$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3f56afb-4f21-4c47-9585-7e3d90e4ccca.roa File: b3f56afb-4f21-4c47-9585-7e3d90e4ccca.roa (raw, json) Hash identifier: n30zIZwfGqVIo/m1YDVqtbvQNSnSDnJXtXioaph/HmE= Subject key identifier: 58:28:60:2C:C9:52:1F:DD:E7:C8:1E:1B:B4:7E:A0:68:CC:32:F9:6F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3197BAE322DB1528CEFD318BF3CE510A6571121D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3f56afb-4f21-4c47-9585-7e3d90e4ccca.roa Signing time: Fri 31 Oct 2025 03:07:01 +0000 ROA not before: Fri 31 Oct 2025 03:07:01 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1c0c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:97:ba:e3:22:db:15:28:ce:fd:31:8b:f3:ce:51:0a:65:71:12:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:07:01 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=4917e6d47ceabe7173b10ea7a201f92c0cd58f46b5e75765f8c2bb9fcce55f32, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7e:58:83:2b:51:2f:a9:7c:af:51:14:bf:85: 59:63:38:05:71:6c:07:9b:e3:8f:92:32:dc:44:44: 13:9f:57:0c:f8:e8:4f:31:af:01:fe:90:1f:cd:af: 1d:e6:3c:5d:da:37:26:5e:66:01:1a:c1:36:ed:17: 6a:e2:0b:66:87:2e:9c:62:00:9a:93:14:79:6e:89: 29:dc:b6:4d:e7:99:2e:0d:a5:65:94:46:90:92:79: 68:4e:21:f9:47:9e:52:f5:a2:5d:f9:26:25:c5:a8: 04:b5:bd:69:18:9e:2e:9f:88:45:7c:ac:b4:d4:51: cd:51:b0:2f:c6:da:00:c5:ee:03:fc:03:1b:d8:c7: a1:71:ec:cb:87:c6:6c:0e:2e:de:cc:4b:85:01:82: 9b:18:88:57:1b:8d:45:34:e3:b5:d6:2d:5f:21:f9: eb:a6:dc:1c:58:03:0f:f2:fe:72:11:6e:2f:5d:2f: 20:5c:80:e1:59:f8:bf:0b:d2:a8:de:4f:58:51:86: f3:dd:6f:85:ac:b6:c0:3d:0f:51:22:05:1c:cc:48: 75:df:3d:a7:86:e3:88:e7:41:47:c2:bb:13:10:1d: 16:39:c6:b5:f9:4e:de:a4:21:56:e6:a8:c8:c1:1c: ac:a8:21:d5:82:61:24:27:57:fd:77:d5:a6:8d:d9: 11:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:28:60:2C:C9:52:1F:DD:E7:C8:1E:1B:B4:7E:A0:68:CC:32:F9:6F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3f56afb-4f21-4c47-9585-7e3d90e4ccca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1c0c::/46 Signature Algorithm: sha256WithRSAEncryption 9a:ab:8b:c0:8c:c0:a1:50:ec:5b:91:21:10:7e:5f:4a:c9:3b: 00:02:ab:af:88:ef:6f:65:83:eb:65:3b:c6:fe:25:ae:c0:a7: 69:86:63:1d:ae:aa:1d:84:82:22:da:d6:2d:c6:8b:7c:fc:94: 15:f4:2d:f3:c4:43:88:77:97:16:c9:a3:d5:8a:a0:cd:1e:f6: cc:51:7d:28:c6:31:0a:4a:f4:22:f2:42:77:d5:a9:5e:66:e4: db:dc:90:30:05:22:75:25:16:c5:1c:e9:e3:ec:f0:b4:12:7f: 97:43:30:84:2e:ea:89:fa:ca:59:fd:94:15:31:72:df:6a:ff: cc:14:24:cf:e7:51:c6:0a:25:de:5e:43:91:ce:e8:62:67:0a: 40:a9:a2:93:19:b0:6d:03:be:8f:e5:20:ca:e4:91:c2:59:f2: 12:70:66:c5:60:a1:09:db:4a:f1:bb:72:a4:e4:da:93:eb:48: a5:8a:8d:b7:e1:f1:5e:21:e8:46:fb:92:08:d4:ac:f6:aa:a1: 25:03:f0:d0:cd:46:72:3d:c9:63:fa:e3:d8:b7:cc:9f:39:06: b7:0d:eb:06:d8:fb:e2:90:3a:5e:9d:64:ae:a3:4a:84:59:fe: d9:7a:b6:e0:70:0f:b2:da:a0:35:3f:3c:ea:43:e1:0f:10:49: 6c:b5:51:8a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMZe64yLbFSjO/TGL885RCmVxEh0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMwNzAxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTE3ZTZkNDdjZWFiZTcxNzNiMTBlYTdhMjAxZjkyYzBj ZDU4ZjQ2YjVlNzU3NjVmOGMyYmI5ZmNjZTU1ZjMyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPfliDK1EvqXyvURS/hVljOAVxbAeb44+SMtxERBOfVwz4 6E8xrwH+kB/Nrx3mPF3aNyZeZgEawTbtF2riC2aHLpxiAJqTFHluiSnctk3nmS4N pWWURpCSeWhOIflHnlL1ol35JiXFqAS1vWkYni6fiEV8rLTUUc1RsC/G2gDF7gP8 AxvYx6Fx7MuHxmwOLt7MS4UBgpsYiFcbjUU047XWLV8h+eum3BxYAw/y/nIRbi9d LyBcgOFZ+L8L0qjeT1hRhvPdb4WstsA9D1EiBRzMSHXfPaeG44jnQUfCuxMQHRY5 xrX5Tt6kIVbmqMjBHKyoIdWCYSQnV/131aaN2RF/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWChgLMlSH93nyB4btH6gaMwy+W8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2IzZjU2YWZiLTRmMjEtNGM0Ny05NTg1LTdlM2Q5MGU0Y2NjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAHAwwDQYJKoZIhvcNAQELBQADggEBAJqri8CMwKFQ7FuRIRB+X0rJ OwACq6+I729lg+tlO8b+Ja7Ap2mGYx2uqh2EgiLa1i3Gi3z8lBX0LfPEQ4h3lxbJ o9WKoM0e9sxRfSjGMQpK9CLyQnfVqV5m5NvckDAFInUlFsUc6ePs8LQSf5dDMIQu 6on6yln9lBUxct9q/8wUJM/nUcYKJd5eQ5HO6GJnCkCpopMZsG0Dvo/lIMrkkcJZ 8hJwZsVgoQnbSvG7cqTk2pPrSKWKjbfh8V4h6Eb7kgjUrPaqoSUD8NDNRnI9yWP6 49i3zJ85BrcN6wbY++KQOl6dZK6jSoRZ/tl6tuBwD7LaoDU/POpD4Q8QSWy1UYo= -----END CERTIFICATE-----Generated at Wed Nov 5 12:49:06 2025 by rpki-client