$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f4b66f4-cc10-4e50-b4d4-ab8b641adbae.roa File: 6f4b66f4-cc10-4e50-b4d4-ab8b641adbae.roa (raw, json) Hash identifier: zzm3a0F448S3lH+ztlDsIigIOpRY+8038w16QBZfj8g= Subject key identifier: 92:01:66:A0:2D:89:AA:70:9F:29:F4:89:82:09:5F:F4:2F:CF:76:8C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3FBE6EB94E7F6A2A2092DDF677D71F6E017CE651 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f4b66f4-cc10-4e50-b4d4-ab8b641adbae.roa Signing time: Fri 31 Oct 2025 06:23:55 +0000 ROA not before: Fri 31 Oct 2025 06:23:55 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3e68::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:be:6e:b9:4e:7f:6a:2a:20:92:dd:f6:77:d7:1f:6e:01:7c:e6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:23:55 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c3b90e427024a1ea55f924b1b97b2cfd97a89ce96da03ee5b91c635dcb6bb0ac, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:98:46:0d:49:09:c3:f1:95:73:83:a3:03: a8:09:3f:39:b0:cc:ed:62:13:f6:3d:e0:9c:ab:55: 4f:65:34:43:ca:40:ce:cd:9a:82:1d:93:c3:8d:05: e6:d5:09:a2:7c:eb:78:68:18:a9:47:2d:eb:60:c4: bb:a9:ea:49:56:36:a3:4b:aa:e8:64:26:5a:0a:6b: 3f:9c:f2:b4:ae:62:f5:de:e7:5e:55:a1:c0:a6:a6: 0a:d3:b6:c2:0e:d6:ad:07:07:8f:ca:43:db:19:9f: 7c:30:fb:65:aa:95:f0:b6:34:f0:3b:78:33:f1:03: cd:64:30:bc:f8:a1:3f:f2:a4:38:02:85:66:67:ed: 9c:34:99:0e:88:d0:48:aa:62:2a:ac:b4:15:a1:79: 3b:e6:c4:bc:f7:41:57:c1:8c:22:e8:f5:51:7a:ee: 5d:de:9e:8a:b4:34:3c:05:b0:a4:c7:40:92:41:d6: 26:12:1f:7a:7a:14:63:d3:88:98:b9:35:1d:a2:d0: 76:43:a1:9f:21:ae:b4:7d:c1:1b:4d:56:24:50:6e: 43:66:4c:40:0a:47:90:73:ae:40:15:70:dd:bb:8f: 52:67:b4:63:a8:d2:58:16:f2:6d:a6:0a:da:87:d0: 61:f9:49:a2:1b:05:94:68:72:03:c9:9d:b8:c9:1c: 01:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:01:66:A0:2D:89:AA:70:9F:29:F4:89:82:09:5F:F4:2F:CF:76:8C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f4b66f4-cc10-4e50-b4d4-ab8b641adbae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3e68::/45 Signature Algorithm: sha256WithRSAEncryption 83:fa:31:ba:5c:29:6d:05:d4:98:45:84:22:a4:c5:93:4d:b7: 6f:0b:14:df:7a:ff:f2:4e:d2:8e:41:bf:fc:42:9e:95:70:3a: df:67:d4:b8:4b:7d:d1:78:57:fb:d3:90:5a:54:02:d7:90:fa: 7c:99:8c:ae:52:c8:d5:02:26:7b:35:6d:cf:19:53:97:a0:18: 6d:4f:6d:e7:c7:af:90:e5:bd:42:80:bf:a3:a2:11:8e:40:b2: 51:a2:8f:f6:0e:c0:5b:8e:fd:76:45:79:78:0c:a6:b7:a6:dc: 73:bb:ee:67:c3:80:7c:13:87:09:13:56:54:c9:6b:2e:14:8f: 42:23:94:37:9c:a5:56:02:fa:d3:99:65:a2:93:a6:67:3f:e6: ce:69:8a:ec:bf:c9:76:4e:50:6b:7f:b7:d4:70:24:2e:37:f4: 81:e2:d7:38:65:c3:90:a0:69:32:89:d5:15:aa:b0:63:b3:4e: d8:88:62:da:2a:6f:5c:ac:f6:4b:7f:44:9b:0d:b3:92:66:49: df:5c:84:70:fe:8d:28:f6:2a:db:7f:34:24:2c:b8:28:a5:2d: a3:45:24:e9:79:4c:3c:db:5d:65:5a:ac:7b:f4:69:85:a7:dd: 09:42:93:bd:81:62:d7:21:02:6e:ba:e6:24:e5:26:7d:b1:dc: 8b:0f:ed:c4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP75uuU5/aiogkt32d9cfbgF85lEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYyMzU1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjM2I5MGU0MjcwMjRhMWVhNTVmOTI0YjFiOTdiMmNmZDk3 YTg5Y2U5NmRhMDNlZTViOTFjNjM1ZGNiNmJiMGFjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5HZhGDUkJw/GVc4OjA6gJPzmwzO1iE/Y94JyrVU9lNEPK QM7NmoIdk8ONBebVCaJ863hoGKlHLetgxLup6klWNqNLquhkJloKaz+c8rSuYvXe 515VocCmpgrTtsIO1q0HB4/KQ9sZn3ww+2WqlfC2NPA7eDPxA81kMLz4oT/ypDgC hWZn7Zw0mQ6I0EiqYiqstBWheTvmxLz3QVfBjCLo9VF67l3enoq0NDwFsKTHQJJB 1iYSH3p6FGPTiJi5NR2i0HZDoZ8hrrR9wRtNViRQbkNmTEAKR5BzrkAVcN27j1Jn tGOo0lgW8m2mCtqH0GH5SaIbBZRocgPJnbjJHAGtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkgFmoC2JqnCfKfSJgglf9C/PdowwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzZmNGI2NmY0LWNjMTAtNGU1MC1iNGQ0LWFiOGI2NDFhZGJhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAPmgwDQYJKoZIhvcNAQELBQADggEBAIP6MbpcKW0F1JhFhCKkxZNN t28LFN96//JO0o5Bv/xCnpVwOt9n1LhLfdF4V/vTkFpUAteQ+nyZjK5SyNUCJns1 bc8ZU5egGG1PbefHr5DlvUKAv6OiEY5AslGij/YOwFuO/XZFeXgMprem3HO77mfD gHwThwkTVlTJay4Uj0IjlDecpVYC+tOZZaKTpmc/5s5piuy/yXZOUGt/t9RwJC43 9IHi1zhlw5CgaTKJ1RWqsGOzTtiIYtoqb1ys9kt/RJsNs5JmSd9chHD+jSj2Ktt/ NCQsuCilLaNFJOl5TDzbXWVarHv0aYWn3QlCk72BYtchAm665iTlJn2x3IsP7cQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:44 2025 by rpki-client