$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd6f64e3-e80a-4a35-9d01-13d9c32dfda4.roa File: bd6f64e3-e80a-4a35-9d01-13d9c32dfda4.roa (raw, json) Hash identifier: oRB4ZHlS+rKvQ0Hu7M4aFfQW94enreZHWbkGTskGh9Q= Subject key identifier: 22:CC:8B:5F:B0:F6:17:29:35:7B:4C:D1:98:39:15:71:31:9A:3D:79 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5534C3B1B5AC7391717916C35C6C16777EA92816 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd6f64e3-e80a-4a35-9d01-13d9c32dfda4.roa Signing time: Fri 31 Oct 2025 01:11:29 +0000 ROA not before: Fri 31 Oct 2025 01:11:29 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3a12::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:34:c3:b1:b5:ac:73:91:71:79:16:c3:5c:6c:16:77:7e:a9:28:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:11:29 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=47b7d2589bc8b02e5d751aef51e6640ef2987c2faa4e102980d1a1b79ed8185a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:6a:69:72:61:e1:fa:99:f3:5a:da:87:aa: be:af:34:86:44:1c:12:1a:3b:02:da:bc:27:d4:8c: a6:19:7a:d2:70:36:15:d7:19:6f:65:3b:be:ea:24: 11:ae:af:1a:d2:fd:7f:56:e1:3f:de:b1:ae:ba:7c: 97:38:8a:30:f9:f2:c5:67:1d:09:fd:8e:3f:2c:03: f2:ee:8e:c8:18:ab:e0:c1:a5:66:a8:ed:e7:3e:c3: ab:09:13:0d:29:ba:06:c2:3f:11:c3:67:1e:da:81: 8b:b1:f7:1c:e8:69:a2:fb:d5:5f:26:fc:32:d1:74: f7:b3:b4:98:6b:33:f1:56:26:05:82:2d:56:71:e0: d6:90:00:0e:9e:8a:7f:fb:8c:9a:60:fd:43:16:a6: a0:6f:62:f1:92:9b:06:dc:0f:6a:7f:b0:27:e8:21: e0:64:05:d8:ad:92:ea:2f:3d:2d:55:0e:22:4b:98: ae:6e:b7:11:ab:16:10:04:42:93:4e:36:57:ba:d5: 63:c6:2e:df:5f:6b:43:1c:7c:5a:10:c5:25:75:ae: a7:94:ac:2b:39:13:c8:ee:9e:57:11:23:f2:b7:64: 54:f1:59:65:36:43:a3:9d:fc:56:3a:fa:d1:26:20: 45:c5:07:c1:2e:d1:35:51:cf:d0:8c:a9:62:cf:3e: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CC:8B:5F:B0:F6:17:29:35:7B:4C:D1:98:39:15:71:31:9A:3D:79 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bd6f64e3-e80a-4a35-9d01-13d9c32dfda4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3a12::/47 Signature Algorithm: sha256WithRSAEncryption 1f:0d:e0:2d:a3:fb:c0:e4:e5:44:60:a5:de:e6:52:47:8b:b0: 4e:af:f0:7c:82:e6:00:48:1c:9e:3b:2f:15:a7:7b:c8:76:3b: 23:d5:6b:8c:cd:d1:4b:b1:b9:6d:6e:e1:9a:61:7f:d0:c4:f8: 0d:74:49:9a:cc:28:fc:49:a8:36:d4:6b:a2:60:94:6b:52:e3: 90:d1:70:a1:b1:6e:08:93:36:18:fa:0b:32:97:aa:4a:b0:b9: 83:51:2f:5b:ee:3d:e3:57:3b:ac:30:2a:4d:50:38:b5:a6:11: 8f:5c:58:44:f3:26:be:3e:bf:fb:5f:d9:54:ea:9f:e5:08:e7: 71:23:3b:ea:f9:ff:cf:d9:b6:3e:ad:16:41:2d:97:3a:69:cb: 62:5d:a9:53:64:94:2c:18:4a:7f:77:06:49:41:40:cb:2f:4f: d4:41:69:ed:ba:20:32:65:e8:fc:41:0f:f4:7d:65:e1:d7:57: bc:35:84:7e:c5:97:11:73:e4:f6:ff:5b:4a:69:c2:9b:8c:2b: fb:07:d5:e7:f2:3d:a4:42:f9:97:a9:e7:bd:07:1c:1f:93:82: 45:1d:0b:b3:34:78:e8:18:bb:00:5b:7d:99:0b:76:39:05:eb: 72:11:ff:bb:a0:91:79:b8:67:73:c9:c5:3a:c4:ce:21:f7:a7: 66:4b:76:6c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVTTDsbWsc5FxeRbDXGwWd36pKBYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDExMTI5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2I3ZDI1ODliYzhiMDJlNWQ3NTFhZWY1MWU2NjQwZWYy OTg3YzJmYWE0ZTEwMjk4MGQxYTFiNzllZDgxODVhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6PGppcmHh+pnzWtqHqr6vNIZEHBIaOwLavCfUjKYZetJw NhXXGW9lO77qJBGurxrS/X9W4T/esa66fJc4ijD58sVnHQn9jj8sA/LujsgYq+DB pWao7ec+w6sJEw0pugbCPxHDZx7agYux9xzoaaL71V8m/DLRdPeztJhrM/FWJgWC LVZx4NaQAA6ein/7jJpg/UMWpqBvYvGSmwbcD2p/sCfoIeBkBditkuovPS1VDiJL mK5utxGrFhAEQpNONle61WPGLt9fa0McfFoQxSV1rqeUrCs5E8junlcRI/K3ZFTx WWU2Q6Od/FY6+tEmIEXFB8Eu0TVRz9CMqWLPPiYHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIsyLX7D2Fyk1e0zRmDkVcTGaPXkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JkNmY2NGUzLWU4MGEtNGEzNS05ZDAxLTEzZDljMzJkZmRhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOhIwDQYJKoZIhvcNAQELBQADggEBAB8N4C2j+8Dk5URgpd7mUkeL sE6v8HyC5gBIHJ47LxWne8h2OyPVa4zN0UuxuW1u4Zphf9DE+A10SZrMKPxJqDbU a6JglGtS45DRcKGxbgiTNhj6CzKXqkqwuYNRL1vuPeNXO6wwKk1QOLWmEY9cWETz Jr4+v/tf2VTqn+UI53EjO+r5/8/Ztj6tFkEtlzppy2JdqVNklCwYSn93BklBQMsv T9RBae26IDJl6PxBD/R9ZeHXV7w1hH7FlxFz5Pb/W0ppwpuMK/sH1efyPaRC+Zep 570HHB+TgkUdC7M0eOgYuwBbfZkLdjkF63IR/7ugkXm4Z3PJxTrEziH3p2ZLdmw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:54 2025 by rpki-client