$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3844f95d-0af0-42d8-a318-3db42af1f606.roa File: 3844f95d-0af0-42d8-a318-3db42af1f606.roa (raw, json) Hash identifier: pjR2B9WgrHlJVktjJLDB3uPV4/roIrF10lJ/tRcwWeo= Subject key identifier: F8:64:FB:2C:BD:B6:2E:AB:23:99:61:EB:75:5C:7F:F9:44:B7:89:24 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 45E177174E8C80BDC8AA380C957D0AE134AF7E41 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3844f95d-0af0-42d8-a318-3db42af1f606.roa Signing time: Fri 31 Oct 2025 01:38:11 +0000 ROA not before: Fri 31 Oct 2025 01:38:11 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3c98::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e1:77:17:4e:8c:80:bd:c8:aa:38:0c:95:7d:0a:e1:34:af:7e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:38:11 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=6b94956b48b78af3ebbe934f1013d7e2c56d2e5125a82353869b6c982ce37280, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:af:23:63:e1:e6:45:0f:4b:83:30:cd:21: cd:b5:69:72:30:da:81:d6:61:1d:63:94:74:32:59: c2:c9:4c:ed:f6:62:5c:e4:73:e8:65:4d:bf:00:37: bf:0e:d4:da:f5:11:00:4f:0e:02:45:02:31:dc:88: 47:3c:72:30:8d:5a:66:9e:f8:19:8f:6f:f7:cb:2f: f2:38:75:df:ab:e8:d2:05:7e:7c:81:b8:57:59:d2: f3:96:a8:d8:6b:38:10:cd:6d:8e:09:7d:18:32:e9: 24:6f:ed:c9:4b:34:e1:c2:b2:86:f3:1c:09:83:23: af:d0:c2:ad:51:18:2c:b7:53:a8:f5:ec:85:a8:b1: 2c:69:87:f3:c4:62:4d:d7:34:79:0d:c6:65:a6:47: 62:d7:52:62:46:19:ba:49:e8:8e:63:bd:86:8a:33: 7c:79:e8:97:40:1a:b0:4e:e4:06:e2:9d:fd:44:aa: 1e:e7:05:75:b3:57:27:21:12:8d:1a:98:69:13:41: 30:78:98:7b:6d:12:09:8f:bf:80:95:74:1e:ed:22: 06:19:7e:9e:6b:43:54:e9:85:53:37:da:34:8d:04: d8:68:3e:1d:f5:c2:92:0e:ee:87:7a:14:bb:f5:55: cd:36:24:d4:02:80:15:c4:a1:ce:b1:7b:5a:17:1b: 3c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:64:FB:2C:BD:B6:2E:AB:23:99:61:EB:75:5C:7F:F9:44:B7:89:24 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3844f95d-0af0-42d8-a318-3db42af1f606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3c98::/47 Signature Algorithm: sha256WithRSAEncryption 3a:d1:f0:5e:e4:f9:e1:87:a1:03:0c:05:3c:ad:8b:32:b8:36: ca:58:66:c0:54:4b:e6:bf:9b:ea:c3:24:dc:52:28:22:38:d4: 08:fc:09:33:1a:d8:36:73:42:22:25:c0:41:e9:a2:7b:45:d0: 11:1f:98:27:a4:38:ce:df:7d:19:2c:9a:96:e3:7f:d5:39:f4: 80:e1:07:e3:50:59:a0:fc:ca:f9:d8:ea:ea:cd:02:70:80:d7: 6e:21:9c:53:b6:19:ec:1d:d9:02:9a:9f:7d:08:17:82:f7:37: 7d:6e:cc:51:05:37:ca:24:1e:d1:80:23:79:c1:1a:2c:9a:2b: e2:c1:7d:9e:65:fc:ea:d6:97:5a:9d:da:8f:06:b7:1d:0c:85: 46:6b:3e:f0:5c:54:9d:de:90:e1:fe:b0:c1:3e:f3:fa:23:5e: ca:39:1a:62:28:ac:aa:a5:f6:92:68:62:20:18:a1:ce:5b:f0: 3a:72:1c:00:7b:aa:37:10:d9:94:1e:99:83:8a:96:62:ba:01: 01:50:f7:42:20:f1:67:60:a1:89:ac:61:23:25:c9:1b:aa:e8: 3d:ef:ea:ed:93:6b:1d:95:eb:07:42:a7:71:3e:69:47:d1:69: 20:ff:42:9c:e4:0c:93:cd:16:24:de:b6:91:78:c2:bb:ee:fd: 00:96:2d:8e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUReF3F06MgL3IqjgMlX0K4TSvfkEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEzODExWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2Yjk0OTU2YjQ4Yjc4YWYzZWJiZTkzNGYxMDEzZDdlMmM1 NmQyZTUxMjVhODIzNTM4NjliNmM5ODJjZTM3MjgwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC07a8jY+HmRQ9LgzDNIc21aXIw2oHWYR1jlHQyWcLJTO32 Ylzkc+hlTb8AN78O1Nr1EQBPDgJFAjHciEc8cjCNWmae+BmPb/fLL/I4dd+r6NIF fnyBuFdZ0vOWqNhrOBDNbY4JfRgy6SRv7clLNOHCsobzHAmDI6/Qwq1RGCy3U6j1 7IWosSxph/PEYk3XNHkNxmWmR2LXUmJGGbpJ6I5jvYaKM3x56JdAGrBO5Abinf1E qh7nBXWzVychEo0amGkTQTB4mHttEgmPv4CVdB7tIgYZfp5rQ1TphVM32jSNBNho Ph31wpIO7od6FLv1Vc02JNQCgBXEoc6xe1oXGzypAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+GT7LL22LqsjmWHrdVx/+US3iSQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzM4NDRmOTVkLTBhZjAtNDJkOC1hMzE4LTNkYjQyYWYxZjYwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPJgwDQYJKoZIhvcNAQELBQADggEBADrR8F7k+eGHoQMMBTytizK4 NspYZsBUS+a/m+rDJNxSKCI41Aj8CTMa2DZzQiIlwEHpontF0BEfmCekOM7ffRks mpbjf9U59IDhB+NQWaD8yvnY6urNAnCA124hnFO2Gewd2QKan30IF4L3N31uzFEF N8okHtGAI3nBGiyaK+LBfZ5l/OrWl1qd2o8Gtx0MhUZrPvBcVJ3ekOH+sME+8/oj Xso5GmIorKql9pJoYiAYoc5b8DpyHAB7qjcQ2ZQemYOKlmK6AQFQ90Ig8WdgoYms YSMlyRuq6D3v6u2Tax2V6wdCp3E+aUfRaSD/QpzkDJPNFiTetpF4wrvu/QCWLY4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:37:53 2025 by rpki-client