$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4988f35c-bd29-415a-b07e-c2316ae24f3c.roa File: 4988f35c-bd29-415a-b07e-c2316ae24f3c.roa (raw, json) Hash identifier: CHYlgMkbvpyspHlqjziQIpiNMldBZSRW2tyev8IWd3w= Subject key identifier: 9E:BF:C3:9C:D5:3F:8F:62:7D:21:64:94:28:C6:43:00:50:BA:31:F7 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6251291F5B7C61628B1B765D77A3B3D6D182D5D2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4988f35c-bd29-415a-b07e-c2316ae24f3c.roa Signing time: Fri 31 Oct 2025 06:23:49 +0000 ROA not before: Fri 31 Oct 2025 06:23:49 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3e10::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:51:29:1f:5b:7c:61:62:8b:1b:76:5d:77:a3:b3:d6:d1:82:d5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:23:49 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=aec24fbcd57bce93836e64bbb96b5107841aebfb1f0c1336ead9c415b839693d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:74:50:08:ed:fb:f6:4c:b9:73:51:ea:7e: 3e:21:ec:00:dc:23:42:3d:86:ff:b7:57:e5:f1:58: 37:e0:bc:2c:63:34:86:1c:57:f9:3c:3d:33:ca:b6: 58:d8:ca:f5:05:76:54:62:51:b9:3d:4d:83:f0:51: c9:d5:f2:e9:f4:b4:7f:5d:a3:3d:50:4a:f1:e9:66: 19:de:1b:fc:98:a7:d8:65:27:48:ae:3e:92:f0:4d: 58:34:f0:b9:49:c9:0f:1a:9c:8e:10:6e:93:5e:99: 25:61:2f:64:76:9a:4c:1d:8d:7f:26:d2:b7:32:09: 8d:58:08:99:64:de:4e:d1:1e:c2:64:57:fe:9d:af: 93:fb:9a:63:e6:75:c5:8b:17:fc:34:89:54:5f:b7: 69:1e:04:0f:93:74:65:c4:61:e5:ee:0b:ac:4a:a6: 4c:27:ad:eb:6e:bd:86:ae:31:0e:2d:b1:67:4a:6e: 89:64:b7:79:44:f8:de:44:cc:d7:7f:78:2f:07:d0: 40:d7:83:91:f5:eb:4e:ee:81:2a:71:03:ca:2e:76: 46:a2:c4:73:78:58:ea:a2:6b:a6:09:c2:be:25:10: 56:5e:5c:9c:33:8a:a6:d4:16:26:f6:e3:db:f7:d3: cd:50:be:72:85:56:55:4f:ae:02:c6:70:ac:97:4a: a6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BF:C3:9C:D5:3F:8F:62:7D:21:64:94:28:C6:43:00:50:BA:31:F7 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4988f35c-bd29-415a-b07e-c2316ae24f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3e10::/45 Signature Algorithm: sha256WithRSAEncryption 79:3a:71:7e:16:0f:9b:6c:a3:2d:b3:b9:f8:1f:ef:76:5e:e9: 90:ad:81:54:5c:d4:f3:2e:92:c2:73:0d:b4:8e:80:6a:8b:cb: 00:04:1d:cf:67:93:f8:1c:b1:66:39:cc:5f:34:2c:03:ee:d4: 73:d7:03:dd:89:e4:d2:75:25:76:d2:82:0a:da:1e:60:ba:90: 46:e8:9c:6b:64:61:51:3d:2b:76:f8:11:fb:e0:cf:da:d1:0a: 14:12:08:42:d8:91:c8:14:bd:d2:71:70:65:ee:73:d9:94:c9: 3a:83:a9:0c:98:b4:61:08:99:54:8b:aa:51:5c:64:b2:cc:19: 88:00:2d:a3:46:58:26:24:d5:32:d3:88:e3:b2:e0:31:62:ef: fc:9f:11:1c:8f:48:be:e6:65:75:5e:11:10:b9:dd:1d:74:a7: a4:d9:20:10:b2:0a:a1:a9:13:a6:6e:c0:9c:0a:4f:d9:c7:1b: 58:e0:e0:5c:a2:6d:c5:bf:df:19:16:74:db:60:a6:07:0f:6b: 43:0b:f9:41:4a:4f:e3:d3:3e:1a:69:6d:3b:7e:50:3d:e9:e4: ac:8c:13:6c:a8:a6:bf:7d:9f:d6:86:5b:3a:2d:45:d4:34:2e: 5f:b0:39:17:70:8c:8a:70:92:d7:ad:88:e2:42:e2:9e:19:67: 29:b8:83:91 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYlEpH1t8YWKLG3Zdd6Oz1tGC1dIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYyMzQ5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZWMyNGZiY2Q1N2JjZTkzODM2ZTY0YmJiOTZiNTEwNzg0 MWFlYmZiMWYwYzEzMzZlYWQ5YzQxNWI4Mzk2OTNkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC13HRQCO379ky5c1Hqfj4h7ADcI0I9hv+3V+XxWDfgvCxj NIYcV/k8PTPKtljYyvUFdlRiUbk9TYPwUcnV8un0tH9doz1QSvHpZhneG/yYp9hl J0iuPpLwTVg08LlJyQ8anI4QbpNemSVhL2R2mkwdjX8m0rcyCY1YCJlk3k7RHsJk V/6dr5P7mmPmdcWLF/w0iVRft2keBA+TdGXEYeXuC6xKpkwnretuvYauMQ4tsWdK bolkt3lE+N5EzNd/eC8H0EDXg5H1607ugSpxA8oudkaixHN4WOqia6YJwr4lEFZe XJwziqbUFib249v3081QvnKFVlVPrgLGcKyXSqbRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnr/DnNU/j2J9IWSUKMZDAFC6MfcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ5ODhmMzVjLWJkMjktNDE1YS1iMDdlLWMyMzE2YWUyNGYzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAPhAwDQYJKoZIhvcNAQELBQADggEBAHk6cX4WD5tsoy2zufgf73Ze 6ZCtgVRc1PMuksJzDbSOgGqLywAEHc9nk/gcsWY5zF80LAPu1HPXA92J5NJ1JXbS ggraHmC6kEbonGtkYVE9K3b4Efvgz9rRChQSCELYkcgUvdJxcGXuc9mUyTqDqQyY tGEImVSLqlFcZLLMGYgALaNGWCYk1TLTiOOy4DFi7/yfERyPSL7mZXVeERC53R10 p6TZIBCyCqGpE6ZuwJwKT9nHG1jg4FyibcW/3xkWdNtgpgcPa0ML+UFKT+PTPhpp bTt+UD3p5KyME2yopr99n9aGWzotRdQ0Ll+wORdwjIpwktetiOJC4p4ZZym4g5E= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:21 2025 by rpki-client