$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/330601f2-4397-40b3-8907-a8c1b45d083f.roa File: 330601f2-4397-40b3-8907-a8c1b45d083f.roa (raw, json) Hash identifier: aT57MsQPGOuwH3jGCIYo0+06GLS3uGvbmmTGC90+AXk= Subject key identifier: 11:38:D4:13:18:34:12:EE:FC:D5:5E:0F:84:C2:66:34:B4:11:E6:84 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 02B7EA80FF618ACB08035824A402167299D1B77E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/330601f2-4397-40b3-8907-a8c1b45d083f.roa Signing time: Fri 31 Oct 2025 07:38:42 +0000 ROA not before: Fri 31 Oct 2025 07:38:42 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2680::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b7:ea:80:ff:61:8a:cb:08:03:58:24:a4:02:16:72:99:d1:b7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:38:42 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=963be43baee53fd936d01dd4438a597644243ada6e52d5f90591178c057cc9b1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:2e:98:d5:90:a6:4b:4f:51:c7:e7:cd:9c: 9e:4d:95:c2:ba:1c:00:f9:03:2e:c6:a3:e1:3c:75: 42:04:fc:96:74:ad:d1:19:7b:b9:91:cf:a7:81:14: b3:22:48:1e:f3:63:61:d0:f1:77:eb:fc:de:24:2a: 52:37:01:ea:97:6b:9b:5c:bc:6b:99:cc:58:ac:67: 2b:2e:e8:34:e3:da:0b:d0:3a:85:30:ec:03:5e:f5: f6:8e:29:7c:12:d1:59:12:0d:03:c6:97:20:d0:19: 78:bf:11:88:60:a9:81:18:17:b7:7f:96:a9:72:87: b1:b8:ab:e0:bf:2d:58:6b:e0:4b:5f:d0:42:44:5a: 6e:75:1d:48:22:e2:8f:7b:09:47:fe:71:62:e8:2f: e1:7c:16:19:26:49:96:c8:22:05:58:59:ad:f2:df: 89:14:58:b0:66:21:34:46:4a:16:d8:4e:05:ee:38: e4:dd:b3:57:2e:bc:5f:1f:33:e8:4c:93:67:85:d9: c0:08:32:11:a4:fa:67:65:fc:1b:76:f4:ad:f8:97: 06:97:c8:27:da:46:68:8e:64:74:0f:c8:87:80:14: 0c:32:64:7a:60:a7:43:9b:21:f7:66:30:1d:46:74: d4:33:05:d1:31:28:a0:42:cd:92:1a:1e:f2:5e:bf: 49:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:38:D4:13:18:34:12:EE:FC:D5:5E:0F:84:C2:66:34:B4:11:E6:84 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/330601f2-4397-40b3-8907-a8c1b45d083f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2680::/42 Signature Algorithm: sha256WithRSAEncryption 58:e0:5b:a5:a9:8e:ba:a1:6d:73:7e:2d:82:cf:9f:bf:1c:ef: a7:23:b3:0a:bf:73:44:1d:20:2a:bc:7b:2e:06:b7:b8:14:90: 1b:ec:a4:01:1e:b4:3a:be:13:e7:33:a3:45:45:86:88:5d:fd: a4:4a:92:85:57:65:b2:a8:40:8c:f6:6a:cf:19:16:ee:89:68: 77:58:f5:96:31:72:1c:1c:28:f6:d5:c8:08:ec:9c:fa:c3:f0: 9c:1c:ad:9b:9f:14:59:10:cd:1a:f9:80:cb:26:ef:99:97:f2: e8:dd:b6:e8:fb:ed:66:47:5d:3c:dd:ad:47:81:ff:c0:75:94: ab:40:ca:bd:be:c9:d5:69:6d:eb:b5:af:d1:82:d9:79:49:3d: e3:92:dd:0d:eb:e7:86:8a:da:77:9b:e1:f9:67:68:e2:13:20: 66:06:35:66:59:fd:da:c8:8b:98:e3:a3:a5:f8:8a:d7:92:1b: bc:30:3b:5a:ec:a9:cf:d0:c6:50:0c:0c:ae:7c:9d:9e:1a:a4: ee:24:70:8f:e5:e0:0c:79:ce:09:ba:9f:0c:0f:a1:87:b1:4a: 1e:44:3d:0a:51:6e:b2:8a:53:dd:8e:56:c0:dd:46:fd:9a:91: 04:3a:ba:4c:ea:e0:2d:ea:9d:05:4d:7f:35:ad:b0:8e:d3:eb: 5a:ee:ae:cf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUArfqgP9hissIA1gkpAIWcpnRt34wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDczODQyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjNiZTQzYmFlZTUzZmQ5MzZkMDFkZDQ0MzhhNTk3NjQ0 MjQzYWRhNmU1MmQ1ZjkwNTkxMTc4YzA1N2NjOWIxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsDi6Y1ZCmS09Rx+fNnJ5NlcK6HAD5Ay7Go+E8dUIE/JZ0 rdEZe7mRz6eBFLMiSB7zY2HQ8Xfr/N4kKlI3AeqXa5tcvGuZzFisZysu6DTj2gvQ OoUw7ANe9faOKXwS0VkSDQPGlyDQGXi/EYhgqYEYF7d/lqlyh7G4q+C/LVhr4Etf 0EJEWm51HUgi4o97CUf+cWLoL+F8FhkmSZbIIgVYWa3y34kUWLBmITRGShbYTgXu OOTds1cuvF8fM+hMk2eF2cAIMhGk+mdl/Bt29K34lwaXyCfaRmiOZHQPyIeAFAwy ZHpgp0ObIfdmMB1GdNQzBdExKKBCzZIaHvJev0ljAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUETjUExg0Eu781V4PhMJmNLQR5oQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzMzMDYwMWYyLTQzOTctNDBiMy04OTA3LWE4YzFiNDVkMDgzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAJAAJoAwDQYJKoZIhvcNAQELBQADggEBAFjgW6WpjrqhbXN+LYLPn78c 76cjswq/c0QdICq8ey4Gt7gUkBvspAEetDq+E+czo0VFhohd/aRKkoVXZbKoQIz2 as8ZFu6JaHdY9ZYxchwcKPbVyAjsnPrD8JwcrZufFFkQzRr5gMsm75mX8ujdtuj7 7WZHXTzdrUeB/8B1lKtAyr2+ydVpbeu1r9GC2XlJPeOS3Q3r54aK2neb4flnaOIT IGYGNWZZ/drIi5jjo6X4iteSG7wwO1rsqc/QxlAMDK58nZ4apO4kcI/l4Ax5zgm6 nwwPoYexSh5EPQpRbrKKU92OVsDdRv2akQQ6ukzq4C3qnQVNfzWtsI7T61rurs8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:49 2025 by rpki-client