$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e8235c6-cced-4727-8ca3-0bc17d458f88.roa File: 3e8235c6-cced-4727-8ca3-0bc17d458f88.roa (raw, json) Hash identifier: q3het4vQznl44B52WvvrXVTcLvQs4WU0t3gjIHSD4Ec= Subject key identifier: 00:33:9F:B8:6C:70:E4:98:C0:80:D2:43:68:FD:5D:49:9E:A4:6A:4E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3C899FC55967F7D7A4E6603630A0478DCB00D8E6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e8235c6-cced-4727-8ca3-0bc17d458f88.roa Signing time: Fri 31 Oct 2025 03:11:31 +0000 ROA not before: Fri 31 Oct 2025 03:11:31 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1d64::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:89:9f:c5:59:67:f7:d7:a4:e6:60:36:30:a0:47:8d:cb:00:d8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:11:31 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=387425154f89212d48c8dee3f8bb71df5da251dd403430cddba5ada4d363dd2d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f1:40:24:15:6e:aa:17:31:8b:89:f9:30:e4: b7:26:63:b7:47:67:be:91:39:0f:a6:43:66:bc:c9: 68:80:ba:74:17:6b:98:04:1c:8d:04:aa:4b:80:2f: b1:09:de:80:94:52:0c:66:8c:9e:ee:05:df:2e:05: eb:2d:40:ee:30:94:ce:6f:ba:f2:32:d6:88:9e:ad: ed:2c:9d:a6:c5:c5:6b:d2:7a:05:44:4f:cc:1b:a1: 54:5a:f1:12:09:01:fc:e8:c0:da:37:86:20:0b:ef: 88:02:f5:01:45:e1:39:14:ef:af:28:f2:6f:37:56: e4:44:76:f8:01:25:cd:82:1a:3e:ef:3b:ba:d7:39: 3e:e7:3e:e0:4b:88:3e:dd:88:a0:82:20:14:e6:c2: f3:41:09:ee:84:14:e9:5d:c9:0a:54:f7:d1:20:eb: 6e:7c:04:91:76:37:c1:49:80:98:24:d7:13:0c:e3: 2a:42:73:60:bc:4e:89:ee:97:7d:de:63:70:ad:28: 77:30:6f:76:53:b7:a5:e1:b4:90:7c:a0:7d:75:34: c5:bb:80:52:5a:ae:aa:88:b6:58:c2:5e:d9:19:48: 20:4d:6e:6e:51:d7:97:fd:12:31:c0:2f:e3:ae:d8: 55:db:f1:97:b7:fb:0f:f5:f6:c8:c8:2c:90:35:04: 7f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:33:9F:B8:6C:70:E4:98:C0:80:D2:43:68:FD:5D:49:9E:A4:6A:4E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3e8235c6-cced-4727-8ca3-0bc17d458f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1d64::/46 Signature Algorithm: sha256WithRSAEncryption ae:21:56:6d:ea:5a:3b:73:ef:2c:76:20:d2:71:ce:a2:0c:e7: 55:a7:f9:c1:7e:8f:74:37:95:38:9f:f5:3b:4f:1b:c6:b9:31: 1c:a2:97:7c:fd:ac:ad:23:c6:c9:1f:09:d4:d3:ea:89:fb:0c: 5c:f6:0a:02:cf:6d:76:8d:78:84:65:c1:64:8c:09:77:1c:01: 69:a3:70:20:62:26:51:68:c2:e4:e8:5e:93:9a:ad:83:67:eb: c7:b8:c2:2f:1a:64:b5:5b:a7:bf:51:76:43:cf:a5:2b:33:c3: 46:20:0f:0c:94:2a:5e:fc:dc:67:2d:29:d7:c1:f8:ba:cd:e1: bc:d8:da:31:2e:a2:e9:89:35:3b:75:4b:e9:de:2f:05:f6:83: d5:52:a7:98:45:2f:40:4e:a2:0b:97:fb:4b:a4:2e:9b:cc:16: a2:15:92:98:5d:8e:10:51:95:fb:f0:a9:a7:9d:43:f5:71:dc: 5a:f4:38:05:0c:38:bb:8e:1e:7b:6d:58:ad:c4:ce:d7:c3:db: 72:86:78:ad:56:f8:ec:c5:d1:d1:80:25:57:3d:50:af:fa:3e: 01:b1:e5:f8:56:90:6d:94:43:36:85:41:4c:b7:1e:4e:50:5c: 16:b5:5e:3a:e5:9d:f5:75:bf:69:13:ae:64:7c:86:45:fb:f3: 00:d0:fd:0a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPImfxVln99ek5mA2MKBHjcsA2OYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMxMTMxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzODc0MjUxNTRmODkyMTJkNDhjOGRlZTNmOGJiNzFkZjVk YTI1MWRkNDAzNDMwY2RkYmE1YWRhNGQzNjNkZDJkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQ8UAkFW6qFzGLifkw5LcmY7dHZ76ROQ+mQ2a8yWiAunQX a5gEHI0EqkuAL7EJ3oCUUgxmjJ7uBd8uBestQO4wlM5vuvIy1oiere0snabFxWvS egVET8wboVRa8RIJAfzowNo3hiAL74gC9QFF4TkU768o8m83VuREdvgBJc2CGj7v O7rXOT7nPuBLiD7diKCCIBTmwvNBCe6EFOldyQpU99Eg6258BJF2N8FJgJgk1xMM 4ypCc2C8Tonul33eY3CtKHcwb3ZTt6XhtJB8oH11NMW7gFJarqqItljCXtkZSCBN bm5R15f9EjHAL+Ou2FXb8Ze3+w/19sjILJA1BH99AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUADOfuGxw5JjAgNJDaP1dSZ6kak4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNlODIzNWM2LWNjZWQtNDcyNy04Y2EzLTBiYzE3ZDQ1OGY4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAHWQwDQYJKoZIhvcNAQELBQADggEBAK4hVm3qWjtz7yx2INJxzqIM 51Wn+cF+j3Q3lTif9TtPG8a5MRyil3z9rK0jxskfCdTT6on7DFz2CgLPbXaNeIRl wWSMCXccAWmjcCBiJlFowuToXpOarYNn68e4wi8aZLVbp79RdkPPpSszw0YgDwyU Kl783GctKdfB+LrN4bzY2jEuoumJNTt1S+neLwX2g9VSp5hFL0BOoguX+0ukLpvM FqIVkphdjhBRlfvwqaedQ/Vx3Fr0OAUMOLuOHnttWK3EztfD23KGeK1W+OzF0dGA JVc9UK/6PgGx5fhWkG2UQzaFQUy3Hk5QXBa1XjrlnfV1v2kTrmR8hkX78wDQ/Qo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:27 2025 by rpki-client