$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/428381e5-ece9-4660-b25f-2e7d95bdc66d.roa File: 428381e5-ece9-4660-b25f-2e7d95bdc66d.roa (raw, json) Hash identifier: 39oCFMg6LkzD/G1vIseJvZzt26e9f3X3lqdFkbycuHo= Subject key identifier: D6:22:98:A4:55:E8:A7:C5:70:64:26:02:77:90:79:5E:BC:40:13:9D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0B78B21CC0AD63E22688AAC1DCCD50F754C925CE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/428381e5-ece9-4660-b25f-2e7d95bdc66d.roa Signing time: Fri 31 Oct 2025 04:39:41 +0000 ROA not before: Fri 31 Oct 2025 04:39:41 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3b28::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:78:b2:1c:c0:ad:63:e2:26:88:aa:c1:dc:cd:50:f7:54:c9:25:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:39:41 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=847ff53aebc7f825e3ac5f9ddf9aa6ef61f040ecf3690226ad2f541fa6026bd9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:26:8d:0f:71:f9:31:6a:c2:3a:2d:ae:aa:33: 2e:12:19:25:74:b7:26:c4:e8:1d:fe:3e:cb:1f:ce: 2e:61:24:1f:fe:10:57:16:7b:dc:7d:9b:2f:fb:76: ec:b4:dd:42:80:5d:8f:3d:0e:d9:c5:19:70:f3:30: 1d:80:d4:c2:ea:a9:11:f0:0a:0a:2c:9c:c2:19:18: 60:e5:ce:8a:15:7c:a5:bf:e4:07:1e:1f:41:dc:28: bb:e9:4c:1c:e9:fe:c2:b5:15:15:b2:1d:dd:32:2e: 2d:f1:93:0d:e2:cd:3d:fc:55:05:af:67:95:57:60: ac:a4:56:21:11:a6:a9:c3:71:1f:04:0d:04:22:c2: d7:d6:dd:2b:9d:14:5c:58:48:4d:92:99:e6:ac:c4: d0:74:ca:bb:0f:3e:78:28:86:52:bc:a0:6b:1e:9b: d3:70:b4:31:94:60:02:8c:4a:16:a5:16:9f:5d:49: 01:ff:19:7c:b3:57:41:c0:f5:f2:87:53:31:fe:00: b4:04:40:13:72:67:05:b5:e5:63:48:dc:62:fe:b9: 86:57:31:bc:4e:8f:40:38:a3:c6:75:f8:d0:67:8c: a2:ba:af:1e:ab:32:0f:b7:40:75:47:ab:7c:4f:d0: 1a:4d:74:df:89:5f:08:75:c1:49:bc:a8:25:39:ff: 73:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:22:98:A4:55:E8:A7:C5:70:64:26:02:77:90:79:5E:BC:40:13:9D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/428381e5-ece9-4660-b25f-2e7d95bdc66d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3b28::/46 Signature Algorithm: sha256WithRSAEncryption b6:12:8e:b0:6b:88:9b:ba:7e:e7:84:34:d4:a8:07:b5:00:d6: 42:bd:ef:37:19:87:38:17:22:d2:8c:5d:45:64:80:f1:d8:09: c2:43:21:df:6a:c8:85:41:eb:2a:60:cc:a0:9f:94:a3:77:94: 82:0f:71:08:03:eb:ca:e5:e0:ec:12:4a:31:c0:82:ca:b2:03: 0f:64:30:e6:86:40:ab:9b:bb:f0:de:d9:a6:12:62:a3:3f:5c: 9d:e1:39:0d:94:19:cd:f2:05:2c:eb:c0:6c:56:da:a2:4a:ce: 01:5e:5e:83:82:75:a6:4d:2f:c9:8f:54:4f:f4:51:15:de:f3: ed:69:60:a6:87:cc:61:f6:a0:59:9b:97:36:ae:d7:0d:a9:af: 80:07:22:db:76:ad:88:30:e7:5c:bc:6d:79:aa:a5:7e:e0:d2: 5b:ed:6e:82:70:9f:db:32:e6:c1:95:b4:55:a6:3e:01:ca:8f: 56:58:33:b2:d6:92:06:d7:a2:0f:e0:81:73:dc:33:31:49:ea: 66:ab:07:3b:3e:19:93:52:86:67:d0:8e:84:aa:31:69:8a:f7: 52:52:2f:8e:bb:7d:11:d6:31:1e:d8:51:26:0f:2a:be:73:fb: 78:12:96:fe:87:7b:54:3c:66:cb:ce:2a:b0:de:5b:bb:05:73: 61:f3:bf:77 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC3iyHMCtY+ImiKrB3M1Q91TJJc4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQzOTQxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDdmZjUzYWViYzdmODI1ZTNhYzVmOWRkZjlhYTZlZjYx ZjA0MGVjZjM2OTAyMjZhZDJmNTQxZmE2MDI2YmQ5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdJo0PcfkxasI6La6qMy4SGSV0tybE6B3+Pssfzi5hJB/+ EFcWe9x9my/7duy03UKAXY89DtnFGXDzMB2A1MLqqRHwCgosnMIZGGDlzooVfKW/ 5AceH0HcKLvpTBzp/sK1FRWyHd0yLi3xkw3izT38VQWvZ5VXYKykViERpqnDcR8E DQQiwtfW3SudFFxYSE2SmeasxNB0yrsPPngohlK8oGsem9NwtDGUYAKMShalFp9d SQH/GXyzV0HA9fKHUzH+ALQEQBNyZwW15WNI3GL+uYZXMbxOj0A4o8Z1+NBnjKK6 rx6rMg+3QHVHq3xP0BpNdN+JXwh1wUm8qCU5/3NBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1iKYpFXop8VwZCYCd5B5XrxAE50wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQyODM4MWU1LWVjZTktNDY2MC1iMjVmLTJlN2Q5NWJkYzY2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAOygwDQYJKoZIhvcNAQELBQADggEBALYSjrBriJu6fueENNSoB7UA 1kK97zcZhzgXItKMXUVkgPHYCcJDId9qyIVB6ypgzKCflKN3lIIPcQgD68rl4OwS SjHAgsqyAw9kMOaGQKubu/De2aYSYqM/XJ3hOQ2UGc3yBSzrwGxW2qJKzgFeXoOC daZNL8mPVE/0URXe8+1pYKaHzGH2oFmblzau1w2pr4AHItt2rYgw51y8bXmqpX7g 0lvtboJwn9sy5sGVtFWmPgHKj1ZYM7LWkgbXog/ggXPcMzFJ6marBzs+GZNShmfQ joSqMWmK91JSL467fRHWMR7YUSYPKr5z+3gSlv6He1Q8ZsvOKrDeW7sFc2Hzv3c= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:35 2025 by rpki-client