$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4469963a-53ff-432f-9286-21e483aa5476.roa File: 4469963a-53ff-432f-9286-21e483aa5476.roa (raw, json) Hash identifier: nUxjE0NCS1Fg2cTZ2U2qAesCLVV6KOQeBgQM5Kc4a5k= Subject key identifier: FE:D3:EA:D3:A0:E9:B4:27:E1:5C:7E:59:31:A2:8B:FB:44:F4:B1:89 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 21AE1491F867B9D56B983CE5ACAAF0FED8B60CCD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4469963a-53ff-432f-9286-21e483aa5476.roa Signing time: Fri 31 Oct 2025 00:10:24 +0000 ROA not before: Fri 31 Oct 2025 00:10:24 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3388::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ae:14:91:f8:67:b9:d5:6b:98:3c:e5:ac:aa:f0:fe:d8:b6:0c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:10:24 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=3ee828cdea832141ae478c62cd41cb1148d23cebcaacddaf213dd82f5cf8d882, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:98:8f:f5:17:10:f8:2a:cb:37:17:53:0d:06: 1e:30:38:90:ce:76:f3:22:b6:61:0a:bd:71:74:e1: 02:89:76:71:15:81:f4:5a:7e:2a:c0:43:79:b3:d8: e2:96:a2:42:f7:ef:0e:7c:42:a2:c1:c8:2c:8c:1c: 42:b7:db:b0:80:08:59:58:2e:22:52:7c:1b:09:5c: ed:b9:02:30:bb:b8:ba:50:db:26:53:64:bc:23:90: 1a:f1:2e:26:0b:31:bc:92:6d:50:f8:20:8b:60:30: 48:64:78:06:7a:01:57:4e:cd:2c:db:5c:46:e8:89: ad:7b:f6:12:80:7f:f4:08:56:6c:04:26:56:8a:37: c9:ad:6c:40:4b:bc:76:cc:73:0a:81:17:de:c4:81: 54:9c:6c:ea:a9:11:c2:a0:51:0d:4d:bd:42:90:5c: 15:f4:05:7b:ba:0c:ed:be:9c:0d:e8:d1:1a:18:64: 20:49:79:0b:34:c4:06:87:07:3b:17:73:29:c7:c6: 5f:d3:26:be:9e:4b:6a:e2:5c:de:ca:dc:59:74:18: 5a:13:9e:c2:f0:bb:7b:e2:46:24:83:de:ba:96:f2: 59:42:91:79:70:17:88:28:55:0a:94:c3:58:ed:61: 21:8b:ae:a2:fa:bf:17:9a:a7:28:cb:4f:24:2c:e7: 4f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D3:EA:D3:A0:E9:B4:27:E1:5C:7E:59:31:A2:8B:FB:44:F4:B1:89 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4469963a-53ff-432f-9286-21e483aa5476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3388::/47 Signature Algorithm: sha256WithRSAEncryption 07:96:3e:03:fb:56:07:67:61:ea:9f:35:9a:61:76:d5:b4:fa: 99:a6:5c:45:85:d4:da:18:f7:65:86:c2:bd:10:12:05:a5:0f: b2:b7:53:c6:41:f7:eb:e1:5e:cd:ee:c9:5a:68:4a:c3:3a:3a: a4:29:7c:3d:c6:91:12:46:df:27:f7:44:5a:6d:1f:29:8f:b8: 1b:12:c4:e2:9b:78:37:f2:5c:c3:ea:30:c6:ed:27:64:5b:99: e2:a0:54:f0:43:d8:4a:61:49:52:7a:74:62:d4:0e:96:b9:59: 96:3c:ea:38:7b:27:4d:17:4b:80:47:96:0a:94:26:d8:ab:e0: 1f:f1:2d:85:ea:65:83:0e:c2:df:f4:ad:75:88:d7:18:df:a9: 83:45:c7:d3:9e:12:6b:09:81:a2:06:7e:be:4e:c0:f5:28:b3: 0f:c4:bd:65:c7:03:74:8f:be:ea:f5:b1:bc:75:1e:cd:f8:11: e7:7f:94:eb:5b:29:b4:fb:18:77:85:10:14:aa:fd:e3:0c:38: 4d:33:b2:69:d8:03:48:5a:f5:6b:c9:03:f9:0a:98:7c:cb:c1: 1d:e0:62:03:3a:2d:7c:59:9d:e1:ed:ea:9b:2e:7b:3d:8f:38: d7:e6:2a:8c:d5:ab:3b:18:4c:dd:51:56:f6:ef:65:fd:af:86: 6b:a1:aa:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIa4UkfhnudVrmDzlrKrw/ti2DM0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAxMDI0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZWU4MjhjZGVhODMyMTQxYWU0NzhjNjJjZDQxY2IxMTQ4 ZDIzY2ViY2FhY2RkYWYyMTNkZDgyZjVjZjhkODgyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDamI/1FxD4Kss3F1MNBh4wOJDOdvMitmEKvXF04QKJdnEV gfRafirAQ3mz2OKWokL37w58QqLByCyMHEK327CACFlYLiJSfBsJXO25AjC7uLpQ 2yZTZLwjkBrxLiYLMbySbVD4IItgMEhkeAZ6AVdOzSzbXEboia179hKAf/QIVmwE JlaKN8mtbEBLvHbMcwqBF97EgVScbOqpEcKgUQ1NvUKQXBX0BXu6DO2+nA3o0RoY ZCBJeQs0xAaHBzsXcynHxl/TJr6eS2riXN7K3Fl0GFoTnsLwu3viRiSD3rqW8llC kXlwF4goVQqUw1jtYSGLrqL6vxeapyjLTyQs509lAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/tPq06DptCfhXH5ZMaKL+0T0sYkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ0Njk5NjNhLTUzZmYtNDMyZi05Mjg2LTIxZTQ4M2FhNTQ3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAM4gwDQYJKoZIhvcNAQELBQADggEBAAeWPgP7VgdnYeqfNZphdtW0 +pmmXEWF1NoY92WGwr0QEgWlD7K3U8ZB9+vhXs3uyVpoSsM6OqQpfD3GkRJG3yf3 RFptHymPuBsSxOKbeDfyXMPqMMbtJ2RbmeKgVPBD2EphSVJ6dGLUDpa5WZY86jh7 J00XS4BHlgqUJtir4B/xLYXqZYMOwt/0rXWI1xjfqYNFx9OeEmsJgaIGfr5OwPUo sw/EvWXHA3SPvur1sbx1Hs34Eed/lOtbKbT7GHeFEBSq/eMMOE0zsmnYA0ha9WvJ A/kKmHzLwR3gYgM6LXxZneHt6psuez2PONfmKozVqzsYTN1RVvbvZf2vhmuhqi4= -----END CERTIFICATE-----Generated at Wed Nov 5 15:28:25 2025 by rpki-client