$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5bf57ea-3dd9-4f08-89f7-280bbf87fb42.roa File: a5bf57ea-3dd9-4f08-89f7-280bbf87fb42.roa (raw, json) Hash identifier: gYbTG61k1LY2O/FPlfSzbkE5ky+nyHrZxlk9UTrTZ5k= Subject key identifier: 3C:DD:51:70:40:8F:33:CA:56:88:46:63:74:21:98:52:AD:26:B2:FF Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 484830FCF22CB139B621C64104E1ED9C8E0BE304 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5bf57ea-3dd9-4f08-89f7-280bbf87fb42.roa Signing time: Thu 30 Oct 2025 23:13:58 +0000 ROA not before: Thu 30 Oct 2025 23:13:58 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2c46::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:48:30:fc:f2:2c:b1:39:b6:21:c6:41:04:e1:ed:9c:8e:0b:e3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:13:58 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=b1c7c1c7495cafbc6953d2f6569d6a4eb7ab475b797401bbeead60d9996ba33d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:e5:1e:8c:6c:b1:7a:3e:72:02:87:4d:b4: d7:5a:e5:0e:99:49:ea:b0:91:fa:0e:cf:f3:79:b5: 06:54:33:f0:09:ff:0a:8b:d7:09:ad:85:01:25:57: bc:c1:29:82:12:a5:82:10:4e:c6:9e:bf:35:ee:05: b4:b7:11:9d:c7:50:9f:a2:58:e3:f1:f8:14:49:23: ba:0a:bd:1f:0a:91:9a:89:ae:34:85:71:99:5c:03: 22:40:43:b4:38:55:d3:57:61:6e:4b:dd:56:ab:73: 17:6e:7f:67:77:29:ea:32:8d:78:2b:90:25:4d:76: 6f:22:90:98:f9:2e:02:b3:89:a5:f1:de:da:7e:6e: 31:be:88:29:4b:5f:71:44:6d:e1:b0:66:d0:be:51: 01:0d:6d:0d:56:d1:d3:cd:e4:dc:e6:2b:2c:ac:4d: 57:95:0c:be:c5:7d:64:85:e7:91:9a:af:60:ac:94: 5d:b2:b8:e0:9c:01:df:7d:99:13:bc:7c:b6:6a:ae: 33:92:77:14:e5:a6:0c:cd:31:c9:0d:49:0f:3f:66: 5f:75:43:e7:ca:59:0b:9e:22:0d:94:a8:96:e7:06: 39:27:12:94:24:cc:3b:45:88:34:66:15:08:7d:d1: 4b:94:67:25:7d:47:59:a0:16:f2:26:13:87:8f:94: 5f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DD:51:70:40:8F:33:CA:56:88:46:63:74:21:98:52:AD:26:B2:FF X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5bf57ea-3dd9-4f08-89f7-280bbf87fb42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2c46::/47 Signature Algorithm: sha256WithRSAEncryption 65:bc:a9:1b:f2:72:03:15:2a:e8:25:a1:0b:e9:89:03:a6:8b: e4:a3:68:92:24:54:f1:ae:94:10:4c:4e:0c:c9:7c:21:da:c1: 09:ca:1e:d6:90:42:b3:0d:cd:f1:98:a1:9e:17:5a:07:78:72: a4:e4:c5:4a:09:b3:bc:27:a3:04:22:ea:c6:04:c5:d1:77:d5: bb:f7:be:00:c9:e4:cf:58:88:0b:24:60:c3:1e:ce:fa:93:61: 07:96:66:fe:0b:4a:b7:3c:bb:94:14:5e:39:a7:52:21:46:dc: a4:51:f1:b5:ce:7d:79:b2:6d:a2:75:cb:7d:f7:66:8e:63:48: 14:33:47:31:56:14:6f:ca:aa:3f:bf:e2:48:c3:d5:ec:7d:0e: 26:61:c3:d8:32:e4:2e:af:1a:3b:33:c8:e5:0a:cf:95:c4:c4: 1c:20:3b:29:e9:df:cf:87:8a:c7:14:46:8d:a4:c3:20:f8:6e: 14:ae:1a:33:b1:7e:74:58:4a:2d:d4:84:4b:ad:18:ec:82:85: a2:4d:83:6f:5c:5a:95:15:72:76:1a:44:20:77:ed:fb:97:5d: 57:0b:00:56:8c:e1:83:68:91:5c:b9:cc:9c:17:aa:0e:ae:25: 4e:3d:c1:44:d2:a0:2b:44:5a:40:5e:28:37:0d:e7:00:a8:8b: c7:0b:fd:0c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSEgw/PIssTm2IcZBBOHtnI4L4wQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMxMzU4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWM3YzFjNzQ5NWNhZmJjNjk1M2QyZjY1NjlkNmE0ZWI3 YWI0NzViNzk3NDAxYmJlZWFkNjBkOTk5NmJhMzNkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC2eUejGyxej5yAodNtNda5Q6ZSeqwkfoOz/N5tQZUM/AJ /wqL1wmthQElV7zBKYISpYIQTsaevzXuBbS3EZ3HUJ+iWOPx+BRJI7oKvR8KkZqJ rjSFcZlcAyJAQ7Q4VdNXYW5L3Varcxduf2d3KeoyjXgrkCVNdm8ikJj5LgKziaXx 3tp+bjG+iClLX3FEbeGwZtC+UQENbQ1W0dPN5NzmKyysTVeVDL7FfWSF55Gar2Cs lF2yuOCcAd99mRO8fLZqrjOSdxTlpgzNMckNSQ8/Zl91Q+fKWQueIg2UqJbnBjkn EpQkzDtFiDRmFQh90UuUZyV9R1mgFvImE4ePlF8fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPN1RcECPM8pWiEZjdCGYUq0msv8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E1YmY1N2VhLTNkZDktNGYwOC04OWY3LTI4MGJiZjg3ZmI0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALEYwDQYJKoZIhvcNAQELBQADggEBAGW8qRvycgMVKugloQvpiQOm i+SjaJIkVPGulBBMTgzJfCHawQnKHtaQQrMNzfGYoZ4XWgd4cqTkxUoJs7wnowQi 6sYExdF31bv3vgDJ5M9YiAskYMMezvqTYQeWZv4LSrc8u5QUXjmnUiFG3KRR8bXO fXmybaJ1y333Zo5jSBQzRzFWFG/Kqj+/4kjD1ex9DiZhw9gy5C6vGjszyOUKz5XE xBwgOynp38+HiscURo2kwyD4bhSuGjOxfnRYSi3UhEutGOyChaJNg29cWpUVcnYa RCB37fuXXVcLAFaM4YNokVy5zJwXqg6uJU49wUTSoCtEWkBeKDcN5wCoi8cL/Qw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:01 2025 by rpki-client