$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d9e6594-d029-45ea-ad25-9abe26054887.roa File: 3d9e6594-d029-45ea-ad25-9abe26054887.roa (raw, json) Hash identifier: 9LodFj5M36O7GI4iQ7leim6wZ42Jfq0wklSftvQyD+o= Subject key identifier: 6B:A6:2A:B5:80:26:3F:9E:33:4C:69:36:E7:31:62:2A:CB:75:A8:A4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7CDF24629F07C8CA86B5FE9A66D791EA15B58FA9 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d9e6594-d029-45ea-ad25-9abe26054887.roa Signing time: Fri 31 Oct 2025 05:10:28 +0000 ROA not before: Fri 31 Oct 2025 05:10:28 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:14b0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:df:24:62:9f:07:c8:ca:86:b5:fe:9a:66:d7:91:ea:15:b5:8f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:10:28 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0004ecec7b39b4b88b1a8ecb2b95014f6a5330dfd723fdbc2d020bbf65d56798, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:02:1d:11:37:6b:fd:3b:7d:c3:1f:8c:2e:8f: ec:f0:64:be:9d:7d:24:b6:9c:b5:9d:50:f5:dc:d3: a3:36:ad:44:fb:e0:d4:2c:62:7b:14:81:f4:a5:df: 42:45:99:94:9b:a5:46:e3:c9:80:4f:f9:29:02:fb: 4b:a8:ac:e4:2a:6e:50:1d:d2:91:1b:bc:20:67:08: b8:9c:b9:c2:39:47:b0:10:ed:0e:c3:c7:72:79:79: 5a:d8:6d:a3:e3:cf:64:e9:0a:9d:1f:26:e0:97:61: 57:6e:61:06:fe:49:5b:0b:06:a3:41:e5:93:cd:1b: 54:31:16:84:27:c2:c0:bf:7f:61:8f:d4:d3:9b:e4: d3:9a:1a:26:d3:4f:71:b7:83:d8:e7:86:04:1b:04: df:b3:e8:d7:87:e1:f5:a4:c7:32:bb:f9:ed:8f:7b: 29:5e:34:eb:6e:8a:a2:21:2f:b5:63:6a:73:3e:df: 4d:92:4b:39:8b:79:eb:3c:4c:75:e9:3e:a0:20:da: f9:ed:b8:ef:ee:65:54:b8:41:b2:fa:d0:51:9d:1c: 86:3a:ba:07:cf:ee:a9:5a:ce:98:e0:53:2e:83:3a: fa:90:39:b0:9f:42:7c:a9:d7:82:4a:84:c4:4e:98: 91:62:20:f7:52:83:53:73:47:b3:4b:86:4c:e6:43: 12:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A6:2A:B5:80:26:3F:9E:33:4C:69:36:E7:31:62:2A:CB:75:A8:A4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3d9e6594-d029-45ea-ad25-9abe26054887.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:14b0::/45 Signature Algorithm: sha256WithRSAEncryption 41:96:53:2c:21:15:33:2a:1f:58:84:a8:d0:95:6a:bf:b7:c7: ad:86:0a:19:e5:9b:b0:80:af:fd:0d:be:73:a8:10:0a:56:e9: 9e:bc:b5:4c:42:29:01:e8:e7:ba:92:5d:b4:42:3a:a8:17:3a: 78:57:07:19:d4:3c:c2:06:bd:4e:7c:73:d0:9c:b1:48:8f:ab: 6c:be:43:df:00:ff:77:c5:ba:5b:c1:3a:90:4e:08:26:63:e2: 78:0b:c4:c4:3c:41:41:54:d9:a3:1c:9a:55:48:d5:05:06:5e: 22:ec:72:e1:cc:54:08:d5:36:75:dd:84:52:15:0b:9d:7f:09: ec:e1:16:53:84:3a:9d:7f:92:2f:1b:a5:5e:04:b9:ad:61:09: 96:d7:56:4a:09:59:b8:9b:48:61:f3:e1:f0:dd:f0:a4:2d:5b: c6:f1:b9:48:6a:e4:70:bb:a7:ed:10:64:1c:a5:6d:5a:c3:3c: 0b:ef:c5:b5:26:13:f5:86:7b:6b:f6:77:1a:e5:a1:b5:9b:fb: 1e:00:7e:e7:c4:c6:a7:2b:04:b1:1b:ef:0f:fc:94:03:e1:c5: 53:72:f1:97:62:1e:83:f7:1f:61:24:40:78:55:2b:63:e8:18: cb:d0:f6:6c:a8:0b:a5:9b:02:e0:92:db:75:0f:63:a8:70:53: a5:99:f9:cd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfN8kYp8HyMqGtf6aZteR6hW1j6kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUxMDI4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDA0ZWNlYzdiMzliNGI4OGIxYThlY2IyYjk1MDE0ZjZh NTMzMGRmZDcyM2ZkYmMyZDAyMGJiZjY1ZDU2Nzk4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiAh0RN2v9O33DH4wuj+zwZL6dfSS2nLWdUPXc06M2rUT7 4NQsYnsUgfSl30JFmZSbpUbjyYBP+SkC+0uorOQqblAd0pEbvCBnCLicucI5R7AQ 7Q7Dx3J5eVrYbaPjz2TpCp0fJuCXYVduYQb+SVsLBqNB5ZPNG1QxFoQnwsC/f2GP 1NOb5NOaGibTT3G3g9jnhgQbBN+z6NeH4fWkxzK7+e2PeyleNOtuiqIhL7VjanM+ 302SSzmLees8THXpPqAg2vntuO/uZVS4QbL60FGdHIY6ugfP7qlazpjgUy6DOvqQ ObCfQnyp14JKhMROmJFiIPdSg1NzR7NLhkzmQxJLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUa6YqtYAmP54zTGk25zFiKst1qKQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNkOWU2NTk0LWQwMjktNDVlYS1hZDI1LTlhYmUyNjA1NDg4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAFLAwDQYJKoZIhvcNAQELBQADggEBAEGWUywhFTMqH1iEqNCVar+3 x62GChnlm7CAr/0NvnOoEApW6Z68tUxCKQHo57qSXbRCOqgXOnhXBxnUPMIGvU58 c9CcsUiPq2y+Q98A/3fFulvBOpBOCCZj4ngLxMQ8QUFU2aMcmlVI1QUGXiLscuHM VAjVNnXdhFIVC51/CezhFlOEOp1/ki8bpV4Eua1hCZbXVkoJWbibSGHz4fDd8KQt W8bxuUhq5HC7p+0QZBylbVrDPAvvxbUmE/WGe2v2dxrlobWb+x4AfufExqcrBLEb 7w/8lAPhxVNy8ZdiHoP3H2EkQHhVK2PoGMvQ9myoC6WbAuCS23UPY6hwU6WZ+c0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:59:43 2025 by rpki-client