$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45450597-9cb6-40df-a4df-577eb4501e63.roa File: 45450597-9cb6-40df-a4df-577eb4501e63.roa (raw, json) Hash identifier: 9JZjjnboxHk4wk6KxmQqAwQeL/POTifEaFy/d9Bj2eo= Subject key identifier: 04:A3:4F:37:13:C8:48:C3:43:3E:5C:95:29:AF:88:13:70:EF:5F:B6 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3FD2CB51FEBF630E0534F432945285C84C2F9630 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45450597-9cb6-40df-a4df-577eb4501e63.roa Signing time: Fri 31 Oct 2025 00:12:10 +0000 ROA not before: Fri 31 Oct 2025 00:12:10 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:33e6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d2:cb:51:fe:bf:63:0e:05:34:f4:32:94:52:85:c8:4c:2f:96:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:12:10 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=65fbf7cbbdb3eb14fc244a38ed5a7569a1ced506c3da0a75e402a7ace83a4c9a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:2f:9b:33:7f:cc:0f:cc:04:db:01:19:d0: 7b:08:02:44:ec:9d:f6:f4:1c:86:63:c5:8d:24:1f: 37:64:b2:82:80:a6:1a:60:cc:90:d0:f3:96:fd:21: 49:29:b0:16:8c:3a:c2:e5:66:5c:9c:fa:28:6c:e6: 12:b1:69:1b:22:bb:71:9b:aa:47:7a:9f:83:fc:7f: de:95:61:82:f0:c0:92:62:8d:7c:d8:62:e6:b5:ba: 2f:29:42:ee:80:24:21:9e:ba:eb:d9:10:6e:f5:e4: 06:4f:96:7c:7c:c4:0d:47:83:55:78:a1:cf:77:c7: 72:7e:5d:64:9b:7e:6e:5c:14:8f:52:2b:e1:47:71: 11:b5:26:ee:e3:c1:1b:1e:ff:d0:60:56:dd:35:41: 42:a4:b3:7a:f6:b2:c0:ec:dc:2c:7e:52:6a:9a:e6: 1d:9d:c1:00:38:54:30:7d:7f:42:75:19:a8:ac:6d: 1b:47:97:82:12:0a:fb:b5:f8:b4:88:f2:51:5b:9c: 03:3a:99:7d:de:45:b8:3f:4b:98:bc:51:22:10:e7: 79:79:2e:ec:73:5b:db:8c:36:38:ae:08:a9:d8:2d: 30:f9:a3:bd:4a:58:02:97:bf:0a:9a:75:21:bf:68: fd:50:e4:3c:8a:55:7a:2c:33:bc:35:87:e6:de:69: 6a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A3:4F:37:13:C8:48:C3:43:3E:5C:95:29:AF:88:13:70:EF:5F:B6 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45450597-9cb6-40df-a4df-577eb4501e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:33e6::/47 Signature Algorithm: sha256WithRSAEncryption 2c:e8:22:bb:4d:28:d0:46:31:25:5b:b0:6d:d7:28:36:96:93: 2f:21:7a:b7:99:1f:16:36:72:38:fa:7f:32:4f:1c:80:dd:0d: b8:3d:0b:93:dd:3e:cc:40:17:5a:bd:89:f7:90:70:e8:f2:36: 31:d7:ee:fb:cc:2a:e7:8d:e9:5c:e2:82:36:4a:fd:13:56:47: 3b:b5:79:2e:a3:6b:58:ff:da:1e:5b:eb:c2:8f:f0:1d:12:40: 1c:5f:e0:e2:ff:8e:6a:27:af:85:ad:85:91:a2:0f:cb:64:6f: e1:bf:4f:84:5d:fd:06:97:d4:8b:22:33:55:0b:54:66:2e:47: ea:52:55:89:d2:aa:99:ab:97:16:a7:a7:63:25:9e:2f:8e:17: 74:2b:79:ae:d0:a9:12:78:45:ab:ea:15:3a:ba:b7:91:64:56: 52:b2:76:92:4d:0c:73:13:c9:bd:96:b0:d1:d9:87:cb:bb:ef: c7:49:33:b9:a6:74:51:99:a8:71:46:21:7f:75:85:f9:d8:8f: e3:de:81:02:6f:ee:00:05:17:da:e8:97:d8:ad:7f:88:a0:62: 53:17:d9:96:26:1f:c4:d5:05:68:f4:47:49:91:31:78:0d:11: 77:5e:54:02:5c:35:01:92:30:4d:75:9e:31:48:f6:28:b2:18: 01:65:a0:6c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP9LLUf6/Yw4FNPQylFKFyEwvljAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAxMjEwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWZiZjdjYmJkYjNlYjE0ZmMyNDRhMzhlZDVhNzU2OWEx Y2VkNTA2YzNkYTBhNzVlNDAyYTdhY2U4M2E0YzlhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEmC+bM3/MD8wE2wEZ0HsIAkTsnfb0HIZjxY0kHzdksoKA phpgzJDQ85b9IUkpsBaMOsLlZlyc+ihs5hKxaRsiu3Gbqkd6n4P8f96VYYLwwJJi jXzYYua1ui8pQu6AJCGeuuvZEG715AZPlnx8xA1Hg1V4oc93x3J+XWSbfm5cFI9S K+FHcRG1Ju7jwRse/9BgVt01QUKks3r2ssDs3Cx+Umqa5h2dwQA4VDB9f0J1Gais bRtHl4ISCvu1+LSI8lFbnAM6mX3eRbg/S5i8USIQ53l5LuxzW9uMNjiuCKnYLTD5 o71KWAKXvwqadSG/aP1Q5DyKVXosM7w1h+beaWr9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBKNPNxPISMNDPlyVKa+IE3DvX7YwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ1NDUwNTk3LTljYjYtNDBkZi1hNGRmLTU3N2ViNDUwMWU2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAM+YwDQYJKoZIhvcNAQELBQADggEBACzoIrtNKNBGMSVbsG3XKDaW ky8hereZHxY2cjj6fzJPHIDdDbg9C5PdPsxAF1q9ifeQcOjyNjHX7vvMKueN6Vzi gjZK/RNWRzu1eS6ja1j/2h5b68KP8B0SQBxf4OL/jmonr4WthZGiD8tkb+G/T4Rd /QaX1IsiM1ULVGYuR+pSVYnSqpmrlxanp2Mlni+OF3Qrea7QqRJ4RavqFTq6t5Fk VlKydpJNDHMTyb2WsNHZh8u778dJM7mmdFGZqHFGIX91hfnYj+PegQJv7gAFF9ro l9itf4igYlMX2ZYmH8TVBWj0R0mRMXgNEXdeVAJcNQGSME11njFI9iiyGAFloGw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:54 2025 by rpki-client