$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b812fb5d-011f-4890-bca7-36aad4535117.roa File: b812fb5d-011f-4890-bca7-36aad4535117.roa (raw, json) Hash identifier: HolMc9IBX+j5tfQGy5aEUdVaml3wmal8HxLUGyEKfh4= Subject key identifier: 4E:A5:66:2B:71:FE:79:F2:EE:44:94:B3:94:E3:30:1C:3F:07:9B:54 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 33884A2CC61A57C6C34D93DA75FB6FAE0AF932BC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b812fb5d-011f-4890-bca7-36aad4535117.roa Signing time: Thu 30 Oct 2025 23:53:48 +0000 ROA not before: Thu 30 Oct 2025 23:53:48 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2fdc::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:88:4a:2c:c6:1a:57:c6:c3:4d:93:da:75:fb:6f:ae:0a:f9:32:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:53:48 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=c0440422ab7a4462e9f8299a3ea62c26b3e5c317a58912f882f8c572f01d9992, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:ef:2e:a8:82:63:fe:d8:f5:75:51:53:0f: 4f:0e:ac:47:b6:e4:08:07:58:1f:de:3d:00:73:3f: ff:23:da:95:1f:9c:46:21:d9:e5:3c:b7:62:13:1f: ec:4e:e4:30:ab:54:38:81:51:50:f9:43:c2:7f:2a: a1:8b:68:ce:ff:87:ae:99:7d:17:5f:5d:b1:d9:c7: 80:36:25:15:7e:c8:0b:02:80:4c:9d:fe:a6:34:67: 64:69:6e:bf:4b:96:45:72:cf:19:8a:b0:0a:53:1f: 48:51:6a:fb:27:dd:d5:6a:c7:5b:f5:cd:fc:4a:ec: eb:39:02:bf:34:59:58:f4:5f:e0:c0:f6:95:41:f7: 37:4f:f1:ae:62:ef:c0:f9:84:32:40:d5:d1:c1:3f: bb:83:fc:9d:7e:30:8e:53:e1:37:86:1d:0d:4e:96: 17:8c:74:43:43:ab:7d:ef:29:04:37:ca:b1:50:67: 5d:aa:82:ae:53:51:83:df:49:fd:80:2d:45:97:6d: 28:da:ed:25:cd:91:fe:26:ff:0c:ba:32:22:74:45: 94:57:09:ae:4a:a4:70:e0:0f:46:7a:30:84:97:5a: ef:48:bd:c0:85:03:59:59:3f:b3:35:1d:fb:4c:09: 26:5b:df:70:c5:a1:b8:ae:95:c7:ba:8e:ba:c0:2b: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A5:66:2B:71:FE:79:F2:EE:44:94:B3:94:E3:30:1C:3F:07:9B:54 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b812fb5d-011f-4890-bca7-36aad4535117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2fdc::/47 Signature Algorithm: sha256WithRSAEncryption 61:7b:d4:60:57:b9:c9:11:e0:e6:0c:85:b5:6a:34:49:bd:3a: 93:6b:68:14:ce:78:db:55:ea:5d:5c:48:dd:fe:19:ec:2b:b3: a9:90:dc:87:c6:6e:e6:b7:be:2b:c3:3a:43:2d:c9:62:2b:c3: ea:38:ef:3f:15:f9:79:d6:f0:d1:3c:85:9b:f8:75:b0:2b:47: d4:c6:28:82:c0:bc:89:c6:df:d9:8f:be:53:7f:3d:f1:9a:c1: 0a:ca:69:78:fe:24:c5:8c:a2:53:19:63:69:9a:fd:b4:58:bb: 2f:2c:81:3e:d5:0b:1c:3d:17:bd:0f:a6:57:77:c9:25:1a:44: 5d:41:92:db:a1:d7:22:82:f4:9e:3d:a5:8d:2b:48:52:b6:e8: d4:4c:fc:a8:e3:f2:de:08:37:fe:ff:8b:e6:e6:11:c5:50:56: 02:b4:3d:4c:a7:9b:ee:4f:a4:8a:31:27:37:b0:9b:59:ca:31: 1f:ff:88:94:9e:6d:53:3f:b9:8e:03:da:b5:18:d9:ec:8c:62: c4:3a:b2:21:e1:d3:ae:1d:de:40:80:37:92:dc:cd:54:a6:78: dd:2b:28:64:37:9c:82:ef:1f:ab:8d:15:d7:f5:60:83:3b:0b: 88:9f:e6:91:a2:16:7b:57:70:f9:56:af:11:0f:3b:e4:84:f9: ce:25:a6:38 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM4hKLMYaV8bDTZPadftvrgr5MrwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjM1MzQ4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDQ0MDQyMmFiN2E0NDYyZTlmODI5OWEzZWE2MmMyNmIz ZTVjMzE3YTU4OTEyZjg4MmY4YzU3MmYwMWQ5OTkyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCycO8uqIJj/tj1dVFTD08OrEe25AgHWB/ePQBzP/8j2pUf nEYh2eU8t2ITH+xO5DCrVDiBUVD5Q8J/KqGLaM7/h66ZfRdfXbHZx4A2JRV+yAsC gEyd/qY0Z2Rpbr9LlkVyzxmKsApTH0hRavsn3dVqx1v1zfxK7Os5Ar80WVj0X+DA 9pVB9zdP8a5i78D5hDJA1dHBP7uD/J1+MI5T4TeGHQ1OlheMdENDq33vKQQ3yrFQ Z12qgq5TUYPfSf2ALUWXbSja7SXNkf4m/wy6MiJ0RZRXCa5KpHDgD0Z6MISXWu9I vcCFA1lZP7M1HftMCSZb33DFobiulce6jrrAK29pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTqVmK3H+efLuRJSzlOMwHD8Hm1QwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I4MTJmYjVkLTAxMWYtNDg5MC1iY2E3LTM2YWFkNDUzNTExNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAL9wwDQYJKoZIhvcNAQELBQADggEBAGF71GBXuckR4OYMhbVqNEm9 OpNraBTOeNtV6l1cSN3+Gewrs6mQ3IfGbua3vivDOkMtyWIrw+o47z8V+XnW8NE8 hZv4dbArR9TGKILAvInG39mPvlN/PfGawQrKaXj+JMWMolMZY2ma/bRYuy8sgT7V Cxw9F70Ppld3ySUaRF1Bktuh1yKC9J49pY0rSFK26NRM/Kjj8t4IN/7/i+bmEcVQ VgK0PUynm+5PpIoxJzewm1nKMR//iJSebVM/uY4D2rUY2eyMYsQ6siHh064d3kCA N5LczVSmeN0rKGQ3nILvH6uNFdf1YIM7C4if5pGiFntXcPlWrxEPO+SE+c4lpjg= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:15 2025 by rpki-client