$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3232fe5-b09c-49ab-8601-f97868b1083b.roa File: f3232fe5-b09c-49ab-8601-f97868b1083b.roa (raw, json) Hash identifier: oM9VlGEydqmFflk4MzTp1hk2fVG//y7KIn4sxTjt28o= Subject key identifier: 5F:ED:1A:16:60:A1:D3:99:19:77:2D:00:EA:33:E5:67:CA:6A:F7:D1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4026B31D2AE90E581930F4DCF13BC772755D6CCB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3232fe5-b09c-49ab-8601-f97868b1083b.roa Signing time: Fri 31 Oct 2025 00:23:39 +0000 ROA not before: Fri 31 Oct 2025 00:23:39 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:34f4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:26:b3:1d:2a:e9:0e:58:19:30:f4:dc:f1:3b:c7:72:75:5d:6c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:23:39 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=d280d2cfff3588f9290356bac6b6a09787567d19c5ce1c097a62d70eace17a8b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e5:e4:7f:8d:5f:17:fd:d2:e6:34:74:2c:62: 80:89:5f:f0:91:a3:34:39:cd:5a:f3:7c:45:83:37: 49:70:ce:80:9a:93:3e:0a:ac:90:d1:e3:fb:4b:36: d9:5d:aa:db:70:d8:61:50:50:ca:ba:46:4a:14:86: b1:46:38:6f:68:33:5b:b3:f0:cb:63:3b:5c:c4:4d: 80:32:dd:be:e9:85:20:96:31:07:47:b5:f5:bc:10: 15:f3:b7:18:86:e1:ae:d4:51:7e:7a:61:80:2f:37: 01:46:77:21:1c:d9:f4:36:93:e3:9f:fb:57:16:06: 6b:24:ec:cf:b7:b7:ba:16:7e:40:15:4f:ef:9f:df: 05:6d:e7:48:f2:22:ca:3f:0a:8a:d2:a4:d4:8a:00: bd:c2:d7:cb:df:64:53:b9:f3:37:b8:a2:25:32:18: 87:3f:e6:86:11:74:46:5c:86:33:38:1e:31:9c:9f: ce:21:39:00:17:50:33:45:3a:bc:ff:a9:cd:fa:bf: 5f:02:c3:95:51:c5:63:a9:37:39:c3:24:a5:c3:e1: 6e:02:80:05:b9:fb:33:75:77:94:d4:66:bf:1d:fb: c6:c8:6a:2c:0c:3d:ac:9c:b3:17:93:b7:cf:cc:24: f2:6f:90:90:06:71:1e:5b:27:2f:3f:ed:6c:41:f2: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:ED:1A:16:60:A1:D3:99:19:77:2D:00:EA:33:E5:67:CA:6A:F7:D1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3232fe5-b09c-49ab-8601-f97868b1083b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:34f4::/47 Signature Algorithm: sha256WithRSAEncryption 9c:dd:de:dd:2f:aa:74:98:9b:c3:ca:ab:50:28:fe:99:6b:56: 66:dc:1d:d7:15:88:9b:bd:d1:6a:f9:52:2d:b2:45:f9:01:d7: 89:a2:ae:5a:08:67:59:0d:71:f7:ed:59:1b:6f:6c:50:37:20: 81:a7:5b:bf:72:06:13:88:3f:b6:e6:d0:11:64:65:3c:5b:68: af:26:cc:72:59:dc:22:b0:f2:21:24:65:d2:5f:f4:18:6c:59: 71:1b:83:28:ff:26:b6:d4:a9:3d:e2:9b:8b:a0:dc:37:b7:24: 7e:3e:8e:0c:cf:5c:79:55:e0:e4:d1:7e:1f:2f:76:0d:5c:2a: 99:77:0f:f2:bc:b9:ba:86:87:92:40:ed:8c:f4:3c:85:5f:14: e4:34:97:6a:11:b6:41:9b:51:7b:99:a1:05:ce:4c:ff:0b:e9: 37:f2:29:cd:49:2f:f1:6c:ee:91:a5:8c:a1:90:3d:ba:af:a9: 8e:7f:a4:a6:7c:d4:57:ce:10:b9:54:67:d5:c6:12:04:ee:a2: a5:1c:c9:89:63:dd:58:4a:a7:f2:6a:88:6b:2d:8c:dc:de:3a: 26:d8:ee:e0:e5:17:6a:83:e2:cb:a7:53:b1:fa:e6:92:22:09: c9:b0:d8:a0:65:fc:09:aa:cf:1c:7c:eb:03:dc:23:1f:41:da: ec:6b:3e:ac -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQCazHSrpDlgZMPTc8TvHcnVdbMswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyMzM5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMjgwZDJjZmZmMzU4OGY5MjkwMzU2YmFjNmI2YTA5Nzg3 NTY3ZDE5YzVjZTFjMDk3YTYyZDcwZWFjZTE3YThiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK5eR/jV8X/dLmNHQsYoCJX/CRozQ5zVrzfEWDN0lwzoCa kz4KrJDR4/tLNtldqttw2GFQUMq6RkoUhrFGOG9oM1uz8MtjO1zETYAy3b7phSCW MQdHtfW8EBXztxiG4a7UUX56YYAvNwFGdyEc2fQ2k+Of+1cWBmsk7M+3t7oWfkAV T++f3wVt50jyIso/CorSpNSKAL3C18vfZFO58ze4oiUyGIc/5oYRdEZchjM4HjGc n84hOQAXUDNFOrz/qc36v18Cw5VRxWOpNznDJKXD4W4CgAW5+zN1d5TUZr8d+8bI aiwMPaycsxeTt8/MJPJvkJAGcR5bJy8/7WxB8ro1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUX+0aFmCh05kZdy0A6jPlZ8pq99EwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2YzMjMyZmU1LWIwOWMtNDlhYi04NjAxLWY5Nzg2OGIxMDgzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANPQwDQYJKoZIhvcNAQELBQADggEBAJzd3t0vqnSYm8PKq1Ao/plr VmbcHdcViJu90Wr5Ui2yRfkB14mirloIZ1kNcfftWRtvbFA3IIGnW79yBhOIP7bm 0BFkZTxbaK8mzHJZ3CKw8iEkZdJf9BhsWXEbgyj/JrbUqT3im4ug3De3JH4+jgzP XHlV4OTRfh8vdg1cKpl3D/K8ubqGh5JA7Yz0PIVfFOQ0l2oRtkGbUXuZoQXOTP8L 6TfyKc1JL/Fs7pGljKGQPbqvqY5/pKZ81FfOELlUZ9XGEgTuoqUcyYlj3VhKp/Jq iGstjNzeOibY7uDlF2qD4sunU7H65pIiCcmw2KBl/Amqzxx86wPcIx9B2uxrPqw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:21 2025 by rpki-client