$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d6095d3-7f6b-4619-882c-24f9dbeda199.roa File: 3d6095d3-7f6b-4619-882c-24f9dbeda199.roa (raw, json) Hash identifier: w5+CZYHs5ib/9ciZ4Y3Caiindj/8h171q7jSStQih6E= Subject key identifier: A3:FB:DD:DD:66:45:2C:3F:FD:D5:EA:B0:79:CF:11:29:F1:EE:0F:F1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 790682E758E3517D1C586DB71AF0DADB0FFA9039 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d6095d3-7f6b-4619-882c-24f9dbeda199.roa Signing time: Fri 31 Oct 2025 02:54:00 +0000 ROA not before: Fri 31 Oct 2025 02:54:00 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1984::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:06:82:e7:58:e3:51:7d:1c:58:6d:b7:1a:f0:da:db:0f:fa:90:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:54:00 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=145e7d8b7edd9f2c71b0ed448c13d61bf5fc88f021de5c5ae86ed26d3b95f070, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:75:a9:d8:5a:50:bb:23:f5:3c:7d:ea:a7: 5e:83:11:b2:5e:f3:fb:ae:41:42:d6:7b:d0:7b:7b: ea:c7:00:15:e2:93:2a:4b:f0:47:68:2a:08:a2:65: fc:98:ad:f1:70:61:3f:1d:c2:6a:b8:6f:4a:ea:49: 8d:a2:62:4b:38:e2:7e:a6:b7:9e:8e:ed:0a:a2:3e: b9:01:92:e1:cd:4a:d5:3e:fe:57:ae:b4:3f:54:10: 64:02:05:d1:7e:a6:31:e2:fb:9c:79:eb:b1:09:27: 8e:40:f6:84:8b:60:05:f3:7a:90:30:19:c3:54:3a: 34:15:51:74:51:44:fb:cb:f9:50:03:e4:1c:23:d6: 10:9e:f8:c8:75:49:f9:51:d8:d4:ec:e4:56:74:d1: f1:d2:21:d1:66:66:ac:1e:9f:40:d9:d7:61:b9:0b: cc:1b:11:a4:61:0a:59:5e:b5:fe:2f:ee:77:33:f3: 6e:0a:7d:dd:b7:38:87:88:94:96:be:05:0e:ed:c2: fa:34:2a:88:b0:e7:ce:07:7d:00:62:36:53:a2:4b: 3c:23:7e:6f:7b:a2:a0:a4:69:90:f6:a6:0c:6f:b9: 54:f9:ef:7f:75:2e:3c:ef:3e:dd:7e:5e:02:17:fc: 59:9b:e1:1d:6a:53:9d:91:35:55:87:7d:a7:0d:ea: de:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FB:DD:DD:66:45:2C:3F:FD:D5:EA:B0:79:CF:11:29:F1:EE:0F:F1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d6095d3-7f6b-4619-882c-24f9dbeda199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1984::/46 Signature Algorithm: sha256WithRSAEncryption 1b:bc:71:2e:39:c2:d7:fc:2c:7d:da:6d:1d:e4:cd:e5:ef:f0: f3:88:98:26:a4:86:d6:fc:05:6b:78:0e:1f:7b:7b:da:36:b7: 28:07:fb:4f:2c:85:3e:f3:3d:49:95:f8:9c:b8:9c:16:dd:ec: 00:cc:44:20:63:a9:b9:7e:4a:fa:35:6b:b5:8a:a5:3e:24:f8: 6c:0b:f7:76:cd:91:9a:09:f5:11:ca:e3:b4:df:83:24:89:c4: 12:ce:2a:71:b0:3b:02:d3:0e:86:e2:68:6d:28:06:1f:15:51: 63:f4:65:51:c2:22:fc:63:58:dd:c0:24:d5:5a:96:9a:25:6f: 27:69:ea:a7:2a:c5:3a:3a:4c:5f:76:77:87:55:f8:4e:20:0d: 8e:f7:f1:bb:20:8f:bd:08:3d:51:85:b4:cf:ed:51:d2:e9:67: 4a:43:8f:bd:f4:b3:cf:6a:27:88:8d:ef:3e:d6:0e:d9:2f:a7: 3c:1c:46:77:2c:f4:b6:8a:71:0d:ba:6a:99:07:33:ee:61:fa: 3c:35:84:b1:c3:8a:e2:2c:0a:0d:1e:5d:79:3c:14:ba:51:c6: 80:78:b0:fa:d1:d2:6d:45:8e:ad:bc:a9:34:b8:d6:eb:ab:0b: 17:96:5a:b1:c5:38:45:a1:21:37:9a:8d:f0:7c:d7:df:bc:ff: 99:54:ea:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeQaC51jjUX0cWG23GvDa2w/6kDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI1NDAwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDVlN2Q4YjdlZGQ5ZjJjNzFiMGVkNDQ4YzEzZDYxYmY1 ZmM4OGYwMjFkZTVjNWFlODZlZDI2ZDNiOTVmMDcwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCTXWp2FpQuyP1PH3qp16DEbJe8/uuQULWe9B7e+rHABXi kypL8EdoKgiiZfyYrfFwYT8dwmq4b0rqSY2iYks44n6mt56O7QqiPrkBkuHNStU+ /leutD9UEGQCBdF+pjHi+5x567EJJ45A9oSLYAXzepAwGcNUOjQVUXRRRPvL+VAD 5Bwj1hCe+Mh1SflR2NTs5FZ00fHSIdFmZqwen0DZ12G5C8wbEaRhClletf4v7ncz 824Kfd23OIeIlJa+BQ7twvo0Koiw584HfQBiNlOiSzwjfm97oqCkaZD2pgxvuVT5 7391LjzvPt1+XgIX/Fmb4R1qU52RNVWHfacN6t79AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUo/vd3WZFLD/91eqwec8RKfHuD/EwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNkNjA5NWQzLTdmNmItNDYxOS04ODJjLTI0ZjlkYmVkYTE5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAGYQwDQYJKoZIhvcNAQELBQADggEBABu8cS45wtf8LH3abR3kzeXv 8POImCakhtb8BWt4Dh97e9o2tygH+08shT7zPUmV+Jy4nBbd7ADMRCBjqbl+Svo1 a7WKpT4k+GwL93bNkZoJ9RHK47TfgySJxBLOKnGwOwLTDobiaG0oBh8VUWP0ZVHC IvxjWN3AJNValpolbydp6qcqxTo6TF92d4dV+E4gDY738bsgj70IPVGFtM/tUdLp Z0pDj730s89qJ4iN7z7WDtkvpzwcRncs9LaKcQ26apkHM+5h+jw1hLHDiuIsCg0e XXk8FLpRxoB4sPrR0m1Fjq28qTS41uurCxeWWrHFOEWhITeajfB819+8/5lU6kY= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:05 2025 by rpki-client