8010-45e5-b4da-e933ad2812c2.roa Signing time: Fri 31 Oct 2025 05:38:59 +0000 ROA not before: Fri 31 Oct 2025 05:38:59 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2968::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0d:fb:99:cd:08:b9:af:80:c3:6e:30:76:00:80:08:16:68:32:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:38:59 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=2462204d53bd59b78603bb5e3cac74c2291993bf794b1967ac1e53b8e66fa246, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:01:c4:52:d9:ff:5d:4a:d6:6d:87:b8:cf:2c: 86:eb:7d:ee:c3:2d:79:4b:d5:c1:44:de:e2:2e:5f: af:99:55:63:0c:9f:a3:76:f9:00:df:55:8b:44:ff: 69:fe:fd:7e:99:be:d1:d4:f4:b8:03:28:f0:f4:9b: 39:02:33:15:19:75:ef:1f:9b:1e:a3:68:e8:d0:7b: cb:ac:6b:4a:87:11:83:cd:5c:ed:92:be:c4:05:92: c8:42:e5:78:44:b9:ea:2c:4f:49:cc:ff:7c:6e:98: 01:3b:1d:1b:a4:ee:45:ac:d3:85:11:4f:fb:5e:55: f0:2a:ac:b4:14:cf:3c:85:5e:07:f6:6b:59:30:0d: 12:17:f5:c3:6f:18:0f:f9:3d:4b:9e:b7:f3:ca:d6: e0:58:c2:84:ca:ee:04:6f:96:eb:27:1a:76:c7:60: 5e:3c:55:49:b8:b6:30:fb:11:3c:64:97:53:05:55: a6:b1:cb:a4:6e:5e:6a:c5:0d:02:9c:18:f9:9a:54: d3:52:68:06:92:d6:66:2a:ea:cf:d9:c8:e9:9f:a0: 58:40:cd:dc:af:68:5c:03:24:1f:5a:8b:fd:64:86: 6a:4d:da:d1:08:53:e8:c2:f1:3a:88:ac:80:78:01: 3f:3d:f5:6c:00:08:1b:c7:aa:62:95:74:f8:d2:a6: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:11:6A:2F:47:BD:96:36:48:19:0F:26:6D:7C:61:5F:EA:AE:5E:EB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03b3ade5-8010-45e5-b4da-e933ad2812c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2968::/45 Signature Algorithm: sha256WithRSAEncryption 23:4d:26:a6:0a:4b:0a:7f:42:f1:39:dd:8d:39:08:56:d5:8b: f5:15:5d:91:0d:77:9c:04:2d:f6:e7:72:89:e9:f6:aa:bf:f6: 8b:c1:6d:a2:a8:64:7a:85:0d:13:85:11:38:a9:56:5a:99:a1: d9:49:5a:9e:59:31:b5:00:33:8f:d1:3a:03:9b:79:c4:31:48: 19:6d:72:58:3d:5b:ab:8b:b5:7b:75:6a:cc:ec:44:41:b0:88: 94:a6:89:cd:b5:d2:b5:4b:f1:97:1a:4a:d0:9e:fc:26:26:df: 77:f6:70:01:8a:2f:4a:50:9a:d0:ff:5f:8c:1d:03:42:4d:7f: a5:7d:46:4e:8a:0f:3e:40:c3:d8:59:c9:27:0b:f4:b7:60:54: 02:b1:f8:7c:64:fe:ae:12:f2:14:fc:8f:1a:a5:56:02:e4:fd: 8b:66:23:de:f9:0d:5e:63:57:d2:1f:f5:cf:bd:17:07:e2:ee: e8:be:87:8e:c3:87:ed:3d:3a:bd:b2:28:43:3e:c7:99:5d:7e: 11:9e:3c:43:5d:db:8e:83:ac:46:d5:8b:e5:41:42:17:af:5e: 62:1f:e4:9e:b7:1e:82:fe:dd:8d:5b:88:76:5d:f3:6e:74:d2: 1b:d3:1f:fe:49:96:9f:0f:ba:1d:3c:75:a9:cd:d4:56:6a:ee: bf:9a:29:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIA37mc0Iua+Aw24wdgCACBZoMm8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUzODU5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDYyMjA0ZDUzYmQ1OWI3ODYwM2JiNWUzY2FjNzRjMjI5 MTk5M2JmNzk0YjE5NjdhYzFlNTNiOGU2NmZhMjQ2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdAcRS2f9dStZth7jPLIbrfe7DLXlL1cFE3uIuX6+ZVWMM n6N2+QDfVYtE/2n+/X6ZvtHU9LgDKPD0mzkCMxUZde8fmx6jaOjQe8usa0qHEYPN XO2SvsQFkshC5XhEueosT0nM/3xumAE7HRuk7kWs04URT/teVfAqrLQUzzyFXgf2 a1kwDRIX9cNvGA/5PUuet/PK1uBYwoTK7gRvlusnGnbHYF48VUm4tjD7ETxkl1MF Vaaxy6RuXmrFDQKcGPmaVNNSaAaS1mYq6s/ZyOmfoFhAzdyvaFwDJB9ai/1khmpN 2tEIU+jC8TqIrIB4AT899WwACBvHqmKVdPjSprtzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2BFqL0e9ljZIGQ8mbXxhX+quXuswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzAzYjNhZGU1LTgwMTAtNDVlNS1iNGRhLWU5MzNhZDI4MTJjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAKWgwDQYJKoZIhvcNAQELBQADggEBACNNJqYKSwp/QvE53Y05CFbV i/UVXZENd5wELfbnconp9qq/9ovBbaKoZHqFDROFETipVlqZodlJWp5ZMbUAM4/R OgObecQxSBltclg9W6uLtXt1aszsREGwiJSmic210rVL8ZcaStCe/CYm33f2cAGK L0pQmtD/X4wdA0JNf6V9Rk6KDz5Aw9hZyScL9LdgVAKx+Hxk/q4S8hT8jxqlVgLk /YtmI975DV5jV9If9c+9Fwfi7ui+h47Dh+09Or2yKEM+x5ldfhGePENd246DrEbV i+VBQhevXmIf5J63HoL+3Y1biHZd82500hvTH/5Jlp8Puh08danN1FZq7r+aKSA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:43 2025 by rpki-client