$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/da3b9162-e293-43da-921e-c0734b5df83d.roa File: da3b9162-e293-43da-921e-c0734b5df83d.roa (raw, json) Hash identifier: zqiKvqRNLMHvqD/lBQpmExlL20R2FkAqdoluIB7HqH8= Subject key identifier: 9C:84:69:7D:39:E3:DE:14:A7:29:1C:6A:72:C4:2A:DD:C6:C6:7D:2E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 79B263289CE0DECB28369A5C0967AFCE10D62C8E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/da3b9162-e293-43da-921e-c0734b5df83d.roa Signing time: Fri 31 Oct 2025 00:25:08 +0000 ROA not before: Fri 31 Oct 2025 00:25:08 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:353c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b2:63:28:9c:e0:de:cb:28:36:9a:5c:09:67:af:ce:10:d6:2c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:25:08 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=601779c85fed5b1a9e29770e3ba57076994b9581ca550a1cb39ce4ef618be1f6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:b7:af:70:5d:b8:e4:65:26:51:90:6f:b5: a1:28:c1:c5:b4:93:0c:7b:9a:74:fb:7e:74:c9:30: 60:25:bf:8b:49:a6:d3:f2:00:f4:fc:0c:f7:45:40: 6e:7f:d7:44:d8:d9:83:8f:c1:a5:7a:f6:ec:b4:5d: 18:c4:63:93:02:e4:17:65:d1:3a:25:6d:97:7f:c1: a0:3a:84:8c:2a:52:25:ab:bc:9e:39:39:87:af:f0: 38:b8:73:db:aa:9d:00:93:a3:98:eb:48:58:00:22: e8:30:4f:9a:6e:de:64:14:ea:87:7a:1e:3b:0f:35: be:1c:f8:f5:c5:5b:ff:62:a8:e0:95:e4:93:cf:d0: 88:81:6e:85:c6:86:2f:1e:86:bf:03:5c:c0:7a:8f: ee:99:66:89:13:df:d9:ef:29:78:58:83:17:50:79: 53:bb:11:d2:d7:b3:f9:d4:be:c7:b8:36:78:b0:eb: db:82:57:cc:ff:67:e2:ba:d0:45:24:25:be:2c:a9: 5b:e4:24:cc:5b:db:b2:3e:36:94:91:c0:10:b8:a1: d0:e8:c8:a5:82:25:4e:e9:09:25:f4:7b:ed:b7:dd: 29:77:de:6c:6c:e9:60:91:5f:cc:d0:76:d2:88:90: 3e:be:63:bc:15:1b:09:a9:6f:49:1a:bd:8f:43:69: 76:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:84:69:7D:39:E3:DE:14:A7:29:1C:6A:72:C4:2A:DD:C6:C6:7D:2E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/da3b9162-e293-43da-921e-c0734b5df83d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:353c::/47 Signature Algorithm: sha256WithRSAEncryption 8e:a8:51:3c:3d:11:84:68:a8:ee:99:af:34:f3:3e:61:82:54: 72:c5:3e:40:fb:84:4e:b7:45:4f:cf:b0:4c:cb:e1:1b:e3:56: d1:4f:8e:62:f4:d0:55:7d:ad:e6:19:9b:55:a8:66:d2:8a:93: a2:ce:97:32:e3:2c:04:8a:d3:5e:82:9c:13:27:0c:82:04:50: 96:59:75:e6:c1:56:26:f6:52:a3:26:06:7d:33:7c:5c:a5:5b: a3:5f:dc:9c:df:34:3f:bb:3c:66:f0:a5:1f:02:2e:24:de:48: 8a:c2:4f:8f:93:88:39:a2:b7:71:a3:3b:0d:fd:95:0a:25:ca: 75:87:ac:fb:2b:3a:6e:2a:05:1c:71:e2:28:f9:dd:ac:9a:cd: 10:7e:bd:2d:0a:4a:e8:c5:5e:8f:8c:e1:ca:ea:06:d1:3a:57: ee:0f:8f:44:f2:d5:f6:3b:33:95:43:62:f7:a9:d9:f9:8b:11: 37:6a:3a:38:5a:c2:41:c4:16:be:f1:c3:ce:3c:12:6a:56:2e: cd:1a:9d:c9:2b:d4:f9:68:10:da:55:93:42:19:3c:73:7e:51: a3:09:48:b9:ce:32:a5:1c:51:08:e5:eb:b0:6e:be:50:a2:a9: 5f:b2:91:8c:50:42:6f:05:05:4a:ca:a7:ca:24:81:9c:78:bd: 61:49:1c:a3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUebJjKJzg3ssoNppcCWevzhDWLI4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyNTA4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDE3NzljODVmZWQ1YjFhOWUyOTc3MGUzYmE1NzA3Njk5 NGI5NTgxY2E1NTBhMWNiMzljZTRlZjYxOGJlMWY2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCALevcF245GUmUZBvtaEowcW0kwx7mnT7fnTJMGAlv4tJ ptPyAPT8DPdFQG5/10TY2YOPwaV69uy0XRjEY5MC5Bdl0TolbZd/waA6hIwqUiWr vJ45OYev8Di4c9uqnQCTo5jrSFgAIugwT5pu3mQU6od6HjsPNb4c+PXFW/9iqOCV 5JPP0IiBboXGhi8ehr8DXMB6j+6ZZokT39nvKXhYgxdQeVO7EdLXs/nUvse4Nniw 69uCV8z/Z+K60EUkJb4sqVvkJMxb27I+NpSRwBC4odDoyKWCJU7pCSX0e+233Sl3 3mxs6WCRX8zQdtKIkD6+Y7wVGwmpb0kavY9DaXbxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUnIRpfTnj3hSnKRxqcsQq3cbGfS4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RhM2I5MTYyLWUyOTMtNDNkYS05MjFlLWMwNzM0YjVkZjgzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANTwwDQYJKoZIhvcNAQELBQADggEBAI6oUTw9EYRoqO6ZrzTzPmGC VHLFPkD7hE63RU/PsEzL4RvjVtFPjmL00FV9reYZm1WoZtKKk6LOlzLjLASK016C nBMnDIIEUJZZdebBVib2UqMmBn0zfFylW6Nf3JzfND+7PGbwpR8CLiTeSIrCT4+T iDmit3GjOw39lQolynWHrPsrOm4qBRxx4ij53ayazRB+vS0KSujFXo+M4crqBtE6 V+4Pj0Ty1fY7M5VDYvep2fmLETdqOjhawkHEFr7xw848EmpWLs0anckr1PloENpV k0IZPHN+UaMJSLnOMqUcUQjl67BuvlCiqV+ykYxQQm8FBUrKp8okgZx4vWFJHKM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:49:13 2025 by rpki-client