$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c970d21-5c9a-410a-8900-2a24d6b0b719.roa File: 3c970d21-5c9a-410a-8900-2a24d6b0b719.roa (raw, json) Hash identifier: eDMDs2UHz3KjNlC6Ucg2A6zaIemQLH8ZNXdy+7q52yk= Subject key identifier: 03:BA:00:68:74:3E:92:2A:82:15:9C:7B:63:85:BC:A8:17:31:84:C1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 758C16051E6D851D1D179FDE0C62F5FEE6AB9348 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c970d21-5c9a-410a-8900-2a24d6b0b719.roa Signing time: Fri 31 Oct 2025 06:10:21 +0000 ROA not before: Fri 31 Oct 2025 06:10:21 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3960::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8c:16:05:1e:6d:85:1d:1d:17:9f:de:0c:62:f5:fe:e6:ab:93:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:10:21 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=3b7d72d546e0db506d8fdeb18b39f1d6345a30f5866c5fee2b0600fb28a2b172, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a4:c8:95:9b:b6:43:7f:37:99:4c:a4:03:fd: 4e:34:02:de:c5:79:c1:83:c1:c1:f0:d5:98:8c:63: 5a:ec:b7:a1:8d:6c:46:60:6d:66:23:0f:a4:f0:11: 6c:df:e9:04:de:b4:48:ec:22:82:3d:95:e8:1e:6b: 54:9c:fb:5b:aa:b5:b8:59:f1:3a:62:ca:81:6f:fc: 2c:d2:e0:f0:c4:a4:c6:24:b9:3e:0a:79:0f:bb:ee: 31:61:6d:d5:79:21:64:e0:2f:d6:6d:fa:ab:0d:8a: da:64:b5:e1:c0:4a:6b:b0:20:6e:32:19:6c:74:9c: fd:97:1c:8a:d5:c6:8a:d2:82:7b:44:cb:26:ff:1c: 62:8b:33:9f:53:51:9b:71:76:7d:ff:1d:f5:0c:e3: 7c:df:8f:92:16:a0:a5:51:ea:f6:65:7b:a3:91:0c: 79:9f:50:e1:10:26:7f:f4:73:91:c6:32:38:8e:28: 76:4f:35:f6:0c:44:91:44:6f:36:f8:1f:e2:d9:5c: f0:19:cc:b7:54:82:e8:a2:6e:85:b6:d0:18:fa:06: d7:bc:0c:26:d9:e1:bf:82:15:4a:e1:76:2c:25:bd: 60:94:be:24:b4:e0:1a:26:bc:a3:27:17:75:6b:8c: 7b:c6:2e:34:dc:0c:f1:94:98:f8:51:0a:25:4d:bd: 89:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BA:00:68:74:3E:92:2A:82:15:9C:7B:63:85:BC:A8:17:31:84:C1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c970d21-5c9a-410a-8900-2a24d6b0b719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3960::/45 Signature Algorithm: sha256WithRSAEncryption a7:05:e6:c6:50:db:6a:5c:e5:dd:90:7b:bc:c8:51:2e:64:b9: 98:1e:91:d7:4f:e7:c3:25:68:d8:bd:b3:78:e5:82:1a:27:a9: f6:62:8c:c2:73:68:1e:90:0a:fc:25:df:23:82:6c:fe:8f:d8: e5:7d:6b:34:fc:fe:4c:9f:b2:b9:9e:30:95:61:bb:55:e3:c4: 41:90:91:80:3b:01:fc:f1:dd:d3:b8:07:82:ed:28:67:61:6d: ee:ba:71:04:59:f9:6d:36:25:1a:99:30:eb:91:8c:08:fd:78: 75:86:9e:b8:79:b3:fa:f7:28:0a:a4:bb:67:52:1e:0c:40:f9: 15:9f:59:9b:4f:fb:2f:9b:86:93:65:c3:52:e6:3c:0d:35:e1: c6:5b:27:52:b8:8c:42:61:fb:e6:a4:90:59:a2:5a:23:f0:46: d8:89:1f:82:36:c5:24:36:96:02:66:f8:66:50:d5:0b:62:73: 06:68:a4:bc:3f:bc:2c:78:7f:15:cb:5e:ee:d6:f9:d3:95:f5: 07:09:a4:a1:8f:80:31:cc:85:cc:81:71:01:40:2d:58:a6:81: 29:67:e0:9d:f0:25:1e:8b:7d:d5:16:d5:eb:1e:c7:5f:33:13: a2:05:f4:34:c7:f8:f4:02:81:da:61:e1:e7:92:b7:05:66:04: 3c:65:65:ed -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdYwWBR5thR0dF5/eDGL1/uark0gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYxMDIxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjdkNzJkNTQ2ZTBkYjUwNmQ4ZmRlYjE4YjM5ZjFkNjM0 NWEzMGY1ODY2YzVmZWUyYjA2MDBmYjI4YTJiMTcyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKpMiVm7ZDfzeZTKQD/U40At7FecGDwcHw1ZiMY1rst6GN bEZgbWYjD6TwEWzf6QTetEjsIoI9legea1Sc+1uqtbhZ8TpiyoFv/CzS4PDEpMYk uT4KeQ+77jFhbdV5IWTgL9Zt+qsNitpkteHASmuwIG4yGWx0nP2XHIrVxorSgntE yyb/HGKLM59TUZtxdn3/HfUM43zfj5IWoKVR6vZle6ORDHmfUOEQJn/0c5HGMjiO KHZPNfYMRJFEbzb4H+LZXPAZzLdUguiiboW20Bj6Bte8DCbZ4b+CFUrhdiwlvWCU viS04BomvKMnF3VrjHvGLjTcDPGUmPhRCiVNvYk1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUA7oAaHQ+kiqCFZx7Y4W8qBcxhMEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNjOTcwZDIxLTVjOWEtNDEwYS04OTAwLTJhMjRkNmIwYjcxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAOWAwDQYJKoZIhvcNAQELBQADggEBAKcF5sZQ22pc5d2Qe7zIUS5k uZgekddP58MlaNi9s3jlghonqfZijMJzaB6QCvwl3yOCbP6P2OV9azT8/kyfsrme MJVhu1XjxEGQkYA7Afzx3dO4B4LtKGdhbe66cQRZ+W02JRqZMOuRjAj9eHWGnrh5 s/r3KAqku2dSHgxA+RWfWZtP+y+bhpNlw1LmPA014cZbJ1K4jEJh++akkFmiWiPw RtiJH4I2xSQ2lgJm+GZQ1QticwZopLw/vCx4fxXLXu7W+dOV9QcJpKGPgDHMhcyB cQFALVimgSln4J3wJR6LfdUW1esex18zE6IF9DTH+PQCgdph4eeStwVmBDxlZe0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:24 2025 by rpki-client