$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/30bdc8fa-36f4-4808-978b-5636298cfb64.roa File: 30bdc8fa-36f4-4808-978b-5636298cfb64.roa (raw, json) Hash identifier: M1h0qSUbu38G2OJmprsy4O+PTWkReFN4s4AMkuf0C7I= Subject key identifier: AA:4C:2A:16:1C:14:D6:11:33:BE:FD:01:EF:13:57:02:11:82:BE:3C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 014BC240D20FDE5E55BBD5A7578E212A4C482B19 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/30bdc8fa-36f4-4808-978b-5636298cfb64.roa Signing time: Thu 30 Oct 2025 23:12:09 +0000 ROA not before: Thu 30 Oct 2025 23:12:09 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2bca::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4b:c2:40:d2:0f:de:5e:55:bb:d5:a7:57:8e:21:2a:4c:48:2b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:12:09 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=7521f34ec774ba8e8e54b7b5fbcaaee89edf92382c81e7060ab90a5721e443a5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a7:de:8f:b5:21:db:50:96:61:9c:2e:ec:5e: 59:6f:6a:9d:c6:6e:92:94:74:3c:c2:cf:ac:13:f0: af:a1:a7:8d:44:83:ad:6e:a8:b8:f8:05:b6:5a:9b: 59:52:c7:a9:57:8a:c2:7e:14:9c:16:40:f3:71:15: bf:d1:68:a4:72:3b:01:4e:b1:53:7c:3b:da:97:ba: ed:8c:62:d4:9d:5f:a4:de:6a:d2:47:a0:53:15:43: 2e:4b:a6:05:98:8d:5c:ac:97:8c:36:f8:7e:44:d3: d2:65:b0:2c:4a:8f:58:d2:54:cc:96:b0:07:c8:54: 43:c7:8b:c3:74:b5:f5:aa:06:c7:4a:f4:46:22:25: be:da:d2:8c:0c:b5:f7:7d:09:c4:f2:c6:27:5b:8a: f5:51:5c:a8:b6:99:d6:27:fc:f5:50:a7:07:55:24: a7:4f:be:cc:56:7b:3e:90:86:e4:f3:b5:7e:74:47: 5d:ff:08:63:f4:6d:1a:36:76:02:00:73:f7:7e:16: 72:06:9c:47:8f:5f:08:6c:aa:55:61:b7:4a:8e:14: f9:0f:02:78:d6:7c:5f:c0:9a:24:2a:28:be:b3:f7: 79:55:85:50:82:85:3b:a1:cb:53:3f:cd:05:95:c2: a4:db:c3:33:b9:83:04:79:fe:f5:bd:fc:99:02:5c: 1f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4C:2A:16:1C:14:D6:11:33:BE:FD:01:EF:13:57:02:11:82:BE:3C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/30bdc8fa-36f4-4808-978b-5636298cfb64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2bca::/47 Signature Algorithm: sha256WithRSAEncryption 63:b7:82:46:05:54:f6:a8:48:75:2f:9e:e6:fb:71:6f:3c:4a: 7a:30:d0:ad:e0:80:47:a8:f7:ed:23:77:87:13:f1:5c:4d:df: a4:c7:57:54:42:b8:13:89:eb:8c:d3:93:9d:b9:00:4a:87:95: 51:8b:bc:09:1e:bd:b4:22:2f:ee:8a:51:5f:ef:1b:62:19:a0: 21:e5:97:41:b9:fa:a8:7c:1a:ba:97:e5:00:fc:be:c6:26:6b: f4:a5:0d:d6:b6:77:b5:5e:b7:ff:07:0a:8d:46:e2:26:0e:ca: e1:97:d0:0f:87:0e:dc:6c:2f:7e:be:6e:f1:3a:52:63:4d:4a: 9d:9d:f4:67:23:37:15:29:1b:5d:e9:c2:e5:26:cc:45:73:2f: 85:16:a1:88:20:50:03:c7:58:42:3b:50:c0:94:5d:e7:08:34: 61:da:eb:c7:63:94:0b:85:3b:04:6f:33:aa:8f:77:a4:1a:94: de:35:9f:83:55:fe:16:d8:bb:8d:0e:59:d3:04:5b:42:1c:30: d2:95:57:89:cb:3e:b2:23:c9:79:9e:a9:56:1a:1b:aa:e1:e4: 4c:f4:37:f5:31:dc:b0:e8:1c:7d:ea:5a:0d:f7:08:7d:46:ea: 28:4e:e9:19:24:fd:a4:78:ca:82:36:95:cb:97:6b:6a:ce:61: 23:68:f7:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAUvCQNIP3l5Vu9WnV44hKkxIKxkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMxMjA5WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTIxZjM0ZWM3NzRiYThlOGU1NGI3YjVmYmNhYWVlODll ZGY5MjM4MmM4MWU3MDYwYWI5MGE1NzIxZTQ0M2E1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbp96PtSHbUJZhnC7sXllvap3GbpKUdDzCz6wT8K+hp41E g61uqLj4BbZam1lSx6lXisJ+FJwWQPNxFb/RaKRyOwFOsVN8O9qXuu2MYtSdX6Te atJHoFMVQy5LpgWYjVysl4w2+H5E09JlsCxKj1jSVMyWsAfIVEPHi8N0tfWqBsdK 9EYiJb7a0owMtfd9CcTyxidbivVRXKi2mdYn/PVQpwdVJKdPvsxWez6QhuTztX50 R13/CGP0bRo2dgIAc/d+FnIGnEePXwhsqlVht0qOFPkPAnjWfF/AmiQqKL6z93lV hVCChTuhy1M/zQWVwqTbwzO5gwR5/vW9/JkCXB8DAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqkwqFhwU1hEzvv0B7xNXAhGCvjwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzMwYmRjOGZhLTM2ZjQtNDgwOC05NzhiLTU2MzYyOThjZmI2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAK8owDQYJKoZIhvcNAQELBQADggEBAGO3gkYFVPaoSHUvnub7cW88 Snow0K3ggEeo9+0jd4cT8VxN36THV1RCuBOJ64zTk525AEqHlVGLvAkevbQiL+6K UV/vG2IZoCHll0G5+qh8GrqX5QD8vsYma/SlDda2d7Vet/8HCo1G4iYOyuGX0A+H DtxsL36+bvE6UmNNSp2d9GcjNxUpG13pwuUmzEVzL4UWoYggUAPHWEI7UMCUXecI NGHa68djlAuFOwRvM6qPd6QalN41n4NV/hbYu40OWdMEW0IcMNKVV4nLPrIjyXme qVYaG6rh5Ez0N/Ux3LDoHH3qWg33CH1G6ihO6Rkk/aR4yoI2lcuXa2rOYSNo98o= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:41 2025 by rpki-client