$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1acade6c-0584-4bf9-b801-757c3cef276d.roa File: 1acade6c-0584-4bf9-b801-757c3cef276d.roa (raw, json) Hash identifier: MyP0J3e5+UMLJEJ/SXphBuXDoCDICykHQdBQiz5aDII= Subject key identifier: 8E:1E:83:66:36:C7:7F:D5:3F:CB:A9:3B:E9:78:70:16:7A:7E:7A:9A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3E22A7A08C8F4A04640C0934FEEBA36C0E1481CF Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1acade6c-0584-4bf9-b801-757c3cef276d.roa Signing time: Thu 30 Oct 2025 22:07:06 +0000 ROA not before: Thu 30 Oct 2025 22:07:06 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1ade::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:22:a7:a0:8c:8f:4a:04:64:0c:09:34:fe:eb:a3:6c:0e:14:81:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:07:06 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=835ccbc7c8336b740f63a9c2c766fd34b3c31de9cd58fe6eb41b071e0d3427be, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b7:7d:02:43:40:0f:a6:9e:9b:cc:84:fa:1f: 6e:23:95:81:01:91:ea:cb:be:8d:ac:bf:24:ca:13: 94:31:3a:17:2e:c6:2c:96:9d:65:83:60:3f:bd:1f: a4:cb:6e:fa:29:53:2d:1a:31:ee:4d:b9:95:a7:3b: c5:7c:c2:80:ea:f1:e7:79:de:47:c0:f9:f7:40:fa: a1:1c:19:47:7a:b6:fc:87:63:4f:b0:f8:3a:92:0a: 0a:3f:27:87:ca:09:03:d7:56:fe:6d:c6:f1:44:74: 84:bd:69:30:88:70:c8:75:69:78:01:83:cd:ba:ff: f0:b3:a6:69:c1:40:22:34:f6:d5:47:7c:67:67:37: c0:af:13:1f:4d:81:1d:a0:1a:44:5f:71:eb:e7:d9: b2:f1:4a:27:cc:56:31:37:7a:21:92:9b:02:47:8c: 67:ac:ce:39:50:cc:36:03:f2:de:4c:d0:ea:7d:74: 51:64:7a:2a:e1:b0:84:12:a0:d3:f5:1a:36:04:c9: 8d:d5:16:a2:20:d6:cc:24:ae:7a:d0:31:2d:63:4f: 7b:eb:c3:e6:81:d6:a6:34:b0:81:c6:c7:af:50:d5: f0:82:e6:e5:3e:ef:27:c2:0c:dc:8a:67:07:20:c8: cd:6e:43:da:01:08:c4:14:c8:38:b6:95:5f:41:37: d6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1E:83:66:36:C7:7F:D5:3F:CB:A9:3B:E9:78:70:16:7A:7E:7A:9A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1acade6c-0584-4bf9-b801-757c3cef276d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1ade::/47 Signature Algorithm: sha256WithRSAEncryption 77:5c:6c:8d:d3:5e:0b:9c:b8:41:e7:a4:f2:36:29:89:84:6c: e7:76:ff:31:a2:90:a5:58:30:cb:18:cb:70:42:3c:0b:0b:17: 4a:11:5e:81:83:a8:68:f4:1f:b2:c0:43:12:cc:b5:21:f7:61: d4:eb:df:da:a0:7a:59:94:73:f6:6b:54:f0:52:02:40:2c:e4: 45:28:85:48:37:9c:cf:99:35:cb:8b:8e:ca:54:5a:20:4a:8f: 6f:93:dc:29:dc:71:7e:e0:3d:6d:43:aa:b4:a4:4d:3e:80:42: 7e:8d:6b:50:da:1e:68:ce:f9:ad:50:47:0e:96:0a:d5:93:b3: 09:60:8c:c9:56:d2:3f:10:c0:1c:58:6f:53:51:20:5d:9f:f7: 7b:9e:d4:0d:2a:9b:cc:e7:df:87:6d:5b:7f:01:00:6e:0d:4f: b2:e6:b2:7f:a3:bb:26:28:5e:bc:47:92:fe:69:d1:17:b5:ad: 79:a7:8a:7a:4d:50:e0:2f:38:6f:e7:b7:04:f9:61:3f:b5:5a: a8:96:cd:d8:c6:69:f0:a9:c0:6d:36:c0:b6:29:38:cf:4d:33: a7:11:8f:27:1d:ce:33:d0:ff:e5:d3:ca:8c:ff:89:fd:d1:24: 83:6e:d8:eb:c4:51:9b:51:35:ef:8f:74:84:93:90:8a:4d:a7: e5:14:01:a8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPiKnoIyPSgRkDAk0/uujbA4Ugc8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIwNzA2WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzVjY2JjN2M4MzM2Yjc0MGY2M2E5YzJjNzY2ZmQzNGIz YzMxZGU5Y2Q1OGZlNmViNDFiMDcxZTBkMzQyN2JlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3t30CQ0APpp6bzIT6H24jlYEBkerLvo2svyTKE5QxOhcu xiyWnWWDYD+9H6TLbvopUy0aMe5NuZWnO8V8woDq8ed53kfA+fdA+qEcGUd6tvyH Y0+w+DqSCgo/J4fKCQPXVv5txvFEdIS9aTCIcMh1aXgBg826//CzpmnBQCI09tVH fGdnN8CvEx9NgR2gGkRfcevn2bLxSifMVjE3eiGSmwJHjGeszjlQzDYD8t5M0Op9 dFFkeirhsIQSoNP1GjYEyY3VFqIg1swkrnrQMS1jT3vrw+aB1qY0sIHGx69Q1fCC 5uU+7yfCDNyKZwcgyM1uQ9oBCMQUyDi2lV9BN9ZfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjh6DZjbHf9U/y6k76XhwFnp+epowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzFhY2FkZTZjLTA1ODQtNGJmOS1iODAxLTc1N2MzY2VmMjc2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGt4wDQYJKoZIhvcNAQELBQADggEBAHdcbI3TXgucuEHnpPI2KYmE bOd2/zGikKVYMMsYy3BCPAsLF0oRXoGDqGj0H7LAQxLMtSH3YdTr39qgelmUc/Zr VPBSAkAs5EUohUg3nM+ZNcuLjspUWiBKj2+T3CnccX7gPW1DqrSkTT6AQn6Na1Da HmjO+a1QRw6WCtWTswlgjMlW0j8QwBxYb1NRIF2f93ue1A0qm8zn34dtW38BAG4N T7Lmsn+juyYoXrxHkv5p0Re1rXmninpNUOAvOG/ntwT5YT+1WqiWzdjGafCpwG02 wLYpOM9NM6cRjycdzjPQ/+XTyoz/if3RJINu2OvEUZtRNe+PdISTkIpNp+UUAag= -----END CERTIFICATE-----Generated at Wed Nov 5 09:28:03 2025 by rpki-client