$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4691f34a-67a4-454f-8e81-de0d49a941f2.roa File: 4691f34a-67a4-454f-8e81-de0d49a941f2.roa (raw, json) Hash identifier: /O71gxfTDvKaXmRQEBi9LfUeZXYZCWmkz5LX5181W9Y= Subject key identifier: BF:64:D0:B8:9E:18:CF:01:6E:B7:AE:CE:A9:C5:F8:01:D6:BC:4F:A4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4B115DF4B5FFD9EBBBA27C689D8C0D3CF704DA81 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4691f34a-67a4-454f-8e81-de0d49a941f2.roa Signing time: Fri 31 Oct 2025 04:57:05 +0000 ROA not before: Fri 31 Oct 2025 04:57:05 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f40::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:11:5d:f4:b5:ff:d9:eb:bb:a2:7c:68:9d:8c:0d:3c:f7:04:da:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:57:05 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=34b72a7e3df63f80371f64b727321c6e36f9359b8def025becf1b5eacf9fc92c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:34:dc:09:bb:f4:af:79:24:66:ad:62:03:5e: b3:62:9d:71:49:b7:e7:6d:bb:68:d2:87:b0:8c:7c: e6:ee:d9:05:b5:e4:59:ed:1f:02:e9:ef:bf:94:be: db:91:d6:e2:5b:a4:86:1c:6d:64:c1:6a:50:c2:a2: 54:16:67:65:47:6a:88:32:2f:3b:28:7d:8b:26:7f: b8:fc:7a:c7:c0:c7:10:7e:15:fc:ff:c9:f2:24:44: c9:b4:63:9e:32:a3:6f:d3:38:7f:1d:c0:5b:64:f2: 37:75:37:e4:17:c6:f4:a0:72:be:db:4e:6b:d8:1d: 0f:8e:e6:7a:90:06:66:69:78:f4:c3:a4:73:a5:7e: 28:70:6a:18:c4:37:de:14:ed:5a:dd:83:55:19:72: 8a:ec:13:f1:e3:56:35:4d:57:24:4c:c2:34:1b:b1: 58:43:88:6a:75:57:53:10:95:d2:d1:c7:a9:8e:4d: df:12:0b:7e:e2:87:a4:b9:0c:1b:35:37:73:71:89: 9e:88:2a:d8:b5:12:50:7b:94:f1:ec:b7:00:a4:4e: 98:c8:21:10:10:89:d7:57:d8:7a:2a:0c:28:f5:1f: c7:f2:00:e2:bb:32:ad:6e:3d:1e:0b:0f:fa:95:91: 1c:ea:02:64:21:05:e8:b2:06:b4:b6:3e:2d:40:10: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:64:D0:B8:9E:18:CF:01:6E:B7:AE:CE:A9:C5:F8:01:D6:BC:4F:A4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4691f34a-67a4-454f-8e81-de0d49a941f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f40::/46 Signature Algorithm: sha256WithRSAEncryption 5c:9d:fb:05:b8:7d:40:2c:de:bc:aa:76:31:1c:14:0f:60:4f: 32:ac:e1:e7:8d:01:64:ff:fc:43:78:a8:80:ae:71:3f:e2:42: 10:f2:bc:98:85:22:ad:0c:df:bd:81:6b:b1:1e:f8:25:5f:96: b6:e6:5d:88:d3:06:08:70:6e:94:b0:6d:dc:6b:0b:23:86:39: 69:52:6c:92:f4:3a:b8:d7:62:91:29:fe:de:8b:69:43:a1:85: 87:f8:fa:af:25:cf:bb:65:11:fc:18:55:23:d5:01:d6:14:00: 19:0d:d0:1c:97:9d:37:55:eb:41:f0:81:75:e6:c2:21:62:7d: 8a:46:b5:55:2b:b6:c7:6e:f9:40:b6:27:f1:b5:c3:85:ae:b3: e9:f0:0b:b0:41:fa:e2:72:75:70:ba:89:5e:10:b8:e9:40:57: 85:5d:3d:f9:6d:85:6a:88:0f:c4:40:c8:c8:bd:65:7c:5e:10: cd:5b:3b:01:93:ce:5a:cc:02:4f:73:51:ae:0c:df:0f:95:46: b8:76:32:9c:08:04:64:96:80:b8:c3:0b:43:b8:e4:2d:ad:58: 97:5b:9e:ab:17:7e:0b:1b:a8:44:46:de:18:39:74:b6:43:7c: a6:cf:3e:46:1b:de:14:1d:f2:df:e1:8d:29:29:15:de:7b:50: ed:b4:11:f6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSxFd9LX/2eu7onxonYwNPPcE2oEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ1NzA1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGI3MmE3ZTNkZjYzZjgwMzcxZjY0YjcyNzMyMWM2ZTM2 ZjkzNTliOGRlZjAyNWJlY2YxYjVlYWNmOWZjOTJjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtNNwJu/SveSRmrWIDXrNinXFJt+dtu2jSh7CMfObu2QW1 5FntHwLp77+UvtuR1uJbpIYcbWTBalDColQWZ2VHaogyLzsofYsmf7j8esfAxxB+ Ffz/yfIkRMm0Y54yo2/TOH8dwFtk8jd1N+QXxvSgcr7bTmvYHQ+O5nqQBmZpePTD pHOlfihwahjEN94U7Vrdg1UZcorsE/HjVjVNVyRMwjQbsVhDiGp1V1MQldLRx6mO Td8SC37ih6S5DBs1N3NxiZ6IKti1ElB7lPHstwCkTpjIIRAQiddX2HoqDCj1H8fy AOK7Mq1uPR4LD/qVkRzqAmQhBeiyBrS2Pi1AEAxRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUv2TQuJ4YzwFut67OqcX4Ada8T6QwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ2OTFmMzRhLTY3YTQtNDU0Zi04ZTgxLWRlMGQ0OWE5NDFmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAP0AwDQYJKoZIhvcNAQELBQADggEBAFyd+wW4fUAs3ryqdjEcFA9g TzKs4eeNAWT//EN4qICucT/iQhDyvJiFIq0M372Ba7Ee+CVflrbmXYjTBghwbpSw bdxrCyOGOWlSbJL0OrjXYpEp/t6LaUOhhYf4+q8lz7tlEfwYVSPVAdYUABkN0ByX nTdV60HwgXXmwiFifYpGtVUrtsdu+UC2J/G1w4Wus+nwC7BB+uJydXC6iV4QuOlA V4VdPflthWqID8RAyMi9ZXxeEM1bOwGTzlrMAk9zUa4M3w+VRrh2MpwIBGSWgLjD C0O45C2tWJdbnqsXfgsbqERG3hg5dLZDfKbPPkYb3hQd8t/hjSkpFd57UO20EfY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:26:41 2025 by rpki-client