$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/894aabd6-139b-4595-bd28-30f916b7a767.roa File: 894aabd6-139b-4595-bd28-30f916b7a767.roa (raw, json) Hash identifier: v3Yi7v76OAoTUYZd6y9lyi+oWzal68q1oo114BYxqsA= Subject key identifier: C8:7D:3D:FF:29:11:CC:55:E4:99:0A:CC:64:6C:2E:BE:0F:72:B0:70 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3C366FD4A02A4ADE52CC4A0B2B804E17065FEA89 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/894aabd6-139b-4595-bd28-30f916b7a767.roa Signing time: Fri 31 Oct 2025 03:51:59 +0000 ROA not before: Fri 31 Oct 2025 03:51:59 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2ec8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:36:6f:d4:a0:2a:4a:de:52:cc:4a:0b:2b:80:4e:17:06:5f:ea:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:51:59 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=4d76d10813e5f685bbde773bd075bbf475628c63ba9258c85a70b3bd3cf73442, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a6:84:8c:39:79:52:b8:89:bd:ac:1d:fb:27: 1c:3a:c8:67:6e:28:b7:57:6b:c7:26:68:5c:4e:4f: 29:5c:8d:30:15:c9:36:21:c5:52:3f:3c:e7:bf:8a: 9d:f4:4e:eb:fa:b2:3b:a8:ad:e7:02:f4:06:f3:61: 15:66:61:d0:d2:51:8a:f7:90:d7:67:1d:89:f4:3d: d4:be:69:2d:b7:0e:41:16:c8:bf:cd:26:69:d9:6c: 63:23:ab:af:87:2b:f8:7a:c9:64:1b:a9:da:d4:c1: a3:f2:79:c3:0d:58:6d:d1:c7:5e:09:7f:36:f4:60: 32:99:09:9c:70:8c:cf:35:92:40:6b:05:aa:c1:24: e0:fd:9c:b7:94:17:04:be:bb:97:0d:df:3d:de:55: ff:17:ac:ed:ca:74:78:44:98:99:d7:fd:70:08:ee: eb:6f:02:83:c9:3c:f0:56:06:b5:fa:f2:22:d4:f4: 80:18:2b:44:9e:2d:bd:77:fc:07:30:0e:27:a3:f4: 5e:f2:1f:63:e8:fd:ef:f7:62:b7:0d:4e:4f:b0:3f: 28:4e:c3:d6:f3:f1:d9:ec:26:65:75:19:38:3b:03: fd:7b:78:24:2e:2a:c1:b7:5b:7f:ec:00:99:02:b1: 66:3d:dc:23:fc:81:ab:f1:d8:a2:72:30:d1:73:0d: 98:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7D:3D:FF:29:11:CC:55:E4:99:0A:CC:64:6C:2E:BE:0F:72:B0:70 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/894aabd6-139b-4595-bd28-30f916b7a767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2ec8::/46 Signature Algorithm: sha256WithRSAEncryption 13:3e:14:82:d1:91:f5:fa:88:91:f3:16:5c:84:85:80:ec:35: 6d:54:68:92:6b:41:3d:9a:0c:11:2b:7c:cc:33:be:f0:57:11: 78:87:99:19:a1:60:c8:4b:d7:47:00:9c:e4:df:70:5a:78:f4: 17:68:6e:07:8c:f9:49:87:30:bc:34:1b:44:47:8f:50:95:ce: 4e:10:e7:62:bb:88:a4:47:27:09:cc:4b:81:97:21:9d:16:74: eb:86:c9:d6:48:4d:ca:04:a7:10:b1:3e:d0:03:20:62:70:df: aa:be:17:92:33:fd:db:b8:b4:f3:1e:f6:c3:5c:94:dc:6c:36: 67:b3:5d:1c:91:ae:ee:b1:35:97:69:4f:02:b7:2b:48:b4:06: 67:c6:e4:87:e6:9f:df:70:d5:f7:02:55:f3:a7:a6:a0:fa:c8: e7:c8:96:2d:33:79:22:ba:e9:14:23:8b:27:22:15:3e:28:68: 43:e8:d5:76:89:12:bc:a0:46:f9:5d:e7:8b:2f:a9:a6:01:3f: 6b:85:42:0b:d0:be:91:d4:db:e2:01:26:02:68:4b:48:4f:93: 27:4a:b8:5b:76:1b:1c:36:6c:b7:b8:ea:61:a9:7b:ce:43:6b: 66:e9:5d:e0:30:89:57:5c:2c:43:4b:91:8a:10:fc:ac:4b:84: 4a:a8:0c:62 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPDZv1KAqSt5SzEoLK4BOFwZf6okwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDM1MTU5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDc2ZDEwODEzZTVmNjg1YmJkZTc3M2JkMDc1YmJmNDc1 NjI4YzYzYmE5MjU4Yzg1YTcwYjNiZDNjZjczNDQyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXpoSMOXlSuIm9rB37Jxw6yGduKLdXa8cmaFxOTylcjTAV yTYhxVI/POe/ip30Tuv6sjuorecC9AbzYRVmYdDSUYr3kNdnHYn0PdS+aS23DkEW yL/NJmnZbGMjq6+HK/h6yWQbqdrUwaPyecMNWG3Rx14Jfzb0YDKZCZxwjM81kkBr BarBJOD9nLeUFwS+u5cN3z3eVf8XrO3KdHhEmJnX/XAI7utvAoPJPPBWBrX68iLU 9IAYK0SeLb13/AcwDiej9F7yH2Po/e/3YrcNTk+wPyhOw9bz8dnsJmV1GTg7A/17 eCQuKsG3W3/sAJkCsWY93CP8gavx2KJyMNFzDZhXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyH09/ykRzFXkmQrMZGwuvg9ysHAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg5NGFhYmQ2LTEzOWItNDU5NS1iZDI4LTMwZjkxNmI3YTc2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAALsgwDQYJKoZIhvcNAQELBQADggEBABM+FILRkfX6iJHzFlyEhYDs NW1UaJJrQT2aDBErfMwzvvBXEXiHmRmhYMhL10cAnOTfcFp49BdobgeM+UmHMLw0 G0RHj1CVzk4Q52K7iKRHJwnMS4GXIZ0WdOuGydZITcoEpxCxPtADIGJw36q+F5Iz /du4tPMe9sNclNxsNmezXRyRru6xNZdpTwK3K0i0BmfG5Ifmn99w1fcCVfOnpqD6 yOfIli0zeSK66RQjiyciFT4oaEPo1XaJErygRvld54svqaYBP2uFQgvQvpHU2+IB JgJoS0hPkydKuFt2Gxw2bLe46mGpe85Da2bpXeAwiVdcLENLkYoQ/KxLhEqoDGI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:28 2025 by rpki-client