$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33ab4a80-214b-4a31-b283-604289f57474.roa File: 33ab4a80-214b-4a31-b283-604289f57474.roa (raw, json) Hash identifier: oIP7vmGH5wP+Wfr7k2B5zXUNNgR6SLnqQGHTQp6CEcY= Subject key identifier: 76:2C:68:8F:8A:C7:63:45:F0:B0:31:B3:7F:F4:71:60:56:88:A6:AA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5E8A35E0765C93C66BA0912439FAF77664F481E0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33ab4a80-214b-4a31-b283-604289f57474.roa Signing time: Thu 30 Oct 2025 22:42:10 +0000 ROA not before: Thu 30 Oct 2025 22:42:10 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1fca::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8a:35:e0:76:5c:93:c6:6b:a0:91:24:39:fa:f7:76:64:f4:81:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:42:10 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=7e5b050f2d516f26b531b55ae8f0eabd896fc4b2f163cb26b450e29d624c3824, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9a:29:0a:91:f4:78:8b:fc:7a:b3:33:7d:c7: 9b:c8:dd:33:dd:8c:1f:55:85:45:2c:6c:27:87:a9: a3:25:fd:a6:e7:e0:0a:82:28:38:50:f7:69:dd:7b: 6e:b1:0f:bf:c3:53:58:e4:d9:4f:06:59:1e:9a:08: d1:00:46:a9:63:d0:1d:a0:44:42:e5:72:74:d9:b6: 8b:3d:0f:fb:1e:ec:3b:38:48:52:6a:e1:ac:20:e8: a0:6b:3b:ec:e5:e4:36:32:a0:14:74:fa:6c:27:1d: e4:a0:45:d2:3c:5e:06:06:51:d2:9f:ac:e6:81:4a: 6b:59:74:70:cd:f1:1f:b0:cd:be:b4:16:57:1b:e2: 0d:f5:da:52:1e:c4:21:31:b4:a7:65:e0:a9:02:27: 0c:98:88:d6:2d:81:ec:e4:70:38:01:a0:ad:14:53: 77:fa:a5:3e:20:9b:f5:d8:53:a2:0f:40:11:17:df: 32:c0:a1:4e:07:d2:45:bd:e0:77:d3:cb:86:17:e0: 93:d4:ae:24:00:e8:f0:df:3d:13:86:25:2d:bb:18: e1:68:65:2f:cd:31:5f:ac:e7:9a:45:3a:0a:09:74: 37:ec:ee:3d:d8:d5:16:5c:b4:4a:1d:d3:6d:09:ec: b8:40:15:0e:49:59:ad:2b:99:61:a7:4b:24:05:05: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2C:68:8F:8A:C7:63:45:F0:B0:31:B3:7F:F4:71:60:56:88:A6:AA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33ab4a80-214b-4a31-b283-604289f57474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1fca::/47 Signature Algorithm: sha256WithRSAEncryption 7d:91:2a:e3:98:fe:fc:a2:70:37:4b:87:42:63:3c:37:23:1c: 97:04:52:cf:a2:2d:51:02:a4:17:59:df:3a:21:1e:80:ae:5f: 67:3c:38:a5:ee:b7:82:84:24:cc:d5:fa:26:62:5e:d9:3b:19: 41:aa:4e:84:e9:e9:3f:87:fc:29:bc:d3:b5:bb:b2:ab:7a:49: 06:e1:6f:10:08:f2:82:24:6d:45:a9:a9:c3:7d:b8:ab:41:45: f8:41:17:90:94:43:45:9a:41:0e:0a:66:e7:28:7a:45:77:25: e1:62:fd:21:f9:e2:4d:5a:b8:5a:72:fd:dd:c1:b4:c8:80:1d: 48:ee:f1:d8:24:23:e1:6a:bc:ca:cb:1a:b5:1f:24:89:11:f4: 7a:ac:b1:5f:39:e9:c8:53:ed:ef:5a:73:9a:4f:b8:6e:18:f0: e0:b8:ff:b0:fa:95:c7:22:51:01:92:8e:8c:ae:4d:f0:4d:80: a7:bf:25:09:29:01:ae:71:14:6b:8d:e9:cb:05:11:f6:48:b8: 4c:aa:c2:56:27:a8:48:6d:21:bf:55:d6:fa:25:75:46:60:b3: 83:5b:39:5c:8c:b5:0b:cb:c7:f2:9f:f3:bc:bd:bd:5d:35:26: b8:5b:07:5f:c9:8d:ab:c3:4a:b9:12:cc:d6:1c:fd:28:d9:c2: df:eb:b4:72 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXoo14HZck8ZroJEkOfr3dmT0geAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI0MjEwWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTViMDUwZjJkNTE2ZjI2YjUzMWI1NWFlOGYwZWFiZDg5 NmZjNGIyZjE2M2NiMjZiNDUwZTI5ZDYyNGMzODI0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCamikKkfR4i/x6szN9x5vI3TPdjB9VhUUsbCeHqaMl/abn 4AqCKDhQ92nde26xD7/DU1jk2U8GWR6aCNEARqlj0B2gRELlcnTZtos9D/se7Ds4 SFJq4awg6KBrO+zl5DYyoBR0+mwnHeSgRdI8XgYGUdKfrOaBSmtZdHDN8R+wzb60 Flcb4g312lIexCExtKdl4KkCJwyYiNYtgezkcDgBoK0UU3f6pT4gm/XYU6IPQBEX 3zLAoU4H0kW94HfTy4YX4JPUriQA6PDfPROGJS27GOFoZS/NMV+s55pFOgoJdDfs 7j3Y1RZctEod020J7LhAFQ5JWa0rmWGnSyQFBTvhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdixoj4rHY0XwsDGzf/RxYFaIpqowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzMzYWI0YTgwLTIxNGItNGEzMS1iMjgzLTYwNDI4OWY1NzQ3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAH8owDQYJKoZIhvcNAQELBQADggEBAH2RKuOY/vyicDdLh0JjPDcj HJcEUs+iLVECpBdZ3zohHoCuX2c8OKXut4KEJMzV+iZiXtk7GUGqToTp6T+H/Cm8 07W7sqt6SQbhbxAI8oIkbUWpqcN9uKtBRfhBF5CUQ0WaQQ4KZucoekV3JeFi/SH5 4k1auFpy/d3BtMiAHUju8dgkI+FqvMrLGrUfJIkR9HqssV856chT7e9ac5pPuG4Y 8OC4/7D6lcciUQGSjoyuTfBNgKe/JQkpAa5xFGuN6csFEfZIuEyqwlYnqEhtIb9V 1voldUZgs4NbOVyMtQvLx/Kf87y9vV01JrhbB1/JjavDSrkSzNYc/SjZwt/rtHI= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:54 2025 by rpki-client