$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c863e69-0eb1-4226-a319-9c2c575c9daa.roa File: 3c863e69-0eb1-4226-a319-9c2c575c9daa.roa (raw, json) Hash identifier: 8pF4ngntH6tU9nJfIL6YnfXTA1+4m2DPe+xkoxG6a1w= Subject key identifier: 27:C4:CB:49:BF:A1:3C:D0:0B:AE:1E:C7:9B:DB:6B:75:0C:0B:67:0B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 259593784A66ECC23D0FB0106D4267DF14A9EC41 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c863e69-0eb1-4226-a319-9c2c575c9daa.roa Signing time: Thu 30 Oct 2025 23:23:40 +0000 ROA not before: Thu 30 Oct 2025 23:23:40 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2cb4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:95:93:78:4a:66:ec:c2:3d:0f:b0:10:6d:42:67:df:14:a9:ec:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:23:40 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=4a19ea222fd847151ac2aee7b8f48e314086f1369e67d3bf93b45e1a7158dfcd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:cc:e7:0f:60:b8:fb:12:a6:de:ff:f0:77: 62:24:e8:07:7b:b6:59:c8:9d:fe:ad:c4:f8:de:95: a7:ee:b2:be:24:2f:a9:44:de:1a:b1:3f:89:cb:44: 6f:ac:11:90:be:31:72:04:f3:d4:d4:72:cd:d6:41: 67:b0:c9:93:eb:41:38:af:32:06:5c:90:d2:4c:ed: e4:01:ef:d1:87:8b:e1:35:76:ac:ec:0f:0a:29:1c: 23:3f:df:ec:be:e3:ae:e3:84:bc:2b:e5:f6:d5:1e: 1d:8f:b2:4a:43:ea:ee:65:e9:41:38:41:a6:53:f0: 9a:92:66:d8:f1:4d:10:df:4c:6f:0a:98:9f:dd:75: 52:71:28:cd:da:51:4d:a5:ea:59:78:73:67:56:93: fb:cc:9a:ea:15:8d:44:d9:59:0a:e1:8b:57:a0:b7: ba:63:c5:f1:d9:22:44:12:c0:6f:07:03:34:a0:9c: 7d:9e:02:a4:7b:df:3a:fc:13:78:1e:60:42:bb:bb: d8:92:66:54:28:35:12:3d:2a:58:25:31:20:8d:02: 2a:1d:61:cb:92:ab:5c:36:c6:51:ea:35:83:59:23: fb:35:d0:8d:c6:14:b7:b3:2a:cd:24:aa:9f:96:14: 74:4b:c7:6d:1f:f0:fc:e1:53:3d:59:18:d1:98:38: 9c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C4:CB:49:BF:A1:3C:D0:0B:AE:1E:C7:9B:DB:6B:75:0C:0B:67:0B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c863e69-0eb1-4226-a319-9c2c575c9daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2cb4::/47 Signature Algorithm: sha256WithRSAEncryption 2a:db:bc:65:ee:4c:ec:3e:c3:d6:0d:b6:a1:f1:b2:24:79:28: b5:1d:24:b1:cd:84:1c:e9:00:af:6d:9e:f2:e2:b7:8d:d6:1b: ed:64:8a:0e:2c:ae:2a:80:ce:0e:fa:51:72:b0:a7:c0:2c:ff: a7:be:8d:2b:a7:c2:c5:5c:4c:4c:16:60:5c:37:c2:cf:5d:84: 2c:a4:c2:cb:30:6a:d4:52:61:58:d1:68:67:60:cd:21:bd:40: 39:66:c9:4e:82:8e:99:93:18:e3:57:1c:6d:eb:d0:a4:70:68: b3:af:53:22:9b:85:c9:b6:e8:58:ec:a0:18:6e:94:bf:2c:b7: 81:66:38:e6:d4:94:de:3e:be:f0:fe:c0:54:b8:4c:cd:d4:1c: e0:f1:2d:9b:c3:ca:8c:08:d5:45:1a:df:c7:64:06:5b:03:5c: b0:5b:5a:a8:84:b6:dc:ae:0b:01:63:0b:44:b4:b4:6e:99:f4: 5c:53:66:f3:e9:64:76:15:0b:66:dc:9e:06:b3:28:30:45:a8: 90:b7:36:37:56:6a:79:fc:95:66:cb:06:d6:54:00:51:40:06: af:10:fb:b5:6c:a5:4b:32:69:5d:77:07:53:f6:95:71:34:e2: 21:53:ee:3a:cd:a3:aa:6d:37:0b:ad:d7:7d:d0:3c:13:98:a2: 57:61:b7:09 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJZWTeEpm7MI9D7AQbUJn3xSp7EEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMyMzQwWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTE5ZWEyMjJmZDg0NzE1MWFjMmFlZTdiOGY0OGUzMTQw ODZmMTM2OWU2N2QzYmY5M2I0NWUxYTcxNThkZmNkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3j8znD2C4+xKm3v/wd2Ik6Ad7tlnInf6txPjelafusr4k L6lE3hqxP4nLRG+sEZC+MXIE89TUcs3WQWewyZPrQTivMgZckNJM7eQB79GHi+E1 dqzsDwopHCM/3+y+467jhLwr5fbVHh2PskpD6u5l6UE4QaZT8JqSZtjxTRDfTG8K mJ/ddVJxKM3aUU2l6ll4c2dWk/vMmuoVjUTZWQrhi1egt7pjxfHZIkQSwG8HAzSg nH2eAqR73zr8E3geYEK7u9iSZlQoNRI9KlglMSCNAiodYcuSq1w2xlHqNYNZI/s1 0I3GFLezKs0kqp+WFHRLx20f8PzhUz1ZGNGYOJzXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJ8TLSb+hPNALrh7Hm9trdQwLZwswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNjODYzZTY5LTBlYjEtNDIyNi1hMzE5LTljMmM1NzVjOWRhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALLQwDQYJKoZIhvcNAQELBQADggEBACrbvGXuTOw+w9YNtqHxsiR5 KLUdJLHNhBzpAK9tnvLit43WG+1kig4sriqAzg76UXKwp8As/6e+jSunwsVcTEwW YFw3ws9dhCykwsswatRSYVjRaGdgzSG9QDlmyU6CjpmTGONXHG3r0KRwaLOvUyKb hcm26FjsoBhulL8st4FmOObUlN4+vvD+wFS4TM3UHODxLZvDyowI1UUa38dkBlsD XLBbWqiEttyuCwFjC0S0tG6Z9FxTZvPpZHYVC2bcngazKDBFqJC3NjdWann8lWbL BtZUAFFABq8Q+7VspUsyaV13B1P2lXE04iFT7jrNo6ptNwut133QPBOYoldhtwk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:05 2025 by rpki-client