$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4738e3a1-9db4-4b7e-880e-0633dbadfd0c.roa File: 4738e3a1-9db4-4b7e-880e-0633dbadfd0c.roa (raw, json) Hash identifier: fXGk46bW89TExww9hATPZsGDxII0FekLb0c1DPXf5mo= Subject key identifier: 99:AE:B9:59:C0:06:30:BB:57:D1:71:C0:1F:28:F1:75:78:40:74:A2 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 01F81EBD73EC31B7D4421C913AC0FF55D56D4801 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4738e3a1-9db4-4b7e-880e-0633dbadfd0c.roa Signing time: Fri 31 Oct 2025 03:08:30 +0000 ROA not before: Fri 31 Oct 2025 03:08:30 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1c70::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f8:1e:bd:73:ec:31:b7:d4:42:1c:91:3a:c0:ff:55:d5:6d:48:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:08:30 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=82a0e0f25fc55874d64b625a855b957778668cb1fd70f624a88c1b708e1a7682, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bf:93:ae:fe:93:9d:ff:b8:8c:30:1c:42:52: 88:ea:df:95:15:4f:88:aa:5d:f8:80:c5:62:05:66: 50:75:a1:88:4e:68:91:58:70:aa:df:12:13:5d:1b: 48:cb:02:f1:f3:41:ed:a9:c3:5a:11:84:4a:0e:51: 31:f5:14:70:4c:6e:3d:87:bf:d7:2a:e5:4b:a0:73: b4:96:4f:bf:8a:1c:c4:36:1f:0a:86:a1:c4:20:5d: 66:f7:e4:11:4d:f6:5a:f4:fe:07:a4:29:b4:81:48: 39:94:28:fa:d6:59:6b:94:28:43:d9:19:ad:29:85: 0f:4e:49:db:4a:9c:0e:a7:3b:c3:5e:2b:b8:0b:08: 8e:64:62:56:90:4b:d0:4e:85:a3:2d:1b:75:0f:84: 5e:0d:9d:d7:53:8d:ee:1d:15:72:a0:54:b3:92:aa: de:2a:60:72:c3:3b:60:1f:bf:b8:1d:f0:55:fb:6c: 67:38:07:cd:45:ad:13:81:df:d2:d7:8f:c2:07:88: aa:a7:8b:43:1d:32:22:42:3b:f7:4b:a5:cc:ec:79: 3e:32:72:c6:b0:f5:26:2f:55:1f:48:a4:a6:bb:99: a9:10:da:d2:85:57:7e:19:0a:f7:82:7a:7e:78:5d: 79:e9:2b:d4:b1:b8:da:bf:b7:54:39:42:f6:a4:c9: 31:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AE:B9:59:C0:06:30:BB:57:D1:71:C0:1F:28:F1:75:78:40:74:A2 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4738e3a1-9db4-4b7e-880e-0633dbadfd0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1c70::/46 Signature Algorithm: sha256WithRSAEncryption 39:9f:bc:19:04:d7:99:64:d2:fa:31:66:eb:86:bc:ed:26:8d: 57:8f:d9:24:c8:2e:14:08:06:de:9d:69:eb:83:6b:e7:7d:8a: cf:88:58:4d:25:07:35:fb:a6:61:47:e5:38:7a:3e:30:b8:56: 50:e3:81:68:17:fb:b0:49:ce:ae:80:27:5d:b5:4a:e4:e1:9b: f4:6a:07:2f:4c:cf:32:ae:45:b5:7a:d5:7d:de:de:c9:3a:f2: a2:c0:22:55:79:4c:6d:dd:a4:ad:b6:71:30:64:6a:c6:67:f5: ac:de:ab:b6:8c:e0:21:bd:ca:be:c3:5a:22:1b:a2:e4:dc:3e: 3a:77:e1:d9:a2:33:1a:06:1b:24:53:49:51:5c:3f:8e:a1:63: cb:73:86:31:6f:b2:09:d0:18:68:a0:3c:96:8d:04:29:b0:ae: 5d:f2:84:ae:26:3c:c8:02:a0:82:7b:b4:ab:2d:42:36:a6:e2: 5a:5a:26:90:9b:95:5b:71:e8:51:aa:7d:8d:85:cb:82:1d:b5: 54:4e:fa:ed:51:39:fb:29:24:e4:1f:51:7b:46:11:b1:55:39: b7:68:13:eb:52:18:33:4d:94:8e:0a:39:d8:73:14:55:f4:76: c9:26:c8:32:50:91:7d:8d:e5:03:18:70:52:89:ef:dc:46:d7: f0:30:49:96 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAfgevXPsMbfUQhyROsD/VdVtSAEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMwODMwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MmEwZTBmMjVmYzU1ODc0ZDY0YjYyNWE4NTViOTU3Nzc4 NjY4Y2IxZmQ3MGY2MjRhODhjMWI3MDhlMWE3NjgyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5v5Ou/pOd/7iMMBxCUojq35UVT4iqXfiAxWIFZlB1oYhO aJFYcKrfEhNdG0jLAvHzQe2pw1oRhEoOUTH1FHBMbj2Hv9cq5Uugc7SWT7+KHMQ2 HwqGocQgXWb35BFN9lr0/gekKbSBSDmUKPrWWWuUKEPZGa0phQ9OSdtKnA6nO8Ne K7gLCI5kYlaQS9BOhaMtG3UPhF4NnddTje4dFXKgVLOSqt4qYHLDO2Afv7gd8FX7 bGc4B81FrROB39LXj8IHiKqni0MdMiJCO/dLpczseT4ycsaw9SYvVR9IpKa7makQ 2tKFV34ZCveCen54XXnpK9SxuNq/t1Q5QvakyTGxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUma65WcAGMLtX0XHAHyjxdXhAdKIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ3MzhlM2ExLTlkYjQtNGI3ZS04ODBlLTA2MzNkYmFkZmQwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAHHAwDQYJKoZIhvcNAQELBQADggEBADmfvBkE15lk0voxZuuGvO0m jVeP2STILhQIBt6daeuDa+d9is+IWE0lBzX7pmFH5Th6PjC4VlDjgWgX+7BJzq6A J121SuThm/RqBy9MzzKuRbV61X3e3sk68qLAIlV5TG3dpK22cTBkasZn9azeq7aM 4CG9yr7DWiIbouTcPjp34dmiMxoGGyRTSVFcP46hY8tzhjFvsgnQGGigPJaNBCmw rl3yhK4mPMgCoIJ7tKstQjam4lpaJpCblVtx6FGqfY2Fy4IdtVRO+u1ROfspJOQf UXtGEbFVObdoE+tSGDNNlI4KOdhzFFX0dskmyDJQkX2N5QMYcFKJ79xG1/AwSZY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:24 2025 by rpki-client