$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9511c54-ff2f-44e7-a9e2-7680f6a0be8d.roa File: b9511c54-ff2f-44e7-a9e2-7680f6a0be8d.roa (raw, json) Hash identifier: tL8z1mNirPFgUVkfWbXFZnaZXcieRbJsYDiMJf9nhFs= Subject key identifier: 3D:5E:46:32:88:72:1E:ED:B6:7F:5E:4F:48:DA:5B:68:CA:E6:DB:A2 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 14AEA12F6D96DD8339EF7DCC04875F72CFD5A9A0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9511c54-ff2f-44e7-a9e2-7680f6a0be8d.roa Signing time: Thu 30 Oct 2025 23:55:40 +0000 ROA not before: Thu 30 Oct 2025 23:55:40 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3208::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ae:a1:2f:6d:96:dd:83:39:ef:7d:cc:04:87:5f:72:cf:d5:a9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:55:40 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=107af83fa5f2f43052b15e7ccaf4f0365a8da39ffe1ae0534b08bb0eb9ea93b8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:7b:5e:69:c3:0c:6f:98:08:0f:86:3b:aa: 7a:1c:e2:7f:d6:a5:8a:6f:e5:c9:53:3b:33:95:78: 34:96:17:19:0d:9e:23:64:5e:3c:9a:99:25:39:ec: 3a:d7:77:f1:73:6c:35:e9:61:dd:41:d2:60:1d:dc: c1:09:f0:12:6a:5d:78:58:f9:fe:ed:32:57:c8:38: a7:b0:c6:89:17:68:2f:20:c9:05:b1:9e:5a:bb:01: e2:0d:89:57:10:c1:7b:39:c5:76:e1:4f:ea:47:be: 25:4a:6b:38:e7:dc:00:8b:e8:77:2d:9c:68:72:56: fd:7e:8c:ed:55:e3:33:c8:69:22:95:1c:92:9b:92: 18:6a:42:f4:31:b4:76:dd:d9:9e:e0:f4:dc:ef:f1: e0:c2:2e:30:ff:e3:0f:9e:83:7c:6e:ec:f8:9e:a8: 36:cf:1d:56:fe:a8:3b:54:30:e8:29:e5:7e:d9:aa: e1:ba:35:88:58:b4:b5:a6:d2:db:58:d3:15:cf:b0: 6b:ef:d8:35:7b:1c:55:7a:c4:77:ff:0b:48:78:ec: 5b:13:1d:8e:d2:d7:19:73:d5:85:65:e3:01:03:5b: a2:46:25:0f:d0:78:59:e0:24:b2:21:c1:95:ca:42: cb:96:c4:92:39:06:ad:60:30:65:fe:1f:69:20:0e: 9f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5E:46:32:88:72:1E:ED:B6:7F:5E:4F:48:DA:5B:68:CA:E6:DB:A2 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9511c54-ff2f-44e7-a9e2-7680f6a0be8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3208::/47 Signature Algorithm: sha256WithRSAEncryption 27:d8:0f:2f:b3:85:3d:e5:b0:52:54:79:72:a7:1c:a0:34:09: 3f:96:7f:d7:56:b4:25:8e:d9:eb:3c:9a:31:03:5f:06:41:42: e1:58:cb:66:1a:ae:85:ae:10:c1:08:63:d9:27:4d:bc:07:d9: 26:cc:b8:c2:b0:ec:35:7a:7d:39:a6:b2:75:39:05:f1:ed:ea: c6:65:31:5c:3c:d6:07:c6:dc:49:3d:87:87:1c:85:72:5a:79: bf:60:f5:62:34:ea:26:1f:cd:a9:97:68:af:43:38:a1:8d:84: ff:57:93:30:ed:73:6d:a3:50:72:9d:f4:86:61:ea:d0:ab:13: bd:7e:f8:9b:ca:e0:06:38:a3:aa:d8:f1:c5:c9:ba:3b:e6:65: 6b:a1:3e:1e:ec:cd:cb:54:74:6b:02:ae:41:94:96:2b:df:c4: 4d:bf:82:6d:6d:84:cb:b1:a9:cb:67:2f:7b:93:b7:d5:f0:ce: ba:fe:13:4c:0c:49:ae:13:c5:32:f5:b4:be:c3:39:ed:09:ff: f4:1f:8e:46:9a:06:29:31:2d:ab:2b:3d:a7:86:b8:1f:fa:b4: 22:01:a8:56:94:75:1d:c7:43:18:45:f5:b7:b6:c6:1d:21:55: 82:2f:89:d7:c3:e3:f2:b8:61:11:74:b0:36:82:a6:58:d5:b1: 33:a1:db:f4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFK6hL22W3YM5733MBIdfcs/VqaAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjM1NTQwWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDdhZjgzZmE1ZjJmNDMwNTJiMTVlN2NjYWY0ZjAzNjVh OGRhMzlmZmUxYWUwNTM0YjA4YmIwZWI5ZWE5M2I4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7PXteacMMb5gID4Y7qnoc4n/WpYpv5clTOzOVeDSWFxkN niNkXjyamSU57DrXd/FzbDXpYd1B0mAd3MEJ8BJqXXhY+f7tMlfIOKewxokXaC8g yQWxnlq7AeINiVcQwXs5xXbhT+pHviVKazjn3ACL6HctnGhyVv1+jO1V4zPIaSKV HJKbkhhqQvQxtHbd2Z7g9Nzv8eDCLjD/4w+eg3xu7PieqDbPHVb+qDtUMOgp5X7Z quG6NYhYtLWm0ttY0xXPsGvv2DV7HFV6xHf/C0h47FsTHY7S1xlz1YVl4wEDW6JG JQ/QeFngJLIhwZXKQsuWxJI5Bq1gMGX+H2kgDp/DAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPV5GMohyHu22f15PSNpbaMrm26IwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I5NTExYzU0LWZmMmYtNDRlNy1hOWUyLTc2ODBmNmEwYmU4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAMggwDQYJKoZIhvcNAQELBQADggEBACfYDy+zhT3lsFJUeXKnHKA0 CT+Wf9dWtCWO2es8mjEDXwZBQuFYy2YaroWuEMEIY9knTbwH2SbMuMKw7DV6fTmm snU5BfHt6sZlMVw81gfG3Ek9h4cchXJaeb9g9WI06iYfzamXaK9DOKGNhP9XkzDt c22jUHKd9IZh6tCrE71++JvK4AY4o6rY8cXJujvmZWuhPh7szctUdGsCrkGUlivf xE2/gm1thMuxqctnL3uTt9Xwzrr+E0wMSa4TxTL1tL7DOe0J//QfjkaaBikxLasr PaeGuB/6tCIBqFaUdR3HQxhF9be2xh0hVYIvidfD4/K4YRF0sDaCpljVsTOh2/Q= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:46 2025 by rpki-client