$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/94e3ba90-8a5b-4118-aa36-eb45cada32f8.roa File: 94e3ba90-8a5b-4118-aa36-eb45cada32f8.roa (raw, json) Hash identifier: JHjA7LEihiWY+TkwweeKt0dR53HjNVtebFslq7WPk+w= Subject key identifier: 64:1D:74:2E:46:CD:89:ED:1E:B9:29:86:50:70:D2:B5:E9:58:B3:E3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6FE5D10490031A87A7C0B1111016B38EF8C8538E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/94e3ba90-8a5b-4118-aa36-eb45cada32f8.roa Signing time: Fri 31 Oct 2025 01:36:54 +0000 ROA not before: Fri 31 Oct 2025 01:36:54 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3c7e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e5:d1:04:90:03:1a:87:a7:c0:b1:11:10:16:b3:8e:f8:c8:53:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:36:54 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e2221359a81db34bdce5753c571e105ca1a87f3e7df1ee0ec61579a1ca05cc08, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:d5:1c:8d:29:99:c4:27:ac:85:a9:8a:d6: 4c:f9:09:ea:0b:d0:ed:c0:48:10:cd:06:e2:d7:3e: 95:f1:1c:07:98:23:f4:e0:61:9e:d4:36:cb:e0:e2: 20:75:63:97:02:61:a9:8e:cc:9b:86:41:d0:0c:57: 99:cb:49:81:97:be:d9:06:9b:82:2e:67:82:8f:26: 5f:54:31:53:83:59:76:c5:80:f4:a4:6c:82:e1:2f: 29:73:ed:bb:51:1c:2a:c8:bb:1e:91:10:fb:83:68: 5d:fa:ce:46:11:f4:a8:d1:ed:f5:7f:52:c1:87:0c: 2d:2c:19:98:2a:df:8a:6b:50:14:c0:4e:5d:cf:7f: 23:cd:cf:b1:af:c7:46:fc:ce:12:a7:7f:00:04:85: 0c:f7:71:0e:b2:58:ac:93:51:fe:dd:d8:e8:0b:66: e7:7b:ca:4e:26:f6:5c:37:13:fd:09:15:03:a4:e5: f7:51:1b:9b:00:99:87:d0:39:d1:88:f3:c1:a1:b5: ca:73:c8:ea:ed:00:19:3b:00:3a:f6:a2:e9:11:3f: fe:03:10:73:b5:3c:47:2a:7e:6f:9a:a7:ad:eb:a0: 59:90:76:3f:46:7f:85:87:a5:24:28:ae:c9:1a:fd: 24:af:2d:47:68:8d:06:4f:d3:7d:27:73:43:b8:bd: 23:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1D:74:2E:46:CD:89:ED:1E:B9:29:86:50:70:D2:B5:E9:58:B3:E3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/94e3ba90-8a5b-4118-aa36-eb45cada32f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3c7e::/47 Signature Algorithm: sha256WithRSAEncryption 5d:3c:0a:d6:e9:b5:77:80:c2:13:db:3e:a8:e5:93:f3:d0:8a: 9d:e0:b8:dc:c9:04:f4:f6:11:1c:88:74:23:f8:62:e9:2e:a4: cf:16:74:c4:5b:bc:e0:44:a5:50:33:51:22:cd:35:c3:ef:8b: 67:7d:73:05:f8:d8:d6:91:d9:39:d5:68:a2:ba:75:dc:9f:21: 2b:17:6a:73:63:eb:f1:af:63:c1:87:d5:71:e4:d2:c7:73:70: 83:9e:fc:e4:a2:dd:2d:47:2d:10:df:b7:e7:be:51:a6:68:97: b3:bb:a3:d7:ef:04:d3:2d:00:12:33:8d:33:99:9d:01:cf:d3: d5:f9:22:c7:57:e4:5d:e6:d1:a7:5b:b7:71:60:66:e4:a9:34: 6e:4d:d3:36:90:fa:ec:0d:f9:6e:e5:63:eb:a2:0b:2d:a1:6e: 95:6b:7c:d4:47:e6:2b:07:0f:af:94:d0:f3:4f:b2:96:80:a9: ba:c2:d2:89:0d:3c:c9:51:94:65:b2:cd:97:64:a0:fd:84:40: f6:9c:eb:fb:c9:9d:7c:72:76:d9:32:b8:b5:ad:1c:23:af:bd: fc:48:a6:0b:1d:e1:14:21:23:3f:21:f2:9b:d8:5a:08:14:87: ad:79:bd:3c:1c:3b:9e:81:aa:fd:fa:97:e3:34:7d:ed:47:b7: 6a:36:5a:62 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUb+XRBJADGoenwLEREBazjvjIU44wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEzNjU0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjIyMTM1OWE4MWRiMzRiZGNlNTc1M2M1NzFlMTA1Y2Ex YTg3ZjNlN2RmMWVlMGVjNjE1NzlhMWNhMDVjYzA4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2ltUcjSmZxCeshamK1kz5CeoL0O3ASBDNBuLXPpXxHAeY I/TgYZ7UNsvg4iB1Y5cCYamOzJuGQdAMV5nLSYGXvtkGm4IuZ4KPJl9UMVODWXbF gPSkbILhLylz7btRHCrIux6REPuDaF36zkYR9KjR7fV/UsGHDC0sGZgq34prUBTA Tl3PfyPNz7Gvx0b8zhKnfwAEhQz3cQ6yWKyTUf7d2OgLZud7yk4m9lw3E/0JFQOk 5fdRG5sAmYfQOdGI88GhtcpzyOrtABk7ADr2oukRP/4DEHO1PEcqfm+ap63roFmQ dj9Gf4WHpSQorska/SSvLUdojQZP030nc0O4vSM7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZB10LkbNie0euSmGUHDStelYs+MwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk0ZTNiYTkwLThhNWItNDExOC1hYTM2LWViNDVjYWRhMzJmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPH4wDQYJKoZIhvcNAQELBQADggEBAF08CtbptXeAwhPbPqjlk/PQ ip3guNzJBPT2ERyIdCP4YukupM8WdMRbvOBEpVAzUSLNNcPvi2d9cwX42NaR2TnV aKK6ddyfISsXanNj6/GvY8GH1XHk0sdzcIOe/OSi3S1HLRDft+e+UaZol7O7o9fv BNMtABIzjTOZnQHP09X5IsdX5F3m0adbt3FgZuSpNG5N0zaQ+uwN+W7lY+uiCy2h bpVrfNRH5isHD6+U0PNPspaAqbrC0okNPMlRlGWyzZdkoP2EQPac6/vJnXxydtky uLWtHCOvvfxIpgsd4RQhIz8h8pvYWggUh615vTwcO56Bqv36l+M0fe1Ht2o2WmI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:34 2025 by rpki-client