$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc6e114c-df7b-40de-821f-c24deb6a7adb.roa File: dc6e114c-df7b-40de-821f-c24deb6a7adb.roa (raw, json) Hash identifier: 2/WEpw36NUC2jx2KltceRz4VccTfLjDusG/EyFWK1Yk= Subject key identifier: CF:96:78:1C:F0:F3:B6:89:7A:96:77:BB:F3:E7:0B:1A:FB:F5:3C:CB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3FB846619A65FDBE2168653918F3302503B71AD7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc6e114c-df7b-40de-821f-c24deb6a7adb.roa Signing time: Fri 31 Oct 2025 01:26:21 +0000 ROA not before: Fri 31 Oct 2025 01:26:21 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3baa::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b8:46:61:9a:65:fd:be:21:68:65:39:18:f3:30:25:03:b7:1a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:26:21 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=ec55cbba1c61862cbd8440e00ecdd85452878342f47635c9e0654c94ecb91904, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ba:26:a6:35:07:cf:a6:8d:c9:d2:f9:bb:c1: f9:c3:6e:49:6c:87:68:3a:18:b7:53:ba:e0:53:4b: dc:de:8b:03:94:62:41:bd:b5:4e:bc:8e:3c:d3:58: f8:44:f2:74:9a:40:65:03:4a:5e:43:0b:46:1f:48: 20:65:21:18:d6:38:e2:ef:6a:52:50:6c:8b:7e:d9: d3:24:cd:05:4e:87:65:c0:aa:f2:1b:0d:4f:95:73: 33:83:53:4c:94:22:3e:54:6e:ff:bb:f3:e2:db:bc: ac:5d:4f:fe:8f:88:e9:b2:9e:d5:31:39:77:85:d6: 67:83:0c:76:c8:19:e4:4e:8e:91:22:e5:cd:7f:88: ec:a5:fb:ee:c2:ad:12:6d:24:59:ab:00:be:9f:63: 9c:23:99:08:87:ee:2d:18:f7:5a:7c:2c:78:1e:97: 24:90:d0:b7:91:7a:48:0c:ae:97:4a:73:37:2f:98: 63:3a:0a:e2:2f:1d:7c:8f:23:4b:39:f0:5f:4c:0a: cd:af:82:ed:bd:21:19:3c:db:cf:4c:85:ab:15:2f: 7a:74:60:8a:6d:41:58:44:11:35:ae:5b:6e:fc:46: 2b:c6:54:e1:bc:1e:16:3a:6d:12:f3:da:ec:18:b4: 57:63:fc:c3:2a:4f:ea:08:d5:c2:db:b7:0c:12:56: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:96:78:1C:F0:F3:B6:89:7A:96:77:BB:F3:E7:0B:1A:FB:F5:3C:CB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dc6e114c-df7b-40de-821f-c24deb6a7adb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3baa::/47 Signature Algorithm: sha256WithRSAEncryption 06:d6:5c:e8:46:8c:a7:ef:5b:75:2a:7e:b4:d5:b1:e3:64:a1: f8:11:48:64:29:eb:c7:ba:53:4f:b8:eb:db:f3:8d:f5:68:23: 27:d2:50:ea:bd:4f:d6:44:09:96:09:88:0e:c0:c8:8c:61:67: bc:48:6c:5f:11:5f:29:d6:b5:f4:1b:18:54:cc:82:ee:bc:d2: d7:5a:0c:3b:50:4a:06:5f:3f:f7:11:d4:7d:39:09:e0:9c:ab: fa:40:ea:e3:07:3f:6b:88:44:19:ab:c8:cb:d8:97:f0:de:2c: 96:26:8d:47:18:c0:79:58:50:28:5d:de:56:8a:47:94:ab:17: 94:3d:0a:91:cf:a9:f1:80:b1:5f:61:dc:84:73:ab:2f:c2:6c: 4a:41:7e:93:26:cf:ef:ed:aa:a6:ac:b7:f0:22:33:d2:0e:4e: 19:7e:fd:31:85:e3:d0:c8:c7:1f:52:03:75:fc:f1:3f:ed:fe: 4e:23:18:67:b9:14:9d:95:2c:c4:c5:29:db:27:d5:36:3f:81: 86:2d:83:b7:59:84:93:76:db:65:31:b8:24:0f:f0:c3:90:79: ff:25:10:90:0f:9c:eb:51:39:25:98:dc:e2:53:66:5b:46:b2: d0:3e:bb:cc:ff:8a:27:0f:a5:08:20:2f:3f:4b:f8:f1:59:ed: 75:4e:3a:8f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUP7hGYZpl/b4haGU5GPMwJQO3GtcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEyNjIxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzU1Y2JiYTFjNjE4NjJjYmQ4NDQwZTAwZWNkZDg1NDUy ODc4MzQyZjQ3NjM1YzllMDY1NGM5NGVjYjkxOTA0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTuiamNQfPpo3J0vm7wfnDbklsh2g6GLdTuuBTS9zeiwOU YkG9tU68jjzTWPhE8nSaQGUDSl5DC0YfSCBlIRjWOOLvalJQbIt+2dMkzQVOh2XA qvIbDU+VczODU0yUIj5Ubv+78+LbvKxdT/6PiOmyntUxOXeF1meDDHbIGeROjpEi 5c1/iOyl++7CrRJtJFmrAL6fY5wjmQiH7i0Y91p8LHgelySQ0LeRekgMrpdKczcv mGM6CuIvHXyPI0s58F9MCs2vgu29IRk8289MhasVL3p0YIptQVhEETWuW278RivG VOG8HhY6bRLz2uwYtFdj/MMqT+oI1cLbtwwSVuoFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUz5Z4HPDztol6lne78+cLGvv1PMswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RjNmUxMTRjLWRmN2ItNDBkZS04MjFmLWMyNGRlYjZhN2FkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAO6owDQYJKoZIhvcNAQELBQADggEBAAbWXOhGjKfvW3UqfrTVseNk ofgRSGQp68e6U0+469vzjfVoIyfSUOq9T9ZECZYJiA7AyIxhZ7xIbF8RXynWtfQb GFTMgu680tdaDDtQSgZfP/cR1H05CeCcq/pA6uMHP2uIRBmryMvYl/DeLJYmjUcY wHlYUChd3laKR5SrF5Q9CpHPqfGAsV9h3IRzqy/CbEpBfpMmz+/tqqast/AiM9IO Thl+/TGF49DIxx9SA3X88T/t/k4jGGe5FJ2VLMTFKdsn1TY/gYYtg7dZhJN222Ux uCQP8MOQef8lEJAPnOtROSWY3OJTZltGstA+u8z/iicPpQggLz9L+PFZ7XVOOo8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:41 2025 by rpki-client