$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/535b3b64-2891-43b7-be67-dae0d962baaf.roa File: 535b3b64-2891-43b7-be67-dae0d962baaf.roa (raw, json) Hash identifier: VskWFzeNvNrPVZRF20Kgt4/W0H4CJp3Hj9AYVxvZ/XQ= Subject key identifier: DA:23:C7:AB:72:C7:06:01:80:25:45:A1:5E:43:71:D6:92:8A:E9:B1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2F184318EB7C6A28670BFB96CA14EFECB530FC94 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/535b3b64-2891-43b7-be67-dae0d962baaf.roa Signing time: Fri 31 Oct 2025 03:43:30 +0000 ROA not before: Fri 31 Oct 2025 03:43:30 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2de8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:18:43:18:eb:7c:6a:28:67:0b:fb:96:ca:14:ef:ec:b5:30:fc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:43:30 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=8be4cdbeca5017a187854a45599c05a7633ed77f03c771334b24b51539590ecf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:07:a8:33:64:ba:25:7f:a4:1d:57:6e:ba: 4e:e2:42:e1:a9:6f:97:2c:91:ea:68:db:60:0b:e5: f3:07:26:ac:71:45:20:82:23:ff:ec:45:82:e4:48: b9:ae:b8:bd:9c:b9:99:0a:aa:bc:32:36:b0:d6:78: 32:22:aa:31:9a:6c:3a:76:80:1a:f5:85:69:ab:5c: 1c:16:e9:c6:64:45:be:49:45:8a:8b:ab:bc:9c:85: a9:9e:88:e7:04:40:84:9d:b8:c0:ea:69:7f:d8:32: 39:e1:88:7d:c3:f8:75:11:40:a7:59:1c:f9:07:90: 4a:7d:91:7e:bc:91:3c:00:eb:f8:80:b3:7d:f4:b0: 5a:34:9e:2a:fc:5c:f9:3f:f4:77:62:3d:8b:86:6b: 48:6e:01:e5:ce:93:df:fa:a4:05:37:dc:ce:63:4b: 14:eb:9f:12:a7:a9:80:8c:bb:c6:49:87:dc:81:37: c9:8a:9c:bf:fa:de:0c:de:36:17:fa:7f:eb:f9:51: 85:3a:6c:24:3f:e0:3d:f0:ec:83:ec:45:2b:ae:1e: 04:fa:12:35:fc:f5:7f:9e:13:4e:b7:5a:26:d3:2a: 8f:a6:05:5e:b8:58:49:4b:58:12:e6:af:25:c7:90: fe:f4:7c:8d:2b:01:0d:da:50:1a:dd:79:3d:7f:15: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:23:C7:AB:72:C7:06:01:80:25:45:A1:5E:43:71:D6:92:8A:E9:B1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/535b3b64-2891-43b7-be67-dae0d962baaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2de8::/46 Signature Algorithm: sha256WithRSAEncryption 07:fb:fc:d3:e6:26:d8:3c:5e:da:7a:17:d6:f0:49:7f:32:60: 58:84:f2:d1:2b:1b:22:ba:76:5b:1d:21:23:03:14:35:03:60: 2a:87:d2:42:da:78:f7:b6:95:f1:46:69:db:df:a2:1e:29:93: 6b:26:32:38:0c:f4:08:86:e7:c2:95:7b:32:d3:9d:fe:16:6d: c7:6f:c3:40:2f:1a:3b:72:bf:30:1b:df:7a:de:5e:89:17:05: 1f:23:9b:7c:e7:53:60:9d:66:de:48:33:f8:f7:0f:31:14:6b: 39:f9:fa:10:40:d1:4a:29:6b:c8:f2:7b:27:ef:75:9e:be:c2: 31:1c:31:2e:39:b0:7f:5d:e7:91:7b:c6:73:cf:6f:5c:a4:74: 61:3d:a6:8e:21:d2:e1:58:3a:69:6c:76:73:eb:ef:8c:82:d8: 47:6f:3c:d5:51:f6:a7:c8:1c:75:e6:a3:19:04:29:a5:80:77: 9b:24:92:31:5b:5e:ed:3f:e6:41:7d:d1:2e:04:7e:4d:0c:ff: aa:55:7c:a6:43:5f:48:34:3a:25:e0:bd:17:63:94:b2:fe:08: 1d:e8:05:86:b2:8c:26:67:9c:dd:11:68:f9:80:2d:16:f0:eb: 2a:ad:fc:db:de:b4:0c:85:1c:40:ef:6d:c3:48:67:7b:60:e5: f8:cb:f6:85 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULxhDGOt8aihnC/uWyhTv7LUw/JQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDM0MzMwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YmU0Y2RiZWNhNTAxN2ExODc4NTRhNDU1OTljMDVhNzYz M2VkNzdmMDNjNzcxMzM0YjI0YjUxNTM5NTkwZWNmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk+QeoM2S6JX+kHVduuk7iQuGpb5cskepo22AL5fMHJqxx RSCCI//sRYLkSLmuuL2cuZkKqrwyNrDWeDIiqjGabDp2gBr1hWmrXBwW6cZkRb5J RYqLq7ychameiOcEQISduMDqaX/YMjnhiH3D+HURQKdZHPkHkEp9kX68kTwA6/iA s330sFo0nir8XPk/9HdiPYuGa0huAeXOk9/6pAU33M5jSxTrnxKnqYCMu8ZJh9yB N8mKnL/63gzeNhf6f+v5UYU6bCQ/4D3w7IPsRSuuHgT6EjX89X+eE063WibTKo+m BV64WElLWBLmryXHkP70fI0rAQ3aUBrdeT1/FaShAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2iPHq3LHBgGAJUWhXkNx1pKK6bEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzUzNWIzYjY0LTI4OTEtNDNiNy1iZTY3LWRhZTBkOTYyYmFhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAALegwDQYJKoZIhvcNAQELBQADggEBAAf7/NPmJtg8Xtp6F9bwSX8y YFiE8tErGyK6dlsdISMDFDUDYCqH0kLaePe2lfFGadvfoh4pk2smMjgM9AiG58KV ezLTnf4Wbcdvw0AvGjtyvzAb33reXokXBR8jm3znU2CdZt5IM/j3DzEUazn5+hBA 0Uopa8jyeyfvdZ6+wjEcMS45sH9d55F7xnPPb1ykdGE9po4h0uFYOmlsdnPr74yC 2EdvPNVR9qfIHHXmoxkEKaWAd5skkjFbXu0/5kF90S4Efk0M/6pVfKZDX0g0OiXg vRdjlLL+CB3oBYayjCZnnN0RaPmALRbw6yqt/NvetAyFHEDvbcNIZ3tg5fjL9oU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:27 2025 by rpki-client