$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9bea39a3-1ecb-41e2-af52-288b5fd45ccb.roa File: 9bea39a3-1ecb-41e2-af52-288b5fd45ccb.roa (raw, json) Hash identifier: hsifYeg2UB2DDgiyXpBIZLEBmgzT1cMFxlV/qKyF7kk= Subject key identifier: CC:69:2C:C9:48:29:04:6A:9F:59:A7:9E:DA:AB:88:CF:1F:34:C9:D8 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2C4132DF4BC7DF98E463FB10FA8E2DF7783E4CBD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9bea39a3-1ecb-41e2-af52-288b5fd45ccb.roa Signing time: Fri 31 Oct 2025 01:13:18 +0000 ROA not before: Fri 31 Oct 2025 01:13:18 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3a8e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:41:32:df:4b:c7:df:98:e4:63:fb:10:fa:8e:2d:f7:78:3e:4c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:13:18 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=33d8dd4269c8a36c45ca457fa4932bcddc6d598ad252c1a240a028a2af3cb370, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:f2:e7:b1:cd:3a:5e:e8:cc:bc:b6:83:ee: 1d:ef:25:1a:6b:cb:28:3d:ef:ca:54:c3:31:c9:3d: d4:e5:87:4c:65:e5:6d:f2:96:b0:4d:55:37:81:52: b9:c3:0d:16:3e:f8:f4:1b:2e:bf:74:51:fa:cb:e2: 4f:80:0c:68:ba:bf:19:00:53:60:2a:12:85:f9:13: 13:9a:fd:a2:90:9a:98:ec:e7:6f:a6:0f:f5:5d:db: 1a:91:ab:e1:46:ad:3e:5b:dc:62:a1:88:d2:1a:4e: e1:a4:01:b8:e5:05:23:f5:c6:39:0c:75:c0:86:71: 51:a8:fa:4b:5c:5a:1f:55:20:1e:e0:27:83:5f:cb: 3e:2e:f0:ed:53:58:2a:61:c5:bc:6f:1d:fb:38:f1: 9c:cc:94:6c:fd:5d:9c:f2:47:05:2a:0f:d9:27:0c: 94:88:21:29:44:bb:1a:a8:79:70:b1:d7:cd:fb:d3: fd:5d:f2:f0:e2:4e:ea:59:d0:2f:9f:45:cf:3f:54: 0c:16:71:91:2d:8d:32:f6:4d:43:e9:6e:25:b8:1e: 21:76:d4:15:fa:3f:d0:d0:a5:63:1d:37:fc:95:e4: 2a:ca:90:2e:27:8f:58:a7:65:46:8d:66:92:a1:73: 16:be:98:7b:1b:e2:07:71:b4:5f:0c:4d:e2:71:b0: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:69:2C:C9:48:29:04:6A:9F:59:A7:9E:DA:AB:88:CF:1F:34:C9:D8 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9bea39a3-1ecb-41e2-af52-288b5fd45ccb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3a8e::/47 Signature Algorithm: sha256WithRSAEncryption 7b:4e:b8:14:8b:0b:98:b2:d6:e0:9a:11:2a:c3:37:e4:ef:89: 2d:43:7a:f5:97:25:81:d5:3e:29:b9:ee:0b:79:52:4c:f3:4f: 78:fe:20:a9:f9:15:94:6d:7a:cf:0e:8c:cb:f7:c8:10:2a:6b: 08:23:f5:9f:34:27:90:90:61:c1:53:31:43:3e:aa:ed:2f:f6: 47:d3:49:19:11:27:ae:48:b6:63:25:73:ba:0f:5a:f6:ee:5b: c9:bc:77:ac:aa:24:0a:27:7b:fe:9b:87:f9:36:44:bf:b7:f6: 81:99:99:7c:fa:ac:6b:d0:38:b7:1d:ce:c1:55:92:f2:45:fc: 55:a9:1e:9a:78:c1:fc:c9:5f:d0:ed:53:b9:20:93:21:85:de: 43:c4:a3:af:e3:5f:a8:cf:9b:0d:8a:a2:eb:c7:c9:3f:6e:1b: fd:6c:b1:1f:6b:b5:a4:c8:bf:67:33:41:52:a0:a6:37:bd:01: 83:9d:12:8a:17:e7:c7:54:70:f8:55:39:48:f3:d2:61:4d:37: 2f:47:9d:f1:17:96:48:87:fc:81:d3:9f:fa:de:3e:9c:24:1c: 7e:f3:c8:04:a8:70:96:a5:f1:a2:5c:99:51:fb:55:d0:f0:d7: 16:97:e7:6f:26:84:12:43:24:9d:cd:02:55:3d:9c:01:35:94: eb:2c:30:4b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULEEy30vH35jkY/sQ+o4t93g+TL0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDExMzE4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2Q4ZGQ0MjY5YzhhMzZjNDVjYTQ1N2ZhNDkzMmJjZGRj NmQ1OThhZDI1MmMxYTI0MGEwMjhhMmFmM2NiMzcwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCi/Lnsc06XujMvLaD7h3vJRpryyg978pUwzHJPdTlh0xl 5W3ylrBNVTeBUrnDDRY++PQbLr90UfrL4k+ADGi6vxkAU2AqEoX5ExOa/aKQmpjs 52+mD/Vd2xqRq+FGrT5b3GKhiNIaTuGkAbjlBSP1xjkMdcCGcVGo+ktcWh9VIB7g J4Nfyz4u8O1TWCphxbxvHfs48ZzMlGz9XZzyRwUqD9knDJSIISlEuxqoeXCx1837 0/1d8vDiTupZ0C+fRc8/VAwWcZEtjTL2TUPpbiW4HiF21BX6P9DQpWMdN/yV5CrK kC4nj1inZUaNZpKhcxa+mHsb4gdxtF8MTeJxsHrHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzGksyUgpBGqfWaee2quIzx80ydgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzliZWEzOWEzLTFlY2ItNDFlMi1hZjUyLTI4OGI1ZmQ0NWNjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOo4wDQYJKoZIhvcNAQELBQADggEBAHtOuBSLC5iy1uCaESrDN+Tv iS1DevWXJYHVPim57gt5UkzzT3j+IKn5FZRtes8OjMv3yBAqawgj9Z80J5CQYcFT MUM+qu0v9kfTSRkRJ65ItmMlc7oPWvbuW8m8d6yqJAone/6bh/k2RL+39oGZmXz6 rGvQOLcdzsFVkvJF/FWpHpp4wfzJX9DtU7kgkyGF3kPEo6/jX6jPmw2KouvHyT9u G/1ssR9rtaTIv2czQVKgpje9AYOdEooX58dUcPhVOUjz0mFNNy9HnfEXlkiH/IHT n/rePpwkHH7zyASocJal8aJcmVH7VdDw1xaX528mhBJDJJ3NAlU9nAE1lOssMEs= -----END CERTIFICATE-----Generated at Wed Nov 5 17:26:43 2025 by rpki-client