$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e282d28-96c8-442e-b68e-c4eacb20eb82.roa File: 3e282d28-96c8-442e-b68e-c4eacb20eb82.roa (raw, json) Hash identifier: 0WkDxEdiAJsGstRmrRfKYRGUvCes2TzNgYfAfdw/Wxs= Subject key identifier: A5:3E:74:03:E6:5F:EB:84:D3:D7:B7:96:63:4D:C2:A2:25:E8:03:A4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 44161A7D4FBA77C493F347B87ED316F00519A16E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e282d28-96c8-442e-b68e-c4eacb20eb82.roa Signing time: Fri 31 Oct 2025 06:42:12 +0000 ROA not before: Fri 31 Oct 2025 06:42:12 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2420::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:16:1a:7d:4f:ba:77:c4:93:f3:47:b8:7e:d3:16:f0:05:19:a1:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:42:12 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=488dfbe3c21314bba9c4ee984749a26ddf809973a9cb765bd7a17b7f1f9efd56, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:90:13:f2:70:ab:f3:70:75:4f:6a:06:ef: 9b:ca:f0:cd:d7:50:86:8d:e5:44:23:33:65:43:cf: b1:ef:9b:92:91:d8:a7:9d:be:94:36:17:4a:b4:97: d1:7b:9f:6e:5b:4f:ca:c7:09:bd:21:20:aa:4b:b5: 5f:3d:6e:73:d0:90:9d:05:19:c0:a2:65:00:54:fa: 14:07:3a:35:b5:a2:bc:32:7a:d7:79:db:20:40:d2: 6e:bb:1d:c0:84:fb:4a:ca:52:11:63:b6:09:61:42: 5d:3a:e0:25:89:38:2f:26:17:17:ba:2e:3b:07:2b: 30:88:c8:d9:00:c2:2c:0d:a9:3f:7d:a5:be:a2:f9: b0:ff:31:b7:bf:26:dc:35:0c:3e:a8:75:e0:02:97: 7b:7d:eb:c5:ca:8c:92:66:fe:ba:a2:9d:96:d4:64: 9d:9e:dd:5e:f2:17:42:24:c1:10:23:bb:fe:94:b3: 18:6a:cb:09:b6:17:50:20:77:c5:dd:31:32:d6:a8: 70:5b:ac:c0:4a:d0:23:d8:26:42:d8:fb:fc:b5:e4: fb:92:96:b7:cd:7e:1e:9a:1d:0f:92:ab:be:90:19: 5e:fd:be:23:f7:dd:ce:9f:0b:fc:7f:d6:a1:3b:a0: 3d:2e:23:5b:41:01:e7:e4:df:46:54:79:8c:dd:03: 72:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3E:74:03:E6:5F:EB:84:D3:D7:B7:96:63:4D:C2:A2:25:E8:03:A4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e282d28-96c8-442e-b68e-c4eacb20eb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2420::/44 Signature Algorithm: sha256WithRSAEncryption a7:24:43:95:a2:51:35:03:4c:f4:72:dc:67:72:7a:09:f6:9b: f2:08:ab:4f:a1:f1:79:a2:31:45:69:de:fd:fe:37:74:31:60: 90:ae:59:20:cf:82:9f:f8:85:7d:ec:51:78:68:34:24:57:95: 3c:c8:70:a5:9e:e2:dd:83:64:1a:c9:98:9c:91:64:73:71:c4: b9:8d:28:b0:02:5f:94:bf:ef:07:47:24:76:82:8c:7c:76:d4: 2d:64:6d:e3:64:fc:df:d6:b5:2d:3d:18:0d:c4:e0:7d:ce:bd: f8:02:73:f1:86:ad:0c:4e:f7:6c:d6:4b:20:45:3d:96:80:f1: eb:de:24:ae:8d:19:1a:24:e2:9f:f1:c3:80:e6:11:23:05:f6: 5d:6c:c4:1e:de:1b:26:c3:34:c6:39:df:23:bc:1a:da:c6:95: e5:a1:e2:26:d2:33:7e:ce:4e:74:49:03:60:f7:ee:38:1e:50: 4e:df:74:de:cb:5c:e3:2a:2a:e0:1c:7b:74:a5:ef:7d:d5:4e: 6e:ee:c3:ce:00:c7:a0:b8:e5:d0:d6:af:9f:18:ff:e1:60:bb: 74:30:b5:69:27:15:d0:b3:2c:43:4b:94:8a:4f:55:c2:61:13: 2e:40:41:64:23:ed:02:a3:d6:3c:96:94:96:7a:68:ab:dc:34: 3b:f7:84:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURBYafU+6d8ST80e4ftMW8AUZoW4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY0MjEyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODhkZmJlM2MyMTMxNGJiYTljNGVlOTg0NzQ5YTI2ZGRm ODA5OTczYTljYjc2NWJkN2ExN2I3ZjFmOWVmZDU2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2A5AT8nCr83B1T2oG75vK8M3XUIaN5UQjM2VDz7Hvm5KR 2KedvpQ2F0q0l9F7n25bT8rHCb0hIKpLtV89bnPQkJ0FGcCiZQBU+hQHOjW1orwy etd52yBA0m67HcCE+0rKUhFjtglhQl064CWJOC8mFxe6LjsHKzCIyNkAwiwNqT99 pb6i+bD/Mbe/Jtw1DD6odeACl3t968XKjJJm/rqinZbUZJ2e3V7yF0IkwRAju/6U sxhqywm2F1Agd8XdMTLWqHBbrMBK0CPYJkLY+/y15PuSlrfNfh6aHQ+Sq76QGV79 viP33c6fC/x/1qE7oD0uI1tBAefk30ZUeYzdA3IdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpT50A+Zf64TT17eWY03CoiXoA6QwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNlMjgyZDI4LTk2YzgtNDQyZS1iNjhlLWM0ZWFjYjIwZWI4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAJCAwDQYJKoZIhvcNAQELBQADggEBAKckQ5WiUTUDTPRy3Gdyegn2 m/IIq0+h8XmiMUVp3v3+N3QxYJCuWSDPgp/4hX3sUXhoNCRXlTzIcKWe4t2DZBrJ mJyRZHNxxLmNKLACX5S/7wdHJHaCjHx21C1kbeNk/N/WtS09GA3E4H3OvfgCc/GG rQxO92zWSyBFPZaA8eveJK6NGRok4p/xw4DmESMF9l1sxB7eGybDNMY53yO8GtrG leWh4ibSM37OTnRJA2D37jgeUE7fdN7LXOMqKuAce3Sl733VTm7uw84Ax6C45dDW r58Y/+Fgu3QwtWknFdCzLENLlIpPVcJhEy5AQWQj7QKj1jyWlJZ6aKvcNDv3hOA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:15 2025 by rpki-client