$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4accce2-2d53-4575-88c2-0c121d538cf2.roa File: b4accce2-2d53-4575-88c2-0c121d538cf2.roa (raw, json) Hash identifier: FJ6GN/pHN1PafJazaMXfDu+6iSsAjatZfVNK17zHaGM= Subject key identifier: CA:C4:B4:5C:ED:C8:72:42:6A:23:C8:E1:00:C9:FA:39:B8:24:D9:0E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3977EB68568204B7B40E28703F665E83D92D5F07 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4accce2-2d53-4575-88c2-0c121d538cf2.roa Signing time: Thu 30 Oct 2025 22:53:43 +0000 ROA not before: Thu 30 Oct 2025 22:53:43 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2994::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:77:eb:68:56:82:04:b7:b4:0e:28:70:3f:66:5e:83:d9:2d:5f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:53:43 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=b900021245e3b86dcfc5089a1d2be2d5099961c34d645cae7f23caa95b21a3b7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:96:ff:ca:f8:7a:a1:7b:ca:3c:e8:4b:20:37: cd:f3:d1:e9:df:97:24:4e:7c:95:53:04:75:0d:82: 23:ba:09:3a:3f:bf:0a:16:f0:a2:c7:cd:28:8d:b5: 61:8c:0d:9e:ae:4f:e4:8c:a1:44:8c:c1:03:4e:2e: 22:a1:7d:56:4a:57:61:64:84:b1:75:77:62:30:a2: 64:28:2a:78:b6:4d:4b:66:96:d9:ca:fa:63:82:a2: e2:0a:96:36:62:bc:1a:a5:6a:a9:4d:ee:a8:48:dd: fe:c1:eb:ba:83:a3:be:82:ce:c6:ee:90:0e:d0:42: 1b:26:17:74:63:cd:d5:a8:94:5b:08:da:6a:db:e1: 05:05:ab:65:37:7a:3c:15:35:29:fc:85:82:08:64: a3:45:d4:50:6d:8d:4e:15:e0:63:3b:28:9f:34:e8: 0d:b1:23:23:f2:39:9a:87:0b:5d:12:ce:31:69:be: 84:02:03:70:e8:86:cd:f6:dd:3e:99:a4:0e:da:48: 2f:14:a8:c8:47:be:16:57:6a:42:29:2d:6f:9c:4f: 2b:cc:40:c6:ba:2f:45:20:38:6d:c7:c1:47:bb:b6: 5d:e3:54:7d:2c:a4:ed:be:70:5a:38:82:8c:2c:62: 5b:90:2b:db:19:37:fb:1d:8b:18:d7:cb:56:46:bb: 48:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C4:B4:5C:ED:C8:72:42:6A:23:C8:E1:00:C9:FA:39:B8:24:D9:0E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4accce2-2d53-4575-88c2-0c121d538cf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2994::/47 Signature Algorithm: sha256WithRSAEncryption 05:e6:b1:a2:48:5e:3b:87:a7:82:0f:23:ed:b9:74:26:c9:b8: 3f:94:0d:9d:7c:8c:07:b7:81:2d:0d:75:97:21:21:85:3b:ef: cb:60:16:37:cf:c1:0b:d5:57:be:50:ab:b5:ab:03:42:c1:64: 5b:f3:b1:98:55:74:74:e7:a5:7a:1f:25:3e:60:ea:4d:d2:34: 52:df:44:7c:c4:93:61:40:89:cd:eb:48:30:28:22:b4:15:92: 09:8a:e3:59:5d:9b:4d:18:29:f2:80:60:e3:c6:97:17:fa:f6: a3:6d:d0:2c:f4:ba:33:9d:29:5d:7d:6c:48:44:94:4c:23:3f: f5:3e:1c:60:62:f8:77:4d:b0:30:b7:41:df:54:45:93:0a:a1: 4d:bf:2a:b1:7c:47:63:74:74:39:8b:40:e4:7a:1b:18:8b:ba: 6c:a4:7a:e5:18:bb:7f:36:e9:53:51:02:21:6c:9b:ff:01:b1: 8e:a8:47:7f:42:db:ce:30:65:51:7d:c3:a6:9f:05:59:a6:ff: 7c:95:a3:19:f4:1d:61:12:a7:57:4a:6b:34:24:03:d4:7d:70: 91:79:25:9e:6e:be:31:25:c6:c0:4c:6a:9e:45:fb:e4:ee:11: e1:bb:8b:ca:03:b4:05:64:65:ff:9c:eb:c9:7a:56:bb:29:dc: c8:a0:2c:64 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOXfraFaCBLe0DihwP2Zeg9ktXwcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI1MzQzWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTAwMDIxMjQ1ZTNiODZkY2ZjNTA4OWExZDJiZTJkNTA5 OTk2MWMzNGQ2NDVjYWU3ZjIzY2FhOTViMjFhM2I3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzlv/K+Hqhe8o86EsgN83z0enflyROfJVTBHUNgiO6CTo/ vwoW8KLHzSiNtWGMDZ6uT+SMoUSMwQNOLiKhfVZKV2FkhLF1d2IwomQoKni2TUtm ltnK+mOCouIKljZivBqlaqlN7qhI3f7B67qDo76CzsbukA7QQhsmF3RjzdWolFsI 2mrb4QUFq2U3ejwVNSn8hYIIZKNF1FBtjU4V4GM7KJ806A2xIyPyOZqHC10SzjFp voQCA3Dohs323T6ZpA7aSC8UqMhHvhZXakIpLW+cTyvMQMa6L0UgOG3HwUe7tl3j VH0spO2+cFo4gowsYluQK9sZN/sdixjXy1ZGu0jHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUysS0XO3IckJqI8jhAMn6Obgk2Q4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I0YWNjY2UyLTJkNTMtNDU3NS04OGMyLTBjMTIxZDUzOGNmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKZQwDQYJKoZIhvcNAQELBQADggEBAAXmsaJIXjuHp4IPI+25dCbJ uD+UDZ18jAe3gS0NdZchIYU778tgFjfPwQvVV75Qq7WrA0LBZFvzsZhVdHTnpXof JT5g6k3SNFLfRHzEk2FAic3rSDAoIrQVkgmK41ldm00YKfKAYOPGlxf69qNt0Cz0 ujOdKV19bEhElEwjP/U+HGBi+HdNsDC3Qd9URZMKoU2/KrF8R2N0dDmLQOR6GxiL umykeuUYu3826VNRAiFsm/8BsY6oR39C284wZVF9w6afBVmm/3yVoxn0HWESp1dK azQkA9R9cJF5JZ5uvjElxsBMap5F++TuEeG7i8oDtAVkZf+c68l6Vrsp3MigLGQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:12 2025 by rpki-client