$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c63afe65-3814-4290-88cd-bf7927fbb31e.roa File: c63afe65-3814-4290-88cd-bf7927fbb31e.roa (raw, json) Hash identifier: uMp3FdjqfuMIAYQhGQvfeDx/ai07PIjElgc5l+qHEvc= Subject key identifier: 78:C1:8C:D8:A7:BD:B7:36:41:5F:51:50:E1:FE:26:32:16:98:D2:88 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 65465A25876F31529F06D2305A8847A9426C2C9D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c63afe65-3814-4290-88cd-bf7927fbb31e.roa Signing time: Fri 31 Oct 2025 00:26:29 +0000 ROA not before: Fri 31 Oct 2025 00:26:29 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:356a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:46:5a:25:87:6f:31:52:9f:06:d2:30:5a:88:47:a9:42:6c:2c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:26:29 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0e4399a8e8773783b3d5ea488cb6f509ca7d03cc919132fbbf779cfe74541a50, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:8b:80:6f:86:04:ec:68:17:11:69:f7:84: 24:1c:e7:b1:21:97:44:22:6c:e6:04:a1:4d:68:2c: 6d:36:ed:45:71:64:65:34:b9:a4:7b:a9:48:4b:74: 22:26:d2:c1:4e:c4:97:ea:a4:c5:d5:68:2f:ae:3e: d8:90:13:07:03:f2:53:da:fb:05:da:b1:4a:77:d3: d6:9f:c3:fe:48:e7:ed:7a:74:d9:dc:10:fa:f9:fc: 03:aa:f2:c8:52:ac:5c:1d:f2:ce:fd:17:3a:89:04: a1:29:24:9a:6d:34:e9:d5:1f:79:ea:9c:a0:c9:81: b7:64:42:1c:17:b2:26:b6:91:e9:a0:c5:fd:aa:16: ea:08:dd:fb:18:69:ad:77:4a:d1:04:ee:78:85:1a: 3b:ee:30:4e:ef:dd:20:22:b1:e1:cd:05:53:da:42: 35:c4:d6:bb:6a:c7:be:ff:6a:69:e9:76:8f:ab:ea: bf:4a:47:f9:28:75:05:aa:5f:b0:1e:cb:af:5b:5f: fc:8f:4a:3f:65:a1:20:5b:98:44:23:f5:fa:88:97: c0:23:f6:88:f9:f1:dd:21:81:ac:ab:43:29:ef:23: 89:83:91:21:55:fc:a7:d2:9b:c9:be:2d:21:27:be: 54:f2:10:1b:c7:3c:ac:05:fb:5d:58:78:b6:c8:8d: 64:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C1:8C:D8:A7:BD:B7:36:41:5F:51:50:E1:FE:26:32:16:98:D2:88 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c63afe65-3814-4290-88cd-bf7927fbb31e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:356a::/47 Signature Algorithm: sha256WithRSAEncryption ad:88:14:72:0d:d6:a6:e0:8e:4c:e0:a8:09:56:87:1b:a8:e3: 67:ee:66:98:8a:10:a8:47:64:8a:cc:7d:65:e3:53:10:d3:68: f7:78:a1:3a:06:33:ff:c4:77:fb:64:f1:cd:c4:6f:f1:5b:5e: 92:93:ec:13:46:5c:07:40:f1:65:63:47:b6:db:4c:eb:cf:c6: 31:a3:4c:8e:73:dd:5c:d8:24:40:7b:d0:a5:a5:7f:19:03:96: d2:ec:60:8e:d2:f8:12:6c:b9:c6:e7:75:32:b4:bb:7f:87:f6: 4d:b7:f9:8e:c3:5d:1a:ca:ed:42:93:9e:06:bf:14:1d:ee:20: 3d:ba:ae:1b:6c:ea:b7:99:6c:9b:fe:d5:0c:79:5c:24:a4:e3: c7:7e:43:cf:31:d6:d1:a9:70:15:76:ee:4b:09:da:58:97:a7: 06:ac:83:c5:ba:e4:d1:b6:05:20:c3:22:63:83:ad:56:ae:f8: 9d:ab:36:6a:ae:b7:f6:66:80:57:cf:1e:9f:13:c1:c4:3f:af: 28:d3:81:50:2c:79:c0:f6:cd:43:15:89:85:05:dd:b3:59:ea: bc:87:cc:dc:a3:a5:d9:2c:cb:a4:51:3c:5f:3a:e3:ba:da:e5: 5b:68:f1:bb:bb:c8:31:a9:59:fe:13:5b:95:1b:69:0c:d3:b7: 21:25:ca:b0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZUZaJYdvMVKfBtIwWohHqUJsLJ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyNjI5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTQzOTlhOGU4NzczNzgzYjNkNWVhNDg4Y2I2ZjUwOWNh N2QwM2NjOTE5MTMyZmJiZjc3OWNmZTc0NTQxYTUwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBKYuAb4YE7GgXEWn3hCQc57Ehl0QibOYEoU1oLG027UVx ZGU0uaR7qUhLdCIm0sFOxJfqpMXVaC+uPtiQEwcD8lPa+wXasUp309afw/5I5+16 dNncEPr5/AOq8shSrFwd8s79FzqJBKEpJJptNOnVH3nqnKDJgbdkQhwXsia2kemg xf2qFuoI3fsYaa13StEE7niFGjvuME7v3SAiseHNBVPaQjXE1rtqx77/amnpdo+r 6r9KR/kodQWqX7Aey69bX/yPSj9loSBbmEQj9fqIl8Aj9oj58d0hgayrQynvI4mD kSFV/KfSm8m+LSEnvlTyEBvHPKwF+11YeLbIjWQdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUeMGM2Ke9tzZBX1FQ4f4mMhaY0ogwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M2M2FmZTY1LTM4MTQtNDI5MC04OGNkLWJmNzkyN2ZiYjMxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANWowDQYJKoZIhvcNAQELBQADggEBAK2IFHIN1qbgjkzgqAlWhxuo 42fuZpiKEKhHZIrMfWXjUxDTaPd4oToGM//Ed/tk8c3Eb/FbXpKT7BNGXAdA8WVj R7bbTOvPxjGjTI5z3VzYJEB70KWlfxkDltLsYI7S+BJsucbndTK0u3+H9k23+Y7D XRrK7UKTnga/FB3uID26rhts6reZbJv+1Qx5XCSk48d+Q88x1tGpcBV27ksJ2liX pwasg8W65NG2BSDDImODrVau+J2rNmqut/ZmgFfPHp8TwcQ/ryjTgVAsecD2zUMV iYUF3bNZ6ryHzNyjpdksy6RRPF8647ra5Vto8bu7yDGpWf4TW5UbaQzTtyElyrA= -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:20 2025 by rpki-client