$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d0a4c17-a1a4-40b2-9bf5-030bcfa85c0d.roa File: 3d0a4c17-a1a4-40b2-9bf5-030bcfa85c0d.roa (raw, json) Hash identifier: A4xj3qTiFpQlDXQKD+bZhdMIJX324VzUDiCU5IX37CU= Subject key identifier: D6:01:86:17:C6:8B:F8:70:5D:E4:B3:9A:4F:BA:00:E2:07:C8:DF:F8 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5C74C1D1DF5C5E1CC429F3DBD2519FA77BA157C4 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d0a4c17-a1a4-40b2-9bf5-030bcfa85c0d.roa Signing time: Fri 31 Oct 2025 03:06:51 +0000 ROA not before: Fri 31 Oct 2025 03:06:51 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1bb0::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:74:c1:d1:df:5c:5e:1c:c4:29:f3:db:d2:51:9f:a7:7b:a1:57:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:06:51 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=656b3ca3c04746db62219ad94f954108bb89b8d06162804967f7d69d08560b88, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:65:4a:f6:b7:bd:4a:a3:20:90:ec:e9:0f: 1b:d9:33:0a:d6:03:50:b1:a5:7f:4a:b6:d4:c6:f3: e1:43:60:e7:b5:24:7a:d0:8e:c2:e5:1e:a6:d2:c8: 81:81:51:48:f9:7b:70:87:8d:70:35:b0:94:54:73: 7f:97:71:80:b6:06:fb:c1:52:c1:0d:f4:1c:4c:17: 19:46:09:bc:c0:83:c0:4c:51:17:9d:6b:24:9d:df: 92:63:36:81:f9:e6:fe:27:dd:cc:af:26:e6:4b:0c: db:50:ea:d1:f6:66:17:43:4a:73:55:bb:22:08:3a: 6f:d1:2c:fd:0a:ac:f1:f4:27:91:1c:3f:cc:c0:d8: 0b:61:fb:36:30:6e:b9:f3:13:6b:ee:1c:19:ee:12: c4:af:60:af:d4:77:95:b1:f4:87:3b:1c:18:1f:f9: e4:e7:e3:47:ba:5c:fc:51:47:34:47:02:1a:7e:d6: 6a:42:57:7b:65:b6:bf:73:c2:7e:88:13:1e:d4:1d: 98:0d:d7:38:9a:0a:90:35:5b:5b:4d:45:d2:28:31: 64:5b:d9:00:de:9c:b6:78:e5:97:d6:47:f2:af:01: bf:b8:2d:8e:62:7e:32:71:03:a9:5b:fa:97:0c:ed: 6b:e2:9c:4d:38:ef:c0:82:cd:65:fe:cf:99:27:e4: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:01:86:17:C6:8B:F8:70:5D:E4:B3:9A:4F:BA:00:E2:07:C8:DF:F8 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d0a4c17-a1a4-40b2-9bf5-030bcfa85c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1bb0::/46 Signature Algorithm: sha256WithRSAEncryption 21:25:92:db:df:43:48:04:1d:45:26:9f:8b:b3:6a:a2:f2:53: 6a:49:c1:37:f1:1c:fe:bd:af:4b:80:9f:4a:b8:45:f0:b1:0d: 0e:62:92:28:da:6b:0c:a7:4d:ed:4e:e4:bb:44:24:48:71:9f: 1e:58:55:c2:92:f6:32:48:9f:1a:a3:95:af:49:0c:cb:b4:92: fa:b9:22:3b:6d:ab:3c:61:25:4a:cb:4b:5f:f1:63:0a:cd:95: 44:49:67:4f:bd:fe:ac:26:7a:e0:17:02:09:65:07:6d:60:ce: 34:3d:1c:36:62:28:c4:10:b2:0f:34:dc:c8:00:c9:45:13:57: 00:f6:e9:cf:57:84:50:bb:af:21:f4:32:cf:48:27:df:7f:e8: 8a:8a:96:78:68:5e:34:eb:65:66:70:a4:04:fa:a3:f7:76:bc: 71:00:3c:ce:aa:e6:71:3a:0d:0f:75:9d:28:3e:5d:9e:ec:07: 6f:a1:3f:f6:ae:76:13:d7:dd:9e:b9:1a:e6:46:48:f8:d2:be: 21:13:4f:09:32:49:8c:73:b4:76:32:3f:64:26:42:e4:bb:89: e4:19:a5:24:15:71:71:86:6f:e1:a4:cd:80:98:9d:76:fb:88: c4:db:df:6c:5a:2a:49:3b:6c:e6:33:e2:b5:f4:26:d4:51:25: 97:8a:d6:1c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXHTB0d9cXhzEKfPb0lGfp3uhV8QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMwNjUxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTZiM2NhM2MwNDc0NmRiNjIyMTlhZDk0Zjk1NDEwOGJi ODliOGQwNjE2MjgwNDk2N2Y3ZDY5ZDA4NTYwYjg4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2Y2VK9re9SqMgkOzpDxvZMwrWA1CxpX9KttTG8+FDYOe1 JHrQjsLlHqbSyIGBUUj5e3CHjXA1sJRUc3+XcYC2BvvBUsEN9BxMFxlGCbzAg8BM URedaySd35JjNoH55v4n3cyvJuZLDNtQ6tH2ZhdDSnNVuyIIOm/RLP0KrPH0J5Ec P8zA2Ath+zYwbrnzE2vuHBnuEsSvYK/Ud5Wx9Ic7HBgf+eTn40e6XPxRRzRHAhp+ 1mpCV3tltr9zwn6IEx7UHZgN1ziaCpA1W1tNRdIoMWRb2QDenLZ45ZfWR/KvAb+4 LY5ifjJxA6lb+pcM7WvinE0478CCzWX+z5kn5IyXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1gGGF8aL+HBd5LOaT7oA4gfI3/gwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNkMGE0YzE3LWExYTQtNDBiMi05YmY1LTAzMGJjZmE4NWMwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAG7AwDQYJKoZIhvcNAQELBQADggEBACElktvfQ0gEHUUmn4uzaqLy U2pJwTfxHP69r0uAn0q4RfCxDQ5ikijaawynTe1O5LtEJEhxnx5YVcKS9jJInxqj la9JDMu0kvq5IjttqzxhJUrLS1/xYwrNlURJZ0+9/qwmeuAXAgllB21gzjQ9HDZi KMQQsg803MgAyUUTVwD26c9XhFC7ryH0Ms9IJ99/6IqKlnhoXjTrZWZwpAT6o/d2 vHEAPM6q5nE6DQ91nSg+XZ7sB2+hP/audhPX3Z65GuZGSPjSviETTwkySYxztHYy P2QmQuS7ieQZpSQVcXGGb+GkzYCYnXb7iMTb32xaKkk7bOYz4rX0JtRRJZeK1hw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:53 2025 by rpki-client