$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba434711-a795-4bde-b76c-e47bec8d6cdd.roa File: ba434711-a795-4bde-b76c-e47bec8d6cdd.roa (raw, json) Hash identifier: 37Giz10mWs4aPRLlHg6bUSJa4z2a/QAR531MtglyPsQ= Subject key identifier: 3F:22:B5:15:52:36:71:78:4A:4B:BE:F5:72:BE:23:17:94:F3:CF:84 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3CD22487227F0EDF6D9875771E492FC631B135 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba434711-a795-4bde-b76c-e47bec8d6cdd.roa Signing time: Thu 30 Oct 2025 21:28:57 +0000 ROA not before: Thu 30 Oct 2025 21:28:57 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1758::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d2:24:87:22:7f:0e:df:6d:98:75:77:1e:49:2f:c6:31:b1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:28:57 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=6d371fbff49b792106bfbbd56b447da4375541338345da154125a93630591383, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:17:ec:17:5a:09:d0:33:b9:92:e2:10:a3: 47:5c:9f:e5:91:d1:ab:f1:59:af:d2:5f:bc:3d:32: 5a:da:8e:0b:91:f3:76:06:22:7d:43:3f:b8:2a:a9: c4:62:75:55:07:d9:59:44:8c:be:33:97:29:7e:11: 0d:6e:2e:45:a9:bf:eb:70:2a:68:2c:db:d5:06:e5: ed:e6:00:0a:4c:a3:3d:b4:44:8c:25:df:8e:34:be: 90:8f:b5:27:0c:97:bd:08:97:90:d1:ff:2f:d2:31: e5:6a:24:69:de:df:7c:e4:2d:37:9e:51:23:18:0c: b7:21:0f:b4:db:0e:c8:6e:d3:61:ce:5a:8f:fc:b1: 24:72:c9:8f:25:cc:02:8d:e6:62:97:72:35:91:46: 9a:ce:e2:81:4a:ce:0b:22:8c:4e:87:1b:f7:ff:ac: d6:8f:b7:05:d3:98:50:e0:d7:8b:29:e6:74:47:49: d6:51:f8:e2:02:27:46:52:e8:4f:5d:55:67:57:d9: 7b:aa:90:23:90:a2:36:4f:c8:f3:19:23:d8:88:54: 07:65:8c:00:05:aa:ad:de:01:87:d1:69:5e:e1:66: 19:78:9d:06:38:fb:bd:34:97:dc:44:96:03:12:53: d0:37:57:85:0f:56:ba:2b:c0:47:77:81:c6:57:21: 42:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:22:B5:15:52:36:71:78:4A:4B:BE:F5:72:BE:23:17:94:F3:CF:84 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba434711-a795-4bde-b76c-e47bec8d6cdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1758::/47 Signature Algorithm: sha256WithRSAEncryption 32:c9:06:1e:50:00:df:4e:6f:d9:7d:7e:b6:b7:89:91:70:d5: 3a:6d:04:5b:6d:9d:d3:49:11:df:6d:ad:d6:45:15:2a:37:b6: 61:d7:63:70:db:76:8d:a7:e1:c0:ac:d1:9b:e7:f1:b8:d8:7c: 04:4b:3b:1b:e0:18:74:64:7c:72:be:6e:fe:80:21:29:fd:81: 18:9d:3e:61:b7:2e:69:86:85:59:f1:b5:5b:49:ae:8e:0c:2d: 33:aa:9f:85:98:c3:ac:10:1a:5f:f5:da:2c:55:26:fa:97:b4: 39:85:65:62:90:85:85:60:41:cf:18:cc:e7:6f:69:ff:b2:b3: 23:26:32:da:96:0d:8c:ae:8b:5a:8e:1d:0f:36:eb:81:5d:ad: 8a:f7:3c:3a:1a:94:5e:77:d5:14:e3:e7:db:10:fc:bc:5e:64: cc:08:c3:75:e8:1e:43:ce:c9:72:92:4c:f3:c3:cd:d6:c9:2d: 09:fe:36:d6:b0:cb:7d:28:54:05:6c:5f:f5:4a:4f:c7:1e:42: 32:c9:ec:01:af:74:d1:7a:d4:3b:24:3b:3b:ca:78:4e:4b:1e: b3:be:71:a4:f7:3a:80:c8:99:c5:cf:62:fd:a6:b5:00:38:30: c4:3b:c3:fd:06:de:5f:0d:59:20:97:af:73:f9:1b:81:d3:1e: b0:2c:ac:6b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITPNIkhyJ/Dt9tmHV3HkkvxjGxNTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTEwMzAyMTI4NTdaFw0yNTEyMDQyMzU5NTla MHoxSTBHBgNVBAUTQDZkMzcxZmJmZjQ5Yjc5MjEwNmJmYmJkNTZiNDQ3ZGE0Mzc1 NTQxMzM4MzQ1ZGExNTQxMjVhOTM2MzA1OTEzODMxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKozF+wXWgnQM7mS4hCjR1yf5ZHRq/FZr9JfvD0yWtqOC5Hz dgYifUM/uCqpxGJ1VQfZWUSMvjOXKX4RDW4uRam/63AqaCzb1Qbl7eYACkyjPbRE jCXfjjS+kI+1JwyXvQiXkNH/L9Ix5Wokad7ffOQtN55RIxgMtyEPtNsOyG7TYc5a j/yxJHLJjyXMAo3mYpdyNZFGms7igUrOCyKMTocb9/+s1o+3BdOYUODXiynmdEdJ 1lH44gInRlLoT11VZ1fZe6qQI5CiNk/I8xkj2IhUB2WMAAWqrd4Bh9FpXuFmGXid Bjj7vTSX3ESWAxJT0DdXhQ9WuivAR3eBxlchQh8CAwEAAaOCArQwggKwMB0GA1Ud DgQWBBQ/IrUVUjZxeEpLvvVyviMXlPPPhDAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvYmE0MzQ3MTEtYTc5NS00YmRlLWI3NmMtZTQ3YmVjOGQ2Y2RkLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHASYAkAAXWDANBgkqhkiG9w0BAQsFAAOCAQEAMskGHlAA305v2X1+treJkXDV Om0EW22d00kR322t1kUVKje2YddjcNt2jafhwKzRm+fxuNh8BEs7G+AYdGR8cr5u /oAhKf2BGJ0+YbcuaYaFWfG1W0mujgwtM6qfhZjDrBAaX/XaLFUm+pe0OYVlYpCF hWBBzxjM529p/7KzIyYy2pYNjK6LWo4dDzbrgV2tivc8OhqUXnfVFOPn2xD8vF5k zAjDdegeQ87JcpJM88PN1sktCf421rDLfShUBWxf9UpPxx5CMsnsAa900XrUOyQ7 O8p4Tkses75xpPc6gMiZxc9i/aa1ADgwxDvD/QbeXw1ZIJevc/kbgdMesCysaw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:09 2025 by rpki-client