$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32dfb921-718a-49f8-834e-f9a44a729f85.roa File: 32dfb921-718a-49f8-834e-f9a44a729f85.roa (raw, json) Hash identifier: edVrj8+O4JyaEKFwH94x/5SHlmxaxRBcddhyyzVMpcY= Subject key identifier: 42:B5:35:1A:C4:B5:CD:42:68:9C:4C:0D:8E:2C:B5:BD:54:6C:12:78 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 291C6DA5D84C775653C2CE99911FF880AE2B39E8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32dfb921-718a-49f8-834e-f9a44a729f85.roa Signing time: Fri 31 Oct 2025 04:08:42 +0000 ROA not before: Fri 31 Oct 2025 04:08:42 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:33cc::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1c:6d:a5:d8:4c:77:56:53:c2:ce:99:91:1f:f8:80:ae:2b:39:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:08:42 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=bf54d2845d7ef96709d0efd775e7bfbbef766d262d83e5aa0af21fe8d6308032, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:45:14:70:bd:3c:ac:12:27:4a:29:42:3a: bb:30:be:2a:0f:8b:cc:9e:e5:8f:e5:fe:c1:8c:2c: be:04:10:40:62:2f:46:cc:33:ae:8b:c0:c4:fe:2f: a3:ce:a6:9b:ec:c3:01:40:fd:80:30:3f:c7:db:d4: ec:1e:fd:0d:f6:d5:ee:56:a7:47:40:2f:2c:d1:a7: 50:61:a9:06:07:12:7e:4d:93:3d:6a:cb:5b:77:87: d1:c6:6b:3b:ef:41:29:24:72:d9:0a:c5:2a:ce:ad: 43:f9:84:86:94:cb:3f:5a:24:df:13:67:07:a1:dc: 2a:f0:31:64:bd:36:c1:62:77:ea:cf:38:19:e6:b7: a8:b8:51:b0:e8:06:e3:6e:16:e4:64:fc:4a:cb:e7: 17:ff:a6:bd:60:75:91:c9:3c:31:06:34:4e:b5:d9: 45:cb:c3:75:47:4e:a8:e3:b0:54:c8:47:bb:1a:d8: 05:66:ba:8c:d3:a6:84:7e:68:c7:0b:c7:ff:92:e8: ea:04:7c:e0:35:46:c7:4b:1e:97:98:56:65:8b:c3: 92:3c:31:59:aa:8d:90:fd:c7:37:8a:1f:18:38:4f: 40:eb:ae:1b:68:b5:0d:fa:1d:8e:d1:ca:93:c9:c8: aa:39:f4:fe:52:fc:4d:f7:47:c5:01:54:c1:9b:a7: df:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B5:35:1A:C4:B5:CD:42:68:9C:4C:0D:8E:2C:B5:BD:54:6C:12:78 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32dfb921-718a-49f8-834e-f9a44a729f85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:33cc::/46 Signature Algorithm: sha256WithRSAEncryption 93:8c:8f:f4:cb:6e:ef:39:c0:dd:69:21:7e:0a:49:11:c6:7f: fb:ff:4f:85:1b:ab:9e:3e:97:90:21:f5:3a:c2:a5:19:a2:a1: 51:f4:05:a6:fc:27:86:73:d1:e8:20:9f:5a:a7:6e:17:31:b6: 96:c9:4f:53:f9:83:6c:7c:0a:6b:9c:82:f3:cc:07:19:4e:07: 0a:2c:c1:da:9e:4a:c0:81:77:c0:c5:e0:a0:78:57:3b:69:1d: 89:e7:e8:94:fb:2b:0a:c1:10:98:1e:95:b4:2d:6e:ab:b4:29: 54:99:b1:2d:92:e2:c5:29:0f:94:14:5f:83:9e:fe:4e:3c:f5: 19:84:f1:84:34:89:97:2d:91:f4:49:7d:54:0d:f1:b8:4d:81: c6:7f:0f:09:8b:46:bb:cd:db:0c:81:49:b8:59:d8:61:e6:16: 36:2e:0a:39:35:15:6e:ee:fa:c5:ec:78:60:7c:6e:1b:04:4b: 74:03:cb:3f:14:65:31:38:b0:a5:03:4d:8d:9a:e4:9f:83:c4: 0a:51:10:48:5d:64:5c:7c:2f:11:ba:9d:b2:c4:6a:28:69:70: 67:67:14:85:08:ca:fe:e8:52:cc:eb:03:e4:d1:e2:de:a0:7d: 90:cc:46:ac:f0:a9:ff:e8:84:05:75:95:24:a1:27:12:5f:cf: dc:72:bf:41 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKRxtpdhMd1ZTws6ZkR/4gK4rOegwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQwODQyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjU0ZDI4NDVkN2VmOTY3MDlkMGVmZDc3NWU3YmZiYmVm NzY2ZDI2MmQ4M2U1YWEwYWYyMWZlOGQ2MzA4MDMyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgtEUUcL08rBInSilCOrswvioPi8ye5Y/l/sGMLL4EEEBi L0bMM66LwMT+L6POppvswwFA/YAwP8fb1Owe/Q321e5Wp0dALyzRp1BhqQYHEn5N kz1qy1t3h9HGazvvQSkkctkKxSrOrUP5hIaUyz9aJN8TZweh3CrwMWS9NsFid+rP OBnmt6i4UbDoBuNuFuRk/ErL5xf/pr1gdZHJPDEGNE612UXLw3VHTqjjsFTIR7sa 2AVmuozTpoR+aMcLx/+S6OoEfOA1RsdLHpeYVmWLw5I8MVmqjZD9xzeKHxg4T0Dr rhtotQ36HY7RypPJyKo59P5S/E33R8UBVMGbp99VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQrU1GsS1zUJonEwNjiy1vVRsEngwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzMyZGZiOTIxLTcxOGEtNDlmOC04MzRlLWY5YTQ0YTcyOWY4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAM8wwDQYJKoZIhvcNAQELBQADggEBAJOMj/TLbu85wN1pIX4KSRHG f/v/T4Ubq54+l5Ah9TrCpRmioVH0Bab8J4Zz0eggn1qnbhcxtpbJT1P5g2x8Cmuc gvPMBxlOBwoswdqeSsCBd8DF4KB4VztpHYnn6JT7KwrBEJgelbQtbqu0KVSZsS2S 4sUpD5QUX4Oe/k489RmE8YQ0iZctkfRJfVQN8bhNgcZ/DwmLRrvN2wyBSbhZ2GHm FjYuCjk1FW7u+sXseGB8bhsES3QDyz8UZTE4sKUDTY2a5J+DxApREEhdZFx8LxG6 nbLEaihpcGdnFIUIyv7oUszrA+TR4t6gfZDMRqzwqf/ohAV1lSShJxJfz9xyv0E= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:00 2025 by rpki-client