$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6974dc72-3258-490b-9234-aafb8c41d35e.roa File: 6974dc72-3258-490b-9234-aafb8c41d35e.roa (raw, json) Hash identifier: NQEMYJ4PF0BWCBi43HqaTMy+dApVYECF+MoflWLq0r0= Subject key identifier: B4:4E:DF:3D:0E:63:DA:D2:65:1B:0F:0C:A2:D7:FC:26:9A:DC:D8:00 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 310BD56AC23EFF7D4C418C777F492DCAF8066DF8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6974dc72-3258-490b-9234-aafb8c41d35e.roa Signing time: Fri 31 Oct 2025 01:21:47 +0000 ROA not before: Fri 31 Oct 2025 01:21:47 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3ac0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0b:d5:6a:c2:3e:ff:7d:4c:41:8c:77:7f:49:2d:ca:f8:06:6d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:21:47 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=051c84c15ef57526805f46c60747c70d866e7ba8ffee51dfb8ba2af5d5ebee34, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a4:fa:e2:e5:78:b1:83:96:f8:67:98:cc:e1: 5a:a3:c5:03:ff:96:6d:db:47:43:ab:db:ad:b7:53: 50:ee:10:db:25:6b:96:b9:a6:fd:b3:32:9b:6f:f2: 02:d9:4e:cb:52:3b:36:91:e4:59:67:e7:3f:75:d8: 81:87:b6:2e:d6:82:cf:0e:8b:8c:48:1b:e8:08:22: 2e:16:34:81:45:91:40:9e:fc:21:ae:22:ef:5d:3d: f6:24:b0:b6:ee:dd:22:26:7f:c2:e3:cd:06:d5:e4: ec:47:af:d1:41:fb:f0:dc:24:df:80:ee:37:0e:8a: 78:a1:e6:e7:55:d3:05:77:b3:e6:94:95:0b:9d:7b: ba:87:7c:b3:6d:3e:26:c2:78:51:69:26:fb:23:ed: 8e:ab:c5:04:a8:1d:06:ac:e0:f2:a7:06:19:df:e8: 78:56:6d:3c:cc:c4:99:65:9c:87:16:f0:22:36:a5: b5:1e:1c:db:1f:d0:7e:d5:ee:22:73:1a:5a:c4:cf: df:d2:f1:fc:34:af:fa:c9:56:3e:2f:1a:0a:e4:6a: 3a:6f:bd:88:ec:26:4a:7a:70:5b:d6:c2:da:12:9f: c1:03:6b:67:e5:db:5f:a7:f8:34:fe:5c:d9:e3:cc: c4:41:56:30:cf:ee:65:9d:02:12:d2:d4:da:23:21: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4E:DF:3D:0E:63:DA:D2:65:1B:0F:0C:A2:D7:FC:26:9A:DC:D8:00 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6974dc72-3258-490b-9234-aafb8c41d35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3ac0::/47 Signature Algorithm: sha256WithRSAEncryption 73:12:54:4a:07:63:e6:1b:72:75:f0:23:10:b8:14:78:6a:7d: 09:85:2d:e5:da:fc:09:cc:4f:d5:30:66:ed:75:14:92:3f:44: 25:4b:f8:02:07:06:21:20:39:70:67:fb:6e:80:b6:e3:0d:a3: c6:f0:66:73:25:9f:9a:87:72:a3:c5:9a:e8:47:20:e2:7f:7a: dc:20:c4:d6:15:94:52:38:10:29:68:fc:1a:16:2b:ea:9b:0b: 56:1d:44:3e:31:74:49:15:f1:45:92:36:5e:30:11:c5:17:f7: 16:2d:e2:b1:2d:80:aa:64:30:83:1b:2c:6f:d1:80:53:30:d7: 62:cf:2e:8d:9e:2b:bf:03:19:bb:a9:f3:db:27:25:aa:83:0a: 34:0b:6b:f9:da:32:70:f8:99:b8:d7:79:08:5d:f9:09:2d:94: 2a:6f:ef:a6:dc:ae:a7:3f:5a:57:36:52:46:b1:75:af:5c:07: 79:32:fd:e8:ff:e9:41:6b:c1:c9:61:0c:3c:dd:2b:3f:d5:a0: 43:4b:41:af:aa:e0:94:47:59:04:42:d6:db:4c:37:41:ba:b4: d3:a6:e1:da:ee:c8:c6:03:9b:5d:41:ce:75:54:09:97:5d:82: fe:a6:3d:04:98:55:d9:05:55:20:81:df:f7:c4:89:10:1c:49: 08:09:f0:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMQvVasI+/31MQYx3f0ktyvgGbfgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEyMTQ3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTFjODRjMTVlZjU3NTI2ODA1ZjQ2YzYwNzQ3YzcwZDg2 NmU3YmE4ZmZlZTUxZGZiOGJhMmFmNWQ1ZWJlZTM0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHpPri5Xixg5b4Z5jM4VqjxQP/lm3bR0Or2623U1DuENsl a5a5pv2zMptv8gLZTstSOzaR5Fln5z912IGHti7Wgs8Oi4xIG+gIIi4WNIFFkUCe /CGuIu9dPfYksLbu3SImf8LjzQbV5OxHr9FB+/DcJN+A7jcOinih5udV0wV3s+aU lQude7qHfLNtPibCeFFpJvsj7Y6rxQSoHQas4PKnBhnf6HhWbTzMxJllnIcW8CI2 pbUeHNsf0H7V7iJzGlrEz9/S8fw0r/rJVj4vGgrkajpvvYjsJkp6cFvWwtoSn8ED a2fl21+n+DT+XNnjzMRBVjDP7mWdAhLS1NojIUIhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtE7fPQ5j2tJlGw8Motf8Jprc2AAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzY5NzRkYzcyLTMyNTgtNDkwYi05MjM0LWFhZmI4YzQxZDM1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOsAwDQYJKoZIhvcNAQELBQADggEBAHMSVEoHY+YbcnXwIxC4FHhq fQmFLeXa/AnMT9UwZu11FJI/RCVL+AIHBiEgOXBn+26AtuMNo8bwZnMln5qHcqPF muhHIOJ/etwgxNYVlFI4EClo/BoWK+qbC1YdRD4xdEkV8UWSNl4wEcUX9xYt4rEt gKpkMIMbLG/RgFMw12LPLo2eK78DGbup89snJaqDCjQLa/naMnD4mbjXeQhd+Qkt lCpv76bcrqc/Wlc2Ukaxda9cB3ky/ej/6UFrwclhDDzdKz/VoENLQa+q4JRHWQRC 1ttMN0G6tNOm4druyMYDm11BznVUCZddgv6mPQSYVdkFVSCB3/fEiRAcSQgJ8NE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:42 2025 by rpki-client