$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b532fb9d-1223-4ab2-ae57-23b94a278aca.roa File: b532fb9d-1223-4ab2-ae57-23b94a278aca.roa (raw, json) Hash identifier: jyegoVoONeTXfiJ9IrIKC3JVQvINiG9IQNRZJQ5JuWk= Subject key identifier: 51:00:A5:6E:BE:88:EE:19:AC:70:15:09:12:49:2D:CE:0A:A2:89:8A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 118AA138FFC689415BA92C4C4285818B7A361BDC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b532fb9d-1223-4ab2-ae57-23b94a278aca.roa Signing time: Fri 31 Oct 2025 05:55:23 +0000 ROA not before: Fri 31 Oct 2025 05:55:23 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3260::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8a:a1:38:ff:c6:89:41:5b:a9:2c:4c:42:85:81:8b:7a:36:1b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:55:23 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=74bcc278b5e3cbdc1357a5710a23fa124dc36225de67d0106819ef44caa985ca, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:96:5b:cc:e1:1d:a3:5e:5f:ac:c8:a9:87: d5:e3:cf:c0:a3:d4:37:fa:28:8a:7c:93:45:91:8b: 8d:09:8f:af:60:37:f7:03:50:ac:f2:05:45:4e:2c: d5:49:7f:5b:74:2f:84:a9:ef:4e:4d:17:f9:6d:43: 63:29:2c:f0:4b:38:49:30:fc:7b:ef:7d:e1:e2:26: 1c:a1:48:b1:a7:f4:49:36:f8:09:d4:e1:71:56:e4: 3c:da:14:b0:54:74:c0:fb:66:e1:f8:a4:f5:67:ec: 34:5e:48:e8:16:e5:cc:e0:2a:87:84:44:65:fd:e8: e5:dc:02:e6:54:b1:83:bf:8b:32:01:80:a9:2b:3f: 63:82:85:35:6a:eb:6a:f4:15:42:8a:d0:ce:8c:68: 0c:3a:f9:48:c3:10:57:d8:cf:d2:a9:f2:a8:83:ec: 8f:8c:ff:b7:22:d8:74:3e:c2:f1:de:57:69:84:13: dc:72:4f:67:9a:6b:82:ae:6a:47:a4:65:b7:27:af: 4a:c6:ea:4d:a2:29:73:31:39:ce:d1:a9:24:c0:67: d5:8c:01:18:50:48:30:78:02:52:34:92:50:c8:41: 35:03:2b:14:ee:ac:70:4b:24:ce:41:df:ee:dd:ad: f3:62:3a:67:6c:02:73:46:aa:67:70:8b:17:30:1b: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:00:A5:6E:BE:88:EE:19:AC:70:15:09:12:49:2D:CE:0A:A2:89:8A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b532fb9d-1223-4ab2-ae57-23b94a278aca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3260::/45 Signature Algorithm: sha256WithRSAEncryption 00:3f:0a:98:c9:a0:69:81:46:84:5e:89:6c:ca:06:a0:e5:c6: 0b:20:89:b5:f5:a1:53:4e:7c:76:8d:49:09:6b:28:74:f6:56: 9e:b1:04:be:6e:85:da:a4:0e:80:14:38:86:a6:08:ab:8e:fe: 1f:e9:33:37:62:6c:3f:37:ac:82:d0:e1:a6:cb:e3:ac:4b:41: 5c:38:da:6e:d2:7a:61:17:e8:ff:4d:68:d7:b8:63:67:60:da: 8d:7c:04:88:f2:89:db:61:0c:1c:fe:90:2f:95:2f:4e:d2:6e: d3:dd:21:3a:54:62:4e:d3:fb:6a:64:da:2e:bd:93:d4:b2:fc: 7c:49:c8:f1:ad:8a:a7:1e:e6:52:92:b4:02:14:8d:5e:69:77: 83:a4:84:32:1a:22:83:46:32:17:af:7d:ac:71:85:35:13:3b: 3f:f9:ad:66:6b:d3:79:d5:90:59:09:c0:40:06:4e:4d:f2:c8: 2c:34:54:e8:db:e3:c1:74:8d:5a:c5:8a:b4:06:11:17:50:e8: c0:1c:f1:8b:01:8a:d9:23:dd:5b:79:d8:c5:4a:ce:34:79:09: 85:7c:e2:a5:92:f8:91:55:d2:ae:3d:29:5c:c3:cc:25:c1:01: 47:31:bb:8c:48:2b:3d:42:e6:df:e1:53:1f:af:04:98:06:f6: 23:fc:52:76 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEYqhOP/GiUFbqSxMQoWBi3o2G9wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU1NTIzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NGJjYzI3OGI1ZTNjYmRjMTM1N2E1NzEwYTIzZmExMjRk YzM2MjI1ZGU2N2QwMTA2ODE5ZWY0NGNhYTk4NWNhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5mpZbzOEdo15frMiph9Xjz8Cj1Df6KIp8k0WRi40Jj69g N/cDUKzyBUVOLNVJf1t0L4Sp705NF/ltQ2MpLPBLOEkw/HvvfeHiJhyhSLGn9Ek2 +AnU4XFW5DzaFLBUdMD7ZuH4pPVn7DReSOgW5czgKoeERGX96OXcAuZUsYO/izIB gKkrP2OChTVq62r0FUKK0M6MaAw6+UjDEFfYz9Kp8qiD7I+M/7ci2HQ+wvHeV2mE E9xyT2eaa4KuakekZbcnr0rG6k2iKXMxOc7RqSTAZ9WMARhQSDB4AlI0klDIQTUD KxTurHBLJM5B3+7drfNiOmdsAnNGqmdwixcwGx4/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUQClbr6I7hmscBUJEkktzgqiiYowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I1MzJmYjlkLTEyMjMtNGFiMi1hZTU3LTIzYjk0YTI3OGFjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAMmAwDQYJKoZIhvcNAQELBQADggEBAAA/CpjJoGmBRoReiWzKBqDl xgsgibX1oVNOfHaNSQlrKHT2Vp6xBL5uhdqkDoAUOIamCKuO/h/pMzdibD83rILQ 4abL46xLQVw42m7SemEX6P9NaNe4Y2dg2o18BIjyidthDBz+kC+VL07SbtPdITpU Yk7T+2pk2i69k9Sy/HxJyPGtiqce5lKStAIUjV5pd4OkhDIaIoNGMhevfaxxhTUT Oz/5rWZr03nVkFkJwEAGTk3yyCw0VOjb48F0jVrFirQGERdQ6MAc8YsBitkj3Vt5 2MVKzjR5CYV84qWS+JFV0q49KVzDzCXBAUcxu4xIKz1C5t/hUx+vBJgG9iP8UnY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:40:23 2025 by rpki-client