$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5835734f-ee5b-4594-b478-dcad286690e0.roa File: 5835734f-ee5b-4594-b478-dcad286690e0.roa (raw, json) Hash identifier: 3vvDipneB4Y/X0fj0dB8IL1GI1I7Ea5UHbPD5GISQBA= Subject key identifier: F4:8C:96:75:E3:E8:B5:68:2F:6E:3F:41:B3:DF:67:A6:D3:53:28:FB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 30E20B7CFE848EC41ADD05CA96F0F9DBF20F6692 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5835734f-ee5b-4594-b478-dcad286690e0.roa Signing time: Fri 31 Oct 2025 00:51:39 +0000 ROA not before: Fri 31 Oct 2025 00:51:39 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3788::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e2:0b:7c:fe:84:8e:c4:1a:dd:05:ca:96:f0:f9:db:f2:0f:66:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:51:39 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=5869c3570f2c74861f8fec97d37ec9d9b2f2695b891e5d07b0bdff80deb25fa0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0a:49:2a:7f:e3:a0:30:65:ba:46:9f:66:75: 0d:92:05:c8:0a:23:6a:93:6b:b2:61:a1:27:29:44: bd:ba:a0:ee:c6:a5:68:42:b3:35:18:e8:8c:95:3c: 64:2a:c7:64:4b:4b:9d:d0:19:e8:96:be:3d:0a:5b: 9a:56:b2:3b:cd:a8:54:c7:56:d1:0f:ad:92:d7:6e: 98:42:ae:74:08:05:af:5b:40:20:48:d8:e7:94:32: 49:73:6d:0a:eb:fc:5f:0c:7d:8b:d1:57:e6:56:ae: 9a:b0:c8:a3:3d:ca:a6:5d:62:c8:7c:73:76:68:52: 35:b1:3a:33:68:51:35:37:a4:0d:37:6c:99:58:d8: 68:4f:5a:9d:88:fb:68:6b:be:e3:7c:16:60:85:2b: fe:e2:87:46:8a:db:48:e8:1a:dd:d0:a9:25:c2:82: 49:74:ba:b9:23:d1:5b:bf:b4:5c:2b:48:6d:41:34: 83:83:30:3c:c4:16:4a:5b:6c:50:b9:cc:c2:36:4d: 27:21:55:a1:3c:17:0a:ea:c2:b7:76:dc:2d:81:9f: ee:56:cc:66:1f:60:84:21:6b:11:fb:3f:a8:6e:77: d9:95:c4:1a:7d:df:b5:49:4c:8b:62:3a:a8:63:ad: 7a:d0:85:c6:54:24:e0:98:9d:a0:8a:59:b1:12:1b: 2b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8C:96:75:E3:E8:B5:68:2F:6E:3F:41:B3:DF:67:A6:D3:53:28:FB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5835734f-ee5b-4594-b478-dcad286690e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3788::/47 Signature Algorithm: sha256WithRSAEncryption 3e:64:62:e8:c2:68:fe:0d:3d:6d:d6:a7:a0:79:7d:0a:fb:2b: 89:e9:c4:9d:78:83:bb:10:3c:59:3d:30:36:7b:a0:01:b0:74: 00:66:3f:56:fb:b4:83:50:02:70:79:a2:b6:53:6f:da:52:88: 43:3a:42:8d:d4:b3:34:9e:50:86:2a:b7:37:94:92:87:41:47: 90:42:52:13:27:95:10:f4:b9:e1:8f:21:65:bb:31:56:4f:0b: 8b:5d:84:cb:7c:ed:02:3a:97:aa:3a:c3:8d:52:d9:4d:f0:cf: c6:85:a3:64:8a:12:67:6f:05:10:c1:4b:7a:de:7d:9c:a0:68: 7c:2b:7f:2a:9b:02:bc:0d:9c:f7:ff:93:d5:d6:ba:df:7f:0e: 47:5b:1d:a7:f5:83:d7:97:36:ef:45:8b:62:30:b6:3e:58:4c: 01:0e:19:ba:32:6c:c3:6c:d4:28:53:1c:55:3c:23:23:24:33: 95:4c:a9:b5:0d:3c:7e:a7:90:0c:93:e9:9c:d7:d3:e9:63:b6: 6e:f1:40:f4:9e:98:d8:b7:9b:a1:ce:87:50:61:46:4f:f8:dc: 4a:6f:5d:51:55:a9:89:4d:e2:6c:3d:cc:cc:c9:a7:d9:33:13: ed:50:8c:86:db:19:f1:8a:42:c4:f9:4c:f8:12:8f:ea:84:9e: c2:83:47:2d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMOILfP6EjsQa3QXKlvD52/IPZpIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1MTM5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODY5YzM1NzBmMmM3NDg2MWY4ZmVjOTdkMzdlYzlkOWIy ZjI2OTViODkxZTVkMDdiMGJkZmY4MGRlYjI1ZmEwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaCkkqf+OgMGW6Rp9mdQ2SBcgKI2qTa7JhoScpRL26oO7G pWhCszUY6IyVPGQqx2RLS53QGeiWvj0KW5pWsjvNqFTHVtEPrZLXbphCrnQIBa9b QCBI2OeUMklzbQrr/F8MfYvRV+ZWrpqwyKM9yqZdYsh8c3ZoUjWxOjNoUTU3pA03 bJlY2GhPWp2I+2hrvuN8FmCFK/7ih0aK20joGt3QqSXCgkl0urkj0Vu/tFwrSG1B NIODMDzEFkpbbFC5zMI2TSchVaE8Fwrqwrd23C2Bn+5WzGYfYIQhaxH7P6hud9mV xBp937VJTItiOqhjrXrQhcZUJOCYnaCKWbESGyujAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9IyWdePotWgvbj9Bs99nptNTKPswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzU4MzU3MzRmLWVlNWItNDU5NC1iNDc4LWRjYWQyODY2OTBlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAN4gwDQYJKoZIhvcNAQELBQADggEBAD5kYujCaP4NPW3Wp6B5fQr7 K4npxJ14g7sQPFk9MDZ7oAGwdABmP1b7tINQAnB5orZTb9pSiEM6Qo3UszSeUIYq tzeUkodBR5BCUhMnlRD0ueGPIWW7MVZPC4tdhMt87QI6l6o6w41S2U3wz8aFo2SK EmdvBRDBS3refZygaHwrfyqbArwNnPf/k9XWut9/DkdbHaf1g9eXNu9Fi2Iwtj5Y TAEOGboybMNs1ChTHFU8IyMkM5VMqbUNPH6nkAyT6ZzX0+ljtm7xQPSemNi3m6HO h1BhRk/43EpvXVFVqYlN4mw9zMzJp9kzE+1QjIbbGfGKQsT5TPgSj+qEnsKDRy0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:39 2025 by rpki-client