$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bfbd7dfe-474e-42b1-9870-810754899d13.roa File: bfbd7dfe-474e-42b1-9870-810754899d13.roa (raw, json) Hash identifier: 2TrObKt4kCiJIWZG420Qcj2WtA6ighoHTRKQ6ieYuHo= Subject key identifier: E6:48:26:72:49:B8:CF:EB:9C:77:D6:9A:69:1A:3B:A2:42:43:60:E3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1035F8D01D5DAF9ACCD9CD99E488CD68239E5805 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bfbd7dfe-474e-42b1-9870-810754899d13.roa Signing time: Fri 31 Oct 2025 02:58:35 +0000 ROA not before: Fri 31 Oct 2025 02:58:35 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1ad8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:35:f8:d0:1d:5d:af:9a:cc:d9:cd:99:e4:88:cd:68:23:9e:58:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:58:35 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=933de17abd7c4e764e69b89f91253f6a9c724ec1d58dca9c0a9cbf9ab2891f89, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:5e:4d:a0:3d:ca:c5:e5:32:22:eb:ef:ef: bc:95:5d:f8:a3:da:70:2d:44:58:49:49:8b:5f:37: 70:f3:c1:cd:f2:c8:da:cf:5f:a1:cf:44:e9:50:5d: c1:69:e9:18:7a:16:3c:87:21:96:d2:9e:91:64:fa: e5:27:4e:36:af:6c:4c:20:1b:28:a7:ad:bc:74:8c: f8:94:1b:ab:91:bf:46:2f:7f:4c:d7:57:1e:69:98: 3f:f7:5d:47:e3:b1:49:88:56:65:11:e5:39:b0:cf: cc:29:43:dd:95:25:22:0b:c0:fd:95:f5:fc:12:96: 50:a8:9b:6a:5c:8a:4c:7c:ff:c2:3a:32:1d:d4:f4: 7a:d3:1c:e9:82:a7:49:d1:3d:c0:9f:4c:24:c0:01: 78:84:10:77:8a:89:56:f3:53:5e:05:fe:59:14:3c: 8a:c4:83:fe:cd:88:66:39:bb:f5:4e:25:84:d2:ad: e2:be:77:d1:18:3e:86:46:c8:d3:7d:c4:4d:79:0a: d4:56:8c:24:b9:5d:5e:eb:e1:de:bf:bc:8c:bf:7d: 72:1b:24:b9:c8:a4:f8:7a:8a:66:db:47:53:3d:d3: 10:fa:fc:cf:ad:e1:bc:4f:c1:7b:55:bf:fa:ff:7a: ed:a3:7a:c5:d7:a9:6d:cd:58:d8:ab:99:e6:4f:96: b5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:48:26:72:49:B8:CF:EB:9C:77:D6:9A:69:1A:3B:A2:42:43:60:E3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bfbd7dfe-474e-42b1-9870-810754899d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1ad8::/46 Signature Algorithm: sha256WithRSAEncryption c0:35:05:4f:56:bb:b6:17:93:0a:e7:1c:99:e7:f2:1d:a4:37: 89:4f:6e:aa:a1:b9:72:d3:57:b3:31:93:64:44:5a:c8:0e:ee: 63:81:63:af:e3:1a:45:48:fe:c8:0a:38:e2:1e:57:f2:86:84: b0:4c:9e:72:28:b9:42:b4:a9:98:d6:a3:c8:bc:a4:79:0b:90: 15:f9:77:a0:27:ee:40:f2:df:b9:aa:29:a1:b6:87:a6:74:57: cb:84:dc:9c:17:5f:a2:58:00:86:39:2b:1f:bd:39:93:70:26: f8:64:57:03:11:43:cf:6a:73:b8:15:4a:7f:4e:9d:1e:2a:d5: 12:eb:5c:b0:f5:af:07:9c:4e:3a:37:6c:49:98:65:50:9b:c6: 12:35:60:15:d8:9a:4d:d6:56:57:6b:d2:57:fa:b1:e1:48:04: 6a:9b:4b:fc:2e:7d:dc:73:64:b0:d5:f0:65:2c:4e:69:37:22: 7b:eb:fd:13:d5:e9:03:6b:ff:82:2f:d3:36:09:8d:04:84:d6: 9b:cb:af:24:2c:76:0c:f3:46:55:f6:b0:a0:5f:4b:1f:c7:c6: eb:4e:5d:8b:39:64:33:0d:a5:89:1f:ce:0c:4e:f7:8d:89:b8: b6:80:99:6b:7b:7a:cf:2d:d0:c8:2e:2e:7c:3a:5a:17:e8:f4: 99:f3:00:01 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEDX40B1dr5rM2c2Z5IjNaCOeWAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI1ODM1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzNkZTE3YWJkN2M0ZTc2NGU2OWI4OWY5MTI1M2Y2YTlj NzI0ZWMxZDU4ZGNhOWMwYTljYmY5YWIyODkxZjg5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWl15NoD3KxeUyIuvv77yVXfij2nAtRFhJSYtfN3Dzwc3y yNrPX6HPROlQXcFp6Rh6FjyHIZbSnpFk+uUnTjavbEwgGyinrbx0jPiUG6uRv0Yv f0zXVx5pmD/3XUfjsUmIVmUR5Tmwz8wpQ92VJSILwP2V9fwSllCom2pcikx8/8I6 Mh3U9HrTHOmCp0nRPcCfTCTAAXiEEHeKiVbzU14F/lkUPIrEg/7NiGY5u/VOJYTS reK+d9EYPoZGyNN9xE15CtRWjCS5XV7r4d6/vIy/fXIbJLnIpPh6imbbR1M90xD6 /M+t4bxPwXtVv/r/eu2jesXXqW3NWNirmeZPlrVdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5kgmckm4z+ucd9aaaRo7okJDYOMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JmYmQ3ZGZlLTQ3NGUtNDJiMS05ODcwLTgxMDc1NDg5OWQxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAGtgwDQYJKoZIhvcNAQELBQADggEBAMA1BU9Wu7YXkwrnHJnn8h2k N4lPbqqhuXLTV7Mxk2REWsgO7mOBY6/jGkVI/sgKOOIeV/KGhLBMnnIouUK0qZjW o8i8pHkLkBX5d6An7kDy37mqKaG2h6Z0V8uE3JwXX6JYAIY5Kx+9OZNwJvhkVwMR Q89qc7gVSn9OnR4q1RLrXLD1rwecTjo3bEmYZVCbxhI1YBXYmk3WVldr0lf6seFI BGqbS/wufdxzZLDV8GUsTmk3Invr/RPV6QNr/4Iv0zYJjQSE1pvLryQsdgzzRlX2 sKBfSx/HxutOXYs5ZDMNpYkfzgxO942JuLaAmWt7es8t0MguLnw6Whfo9JnzAAE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:20 2025 by rpki-client