$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bddcdb1f-011f-4ecf-a1c1-d043765033ec.roa File: bddcdb1f-011f-4ecf-a1c1-d043765033ec.roa (raw, json) Hash identifier: GPv+pTHWcY1n1drITSeGCzgg01RaRXuw/n2BjXBjTPs= Subject key identifier: 60:53:61:77:37:09:F9:36:33:83:08:92:52:B4:C2:65:05:90:4E:37 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 67AD9CA7E53893F6B713770A8055256442ECA24E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bddcdb1f-011f-4ecf-a1c1-d043765033ec.roa Signing time: Fri 31 Oct 2025 03:06:56 +0000 ROA not before: Fri 31 Oct 2025 03:06:56 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1be8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ad:9c:a7:e5:38:93:f6:b7:13:77:0a:80:55:25:64:42:ec:a2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:06:56 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=121cf86c88688920510a8b159b06da5abeb303e8444e7763139744c7a3ba1517, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:94:39:a3:72:7e:63:00:4e:2d:67:f0:96:60: 63:b0:92:02:c0:24:99:5f:3f:6a:36:c3:04:4b:02: 61:5e:93:e9:94:17:04:c8:01:75:ad:5c:cd:76:bc: 66:07:45:82:44:13:65:3f:14:ce:84:92:f5:fc:24: 6c:22:79:61:a3:c8:7b:4e:d0:df:ca:35:18:50:88: 46:1a:79:31:2a:0a:12:c1:cd:72:62:4f:be:32:0e: 5e:4f:dc:c0:f7:2a:c2:58:44:9b:79:06:c1:2e:0a: 6a:b0:28:38:ca:9d:33:ba:03:97:c8:16:5b:65:3a: 44:36:06:0a:e2:c5:c7:f2:b2:b5:99:00:f7:18:25: f9:b6:80:5c:db:25:30:30:be:85:3e:01:cb:fc:b3: a9:2a:63:5c:fa:73:63:1f:d2:0e:97:4b:7e:eb:3b: ae:14:64:a3:f2:4b:80:d6:50:de:c4:65:43:75:15: 09:ff:04:c7:b6:a7:fa:af:2b:95:48:89:65:ef:5f: 04:45:35:b6:c9:12:99:38:62:b1:0b:da:2d:88:75: 2d:db:8a:36:2b:aa:41:68:c2:8c:98:12:00:37:3d: c5:50:36:6d:6a:92:48:89:89:22:bd:52:62:b7:e0: e9:7f:ae:cb:75:ba:b8:de:1c:b1:10:46:ad:dd:e6: cc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:53:61:77:37:09:F9:36:33:83:08:92:52:B4:C2:65:05:90:4E:37 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bddcdb1f-011f-4ecf-a1c1-d043765033ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1be8::/46 Signature Algorithm: sha256WithRSAEncryption 1e:97:f5:87:d2:c1:46:29:a6:b0:71:db:6d:ad:2b:e0:cb:40: 8f:c1:84:6d:2f:71:a8:90:8d:22:33:72:22:cb:68:57:a2:45: 32:6b:be:25:33:39:93:5b:e7:c5:96:c2:41:00:0a:e3:09:a8: c1:19:96:2b:19:31:78:0c:28:20:e3:41:75:0c:8c:53:d9:d7: 1e:ef:84:03:dc:bb:b4:a5:8a:40:c8:fa:cf:24:26:c0:60:c0: 36:6c:d3:a0:b7:bb:5a:8a:ff:ed:79:6b:85:30:7c:90:0d:7c: 20:74:2c:a7:89:41:6f:2a:f1:be:08:9c:08:fe:32:e3:bb:22: ab:93:82:65:bc:03:ef:0e:72:78:bd:c2:2f:7e:93:42:06:d2: a3:d0:26:3d:05:75:d2:76:d8:0e:fd:c0:ba:af:4e:01:1e:49: 1c:89:a9:54:fc:dd:fb:dc:03:07:32:60:45:50:53:03:f3:e5: 1e:82:a0:f7:a0:ac:39:80:90:3f:8b:db:f8:cb:31:8d:70:de: 00:c2:a3:0e:e0:82:3d:4f:8d:3e:6c:e2:7e:86:bf:41:7a:f5: fc:00:94:c2:bd:cb:bd:f6:a1:23:73:9a:7a:8b:7a:e1:e8:a4: 38:2a:ee:22:72:d2:a0:55:64:69:44:a8:e0:d8:66:ca:29:3f: b6:3f:b0:65 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZ62cp+U4k/a3E3cKgFUlZELsok4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMwNjU2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjFjZjg2Yzg4Njg4OTIwNTEwYThiMTU5YjA2ZGE1YWJl YjMwM2U4NDQ0ZTc3NjMxMzk3NDRjN2EzYmExNTE3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUlDmjcn5jAE4tZ/CWYGOwkgLAJJlfP2o2wwRLAmFek+mU FwTIAXWtXM12vGYHRYJEE2U/FM6EkvX8JGwieWGjyHtO0N/KNRhQiEYaeTEqChLB zXJiT74yDl5P3MD3KsJYRJt5BsEuCmqwKDjKnTO6A5fIFltlOkQ2BgrixcfysrWZ APcYJfm2gFzbJTAwvoU+Acv8s6kqY1z6c2Mf0g6XS37rO64UZKPyS4DWUN7EZUN1 FQn/BMe2p/qvK5VIiWXvXwRFNbbJEpk4YrEL2i2IdS3bijYrqkFowoyYEgA3PcVQ Nm1qkkiJiSK9UmK34Ol/rst1urjeHLEQRq3d5szvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYFNhdzcJ+TYzgwiSUrTCZQWQTjcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JkZGNkYjFmLTAxMWYtNGVjZi1hMWMxLWQwNDM3NjUwMzNlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAG+gwDQYJKoZIhvcNAQELBQADggEBAB6X9YfSwUYpprBx222tK+DL QI/BhG0vcaiQjSIzciLLaFeiRTJrviUzOZNb58WWwkEACuMJqMEZlisZMXgMKCDj QXUMjFPZ1x7vhAPcu7SlikDI+s8kJsBgwDZs06C3u1qK/+15a4UwfJANfCB0LKeJ QW8q8b4InAj+MuO7IquTgmW8A+8Ocni9wi9+k0IG0qPQJj0FddJ22A79wLqvTgEe SRyJqVT83fvcAwcyYEVQUwPz5R6CoPegrDmAkD+L2/jLMY1w3gDCow7ggj1PjT5s 4n6Gv0F69fwAlMK9y732oSNzmnqLeuHopDgq7iJy0qBVZGlEqODYZsopP7Y/sGU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:01 2025 by rpki-client