$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d656c58c-97db-465e-a144-37215cbbf1f5.roa File: d656c58c-97db-465e-a144-37215cbbf1f5.roa (raw, json) Hash identifier: mYPvqD4ETLXsRB0rb2BarWZRinWZ0Oj84h3cnvLvEpo= Subject key identifier: 32:B7:B9:75:D9:02:F0:6A:87:1E:2D:1C:93:D8:FB:84:95:EF:2B:5E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3790EBF44F4FD05FA6F1007EAF8DC998B4AF9AB8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d656c58c-97db-465e-a144-37215cbbf1f5.roa Signing time: Fri 31 Oct 2025 01:06:44 +0000 ROA not before: Fri 31 Oct 2025 01:06:44 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3914::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:90:eb:f4:4f:4f:d0:5f:a6:f1:00:7e:af:8d:c9:98:b4:af:9a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:06:44 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a0837fef7eb510a079ba2fcb5f53feef315033d9c7194afef305df29c00dde38, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:21:d7:f4:1c:ab:d8:10:2a:b5:6f:98:1c: db:6b:d1:20:ac:70:26:0a:ab:fb:14:88:1b:5f:5e: e7:96:fb:3f:c6:e8:b6:35:cc:ef:19:d6:11:11:f5: 9c:92:bd:05:55:af:eb:a4:a3:05:76:0c:18:97:17: bb:02:85:83:10:46:20:e1:21:b0:49:44:82:1c:4e: 02:17:f3:7e:06:b1:41:75:ba:5b:4e:b4:e0:ce:54: b8:aa:6c:03:58:9c:8e:25:e9:64:5e:d4:d0:49:7c: 35:e6:d6:ca:46:17:0a:75:92:50:19:5d:ef:91:82: 63:12:c2:f2:1f:b6:1e:ee:a0:e6:23:72:fd:18:88: cc:2e:73:8d:d9:a7:3e:19:47:e2:b7:b8:8c:e2:42: 32:e2:b8:f0:28:11:10:0f:72:13:34:78:d3:97:5a: 7f:5c:93:ae:ba:a5:53:1d:fe:00:ff:4f:6e:be:a5: b8:53:2f:1c:09:d1:6f:3b:7c:88:fa:2b:96:23:44: 34:52:33:da:b1:b3:c4:0c:05:04:73:be:bb:a0:1d: 48:db:40:41:35:6b:f6:de:8e:d7:e6:57:75:b1:17: 5c:11:ed:20:24:cf:01:f1:57:2e:19:a9:22:07:e5: f0:5f:5c:2c:72:0b:39:ce:fe:d7:b1:17:a0:da:6c: 84:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B7:B9:75:D9:02:F0:6A:87:1E:2D:1C:93:D8:FB:84:95:EF:2B:5E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d656c58c-97db-465e-a144-37215cbbf1f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3914::/47 Signature Algorithm: sha256WithRSAEncryption 95:ba:39:2d:a3:53:1e:a2:dc:45:42:78:42:99:26:72:7d:00: 1d:ee:0f:db:a9:9f:7f:a5:11:cc:a3:b5:3c:61:0a:9e:78:a9: 44:1f:e3:d1:84:73:1e:30:ff:6d:66:b9:d2:6b:ba:ac:5a:1a: e6:1a:c6:43:0d:7e:40:a2:8e:1f:5e:72:bb:06:f7:22:4b:33: 4b:63:7d:10:5f:4d:6c:52:3f:ac:44:ae:54:91:bc:69:7c:fa: de:be:66:aa:5e:3f:40:05:d1:67:c5:7b:a8:f2:23:53:e4:cc: 6e:68:e6:32:43:b7:ae:f0:e7:99:d3:4d:ef:dc:b1:df:28:26: 5d:8b:9a:ff:ab:c8:6f:0b:95:32:cc:d2:df:fb:dc:40:11:8d: b9:b3:a6:1c:5e:fe:46:d2:81:1c:c7:01:4e:c1:7d:21:54:4b: 1b:7d:41:16:8a:8b:c1:4a:50:30:c1:9d:36:af:9d:1f:ff:e4: 4e:5d:7f:1f:d3:aa:87:5e:c2:a1:2c:63:d5:25:dd:eb:88:e9: e8:bd:d1:93:0e:3c:4a:35:a0:ce:d6:fc:34:e5:bc:9b:dc:f5: 1f:2a:66:b0:51:92:9b:74:d2:a7:f2:9b:9c:66:c9:bb:64:9b: fd:87:a3:da:ac:d9:8a:e7:ae:7d:0d:18:99:52:86:1f:ab:9a: c8:40:3c:2a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUN5Dr9E9P0F+m8QB+r43JmLSvmrgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEwNjQ0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDgzN2ZlZjdlYjUxMGEwNzliYTJmY2I1ZjUzZmVlZjMx NTAzM2Q5YzcxOTRhZmVmMzA1ZGYyOWMwMGRkZTM4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX0SHX9Byr2BAqtW+YHNtr0SCscCYKq/sUiBtfXueW+z/G 6LY1zO8Z1hER9ZySvQVVr+ukowV2DBiXF7sChYMQRiDhIbBJRIIcTgIX834GsUF1 ultOtODOVLiqbANYnI4l6WRe1NBJfDXm1spGFwp1klAZXe+RgmMSwvIfth7uoOYj cv0YiMwuc43Zpz4ZR+K3uIziQjLiuPAoERAPchM0eNOXWn9ck666pVMd/gD/T26+ pbhTLxwJ0W87fIj6K5YjRDRSM9qxs8QMBQRzvrugHUjbQEE1a/bejtfmV3WxF1wR 7SAkzwHxVy4ZqSIH5fBfXCxyCznO/texF6DabITzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMre5ddkC8GqHHi0ck9j7hJXvK14wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Q2NTZjNThjLTk3ZGItNDY1ZS1hMTQ0LTM3MjE1Y2JiZjFmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAORQwDQYJKoZIhvcNAQELBQADggEBAJW6OS2jUx6i3EVCeEKZJnJ9 AB3uD9upn3+lEcyjtTxhCp54qUQf49GEcx4w/21mudJruqxaGuYaxkMNfkCijh9e crsG9yJLM0tjfRBfTWxSP6xErlSRvGl8+t6+ZqpeP0AF0WfFe6jyI1PkzG5o5jJD t67w55nTTe/csd8oJl2Lmv+ryG8LlTLM0t/73EARjbmzphxe/kbSgRzHAU7BfSFU Sxt9QRaKi8FKUDDBnTavnR//5E5dfx/TqodewqEsY9Ul3euI6ei90ZMOPEo1oM7W /DTlvJvc9R8qZrBRkpt00qfym5xmybtkm/2Ho9qs2Yrnrn0NGJlShh+rmshAPCo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:40 2025 by rpki-client