$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78513954-0c7d-47f9-ad43-05e8d71ff54a.roa File: 78513954-0c7d-47f9-ad43-05e8d71ff54a.roa (raw, json) Hash identifier: KvSTYgCwSEFPdw+5YjHqm81sCxq6HsrYR5dNmWSiOl8= Subject key identifier: 60:F0:C6:AF:FC:2C:37:7B:D8:7D:EA:18:11:7B:36:E0:0B:CF:E1:07 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3F48DE5C1E48086C81EC64477C92CE036C8280CD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78513954-0c7d-47f9-ad43-05e8d71ff54a.roa Signing time: Thu 30 Oct 2025 20:37:01 +0000 ROA not before: Thu 30 Oct 2025 20:37:01 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:31bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:48:de:5c:1e:48:08:6c:81:ec:64:47:7c:92:ce:03:6c:82:80:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:37:01 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=4cf787424791630b616b9b15f2faa66b1d6502b6ad30ed0edb927d8096b1c168, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f0:2b:08:04:04:a2:7a:06:cd:b8:20:15:68: 46:98:25:b5:9a:84:0b:3f:97:15:8e:27:76:37:8f: 6f:6d:f9:d6:31:9f:58:59:26:97:af:5a:9b:64:c1: 64:eb:44:a6:88:46:e7:92:6c:5f:a3:47:2d:3c:b5: 98:3b:f9:ca:3f:0c:11:f2:b9:6c:b8:c2:bd:3c:d2: 50:7f:3e:31:11:13:af:61:a4:00:92:aa:a4:b6:85: ae:54:dd:b6:68:69:37:e7:7d:24:00:46:81:86:cd: ad:f4:aa:48:75:c4:6c:23:11:ad:05:c6:a2:32:d2: 31:24:b8:57:1a:f8:be:77:9e:d3:d5:5c:c4:38:7c: 08:2c:12:09:79:2c:81:13:37:30:8a:52:a0:c0:65: d8:a9:c0:b2:7a:c0:31:13:13:b7:dd:2b:d5:c7:fb: 87:4d:c7:3c:3c:43:75:1e:85:41:dc:95:7d:5c:92: 9e:7d:ad:bb:30:26:7c:ef:b9:71:a9:c0:d6:14:c2: 8e:cc:8c:f5:a3:28:ec:09:0d:4e:a1:44:3b:28:ff: 0c:51:42:3f:2d:85:a9:af:9b:d4:5c:e3:03:3b:d5: 73:1e:22:e6:a4:bb:dc:ba:b2:86:fd:c1:98:dd:59: 73:41:f6:03:b3:cd:1f:4a:ce:0b:bd:39:ac:08:e6: 0f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F0:C6:AF:FC:2C:37:7B:D8:7D:EA:18:11:7B:36:E0:0B:CF:E1:07 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/78513954-0c7d-47f9-ad43-05e8d71ff54a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:31bd::/48 Signature Algorithm: sha256WithRSAEncryption 49:02:6b:dc:72:8b:44:b0:62:8c:1c:f5:89:80:ae:24:93:f4: 00:99:8a:b7:4c:33:17:1a:b0:7a:ee:90:8b:91:97:ed:f6:20: 07:bf:0a:55:e3:5f:1c:24:b7:04:56:75:d7:c3:31:cf:7c:4d: bf:9e:fc:d5:ff:a0:c8:d5:1f:5b:c0:2a:fa:eb:25:2b:b1:05: 96:4d:41:01:47:39:ea:db:f8:06:31:58:a0:61:08:d0:6e:a2: 50:a7:e2:d3:27:83:3a:6c:c7:51:d6:e6:8b:47:f4:4b:74:d3: bd:19:fe:d0:17:a8:86:4c:61:40:e8:7c:05:23:ce:b0:8a:69: 51:d9:c3:52:6f:2e:f0:ea:ed:82:74:15:dd:6a:ca:25:7d:c1: 22:5b:bb:50:61:5d:6d:3b:f4:58:a7:2c:39:51:0c:6d:bd:46: 9c:f6:c9:70:65:42:7d:8c:31:c9:03:42:06:db:bb:35:32:23: d0:71:f2:3a:7e:94:7b:45:fa:8d:e4:17:09:09:0e:e8:94:28: 3e:03:8e:a0:ce:de:17:7f:27:8b:56:9e:49:52:32:a9:70:26: 71:d0:6c:40:62:55:17:0a:6c:ac:d3:4f:db:4b:dc:da:54:22: 5f:a9:8e:c5:9e:22:de:2e:4b:88:db:9b:cd:b6:c0:2b:bf:ea: 6f:12:23:e6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP0jeXB5ICGyB7GRHfJLOA2yCgM0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjAzNzAxWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2Y3ODc0MjQ3OTE2MzBiNjE2YjliMTVmMmZhYTY2YjFk NjUwMmI2YWQzMGVkMGVkYjkyN2Q4MDk2YjFjMTY4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCE8CsIBASiegbNuCAVaEaYJbWahAs/lxWOJ3Y3j29t+dYx n1hZJpevWptkwWTrRKaIRueSbF+jRy08tZg7+co/DBHyuWy4wr080lB/PjERE69h pACSqqS2ha5U3bZoaTfnfSQARoGGza30qkh1xGwjEa0FxqIy0jEkuFca+L53ntPV XMQ4fAgsEgl5LIETNzCKUqDAZdipwLJ6wDETE7fdK9XH+4dNxzw8Q3UehUHclX1c kp59rbswJnzvuXGpwNYUwo7MjPWjKOwJDU6hRDso/wxRQj8thamvm9Rc4wM71XMe Iuaku9y6sob9wZjdWXNB9gOzzR9Kzgu9OawI5g/fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYPDGr/wsN3vYfeoYEXs24AvP4QcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzc4NTEzOTU0LTBjN2QtNDdmOS1hZDQzLTA1ZThkNzFmZjU0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAMb0wDQYJKoZIhvcNAQELBQADggEBAEkCa9xyi0SwYowc9YmAriST 9ACZirdMMxcasHrukIuRl+32IAe/ClXjXxwktwRWddfDMc98Tb+e/NX/oMjVH1vA KvrrJSuxBZZNQQFHOerb+AYxWKBhCNBuolCn4tMngzpsx1HW5otH9Et0070Z/tAX qIZMYUDofAUjzrCKaVHZw1JvLvDq7YJ0Fd1qyiV9wSJbu1BhXW079FinLDlRDG29 Rpz2yXBlQn2MMckDQgbbuzUyI9Bx8jp+lHtF+o3kFwkJDuiUKD4DjqDO3hd/J4tW nklSMqlwJnHQbEBiVRcKbKzTT9tL3NpUIl+pjsWeIt4uS4jbm822wCu/6m8SI+Y= -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:03 2025 by rpki-client