$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33589939-844a-4010-87b8-7aed12f83b03.roa File: 33589939-844a-4010-87b8-7aed12f83b03.roa (raw, json) Hash identifier: GfJDaVL+BU7x0vlPc4gm8Jq8KthzCDGB6Be6HjdrVrs= Subject key identifier: 22:B7:05:74:13:8E:10:25:AB:69:0B:85:BA:2A:D9:C1:8D:45:B9:79 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1E73645B3DD6A6FC2563D8A6A96A7B9CF9BC9B34 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33589939-844a-4010-87b8-7aed12f83b03.roa Signing time: Fri 31 Oct 2025 02:27:11 +0000 ROA not before: Fri 31 Oct 2025 02:27:11 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1464::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:73:64:5b:3d:d6:a6:fc:25:63:d8:a6:a9:6a:7b:9c:f9:bc:9b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:27:11 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=5a67f6b98786740fc0536f5329c3b82b70a2aa305ed33d8a3e1fc56ce9de2235, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b3:b5:9d:7d:ef:9a:12:d6:94:fc:f8:56:6b: c2:d0:02:1a:f9:00:8e:0f:1e:18:9c:47:5c:d4:d3: 29:cb:04:c7:42:80:50:26:c3:53:8b:d1:70:21:24: 92:f0:e5:2f:38:60:c2:d2:45:63:21:4a:79:84:ee: 7e:da:e0:10:2b:31:83:4a:f0:f6:56:8a:73:8c:18: c9:e3:8b:37:ff:fd:ad:31:79:62:15:31:b5:8e:a8: cd:d0:12:3b:18:a1:ba:a3:ed:f9:b6:eb:00:d4:c7: 2e:06:51:e4:27:04:01:fd:aa:6f:61:fc:e4:6e:d3: 8c:b2:d3:14:c3:f1:af:12:b6:c4:2e:d8:f5:24:a0: b3:32:5c:d2:30:74:f2:46:41:d7:76:35:c9:60:c1: 67:b0:89:68:1b:8f:de:57:ab:bb:4f:bb:e1:23:89: b6:de:2d:cb:70:26:56:fb:a8:45:88:c6:a3:7c:04: fc:20:66:ff:46:a1:d9:32:6a:bd:c0:79:c8:a5:51: df:df:56:c8:c3:9a:07:96:1d:8a:c9:09:bb:f7:6d: c8:eb:b3:62:5b:10:31:4a:13:56:4a:0d:31:f6:f7: e3:f0:11:c5:7b:e9:61:2a:83:e6:a7:f0:7c:94:96: 1c:53:58:f9:bb:a2:15:33:25:5f:e1:34:95:86:54: 55:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B7:05:74:13:8E:10:25:AB:69:0B:85:BA:2A:D9:C1:8D:45:B9:79 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33589939-844a-4010-87b8-7aed12f83b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1464::/46 Signature Algorithm: sha256WithRSAEncryption a1:39:08:80:e0:6d:12:9f:c0:97:2b:1d:93:b8:3a:54:41:c0: fc:55:1d:75:eb:0c:f8:04:8d:41:9d:b6:00:cc:ce:7e:50:b8: 4e:1c:1c:54:be:23:2d:78:e2:60:01:9c:6f:1a:88:67:ec:7f: b2:41:cb:78:e1:2a:4b:43:aa:e9:43:2f:47:91:c7:98:92:f9: 92:17:fb:8f:b5:9b:a4:93:af:83:c8:38:c9:35:78:ac:6f:14: 63:ff:a8:8a:8f:7e:d1:f8:94:b5:81:39:27:cf:95:8e:34:c2: ed:2e:94:d6:8d:84:14:47:bd:d9:9b:38:11:87:fb:51:52:f4: b9:1e:9f:4d:02:10:71:65:95:2f:24:89:b8:b5:7b:f1:fd:38: 15:26:d7:94:74:d5:59:e2:0f:29:37:a4:42:22:61:26:30:35: d3:ce:5d:4f:c5:1e:ab:6d:20:4a:a9:81:fb:9f:8a:7a:bc:f3: c4:c0:c5:bb:86:ae:8e:6e:db:a2:70:1d:53:36:81:9a:fc:7f: 3d:fd:9d:cd:de:c0:4f:17:b1:f0:a0:bd:72:b8:57:3d:6b:07: 9a:84:12:1b:b5:18:58:c2:1b:0c:b0:b3:4a:00:4f:df:63:06: b9:fd:c3:4c:3f:68:22:b9:b7:ed:1d:e5:fc:60:88:fe:b1:5d: 09:27:38:0f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHnNkWz3WpvwlY9imqWp7nPm8mzQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDIyNzExWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YTY3ZjZiOTg3ODY3NDBmYzA1MzZmNTMyOWMzYjgyYjcw YTJhYTMwNWVkMzNkOGEzZTFmYzU2Y2U5ZGUyMjM1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgs7Wdfe+aEtaU/PhWa8LQAhr5AI4PHhicR1zU0ynLBMdC gFAmw1OL0XAhJJLw5S84YMLSRWMhSnmE7n7a4BArMYNK8PZWinOMGMnjizf//a0x eWIVMbWOqM3QEjsYobqj7fm26wDUxy4GUeQnBAH9qm9h/ORu04yy0xTD8a8StsQu 2PUkoLMyXNIwdPJGQdd2NclgwWewiWgbj95Xq7tPu+EjibbeLctwJlb7qEWIxqN8 BPwgZv9Godkyar3AecilUd/fVsjDmgeWHYrJCbv3bcjrs2JbEDFKE1ZKDTH29+Pw EcV76WEqg+an8HyUlhxTWPm7ohUzJV/hNJWGVFU7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIrcFdBOOECWraQuFuirZwY1FuXkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzMzNTg5OTM5LTg0NGEtNDAxMC04N2I4LTdhZWQxMmY4M2IwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAFGQwDQYJKoZIhvcNAQELBQADggEBAKE5CIDgbRKfwJcrHZO4OlRB wPxVHXXrDPgEjUGdtgDMzn5QuE4cHFS+Iy144mABnG8aiGfsf7JBy3jhKktDqulD L0eRx5iS+ZIX+4+1m6STr4PIOMk1eKxvFGP/qIqPftH4lLWBOSfPlY40wu0ulNaN hBRHvdmbOBGH+1FS9Lken00CEHFllS8kibi1e/H9OBUm15R01VniDyk3pEIiYSYw NdPOXU/FHqttIEqpgfufinq888TAxbuGro5u26JwHVM2gZr8fz39nc3ewE8XsfCg vXK4Vz1rB5qEEhu1GFjCGwyws0oAT99jBrn9w0w/aCK5t+0d5fxgiP6xXQknOA8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:24 2025 by rpki-client