$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45436848-6c42-43d0-add3-4abae2b8c55d.roa File: 45436848-6c42-43d0-add3-4abae2b8c55d.roa (raw, json) Hash identifier: 8F4WdtTTO59pPWhIo0ctRODaMKuq0j34I6BSWZrNT4A= Subject key identifier: B2:13:DB:59:27:A0:27:55:FF:0F:56:07:C9:CB:D0:AE:9C:7A:67:D8 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 40EDBFBBF7F25FED6D72387AC8C13C1AA282070C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45436848-6c42-43d0-add3-4abae2b8c55d.roa Signing time: Fri 31 Oct 2025 04:13:26 +0000 ROA not before: Fri 31 Oct 2025 04:13:26 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:362c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ed:bf:bb:f7:f2:5f:ed:6d:72:38:7a:c8:c1:3c:1a:a2:82:07:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:13:26 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=694ec840dd091775e1145890e999f20e3ef21a2a4f2b3137e526c8db58e98b8e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:50:4a:a0:d6:5c:d2:fa:11:55:ff:01:b6:fb: 85:4c:41:8e:20:dc:6c:1a:bc:a4:bd:90:51:08:3a: cf:00:37:37:8f:8a:40:d4:33:52:fe:b6:e3:88:c2: 0b:37:e8:8d:84:c2:8c:6e:51:c0:7a:1f:87:2e:df: 3a:14:6b:3f:f1:46:c8:a5:11:90:cb:a7:81:ce:ba: 6e:44:4c:aa:4a:f2:06:7d:35:c9:03:57:d7:56:05: 96:2d:43:1f:7d:90:39:07:ad:7e:a9:7a:9b:d6:10: a8:14:f9:1d:7d:a8:1e:43:0b:93:61:78:64:af:ce: 38:aa:79:94:8a:69:25:15:bc:3b:fb:bc:a9:4d:4e: 0d:c7:5e:04:1d:9f:53:e4:97:c5:58:46:c6:58:4a: 04:c9:5a:27:5a:ea:a7:62:74:9f:9d:02:6d:6e:cc: db:f4:42:54:de:4e:79:86:3f:85:c6:1f:57:e0:c1: 30:30:94:d6:b1:17:f8:e4:51:34:b9:35:53:19:b5: 99:d9:10:db:5d:7f:cf:2b:f1:20:02:2b:bf:ed:2d: 4b:16:d9:16:48:45:5d:f4:88:b3:41:c0:52:2f:89: ea:77:e2:6e:ce:57:23:1f:d0:9c:ee:66:db:4d:0c: dd:6c:14:79:38:26:aa:6d:56:84:4b:93:7e:c2:ba: 64:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:13:DB:59:27:A0:27:55:FF:0F:56:07:C9:CB:D0:AE:9C:7A:67:D8 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45436848-6c42-43d0-add3-4abae2b8c55d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:362c::/46 Signature Algorithm: sha256WithRSAEncryption c0:e6:49:bf:c9:36:f5:f1:0b:5f:81:c1:a8:f7:17:4a:44:ca: fc:a7:27:eb:39:db:82:c6:d0:e3:a4:20:97:8f:60:92:a6:01: 43:ac:27:0b:e5:da:c8:9a:6b:1a:64:db:34:84:cd:06:98:34: ba:d1:80:2d:e0:f2:bf:39:03:9f:57:b3:da:bc:35:87:8e:55: a3:51:f6:86:da:82:6b:25:47:33:d8:50:a7:cb:f4:cd:f8:b2: 3f:ce:ce:e9:a4:b5:79:d4:f9:8a:67:5d:fe:3c:6e:e5:e2:f2: a5:6f:9e:a4:5b:e4:e3:42:1e:a3:95:7b:e3:05:d0:f3:ae:96: 5e:5b:34:8b:2a:46:7b:bd:a6:c8:c7:ef:77:bc:e6:0c:af:17: 94:86:12:1a:ff:75:fa:d2:f9:b9:32:ef:51:82:13:ef:86:8c: a5:12:cf:26:22:33:fb:4c:ff:7a:cf:cd:29:1b:29:d9:be:eb: c9:69:26:50:87:87:69:cf:86:d2:23:56:47:d6:9b:62:29:56: 64:86:ac:7a:ea:e2:1c:3b:39:4c:c5:05:4f:bc:cc:4f:be:3c: a3:81:65:a6:34:ca:5f:6e:09:9f:12:5b:16:f7:6d:df:76:10: 5f:30:ee:ef:27:4d:6f:c3:32:da:d7:81:d6:e1:06:58:dc:29: 32:ea:0a:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQO2/u/fyX+1tcjh6yME8GqKCBwwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQxMzI2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2OTRlYzg0MGRkMDkxNzc1ZTExNDU4OTBlOTk5ZjIwZTNl ZjIxYTJhNGYyYjMxMzdlNTI2YzhkYjU4ZTk4YjhlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjUEqg1lzS+hFV/wG2+4VMQY4g3GwavKS9kFEIOs8ANzeP ikDUM1L+tuOIwgs36I2EwoxuUcB6H4cu3zoUaz/xRsilEZDLp4HOum5ETKpK8gZ9 NckDV9dWBZYtQx99kDkHrX6pepvWEKgU+R19qB5DC5NheGSvzjiqeZSKaSUVvDv7 vKlNTg3HXgQdn1Pkl8VYRsZYSgTJWida6qdidJ+dAm1uzNv0QlTeTnmGP4XGH1fg wTAwlNaxF/jkUTS5NVMZtZnZENtdf88r8SACK7/tLUsW2RZIRV30iLNBwFIviep3 4m7OVyMf0JzuZttNDN1sFHk4JqptVoRLk37CumSTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUshPbWSegJ1X/D1YHycvQrpx6Z9gwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ1NDM2ODQ4LTZjNDItNDNkMC1hZGQzLTRhYmFlMmI4YzU1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAANiwwDQYJKoZIhvcNAQELBQADggEBAMDmSb/JNvXxC1+Bwaj3F0pE yvynJ+s524LG0OOkIJePYJKmAUOsJwvl2siaaxpk2zSEzQaYNLrRgC3g8r85A59X s9q8NYeOVaNR9obagmslRzPYUKfL9M34sj/OzumktXnU+YpnXf48buXi8qVvnqRb 5ONCHqOVe+MF0POull5bNIsqRnu9psjH73e85gyvF5SGEhr/dfrS+bky71GCE++G jKUSzyYiM/tM/3rPzSkbKdm+68lpJlCHh2nPhtIjVkfWm2IpVmSGrHrq4hw7OUzF BU+8zE++PKOBZaY0yl9uCZ8SWxb3bd92EF8w7u8nTW/DMtrXgdbhBljcKTLqCtI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:30 2025 by rpki-client