$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88b3e74c-ace2-4455-988d-efb93ab538e5.roa File: 88b3e74c-ace2-4455-988d-efb93ab538e5.roa (raw, json) Hash identifier: MwOCq9wpvsD4dZYhfQGZb7aWUcT1NJ+Fn3K3vk2TbMU= Subject key identifier: C7:27:5E:D6:A5:F2:49:DD:61:29:F5:54:C4:3D:12:D1:96:51:E3:38 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6268EDF54CA1AE9022E6E52D5C70C4BB9348ED3E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88b3e74c-ace2-4455-988d-efb93ab538e5.roa Signing time: Fri 31 Oct 2025 01:58:09 +0000 ROA not before: Fri 31 Oct 2025 01:58:09 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f2c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:68:ed:f5:4c:a1:ae:90:22:e6:e5:2d:5c:70:c4:bb:93:48:ed:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:58:09 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=89264ad9621e1c50398e315dd75f6131517bb358e645487e8a929cf966015592, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:c3:c2:e5:85:78:92:9d:ed:ef:13:c0:ee: 34:64:15:37:44:fe:8a:c9:3c:66:9f:bd:af:7b:86: 0f:69:1a:ed:23:a4:30:a2:ce:e0:12:31:d8:85:18: 8e:7f:d7:53:68:64:23:74:b6:e2:d7:09:11:6e:84: fb:a3:a0:90:39:16:54:88:f3:54:13:3f:7f:72:7d: 40:53:26:2c:ae:7d:4e:6c:2e:54:a0:69:68:04:73: 79:df:c8:de:fa:f7:84:6d:5e:59:4b:0c:c4:68:53: 38:3a:44:12:c4:75:3f:9a:94:8c:29:45:0d:ac:50: 83:80:59:f0:d6:c0:6e:c7:98:40:dc:34:c3:ee:4c: 42:f9:5e:63:fe:d0:0a:7d:4e:62:ac:c6:8d:3a:e7: 18:9f:fc:b1:c8:f2:6a:dd:8f:19:91:23:e0:ad:c2: 2f:58:be:5b:68:2d:1f:ba:1c:cf:e1:42:11:ea:d7: b5:ae:ee:be:69:19:d8:fa:90:ca:02:5a:91:94:b9: f4:3c:17:d4:5b:4e:d5:45:db:78:f0:6e:ad:3a:0e: b7:56:9f:1e:dc:b4:b0:84:6b:bd:8b:50:d9:5f:b5: 22:73:c0:db:2b:a8:70:f7:99:c3:18:f4:2c:3a:d5: 3d:81:fb:f0:22:52:73:f4:ec:62:2a:40:96:7c:12: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:27:5E:D6:A5:F2:49:DD:61:29:F5:54:C4:3D:12:D1:96:51:E3:38 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/88b3e74c-ace2-4455-988d-efb93ab538e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f2c::/47 Signature Algorithm: sha256WithRSAEncryption 1a:5d:b7:42:c4:62:c5:27:5c:87:1f:1d:21:14:cb:79:11:7c: bf:b3:90:de:22:77:b3:8f:53:f1:77:22:4c:07:42:70:e2:cf: 0f:02:62:ea:da:18:80:e5:b3:a2:4e:44:ef:27:b0:20:38:da: 14:bf:36:55:3e:a9:4d:42:81:33:e4:1d:2c:ec:73:61:01:92: bd:66:b1:59:bb:fe:43:ee:28:a4:98:4f:57:72:40:16:dd:c5: c7:63:43:39:a4:10:85:2a:40:8d:05:e1:4a:34:01:ee:66:fb: 51:bc:55:ca:c9:c6:69:71:7a:cb:c3:ee:3a:6d:5a:86:3c:6b: 8a:6a:2d:12:75:1f:74:0c:66:2c:4f:bc:01:b7:b8:0e:0d:15: 4b:7b:b2:cf:53:07:13:f9:48:df:62:1b:68:be:07:87:15:03: d2:2a:09:62:09:5f:d2:3d:08:ba:b9:97:09:14:46:27:5d:99: 99:80:0c:fd:a7:c6:3a:2a:af:34:58:51:0f:a9:09:ee:f8:21: c8:11:0a:d4:44:7b:17:cd:e4:f7:4a:99:d8:c2:3e:c4:95:c8: 7b:d3:f3:75:84:d6:e9:d6:cd:80:de:8d:7a:50:8b:43:6d:0e: e9:d3:4c:7d:b9:5b:65:3f:45:61:e1:76:03:c0:97:67:69:e5: 66:70:7a:51 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYmjt9UyhrpAi5uUtXHDEu5NI7T4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDE1ODA5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTI2NGFkOTYyMWUxYzUwMzk4ZTMxNWRkNzVmNjEzMTUx N2JiMzU4ZTY0NTQ4N2U4YTkyOWNmOTY2MDE1NTkyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0PsPC5YV4kp3t7xPA7jRkFTdE/orJPGafva97hg9pGu0j pDCizuASMdiFGI5/11NoZCN0tuLXCRFuhPujoJA5FlSI81QTP39yfUBTJiyufU5s LlSgaWgEc3nfyN7694RtXllLDMRoUzg6RBLEdT+alIwpRQ2sUIOAWfDWwG7HmEDc NMPuTEL5XmP+0Ap9TmKsxo065xif/LHI8mrdjxmRI+Ctwi9YvltoLR+6HM/hQhHq 17Wu7r5pGdj6kMoCWpGUufQ8F9RbTtVF23jwbq06DrdWnx7ctLCEa72LUNlftSJz wNsrqHD3mcMY9Cw61T2B+/AiUnP07GIqQJZ8EqQbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxyde1qXySd1hKfVUxD0S0ZZR4zgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg4YjNlNzRjLWFjZTItNDQ1NS05ODhkLWVmYjkzYWI1MzhlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPywwDQYJKoZIhvcNAQELBQADggEBABpdt0LEYsUnXIcfHSEUy3kR fL+zkN4id7OPU/F3IkwHQnDizw8CYuraGIDls6JORO8nsCA42hS/NlU+qU1CgTPk HSzsc2EBkr1msVm7/kPuKKSYT1dyQBbdxcdjQzmkEIUqQI0F4Uo0Ae5m+1G8VcrJ xmlxesvD7jptWoY8a4pqLRJ1H3QMZixPvAG3uA4NFUt7ss9TBxP5SN9iG2i+B4cV A9IqCWIJX9I9CLq5lwkURiddmZmADP2nxjoqrzRYUQ+pCe74IcgRCtREexfN5PdK mdjCPsSVyHvT83WE1unWzYDejXpQi0NtDunTTH25W2U/RWHhdgPAl2dp5WZwelE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:00 2025 by rpki-client