$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3255e3a7-c166-47ec-9393-706d2ba4d752.roa File: 3255e3a7-c166-47ec-9393-706d2ba4d752.roa (raw, json) Hash identifier: TcFZZstso3M+czEiCuZQHbSB5uksPGltl5wVidP11TQ= Subject key identifier: ED:87:CA:7F:D5:34:EB:55:6A:52:53:F8:6C:BA:B3:55:47:35:52:92 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5BF152883EA64C7B99891DEA84134695C8A6EC71 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3255e3a7-c166-47ec-9393-706d2ba4d752.roa Signing time: Thu 30 Oct 2025 21:23:58 +0000 ROA not before: Thu 30 Oct 2025 21:23:58 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:168a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f1:52:88:3e:a6:4c:7b:99:89:1d:ea:84:13:46:95:c8:a6:ec:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:23:58 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=42ff898ef0ac3920382de9ca7bd97aaa68543c140c544aaad1b03fad11e1b1a8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bc:66:a2:3a:0b:1e:5c:95:ed:54:16:08:84: 93:62:74:86:30:96:2a:26:31:fe:06:a1:60:4c:23: 32:d7:2e:c0:2d:ba:cd:74:37:1b:f3:81:06:28:49: d8:73:0d:20:18:07:58:7f:72:fb:27:9a:1b:45:fb: ab:69:90:78:48:be:7d:29:de:3f:f4:a0:41:c5:56: 8b:fb:a4:5c:0e:22:b9:b2:fe:23:01:f9:17:55:87: 5c:08:9c:a5:00:41:f1:82:92:a5:2f:4b:c0:20:38: 29:ab:fa:73:12:24:a7:19:b6:d9:9a:fe:00:b2:48: 31:7c:43:e9:65:25:75:33:4f:f5:ad:8e:aa:15:0c: be:74:c5:01:5d:c9:35:5c:c3:15:97:da:38:9c:aa: 43:15:bc:b6:80:90:84:ac:10:50:26:ce:fc:ea:1d: b3:17:5b:7f:f4:1a:ea:77:87:78:38:36:89:6d:b9: 99:ea:7b:40:ad:ba:09:19:f4:76:7d:9c:4a:ba:7d: 1b:37:41:12:de:c4:ac:e2:64:58:47:23:c6:2c:b2: da:28:35:2c:ad:1f:0f:ea:5d:29:6e:b2:b3:75:68: e5:30:8f:00:cf:4f:03:11:cb:6c:7a:3c:2d:55:69: 99:28:f6:5f:75:bf:d2:89:4d:00:4c:e8:0b:03:59: ca:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:87:CA:7F:D5:34:EB:55:6A:52:53:F8:6C:BA:B3:55:47:35:52:92 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3255e3a7-c166-47ec-9393-706d2ba4d752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:168a::/47 Signature Algorithm: sha256WithRSAEncryption 4f:ea:fd:42:c1:c9:fe:c2:d5:19:fb:06:f2:2f:3d:13:ae:20: aa:65:9e:c8:47:a0:7f:08:4b:fb:26:bd:61:c5:8e:8b:d4:44: 3b:8f:5d:77:8b:87:1f:51:7e:cc:e9:a6:ab:c5:4f:f8:bb:44: 42:a8:c2:33:b4:f9:68:fe:80:c1:5b:65:33:ec:4b:19:9f:de: 4b:35:0c:6b:d2:0d:2e:44:5f:5a:1f:94:04:64:0a:0a:80:0c: e1:43:59:87:5d:83:7f:e0:fd:d2:2f:23:3d:3c:b7:b3:e9:0b: c6:f7:c0:14:49:5e:f4:35:19:04:4b:41:6f:94:95:62:11:94: b2:98:4a:0f:63:03:c1:b7:19:ee:61:03:13:c4:21:65:12:72: 8b:a1:32:11:da:b8:cd:60:d8:aa:d8:83:ac:3a:a4:19:70:74: 98:33:49:87:d2:58:b8:22:99:c5:4c:5d:db:28:b1:a6:bd:bd: dd:9c:7f:06:c3:1f:58:87:c5:33:5f:a3:fc:b2:cd:68:3c:2d: 66:ea:7a:e0:9e:6a:a5:9a:df:f8:de:20:9f:a0:47:64:c6:40: 2b:2f:54:68:e7:7b:36:b3:e8:29:37:93:f5:99:1c:24:3f:a2: ee:04:f3:2d:2f:63:b1:9c:5f:62:65:3d:73:c8:ef:30:55:71: 69:22:62:a8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUW/FSiD6mTHuZiR3qhBNGlcim7HEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyMzU4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmZmODk4ZWYwYWMzOTIwMzgyZGU5Y2E3YmQ5N2FhYTY4 NTQzYzE0MGM1NDRhYWFkMWIwM2ZhZDExZTFiMWE4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFvGaiOgseXJXtVBYIhJNidIYwliomMf4GoWBMIzLXLsAt us10NxvzgQYoSdhzDSAYB1h/cvsnmhtF+6tpkHhIvn0p3j/0oEHFVov7pFwOIrmy /iMB+RdVh1wInKUAQfGCkqUvS8AgOCmr+nMSJKcZttma/gCySDF8Q+llJXUzT/Wt jqoVDL50xQFdyTVcwxWX2jicqkMVvLaAkISsEFAmzvzqHbMXW3/0Gup3h3g4Nolt uZnqe0CtugkZ9HZ9nEq6fRs3QRLexKziZFhHI8YsstooNSytHw/qXSlusrN1aOUw jwDPTwMRy2x6PC1VaZko9l91v9KJTQBM6AsDWcptAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7YfKf9U061VqUlP4bLqzVUc1UpIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzMyNTVlM2E3LWMxNjYtNDdlYy05MzkzLTcwNmQyYmE0ZDc1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFoowDQYJKoZIhvcNAQELBQADggEBAE/q/ULByf7C1Rn7BvIvPROu IKplnshHoH8IS/smvWHFjovURDuPXXeLhx9RfszppqvFT/i7REKowjO0+Wj+gMFb ZTPsSxmf3ks1DGvSDS5EX1oflARkCgqADOFDWYddg3/g/dIvIz08t7PpC8b3wBRJ XvQ1GQRLQW+UlWIRlLKYSg9jA8G3Ge5hAxPEIWUScouhMhHauM1g2KrYg6w6pBlw dJgzSYfSWLgimcVMXdsosaa9vd2cfwbDH1iHxTNfo/yyzWg8LWbqeuCeaqWa3/je IJ+gR2TGQCsvVGjnezaz6Ck3k/WZHCQ/ou4E8y0vY7GcX2JlPXPI7zBVcWkiYqg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:29 2025 by rpki-client