$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e3c1522-163f-45e1-8b05-82229f138c3e.roa File: 4e3c1522-163f-45e1-8b05-82229f138c3e.roa (raw, json) Hash identifier: Jq9Ag38KK6xwveyCUcUSMQPPXJWFOq9aj4MA+E/LRis= Subject key identifier: 9F:9F:60:BE:D8:99:A7:1B:7B:1C:BE:4F:38:D0:0E:A8:40:36:43:0B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1DD7A67DF4A1E4661A88CB746870BE4E88D8EDCD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e3c1522-163f-45e1-8b05-82229f138c3e.roa Signing time: Fri 31 Oct 2025 05:10:40 +0000 ROA not before: Fri 31 Oct 2025 05:10:40 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1578::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d7:a6:7d:f4:a1:e4:66:1a:88:cb:74:68:70:be:4e:88:d8:ed:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:10:40 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=7e456b4ad0282e328a45f7d55a01834f4b212aca4afd2e1d346252c4f7da4ac0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:ae:6e:3a:5d:5e:ed:a9:e6:9e:2b:98:59: 6c:cb:86:d2:a1:8b:96:17:86:e6:a1:67:aa:41:f2: 4f:df:cc:ca:16:e0:da:57:e8:24:5f:3e:40:74:4a: c9:49:bd:bf:a0:f6:70:3f:47:53:5d:72:29:4f:79: fb:9d:bf:2d:52:ee:f5:17:33:61:4e:c7:5b:5a:a0: 43:22:cf:77:e7:56:72:55:8b:6e:3e:5c:85:0a:04: b4:87:86:08:d2:f4:cf:80:49:9e:52:b7:5a:47:93: 7b:fb:16:50:8a:e6:30:85:26:68:c3:28:7d:e7:ce: b5:50:de:1c:7d:0b:ec:14:4a:d6:7e:b1:f8:9e:3e: 38:99:fe:df:ef:1b:20:18:85:d7:48:50:e8:1d:5c: c6:81:40:9f:66:ee:ed:a7:af:6e:b1:be:56:95:16: 23:09:36:48:8b:21:d5:88:d1:1e:c1:36:07:af:87: dd:84:64:ec:80:2d:a0:81:b7:26:52:6d:18:bf:2e: 79:98:46:11:77:35:31:eb:27:ca:d5:7b:bc:37:b7: 19:63:a1:fd:42:6b:49:64:bb:0f:1e:5c:78:42:b9: c8:91:b3:b4:42:2b:14:43:d7:f9:ee:b8:bb:6f:19: f9:5b:fb:dc:2a:9d:a1:c3:78:d6:61:c0:4b:cf:9b: 0d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9F:60:BE:D8:99:A7:1B:7B:1C:BE:4F:38:D0:0E:A8:40:36:43:0B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4e3c1522-163f-45e1-8b05-82229f138c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1578::/45 Signature Algorithm: sha256WithRSAEncryption 53:a3:92:14:ca:7c:6a:f5:08:3e:ed:a2:4a:34:3d:1d:26:b4: 92:d5:58:24:8b:e4:ee:44:f7:88:6d:01:18:88:00:49:6c:14: 65:69:c7:87:0e:7a:c7:ef:6c:11:ab:9d:c0:d4:6d:d5:44:6d: a4:12:4b:41:ba:31:ae:7f:9c:52:50:74:6a:0b:cd:e5:49:23: 32:d5:7c:5a:c3:bb:8b:e0:9c:b5:e0:16:32:47:bb:8e:58:3d: 43:fb:d6:82:a9:74:e2:17:1c:a8:39:6c:70:03:cb:27:54:2a: 75:29:05:e7:76:36:20:a4:e5:06:14:6a:4b:8e:89:a6:31:5c: 19:19:29:7a:d2:4c:7e:07:bc:fa:c9:3b:fe:62:5a:38:fe:04: 9e:a0:40:f9:83:e1:5f:66:1e:83:b8:17:fa:6a:84:e6:08:0f: f5:aa:e6:77:15:48:67:c8:3f:67:05:ab:c2:20:49:96:d7:21: 2b:1d:fb:2d:fe:f9:6c:32:3f:12:d2:64:2e:4d:47:ba:da:11: 15:70:61:72:eb:63:35:30:84:f9:da:2c:9b:1f:41:a5:c9:75: 8e:9f:9d:39:4a:3b:ef:55:a9:70:00:cd:e2:4f:71:54:a6:1a: 91:39:6b:ee:6c:99:c6:74:17:5c:62:b9:0d:8b:9b:05:b5:eb: 32:de:b2:64 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHdemffSh5GYaiMt0aHC+TojY7c0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUxMDQwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTQ1NmI0YWQwMjgyZTMyOGE0NWY3ZDU1YTAxODM0ZjRi MjEyYWNhNGFmZDJlMWQzNDYyNTJjNGY3ZGE0YWMwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDF+q5uOl1e7anmniuYWWzLhtKhi5YXhuahZ6pB8k/fzMoW 4NpX6CRfPkB0SslJvb+g9nA/R1NdcilPefudvy1S7vUXM2FOx1taoEMiz3fnVnJV i24+XIUKBLSHhgjS9M+ASZ5St1pHk3v7FlCK5jCFJmjDKH3nzrVQ3hx9C+wUStZ+ sfiePjiZ/t/vGyAYhddIUOgdXMaBQJ9m7u2nr26xvlaVFiMJNkiLIdWI0R7BNgev h92EZOyALaCBtyZSbRi/LnmYRhF3NTHrJ8rVe7w3txljof1Ca0lkuw8eXHhCuciR s7RCKxRD1/nuuLtvGflb+9wqnaHDeNZhwEvPmw2fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUn59gvtiZpxt7HL5PONAOqEA2QwswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRlM2MxNTIyLTE2M2YtNDVlMS04YjA1LTgyMjI5ZjEzOGMzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAFXgwDQYJKoZIhvcNAQELBQADggEBAFOjkhTKfGr1CD7toko0PR0m tJLVWCSL5O5E94htARiIAElsFGVpx4cOesfvbBGrncDUbdVEbaQSS0G6Ma5/nFJQ dGoLzeVJIzLVfFrDu4vgnLXgFjJHu45YPUP71oKpdOIXHKg5bHADyydUKnUpBed2 NiCk5QYUakuOiaYxXBkZKXrSTH4HvPrJO/5iWjj+BJ6gQPmD4V9mHoO4F/pqhOYI D/Wq5ncVSGfIP2cFq8IgSZbXISsd+y3++WwyPxLSZC5NR7raERVwYXLrYzUwhPna LJsfQaXJdY6fnTlKO+9VqXAAzeJPcVSmGpE5a+5smcZ0F1xiuQ2LmwW16zLesmQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:47 2025 by rpki-client