$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bdd463b0-6f0f-43f5-962e-91432c2b8249.roa File: bdd463b0-6f0f-43f5-962e-91432c2b8249.roa (raw, json) Hash identifier: /V/RahJA/W76ZVWYctV6i3IXPG3vwe7O9eEvD5QWRI8= Subject key identifier: C4:EA:28:92:57:F8:68:7B:C5:A5:B3:AE:4E:D8:42:1B:38:10:58:28 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 12F3587E46E21D39E215D650851D0D965AADDF63 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bdd463b0-6f0f-43f5-962e-91432c2b8249.roa Signing time: Fri 31 Oct 2025 00:22:00 +0000 ROA not before: Fri 31 Oct 2025 00:22:00 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:349c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f3:58:7e:46:e2:1d:39:e2:15:d6:50:85:1d:0d:96:5a:ad:df:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:22:00 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a34bb1dd689ce0b9e5e23b3bd352ac9e1519bb265a919092b059d8ce9c441533, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:89:b8:2e:26:92:b5:71:2d:f8:c0:28:6c: ce:51:88:af:d4:b1:ab:ed:cb:50:9d:c4:70:65:1c: b4:ca:6d:de:97:94:42:5d:12:52:e4:26:5f:46:e8: 2c:b1:c0:95:6d:e1:3a:f5:79:68:12:12:64:8d:a1: 0c:d5:35:63:8d:77:e0:ea:1e:9b:8e:1d:63:8c:9d: 60:50:87:4e:c6:1c:a7:7e:dc:75:93:ca:8f:d6:a2: c1:3f:76:19:1a:ab:98:c1:a8:9c:1f:3c:b1:b8:f2: 52:0d:08:11:e5:a3:2c:22:d4:a2:2a:74:57:3b:51: 19:25:7c:0a:8f:09:12:64:45:a6:4d:11:4b:84:e4: 4e:6d:5e:b8:e5:7e:93:2a:49:54:29:14:05:c2:4f: ec:5a:7c:b7:d8:93:19:d8:4f:f9:56:14:54:85:ed: f8:85:5a:23:39:1e:d6:fe:eb:55:c5:70:b9:b1:c3: f3:a1:4b:1d:ba:53:9c:f8:b1:f6:3e:cd:c4:b6:86: fb:f8:fe:01:3c:7e:b4:73:03:a4:2e:27:70:b2:fc: 31:f5:ea:65:d3:7d:80:cb:32:96:e4:55:72:53:95: c8:65:7b:51:4e:50:59:d1:72:1b:69:75:59:30:1d: ae:55:c7:c9:26:a0:a4:90:da:56:3e:ed:ad:f6:69: 9e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EA:28:92:57:F8:68:7B:C5:A5:B3:AE:4E:D8:42:1B:38:10:58:28 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bdd463b0-6f0f-43f5-962e-91432c2b8249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:349c::/47 Signature Algorithm: sha256WithRSAEncryption 2d:f4:1d:39:86:6e:46:94:8a:dc:48:cb:b3:51:d0:40:77:ca: 83:44:b5:dc:00:90:e0:db:66:94:23:ef:1f:60:73:12:00:db: dc:3a:fd:9a:0e:6e:a7:a2:b0:8c:b6:2f:c5:23:97:a2:10:fe: a9:b4:c7:83:29:a4:fd:7b:a3:60:f3:2a:c4:be:b3:af:8f:1d: d8:78:62:45:d4:e4:0a:03:16:a2:85:5e:4f:6a:4f:62:99:96: 1e:37:b1:99:4d:e2:a2:9c:e4:13:bd:83:d4:5b:ac:00:e6:08: c9:33:80:13:5d:60:73:ca:53:dc:8d:96:dd:31:04:f5:99:93: c3:07:f4:ef:20:38:c3:48:66:1d:b1:20:de:78:c2:53:b0:c1: f8:46:fc:46:58:04:1e:3e:ca:b4:b4:cf:54:4e:f3:9c:64:03: 4b:fb:77:98:31:52:72:f0:70:53:b0:ea:d0:15:40:89:ef:59: 0d:7e:c2:27:33:29:1b:ce:56:08:99:35:e8:a9:ec:39:1c:cd: 61:77:e4:73:5d:7b:4b:29:bb:d5:1b:f9:01:e0:6f:8a:9c:46: 99:07:e2:3e:89:79:b9:2f:96:42:21:d2:bf:5d:c3:9f:40:40: 55:8e:d2:32:98:fa:73:a1:c0:46:44:6d:06:f0:9e:a5:20:53: 43:e0:5a:37 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEvNYfkbiHTniFdZQhR0Nllqt32MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyMjAwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzRiYjFkZDY4OWNlMGI5ZTVlMjNiM2JkMzUyYWM5ZTE1 MTliYjI2NWE5MTkwOTJiMDU5ZDhjZTljNDQxNTMzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC04Im4LiaStXEt+MAobM5RiK/Usavty1CdxHBlHLTKbd6X lEJdElLkJl9G6CyxwJVt4Tr1eWgSEmSNoQzVNWONd+DqHpuOHWOMnWBQh07GHKd+ 3HWTyo/WosE/dhkaq5jBqJwfPLG48lINCBHloywi1KIqdFc7URklfAqPCRJkRaZN EUuE5E5tXrjlfpMqSVQpFAXCT+xafLfYkxnYT/lWFFSF7fiFWiM5Htb+61XFcLmx w/OhSx26U5z4sfY+zcS2hvv4/gE8frRzA6QuJ3Cy/DH16mXTfYDLMpbkVXJTlchl e1FOUFnRchtpdVkwHa5Vx8kmoKSQ2lY+7a32aZ7NAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxOooklf4aHvFpbOuTthCGzgQWCgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JkZDQ2M2IwLTZmMGYtNDNmNS05NjJlLTkxNDMyYzJiODI0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANJwwDQYJKoZIhvcNAQELBQADggEBAC30HTmGbkaUitxIy7NR0EB3 yoNEtdwAkODbZpQj7x9gcxIA29w6/ZoObqeisIy2L8Ujl6IQ/qm0x4MppP17o2Dz KsS+s6+PHdh4YkXU5AoDFqKFXk9qT2KZlh43sZlN4qKc5BO9g9RbrADmCMkzgBNd YHPKU9yNlt0xBPWZk8MH9O8gOMNIZh2xIN54wlOwwfhG/EZYBB4+yrS0z1RO85xk A0v7d5gxUnLwcFOw6tAVQInvWQ1+wiczKRvOVgiZNeip7DkczWF35HNde0spu9Ub +QHgb4qcRpkH4j6JebkvlkIh0r9dw59AQFWO0jKY+nOhwEZEbQbwnqUgU0PgWjc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:47 2025 by rpki-client