$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c5a1aa1-be2a-4ecb-8b84-a23e217fc7ad.roa File: 3c5a1aa1-be2a-4ecb-8b84-a23e217fc7ad.roa (raw, json) Hash identifier: 6xghXgHDWrLBk00jp0iGVmo+BnYVlPnX7DhA3UXZbyI= Subject key identifier: F1:BD:16:7E:51:95:7A:A0:9E:DE:33:F0:DA:C7:29:EE:6A:68:BB:0A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4F8FAADA70897039D703AD8A89E14F25A55A87AE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c5a1aa1-be2a-4ecb-8b84-a23e217fc7ad.roa Signing time: Thu 30 Oct 2025 23:22:07 +0000 ROA not before: Thu 30 Oct 2025 23:22:07 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2c9a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8f:aa:da:70:89:70:39:d7:03:ad:8a:89:e1:4f:25:a5:5a:87:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:22:07 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=936c095a9b6204307a13ba0d2076ced9cca8b48c23ce4a5ae32f795a9d388bfe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:77:a8:aa:57:32:7a:45:fa:6d:70:37:6e: 5e:ca:d8:68:8e:85:fd:d6:90:a2:8c:fe:f7:54:e2: 86:01:98:7b:b7:43:13:78:78:81:cd:29:c5:1e:99: ec:f5:19:9e:85:19:4d:12:32:4c:73:2f:27:93:f7: df:fb:84:66:4b:36:a7:8c:85:f6:1e:c8:4d:7f:e6: c7:60:c8:ed:bd:0c:55:74:07:17:cf:b8:22:32:35: 33:ec:1a:ba:33:d7:eb:2a:1c:f2:44:93:08:83:79: 4b:0b:eb:97:3c:9c:cf:bb:f7:85:0e:dc:89:d0:c1: 01:59:d7:50:a1:30:07:4e:30:22:aa:78:bb:4f:1b: 8b:54:ab:cb:ca:ea:ec:b1:33:e7:4f:b7:fa:58:fd: 44:33:bb:90:9b:3f:f2:e9:26:7f:08:ac:48:7a:cb: 6c:1d:4c:fb:31:76:6c:c8:d9:de:a9:d4:6a:6d:e4: 2f:bb:b3:3f:65:22:fd:e0:eb:5f:ac:2c:52:0d:75: 66:63:de:5f:9c:c3:cf:50:30:47:f0:ae:8f:0c:1f: 37:2c:c8:0d:f8:f2:9d:ec:7e:c3:fc:67:a3:87:82: 26:4e:59:38:20:e4:9b:71:81:91:12:68:68:60:ff: 14:32:cc:7a:ca:34:9c:db:6f:1a:50:4c:1a:a2:2a: 3c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BD:16:7E:51:95:7A:A0:9E:DE:33:F0:DA:C7:29:EE:6A:68:BB:0A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c5a1aa1-be2a-4ecb-8b84-a23e217fc7ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2c9a::/47 Signature Algorithm: sha256WithRSAEncryption 85:35:f9:46:21:42:db:8a:d4:3a:3e:b8:23:65:2b:37:43:b9: 7d:58:af:5d:94:02:a2:0f:b6:59:5b:57:d1:c3:c8:9d:c3:50: cc:59:a5:da:fa:a3:b8:7e:14:98:24:57:c9:c4:00:a6:0a:89: 32:98:df:70:d1:7c:e6:bd:e3:53:aa:46:4b:4d:3f:9b:e8:1b: 0d:ee:93:1e:5a:d5:75:6a:7f:e0:3a:db:b2:47:da:ee:40:1e: 80:af:fc:46:82:14:b1:34:d4:f7:bb:98:7a:47:39:99:24:db: c9:e9:bc:44:fa:75:6d:1c:8e:22:a1:cf:f9:4e:a6:a4:ac:4e: 99:9f:98:6a:3a:75:90:a0:0b:35:98:d1:5b:aa:71:2e:f3:c2: 5c:ca:ba:a4:c4:da:31:1f:25:b7:d1:bb:0c:8b:da:99:98:61: 64:a0:cc:c6:c2:c7:3c:e1:37:44:3d:6f:8d:ba:2e:20:de:cc: 9d:e5:b0:06:36:0c:9a:d2:65:5b:0b:96:e6:e6:60:de:3c:53: b8:c9:53:a3:39:3c:8e:5d:7f:c9:ee:6e:f8:08:ee:34:f2:1e: 26:d9:0b:8f:2c:64:43:1a:a5:fc:84:30:d3:3d:48:b2:59:80: 6b:14:c1:10:e6:67:8f:e1:a1:15:6f:67:28:87:3b:d5:44:40: 5e:0a:3f:6d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT4+q2nCJcDnXA62KieFPJaVah64wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMyMjA3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzZjMDk1YTliNjIwNDMwN2ExM2JhMGQyMDc2Y2VkOWNj YThiNDhjMjNjZTRhNWFlMzJmNzk1YTlkMzg4YmZlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJ43eoqlcyekX6bXA3bl7K2GiOhf3WkKKM/vdU4oYBmHu3 QxN4eIHNKcUemez1GZ6FGU0SMkxzLyeT99/7hGZLNqeMhfYeyE1/5sdgyO29DFV0 BxfPuCIyNTPsGroz1+sqHPJEkwiDeUsL65c8nM+794UO3InQwQFZ11ChMAdOMCKq eLtPG4tUq8vK6uyxM+dPt/pY/UQzu5CbP/LpJn8IrEh6y2wdTPsxdmzI2d6p1Gpt 5C+7sz9lIv3g61+sLFINdWZj3l+cw89QMEfwro8MHzcsyA348p3sfsP8Z6OHgiZO WTgg5JtxgZESaGhg/xQyzHrKNJzbbxpQTBqiKjz3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8b0WflGVeqCe3jPw2scp7mpouwowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNjNWExYWExLWJlMmEtNGVjYi04Yjg0LWEyM2UyMTdmYzdhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALJowDQYJKoZIhvcNAQELBQADggEBAIU1+UYhQtuK1Do+uCNlKzdD uX1Yr12UAqIPtllbV9HDyJ3DUMxZpdr6o7h+FJgkV8nEAKYKiTKY33DRfOa941Oq RktNP5voGw3ukx5a1XVqf+A627JH2u5AHoCv/EaCFLE01Pe7mHpHOZkk28npvET6 dW0cjiKhz/lOpqSsTpmfmGo6dZCgCzWY0VuqcS7zwlzKuqTE2jEfJbfRuwyL2pmY YWSgzMbCxzzhN0Q9b426LiDezJ3lsAY2DJrSZVsLlubmYN48U7jJU6M5PI5df8nu bvgI7jTyHibZC48sZEMapfyEMNM9SLJZgGsUwRDmZ4/hoRVvZyiHO9VEQF4KP20= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:16 2025 by rpki-client