$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3fb0e10e-645b-4cb0-8362-c2ef81ace3d1.roa File: 3fb0e10e-645b-4cb0-8362-c2ef81ace3d1.roa (raw, json) Hash identifier: hiCiBpPw42wkIvFsznyh00vMZfpjj72THQNvCMWQrVo= Subject key identifier: 9F:9A:94:61:8C:44:28:A9:DE:9E:28:86:52:06:7A:29:14:86:EE:1D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7F1D8140CE6E2EFAAA201A94110FDBBE7932F521 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3fb0e10e-645b-4cb0-8362-c2ef81ace3d1.roa Signing time: Thu 30 Oct 2025 23:22:04 +0000 ROA not before: Thu 30 Oct 2025 23:22:04 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2c8c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1d:81:40:ce:6e:2e:fa:aa:20:1a:94:11:0f:db:be:79:32:f5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:22:04 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=02772a98194cb23611573faf6b523713e50a960ed5c8aabbb3c6e84de3da62ec, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:69:73:60:08:bf:e0:d5:b0:90:f3:74:e1:cf: ba:b0:d9:25:43:58:96:77:9d:3c:3e:b7:cb:b2:fa: 55:9c:35:4d:a8:c1:55:71:d1:c2:1e:6b:54:2f:37: 9e:09:66:e5:e6:6e:7c:e5:99:68:f1:4b:ac:00:e0: 07:72:9e:9e:72:79:2e:9f:2f:f6:6f:78:7c:2c:18: a1:8d:14:09:f6:0f:30:d6:78:a0:31:af:31:f5:14: 3d:dc:2f:37:07:aa:b7:e0:8e:53:a6:cc:a4:3d:bc: 16:23:56:4c:77:2f:a8:64:5e:da:e9:93:12:02:f4: a1:c8:f9:e8:6b:88:25:1f:25:c8:e9:3d:c7:3e:2c: 01:1a:57:c9:d9:7d:6a:6c:69:8b:5c:7b:3c:45:01: 12:56:dd:77:79:6a:66:b2:8f:1b:f1:3f:c5:55:02: 10:92:da:3d:80:cd:18:94:55:ab:6c:13:d8:d7:d7: 5a:ce:88:66:c4:0e:dc:71:58:98:b0:00:5e:07:b0: 0c:c0:02:79:bc:14:1e:51:cb:15:d4:38:25:6f:56: 77:46:cc:fa:26:8e:bb:d5:1c:e6:53:86:45:f3:6d: 17:39:c5:e3:16:71:f0:1e:e9:2c:5e:9f:d6:ed:8d: fe:6f:02:9b:b6:79:f7:3c:21:da:24:9f:48:44:32: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9A:94:61:8C:44:28:A9:DE:9E:28:86:52:06:7A:29:14:86:EE:1D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3fb0e10e-645b-4cb0-8362-c2ef81ace3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2c8c::/47 Signature Algorithm: sha256WithRSAEncryption 81:e9:58:d9:9b:d5:d1:f5:36:66:e0:17:0e:ba:5a:92:d7:73: 25:b2:71:80:a3:c7:2f:10:ca:51:16:72:2f:5f:53:dd:17:08: 27:71:52:6b:55:01:69:6f:d0:c8:e9:ff:26:f2:d1:1d:43:c1: 78:47:a3:d4:75:89:e2:18:14:b8:c4:6a:42:d6:be:7d:c7:2a: 5b:1f:4d:c9:3a:ed:80:4c:01:ce:d9:c5:c2:e0:be:b6:46:30: 40:4f:d9:1d:52:c3:d4:d3:c1:e0:0e:0f:cd:41:40:ba:f0:b2: 94:0a:95:9c:5f:9b:b3:39:3f:44:b7:f9:b1:55:45:fe:11:f9: 01:23:ea:2f:59:64:c2:79:de:25:19:3a:39:33:5d:e9:4e:52: fe:f7:6b:d9:54:22:1b:ce:3b:50:fb:59:79:48:9d:f9:89:38: 08:70:f2:68:98:46:a5:bd:b3:c8:81:c9:bb:b2:e5:76:77:a7: ca:94:cd:ed:96:c0:d6:50:a9:05:5f:50:c3:12:23:75:54:3d: 05:3e:a9:0d:c4:fa:46:cd:07:4d:49:a7:45:2c:5f:21:8d:5c: 61:47:a0:a9:a0:d7:96:54:15:3d:b4:2e:3a:00:c8:2b:57:46: 4e:b4:cc:7e:ae:7e:af:b1:27:ed:18:c1:c1:37:ac:88:c7:2d: 66:56:d9:02 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfx2BQM5uLvqqIBqUEQ/bvnky9SEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMyMjA0WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjc3MmE5ODE5NGNiMjM2MTE1NzNmYWY2YjUyMzcxM2U1 MGE5NjBlZDVjOGFhYmJiM2M2ZTg0ZGUzZGE2MmVjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKaXNgCL/g1bCQ83Thz7qw2SVDWJZ3nTw+t8uy+lWcNU2o wVVx0cIea1QvN54JZuXmbnzlmWjxS6wA4Adynp5yeS6fL/ZveHwsGKGNFAn2DzDW eKAxrzH1FD3cLzcHqrfgjlOmzKQ9vBYjVkx3L6hkXtrpkxIC9KHI+ehriCUfJcjp Pcc+LAEaV8nZfWpsaYtcezxFARJW3Xd5amayjxvxP8VVAhCS2j2AzRiUVatsE9jX 11rOiGbEDtxxWJiwAF4HsAzAAnm8FB5RyxXUOCVvVndGzPomjrvVHOZThkXzbRc5 xeMWcfAe6Sxen9btjf5vApu2efc8Idokn0hEMuUFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUn5qUYYxEKKneniiGUgZ6KRSG7h0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzNmYjBlMTBlLTY0NWItNGNiMC04MzYyLWMyZWY4MWFjZTNkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALIwwDQYJKoZIhvcNAQELBQADggEBAIHpWNmb1dH1NmbgFw66WpLX cyWycYCjxy8QylEWci9fU90XCCdxUmtVAWlv0Mjp/yby0R1DwXhHo9R1ieIYFLjE akLWvn3HKlsfTck67YBMAc7ZxcLgvrZGMEBP2R1Sw9TTweAOD81BQLrwspQKlZxf m7M5P0S3+bFVRf4R+QEj6i9ZZMJ53iUZOjkzXelOUv73a9lUIhvOO1D7WXlInfmJ OAhw8miYRqW9s8iBybuy5XZ3p8qUze2WwNZQqQVfUMMSI3VUPQU+qQ3E+kbNB01J p0UsXyGNXGFHoKmg15ZUFT20LjoAyCtXRk60zH6ufq+xJ+0YwcE3rIjHLWZW2QI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:16 2025 by rpki-client