$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48f98f78-3c6e-4008-8769-206773344d01.roa File: 48f98f78-3c6e-4008-8769-206773344d01.roa (raw, json) Hash identifier: zQr4bmQZ/ydhVDW26f+SeR46zy40GkPD0UEOlsOwFjQ= Subject key identifier: 67:3A:0C:DA:ED:F6:CE:63:3E:AC:C5:FE:14:57:F6:7C:0B:01:79:FD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4CACF8F9E5BA076A0C07763B9138A82A61F71ADE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48f98f78-3c6e-4008-8769-206773344d01.roa Signing time: Thu 30 Oct 2025 23:23:42 +0000 ROA not before: Thu 30 Oct 2025 23:23:42 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2cb8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ac:f8:f9:e5:ba:07:6a:0c:07:76:3b:91:38:a8:2a:61:f7:1a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:23:42 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=5cbdc72923abc41da28a13188e426b498baa4a526461f92a5041fe84d632e030, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e1:f8:cf:ed:64:4e:87:6d:80:44:7c:6c:29: bf:60:92:35:0d:af:4e:10:bd:75:91:3c:4b:5c:67: 10:c7:d8:7d:0a:bc:47:91:3a:36:52:1b:dd:9d:4f: 3d:33:33:11:37:52:b5:c6:54:94:1f:9a:93:dd:e1: 93:01:1e:15:5c:87:fb:3f:97:b3:13:21:10:84:3e: cd:f8:76:be:68:ad:a8:20:81:bb:3b:84:50:5d:04: 14:31:b2:87:58:0c:19:d8:63:24:8c:27:0b:67:48: 67:2b:80:ae:2b:37:d9:5c:fa:98:dd:7c:75:9a:ca: 76:5b:3d:25:de:f0:94:0f:1a:13:c2:60:a9:17:4e: 2c:08:48:bc:42:91:89:90:3f:5e:58:4d:9f:c7:0a: f8:cc:11:fc:9f:83:63:a8:61:64:e8:19:a4:82:11: 64:39:97:54:c4:e0:39:16:83:e1:b5:b9:f2:7c:ec: 55:1d:f8:f8:cb:80:12:24:74:19:ec:72:44:d2:b4: 64:63:72:ee:d4:85:e6:3f:dc:f2:90:1e:f8:11:c0: 54:61:61:28:61:db:6f:e4:4d:7f:8e:a6:c0:b5:fd: 52:48:32:9b:cc:a0:c6:6f:75:85:24:5a:3e:69:09: 43:72:b5:08:e5:7f:35:18:a1:f8:f0:76:73:84:71: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3A:0C:DA:ED:F6:CE:63:3E:AC:C5:FE:14:57:F6:7C:0B:01:79:FD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48f98f78-3c6e-4008-8769-206773344d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2cb8::/47 Signature Algorithm: sha256WithRSAEncryption 5b:88:ef:a4:e5:c0:1e:db:53:11:b9:69:ec:ca:01:e6:96:ef: de:fc:ef:96:22:94:95:45:8c:10:bf:48:73:c3:f3:bf:8c:bd: af:a1:4f:41:aa:97:ea:27:fa:54:ec:80:f5:8b:f8:cf:f0:fd: 11:83:8a:e4:c6:76:ef:2f:04:01:e3:50:81:a7:17:2c:9a:27: 47:0d:85:d4:5f:87:2b:17:42:4e:b8:26:5e:ce:c6:41:43:b6: 7a:4a:77:1e:9e:e8:df:ec:57:e3:70:94:83:71:f7:9c:65:df: d6:7f:2d:27:8e:09:3d:50:02:80:07:31:e5:c4:94:a3:a3:7a: 13:6d:5e:8d:2b:cc:24:d3:9b:6e:71:81:1f:7c:07:85:ee:f4: 18:3b:f2:52:16:53:8f:fe:cb:67:6a:cb:bc:ce:29:cf:d9:43: 02:f7:5f:26:c1:48:37:6d:b4:4f:a4:53:ef:4b:65:4c:f7:be: 5c:5e:4f:2c:eb:55:78:74:00:91:ad:a6:40:d9:98:61:75:29: 9b:46:5b:2e:88:6b:d2:f3:85:55:fc:ea:a1:e4:5f:fc:64:53: c8:75:68:18:7e:e0:85:37:ba:8e:b2:84:8d:ba:76:b4:fc:30: fd:1d:a3:e2:66:a5:68:e3:5c:f2:d5:1d:7d:df:e8:43:1a:3b: d1:d1:e4:30 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTKz4+eW6B2oMB3Y7kTioKmH3Gt4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMyMzQyWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2JkYzcyOTIzYWJjNDFkYTI4YTEzMTg4ZTQyNmI0OThi YWE0YTUyNjQ2MWY5MmE1MDQxZmU4NGQ2MzJlMDMwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCw4fjP7WROh22ARHxsKb9gkjUNr04QvXWRPEtcZxDH2H0K vEeROjZSG92dTz0zMxE3UrXGVJQfmpPd4ZMBHhVch/s/l7MTIRCEPs34dr5oragg gbs7hFBdBBQxsodYDBnYYySMJwtnSGcrgK4rN9lc+pjdfHWaynZbPSXe8JQPGhPC YKkXTiwISLxCkYmQP15YTZ/HCvjMEfyfg2OoYWToGaSCEWQ5l1TE4DkWg+G1ufJ8 7FUd+PjLgBIkdBnsckTStGRjcu7UheY/3PKQHvgRwFRhYShh22/kTX+OpsC1/VJI MpvMoMZvdYUkWj5pCUNytQjlfzUYofjwdnOEcRIjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZzoM2u32zmM+rMX+FFf2fAsBef0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ4Zjk4Zjc4LTNjNmUtNDAwOC04NzY5LTIwNjc3MzM0NGQwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALLgwDQYJKoZIhvcNAQELBQADggEBAFuI76TlwB7bUxG5aezKAeaW 797875YilJVFjBC/SHPD87+Mva+hT0Gql+on+lTsgPWL+M/w/RGDiuTGdu8vBAHj UIGnFyyaJ0cNhdRfhysXQk64Jl7OxkFDtnpKdx6e6N/sV+NwlINx95xl39Z/LSeO CT1QAoAHMeXElKOjehNtXo0rzCTTm25xgR98B4Xu9Bg78lIWU4/+y2dqy7zOKc/Z QwL3XybBSDdttE+kU+9LZUz3vlxeTyzrVXh0AJGtpkDZmGF1KZtGWy6Ia9LzhVX8 6qHkX/xkU8h1aBh+4IU3uo6yhI26drT8MP0do+JmpWjjXPLVHX3f6EMaO9HR5DA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:24 2025 by rpki-client