$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4122f515-bdda-4530-92b4-2eea08622ae3.roa File: 4122f515-bdda-4530-92b4-2eea08622ae3.roa (raw, json) Hash identifier: szWdAgbAVLUJD8kKP8MhRhWVPfiQXqX69DeNtt9Czus= Subject key identifier: E3:3C:F5:17:D4:AC:F8:6C:57:91:10:2D:0A:14:FA:DE:12:4B:DF:19 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 314F01CEC1C9D0BE49AD6A2595430943E22A8B24 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4122f515-bdda-4530-92b4-2eea08622ae3.roa Signing time: Fri 31 Oct 2025 04:56:59 +0000 ROA not before: Fri 31 Oct 2025 04:56:59 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f14::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:4f:01:ce:c1:c9:d0:be:49:ad:6a:25:95:43:09:43:e2:2a:8b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:56:59 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=44aa9de371581c1b61847361c30df090c5d95dd7afe97e0fa6951d4f87af03b8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c0:9b:63:c3:ed:5d:38:64:8b:39:97:1a:10: 96:6d:e8:ba:8d:1f:7d:78:ef:eb:8c:bc:37:ff:57: 8b:33:5d:c2:0f:90:47:74:6f:17:c8:b8:42:fc:c1: e3:02:66:05:6e:73:58:8f:b5:0d:74:4e:83:84:21: 86:ee:e0:ce:31:7e:03:43:b9:82:b0:40:7f:f6:2a: 7b:03:0a:19:54:8b:92:1f:25:1f:af:27:fc:46:31: 35:15:2b:73:bf:39:00:47:77:5a:5c:ab:ef:20:9b: 7e:96:7f:42:78:e7:fa:bb:cc:94:98:f8:45:6e:4f: 22:f7:26:31:b6:2d:5e:a5:78:69:a5:0a:c8:df:7d: 7f:13:06:e3:ba:c9:c4:37:f4:a5:45:b1:54:6c:48: f5:f3:06:d8:22:f8:68:03:d7:da:35:01:50:14:f5: c5:42:f5:80:e4:3f:7f:10:41:30:c4:e4:56:cb:f2: 68:b6:07:40:f4:f1:99:77:3c:31:28:f2:13:58:16: 1a:62:c3:bf:f7:29:0c:6f:f7:05:7f:7c:17:5c:0e: 25:69:ca:0f:25:34:93:fc:bb:c5:30:56:ac:59:46: da:c9:c5:9f:ea:37:53:b1:2c:66:e3:1b:c8:0b:38: b8:9e:8b:e8:1f:6e:64:7c:4e:a4:d6:8a:28:e8:1d: f1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3C:F5:17:D4:AC:F8:6C:57:91:10:2D:0A:14:FA:DE:12:4B:DF:19 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4122f515-bdda-4530-92b4-2eea08622ae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f14::/46 Signature Algorithm: sha256WithRSAEncryption ac:1a:3b:1a:41:eb:e9:b3:cf:ef:f0:3b:a7:ac:16:27:67:79: 27:2b:ca:45:59:6a:ef:7c:c4:ab:da:09:4a:07:3c:80:08:df: 1a:3d:ec:f4:eb:ed:1a:c7:97:c1:66:bb:e1:3a:37:9e:97:27: 3d:d6:41:b1:31:2d:8e:a6:15:d8:88:6b:90:92:7a:f5:1f:37: fa:1c:7f:0b:15:dd:b8:71:d2:80:a2:99:6b:54:c7:04:89:fe: 62:9f:17:ab:b0:09:88:17:93:39:9b:1c:2c:5a:e4:a6:fb:8b: 0c:91:34:8f:92:01:58:9c:91:95:a1:5b:94:dc:b8:f2:2a:51: c5:95:5e:cc:bb:0e:99:43:21:81:01:63:0a:ed:d6:35:b3:89: 35:f3:9e:53:b5:ac:84:2b:9e:3f:72:9e:04:a6:0c:be:ed:75: b1:20:05:0e:96:08:c6:89:29:19:f0:ba:e8:a0:d6:fc:ee:87: ad:e0:b1:08:81:d9:26:db:2b:ff:08:9b:5e:1d:86:2b:e7:11: a0:99:00:fb:76:c9:10:c9:0e:0f:43:6d:ee:10:bb:50:ec:5c: 7d:f7:f7:5a:d4:a3:5e:c4:6f:7d:0a:ca:8f:6b:ae:7d:5d:cf: e4:d5:87:ae:5a:11:c8:85:21:3f:03:d5:d4:a6:ce:3e:3b:a8: 3c:63:9c:b3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMU8BzsHJ0L5JrWollUMJQ+IqiyQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ1NjU5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGFhOWRlMzcxNTgxYzFiNjE4NDczNjFjMzBkZjA5MGM1 ZDk1ZGQ3YWZlOTdlMGZhNjk1MWQ0Zjg3YWYwM2I4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYwJtjw+1dOGSLOZcaEJZt6LqNH3147+uMvDf/V4szXcIP kEd0bxfIuEL8weMCZgVuc1iPtQ10ToOEIYbu4M4xfgNDuYKwQH/2KnsDChlUi5If JR+vJ/xGMTUVK3O/OQBHd1pcq+8gm36Wf0J45/q7zJSY+EVuTyL3JjG2LV6leGml CsjffX8TBuO6ycQ39KVFsVRsSPXzBtgi+GgD19o1AVAU9cVC9YDkP38QQTDE5FbL 8mi2B0D08Zl3PDEo8hNYFhpiw7/3KQxv9wV/fBdcDiVpyg8lNJP8u8UwVqxZRtrJ xZ/qN1OxLGbjG8gLOLiei+gfbmR8TqTWiijoHfGrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4zz1F9Ss+GxXkRAtChT63hJL3xkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQxMjJmNTE1LWJkZGEtNDUzMC05MmI0LTJlZWEwODYyMmFlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAPxQwDQYJKoZIhvcNAQELBQADggEBAKwaOxpB6+mzz+/wO6esFidn eScrykVZau98xKvaCUoHPIAI3xo97PTr7RrHl8Fmu+E6N56XJz3WQbExLY6mFdiI a5CSevUfN/ocfwsV3bhx0oCimWtUxwSJ/mKfF6uwCYgXkzmbHCxa5Kb7iwyRNI+S AVickZWhW5TcuPIqUcWVXsy7DplDIYEBYwrt1jWziTXznlO1rIQrnj9yngSmDL7t dbEgBQ6WCMaJKRnwuuig1vzuh63gsQiB2SbbK/8Im14dhivnEaCZAPt2yRDJDg9D be4Qu1DsXH3391rUo17Eb30Kyo9rrn1dz+TVh65aEciFIT8D1dSmzj47qDxjnLM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:47 2025 by rpki-client