$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/848f4284-0401-47ac-bf45-2884eca5e0ce.roa File: 848f4284-0401-47ac-bf45-2884eca5e0ce.roa (raw, json) Hash identifier: vDMaMAabSWBYNUtv0tnvm2XJ7rNRI8y59OyRRfuaC20= Subject key identifier: 99:5E:BC:FB:18:AC:6D:16:EA:E0:6B:38:13:B6:DF:1D:95:33:1C:64 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3160F813685A45ED50D19DE6B19B812E72E15080 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/848f4284-0401-47ac-bf45-2884eca5e0ce.roa Signing time: Fri 31 Oct 2025 04:41:12 +0000 ROA not before: Fri 31 Oct 2025 04:41:12 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3ba4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:60:f8:13:68:5a:45:ed:50:d1:9d:e6:b1:9b:81:2e:72:e1:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:41:12 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=46a901f49c25c7d4c831ee56df69ecda792cc5ce0932bc2a17041b14cae78ab0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:58:07:bb:b0:b5:f2:97:a1:4d:d3:7d:01: a1:40:1f:b7:e2:04:15:4c:74:dd:c3:86:51:1e:d4: 34:08:8f:7f:51:20:92:83:87:56:e5:16:d9:3c:d7: b4:84:31:de:9d:2b:64:36:f3:9c:e9:18:63:b2:f1: 30:2c:bf:d2:c3:a0:95:5f:86:e0:a6:1b:9f:6e:b5: b6:98:3b:e6:09:fa:af:3c:34:f7:f9:51:3b:73:ff: 89:85:9c:ef:b0:44:8c:d1:4e:16:10:10:54:8c:01: 23:c7:a9:da:c8:76:17:51:32:bf:a5:bd:34:c2:a5: e2:cf:b1:0d:89:e2:6c:9d:0a:3a:38:b2:f6:6b:a4: 53:c6:cd:57:ef:66:70:cd:81:e5:17:7f:62:0d:9b: d6:48:a2:a3:3c:ad:dc:fc:86:8c:80:3a:41:7e:7a: 18:70:a8:7f:27:f6:64:80:0d:48:0e:98:38:fa:07: af:f4:39:72:2f:3e:c0:70:92:5c:a1:27:e9:d2:27: bc:0e:26:37:9e:72:8a:d4:7b:94:98:46:c3:7c:8a: a5:06:d1:5f:bb:4c:6c:1e:31:56:99:9b:5c:4d:e1: 1d:21:e7:ba:ee:78:95:76:c7:9c:35:92:49:fe:b6: 52:9a:17:2d:06:ed:15:89:ce:ee:75:9e:9d:5b:81: 90:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5E:BC:FB:18:AC:6D:16:EA:E0:6B:38:13:B6:DF:1D:95:33:1C:64 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/848f4284-0401-47ac-bf45-2884eca5e0ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3ba4::/46 Signature Algorithm: sha256WithRSAEncryption 3c:9b:37:ef:ae:7a:32:ca:9d:72:7d:9f:08:64:01:1c:e1:1c: 4d:6b:7d:b6:6a:bd:46:1e:d8:5d:83:98:f7:a1:fc:56:74:92: 11:0a:ea:1c:a6:42:83:12:e4:f2:3a:61:3e:dc:ee:1a:5e:d7: 0b:8e:c6:64:ab:12:f1:12:45:3a:e0:bf:7d:d8:ad:59:45:08: 1f:73:78:77:99:3c:86:23:6a:99:b2:22:bf:d5:fb:3f:13:84: e7:76:e5:76:c6:2d:ca:da:03:98:46:dc:2d:23:6b:cf:0b:ad: c6:8f:f0:f6:b0:90:73:a7:30:dc:b0:16:ef:b9:71:34:e8:42: 88:3f:22:48:4d:fd:a9:f4:2e:8d:05:68:3b:92:b5:e8:73:f9: 2e:06:bc:a1:01:e1:e9:3f:f5:ac:c0:e2:75:67:c5:fb:1a:a8: 7d:0b:25:c7:50:7f:77:04:c6:3d:f5:dc:b4:75:13:87:27:dd: 74:20:23:d3:14:61:f6:51:dd:ce:e5:86:37:30:21:72:58:27: ea:d7:ba:6b:ed:32:39:aa:f0:3d:4c:03:2d:67:73:11:49:12: 92:61:e8:cb:1a:8f:0f:0a:4e:45:09:09:72:69:9b:d5:21:0d: c3:57:da:84:aa:22:29:82:d5:a5:81:84:1a:71:a2:81:51:4e: a4:a7:0d:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMWD4E2haRe1Q0Z3msZuBLnLhUIAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ0MTEyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmE5MDFmNDljMjVjN2Q0YzgzMWVlNTZkZjY5ZWNkYTc5 MmNjNWNlMDkzMmJjMmExNzA0MWIxNGNhZTc4YWIwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEVFgHu7C18pehTdN9AaFAH7fiBBVMdN3DhlEe1DQIj39R IJKDh1blFtk817SEMd6dK2Q285zpGGOy8TAsv9LDoJVfhuCmG59utbaYO+YJ+q88 NPf5UTtz/4mFnO+wRIzRThYQEFSMASPHqdrIdhdRMr+lvTTCpeLPsQ2J4mydCjo4 svZrpFPGzVfvZnDNgeUXf2INm9ZIoqM8rdz8hoyAOkF+ehhwqH8n9mSADUgOmDj6 B6/0OXIvPsBwklyhJ+nSJ7wOJjeecorUe5SYRsN8iqUG0V+7TGweMVaZm1xN4R0h 57rueJV2x5w1kkn+tlKaFy0G7RWJzu51np1bgZAVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmV68+xisbRbq4Gs4E7bfHZUzHGQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg0OGY0Mjg0LTA0MDEtNDdhYy1iZjQ1LTI4ODRlY2E1ZTBjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAO6QwDQYJKoZIhvcNAQELBQADggEBADybN++uejLKnXJ9nwhkARzh HE1rfbZqvUYe2F2DmPeh/FZ0khEK6hymQoMS5PI6YT7c7hpe1wuOxmSrEvESRTrg v33YrVlFCB9zeHeZPIYjapmyIr/V+z8ThOd25XbGLcraA5hG3C0ja88LrcaP8Paw kHOnMNywFu+5cTToQog/IkhN/an0Lo0FaDuStehz+S4GvKEB4ek/9azA4nVnxfsa qH0LJcdQf3cExj313LR1E4cn3XQgI9MUYfZR3c7lhjcwIXJYJ+rXumvtMjmq8D1M Ay1ncxFJEpJh6Msajw8KTkUJCXJpm9UhDcNX2oSqIimC1aWBhBpxooFRTqSnDXk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:30:19 2025 by rpki-client