$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7c1c2e3-fafa-4e62-bd27-6761678969db.roa File: b7c1c2e3-fafa-4e62-bd27-6761678969db.roa (raw, json) Hash identifier: 7aYtX3qlTw+TCYtS2PKKIgp9iVu2KYNKscaGsgI2QJ0= Subject key identifier: 15:84:2C:54:60:09:90:F9:03:05:C3:FB:6B:41:FE:00:4D:16:C5:E9 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 24BBE83431791ABE9C033D2CC152B624B1668632 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7c1c2e3-fafa-4e62-bd27-6761678969db.roa Signing time: Fri 31 Oct 2025 04:11:46 +0000 ROA not before: Fri 31 Oct 2025 04:11:46 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:353c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:bb:e8:34:31:79:1a:be:9c:03:3d:2c:c1:52:b6:24:b1:66:86:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:11:46 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=2728b963aff70f360cace08d18bdd692ff6f3107fd0964018acc7aaababfb142, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:ef:80:76:29:53:fc:e0:ab:80:92:3a:21: f0:d7:64:fc:25:ee:e6:7f:b5:12:63:8a:62:5f:a4: ad:0f:a1:19:45:29:64:fd:3a:d9:e8:18:ee:ea:cd: 34:8b:8c:0f:44:34:cf:2d:7a:71:38:16:23:4c:5c: e2:7b:7c:6a:ad:52:4a:61:c3:01:86:a3:4e:51:bc: cc:a3:b5:12:ff:c0:68:4a:54:95:0e:8b:57:cb:e5: de:6c:cc:56:80:0f:07:af:76:f9:e7:a8:db:01:d4: 9b:5a:02:58:e3:b9:65:22:23:ca:dd:d1:2a:16:c0: 7a:bb:f6:7c:64:99:71:f2:f2:4f:99:b7:c6:83:3e: 98:42:c2:ec:52:3a:14:d6:88:dd:e5:7a:df:a9:7e: f2:7e:84:86:6d:c1:fb:ae:da:17:0b:23:c6:d2:79: 55:05:9d:89:dd:3a:e1:ba:c0:66:a0:bc:65:5e:0f: b5:b2:59:dc:d6:94:c9:d2:39:1b:83:40:bb:77:b3: e6:a8:c5:2f:b3:c1:17:26:5e:8a:0b:90:cf:fc:b6: 39:15:4b:3c:27:8e:bb:d2:83:7c:91:ec:0a:f7:b5: ad:16:6d:89:f6:9d:1a:50:f4:bc:f7:f0:ed:43:46: 21:d5:f3:8d:a2:48:22:b4:e7:d2:45:35:f4:50:6c: 2a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:84:2C:54:60:09:90:F9:03:05:C3:FB:6B:41:FE:00:4D:16:C5:E9 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b7c1c2e3-fafa-4e62-bd27-6761678969db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:353c::/46 Signature Algorithm: sha256WithRSAEncryption 92:5e:d6:5e:dc:8e:c5:c4:33:72:b7:17:10:53:22:bf:b7:48: 3e:a5:fb:12:58:57:73:0d:c5:4d:04:9e:62:b1:f0:f7:61:e2: 5d:c4:bf:b3:09:c3:b6:3c:c1:38:25:64:9d:52:59:55:0a:7e: b4:cb:c1:f6:43:e4:1f:c2:7d:53:fe:89:49:d5:f0:bc:16:e0: f0:ce:5f:3f:8d:8f:b1:32:c3:a9:ba:5b:ca:4a:48:88:d6:3a: fb:36:c0:f3:a3:6f:76:c4:26:88:10:1e:90:40:38:60:26:47: 15:b8:97:1b:a9:b2:92:d2:bf:23:94:cb:84:99:78:18:95:19: a6:16:ce:41:58:c5:09:79:ad:1c:85:92:f1:d8:aa:4b:31:43: ad:15:2f:fb:8e:61:07:c0:44:1e:c5:fa:a0:70:ec:4a:52:d6: 58:fb:55:cc:de:36:52:aa:aa:aa:fe:43:b4:e5:3f:ea:e9:89: b4:b1:10:2c:cd:6e:41:46:e6:a3:1a:ea:d8:ad:1b:3e:39:31: 3b:e5:2b:e9:d2:27:14:fb:30:5f:1c:38:e1:c3:ff:25:f5:a7: 9e:ae:bd:41:f5:6e:a8:96:55:fd:2d:7e:71:2c:24:f1:96:88: 20:5a:78:84:bf:4a:08:83:c8:a2:95:7f:b4:e5:63:a7:44:a2: 92:22:58:cb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJLvoNDF5Gr6cAz0swVK2JLFmhjIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQxMTQ2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzI4Yjk2M2FmZjcwZjM2MGNhY2UwOGQxOGJkZDY5MmZm NmYzMTA3ZmQwOTY0MDE4YWNjN2FhYWJhYmZiMTQyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0+O+AdilT/OCrgJI6IfDXZPwl7uZ/tRJjimJfpK0PoRlF KWT9OtnoGO7qzTSLjA9ENM8tenE4FiNMXOJ7fGqtUkphwwGGo05RvMyjtRL/wGhK VJUOi1fL5d5szFaADwevdvnnqNsB1JtaAljjuWUiI8rd0SoWwHq79nxkmXHy8k+Z t8aDPphCwuxSOhTWiN3let+pfvJ+hIZtwfuu2hcLI8bSeVUFnYndOuG6wGagvGVe D7WyWdzWlMnSORuDQLt3s+aoxS+zwRcmXooLkM/8tjkVSzwnjrvSg3yR7Ar3ta0W bYn2nRpQ9Lz38O1DRiHV842iSCK059JFNfRQbCqvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFYQsVGAJkPkDBcP7a0H+AE0WxekwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I3YzFjMmUzLWZhZmEtNGU2Mi1iZDI3LTY3NjE2Nzg5NjlkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAANTwwDQYJKoZIhvcNAQELBQADggEBAJJe1l7cjsXEM3K3FxBTIr+3 SD6l+xJYV3MNxU0EnmKx8Pdh4l3Ev7MJw7Y8wTglZJ1SWVUKfrTLwfZD5B/CfVP+ iUnV8LwW4PDOXz+Nj7Eyw6m6W8pKSIjWOvs2wPOjb3bEJogQHpBAOGAmRxW4lxup spLSvyOUy4SZeBiVGaYWzkFYxQl5rRyFkvHYqksxQ60VL/uOYQfARB7F+qBw7EpS 1lj7VczeNlKqqqr+Q7TlP+rpibSxECzNbkFG5qMa6titGz45MTvlK+nSJxT7MF8c OOHD/yX1p56uvUH1bqiWVf0tfnEsJPGWiCBaeIS/SgiDyKKVf7TlY6dEopIiWMs= -----END CERTIFICATE-----Generated at Wed Nov 5 12:30:11 2025 by rpki-client