$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c996b052-3554-48d5-9176-c0adeb8196db.roa File: c996b052-3554-48d5-9176-c0adeb8196db.roa (raw, json) Hash identifier: gwZOr1byPlyPpKqjc/Dezz6Pvdx5Z/PPXwDSOXHYHuM= Subject key identifier: C5:D4:02:BA:B0:26:95:72:4D:C2:12:64:B5:32:6B:D7:3E:37:C7:69 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2C1138AA547CCF86BFA55A1E1A8A4205BC182035 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c996b052-3554-48d5-9176-c0adeb8196db.roa Signing time: Fri 31 Oct 2025 01:21:43 +0000 ROA not before: Fri 31 Oct 2025 01:21:43 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3ab2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:11:38:aa:54:7c:cf:86:bf:a5:5a:1e:1a:8a:42:05:bc:18:20:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:21:43 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=626c0cc77a2bdedb424240a7208547c7d948352ece83486102cd2dca657d9ff2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:6d:0b:0a:58:c1:e6:aa:56:5c:49:48:17: 82:26:d6:ac:19:c9:1c:91:89:80:78:c6:32:8d:06: 39:e9:7a:a5:68:6d:65:d9:dd:01:33:c8:8c:8b:0c: 03:ce:29:47:47:59:a5:1c:28:37:5f:03:f1:6b:68: bb:10:13:58:e6:c1:29:8e:a9:c3:e6:f7:37:29:5a: 0e:39:42:63:aa:55:3b:38:2e:71:8d:b2:73:b8:7a: 0e:d6:5a:e9:95:ae:c9:83:45:73:a7:48:5b:0a:af: 6a:80:55:86:23:4f:ab:86:7d:bf:c2:37:7d:a6:8b: 53:2d:eb:a7:35:96:43:11:bb:15:7e:7b:86:e3:c9: 3b:f5:0c:bd:86:1c:4e:29:ce:b6:3c:c9:1e:3b:9e: d6:44:02:25:ae:78:a4:24:20:e1:55:56:f8:7a:2e: 72:4f:d9:e0:9b:11:4a:a9:81:2b:cc:eb:cc:7a:de: 21:a8:66:d9:59:97:7b:70:4d:c1:71:01:3d:1e:20: 7a:9f:2b:1c:43:4c:25:59:27:6d:bf:c7:36:3c:1d: 88:c5:1c:76:d3:c6:1f:13:22:0b:53:b4:23:b3:d5: 17:f1:0c:f3:8e:cc:5c:31:e6:ba:c8:30:6e:87:20: 9b:17:46:f3:e9:34:1e:d9:36:cd:b7:fe:ad:5e:85: e5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:02:BA:B0:26:95:72:4D:C2:12:64:B5:32:6B:D7:3E:37:C7:69 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c996b052-3554-48d5-9176-c0adeb8196db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3ab2::/47 Signature Algorithm: sha256WithRSAEncryption 4a:27:f3:68:00:f8:0e:73:1b:d6:13:89:b2:26:12:e4:bb:47: 69:39:6c:25:e6:92:33:8f:e0:d0:20:44:db:bf:93:f2:30:30: 51:25:8a:e5:c0:ce:4a:07:05:26:4f:4c:58:8e:34:e6:5a:21: 0b:42:aa:fe:41:5b:8c:fc:84:21:24:9e:a4:5e:1f:b2:78:94: 25:b5:11:00:ed:ab:90:12:92:a6:43:1b:b6:07:89:a0:0f:86: 79:0b:88:61:6d:16:ca:24:79:75:0a:b1:f0:f4:10:cb:20:16: c6:99:7c:21:df:38:c0:cd:1b:6b:d6:22:a0:52:14:52:ca:7c: 46:1f:22:dd:31:3b:c6:24:7d:d5:db:a9:91:9c:06:83:c5:56: 06:b2:fa:d8:c7:d8:77:cb:d7:b7:29:58:d5:17:1e:2d:bd:98: d6:2b:9d:05:f1:75:16:b3:8d:8c:3e:db:ae:94:92:fb:d7:62: ff:46:c6:60:9d:ec:ba:4c:b2:4f:c4:07:51:c3:3b:34:b0:a2: 0e:f1:97:26:ea:6f:bc:45:f5:35:65:dd:c8:42:ea:6c:61:d5: 9a:fe:f9:4c:cb:88:b9:bb:c6:2e:3a:15:48:03:fb:17:42:8c: fe:5c:27:96:40:20:81:7e:71:e4:97:8c:89:a4:bb:4b:90:b4: 5b:cc:7e:4c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULBE4qlR8z4a/pVoeGopCBbwYIDUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEyMTQzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjZjMGNjNzdhMmJkZWRiNDI0MjQwYTcyMDg1NDdjN2Q5 NDgzNTJlY2U4MzQ4NjEwMmNkMmRjYTY1N2Q5ZmYyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+h20LCljB5qpWXElIF4Im1qwZyRyRiYB4xjKNBjnpeqVo bWXZ3QEzyIyLDAPOKUdHWaUcKDdfA/FraLsQE1jmwSmOqcPm9zcpWg45QmOqVTs4 LnGNsnO4eg7WWumVrsmDRXOnSFsKr2qAVYYjT6uGfb/CN32mi1Mt66c1lkMRuxV+ e4bjyTv1DL2GHE4pzrY8yR47ntZEAiWueKQkIOFVVvh6LnJP2eCbEUqpgSvM68x6 3iGoZtlZl3twTcFxAT0eIHqfKxxDTCVZJ22/xzY8HYjFHHbTxh8TIgtTtCOz1Rfx DPOOzFwx5rrIMG6HIJsXRvPpNB7ZNs23/q1eheUzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxdQCurAmlXJNwhJktTJr1z43x2kwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M5OTZiMDUyLTM1NTQtNDhkNS05MTc2LWMwYWRlYjgxOTZkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOrIwDQYJKoZIhvcNAQELBQADggEBAEon82gA+A5zG9YTibImEuS7 R2k5bCXmkjOP4NAgRNu/k/IwMFEliuXAzkoHBSZPTFiONOZaIQtCqv5BW4z8hCEk nqReH7J4lCW1EQDtq5ASkqZDG7YHiaAPhnkLiGFtFsokeXUKsfD0EMsgFsaZfCHf OMDNG2vWIqBSFFLKfEYfIt0xO8YkfdXbqZGcBoPFVgay+tjH2HfL17cpWNUXHi29 mNYrnQXxdRazjYw+266UkvvXYv9GxmCd7LpMsk/EB1HDOzSwog7xlybqb7xF9TVl 3chC6mxh1Zr++UzLiLm7xi46FUgD+xdCjP5cJ5ZAIIF+ceSXjImku0uQtFvMfkw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:39:09 2025 by rpki-client