$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4696a4b5-25b0-406b-b002-9b8eeb1a9914.roa File: 4696a4b5-25b0-406b-b002-9b8eeb1a9914.roa (raw, json) Hash identifier: gkRJ++xv5uW6FZ3nri5iBUtW5pv6RPE3LFVioEkzBag= Subject key identifier: 37:AC:F3:BC:8B:92:D1:CF:3E:57:83:C1:74:94:07:2F:74:E3:F4:04 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 32EF638FA3D729ED8CA52681C1056B175DB281C2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4696a4b5-25b0-406b-b002-9b8eeb1a9914.roa Signing time: Fri 31 Oct 2025 01:36:49 +0000 ROA not before: Fri 31 Oct 2025 01:36:49 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3c6e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ef:63:8f:a3:d7:29:ed:8c:a5:26:81:c1:05:6b:17:5d:b2:81:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:36:49 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=ef6e2dd75ea2f4a61ea898a3ff3f2bc7e1175a3bb10a87e09c7cd43e781fdc31, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:fb:32:34:cb:18:e1:28:bc:75:86:77:13: 67:d3:52:29:83:70:8a:39:05:21:2a:2a:13:6f:00: a9:d4:4b:72:53:7d:7c:66:06:ac:ca:c6:f6:70:c0: 4b:47:22:cc:85:ba:eb:0e:62:49:16:2f:f8:45:29: bd:2d:9b:6d:f9:e9:04:cc:8f:61:a6:a3:74:59:eb: b0:96:8e:aa:ec:c1:5f:08:a8:ce:f4:5c:55:51:86: 5b:dd:0e:bb:22:8a:95:08:fe:82:e8:16:a3:3b:6c: 6d:aa:87:75:24:c3:d8:33:89:31:38:0a:7e:a9:a5: 39:3d:c5:04:01:52:35:af:7b:04:e4:16:a1:df:af: 56:86:85:5d:6e:1b:c9:a7:97:f5:ed:cb:75:4b:97: d9:19:67:ca:8a:84:68:38:7b:8e:65:e8:e9:0e:69: 32:65:06:2a:a4:b6:8c:53:0d:d5:3d:b6:f8:ce:84: 64:28:ce:48:99:d7:83:43:16:f7:be:af:12:d6:a8: e9:64:34:5b:0e:c0:4d:5d:8c:19:39:28:af:b8:76: 4b:bd:18:fc:23:0f:d2:8a:81:15:81:4d:40:66:ea: 42:af:4d:57:fe:d6:d0:77:5e:51:3b:5b:32:03:37: 93:44:73:c5:59:60:c0:fd:ac:d4:fb:fc:71:4f:e9: 2f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AC:F3:BC:8B:92:D1:CF:3E:57:83:C1:74:94:07:2F:74:E3:F4:04 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4696a4b5-25b0-406b-b002-9b8eeb1a9914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3c6e::/47 Signature Algorithm: sha256WithRSAEncryption 97:4c:33:df:3c:91:56:c5:84:41:0f:d9:a6:55:32:44:c4:44: e5:98:b0:7b:9b:0a:d9:39:b1:1b:f8:b6:59:04:c5:45:a6:50: 2f:a1:c4:99:f5:4d:2a:d3:45:f2:13:9e:5c:57:7d:b9:f9:d3: 90:3a:09:8a:37:b8:44:90:73:48:2d:59:21:98:5c:5e:5f:b6: e8:ce:79:59:50:f0:53:0f:b2:aa:86:9d:33:c0:df:9d:eb:02: 55:71:4a:98:d6:5d:42:98:98:f2:8a:ec:7b:37:a7:1c:ee:41: 54:f0:68:2d:d8:2f:df:67:d7:a1:c0:f2:ba:8d:b1:0d:f2:38: 0c:4a:0e:90:7d:66:1f:8d:14:99:fd:61:a2:56:36:26:da:f9: a1:8b:5d:b3:19:4e:55:90:ef:12:3a:57:e0:06:2b:54:51:d8: 22:af:a3:9d:de:55:7e:f1:f9:99:1e:37:c5:37:d4:73:93:eb: af:29:7c:1b:04:c6:a9:a5:07:b2:e5:bf:ea:66:50:fc:1b:aa: d0:ef:75:4a:4a:09:e8:42:0d:23:88:86:15:b1:d5:9a:0f:7a: 76:43:4a:7c:bb:be:77:b0:52:20:40:35:72:70:f4:14:d5:10: a2:99:0a:e9:48:03:d7:53:58:57:58:76:7c:69:ab:e1:29:48: 84:bc:dc:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMu9jj6PXKe2MpSaBwQVrF12ygcIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEzNjQ5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjZlMmRkNzVlYTJmNGE2MWVhODk4YTNmZjNmMmJjN2Ux MTc1YTNiYjEwYTg3ZTA5YzdjZDQzZTc4MWZkYzMxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCY2/syNMsY4Si8dYZ3E2fTUimDcIo5BSEqKhNvAKnUS3JT fXxmBqzKxvZwwEtHIsyFuusOYkkWL/hFKb0tm2356QTMj2Gmo3RZ67CWjqrswV8I qM70XFVRhlvdDrsiipUI/oLoFqM7bG2qh3Ukw9gziTE4Cn6ppTk9xQQBUjWvewTk FqHfr1aGhV1uG8mnl/Xty3VLl9kZZ8qKhGg4e45l6OkOaTJlBiqktoxTDdU9tvjO hGQozkiZ14NDFve+rxLWqOlkNFsOwE1djBk5KK+4dku9GPwjD9KKgRWBTUBm6kKv TVf+1tB3XlE7WzIDN5NEc8VZYMD9rNT7/HFP6S/LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUN6zzvIuS0c8+V4PBdJQHL3Tj9AQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ2OTZhNGI1LTI1YjAtNDA2Yi1iMDAyLTliOGVlYjFhOTkxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPG4wDQYJKoZIhvcNAQELBQADggEBAJdMM988kVbFhEEP2aZVMkTE ROWYsHubCtk5sRv4tlkExUWmUC+hxJn1TSrTRfITnlxXfbn505A6CYo3uESQc0gt WSGYXF5ftujOeVlQ8FMPsqqGnTPA353rAlVxSpjWXUKYmPKK7Hs3pxzuQVTwaC3Y L99n16HA8rqNsQ3yOAxKDpB9Zh+NFJn9YaJWNiba+aGLXbMZTlWQ7xI6V+AGK1RR 2CKvo53eVX7x+ZkeN8U31HOT668pfBsExqmlB7Llv+pmUPwbqtDvdUpKCehCDSOI hhWx1ZoPenZDSny7vnewUiBANXJw9BTVEKKZCulIA9dTWFdYdnxpq+EpSIS83NE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:29:10 2025 by rpki-client