$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff48b3b8-a56c-40da-87ef-ace55a8f4ccb.roa File: ff48b3b8-a56c-40da-87ef-ace55a8f4ccb.roa (raw, json) Hash identifier: ItEq/vl2XAMr6P1/MS8DPuO0dUWOZmJyKHBuScFIZjw= Subject key identifier: 2C:35:21:F8:01:E4:B9:4D:9A:90:88:44:24:22:AE:D6:DE:61:0D:0F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6A7270ADC78AEAE23929804F8C9469DB526209A5 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff48b3b8-a56c-40da-87ef-ace55a8f4ccb.roa Signing time: Fri 31 Oct 2025 00:22:02 +0000 ROA not before: Fri 31 Oct 2025 00:22:02 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:34a2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:72:70:ad:c7:8a:ea:e2:39:29:80:4f:8c:94:69:db:52:62:09:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:22:02 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=7c39a7325a703419261b3df810a58a6841456c0cfbb0c5daf6c98cd464b8f1c2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1d:1c:bf:4d:53:ee:3e:4d:d0:ed:82:65:dd: d8:75:52:ae:59:3b:4c:a0:d4:c0:31:60:e6:23:4b: b2:05:c7:28:a7:e1:26:ba:ef:9a:df:e1:88:ca:68: 9a:26:96:51:8e:e9:21:c6:b2:de:cd:23:ee:96:60: 5b:b6:6e:30:e5:97:08:e8:eb:1e:a4:f7:6f:9d:65: b4:55:87:a8:74:4f:5a:c1:b6:38:e8:3d:57:b0:34: 2c:0a:fd:61:c7:16:e4:d1:09:4b:1b:3e:59:6d:92: a3:12:ee:dc:17:8c:6f:01:3f:6e:50:d3:ac:8e:c0: f8:46:b5:ef:35:e0:82:cb:56:51:67:f3:b2:c8:7a: a4:7d:20:75:e6:37:50:b3:6f:cf:d3:90:24:e1:7d: 25:dd:69:a8:c8:a4:0a:e1:24:64:44:7b:bf:82:b9: 5f:08:1d:df:dc:8f:6a:6c:33:05:c3:34:04:20:0c: 2f:e7:a0:d7:5f:32:30:86:6f:88:00:c3:71:64:40: 0a:90:e7:43:4a:10:d3:be:39:f5:8c:7d:e5:c2:d0: aa:ca:eb:9c:1c:7c:c8:b4:4d:18:27:56:fc:41:34: a4:c2:49:23:65:2d:81:37:7b:99:74:e9:b7:4e:c9: fc:7a:db:9d:35:5a:28:0b:ae:e6:45:db:b7:55:a2: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:35:21:F8:01:E4:B9:4D:9A:90:88:44:24:22:AE:D6:DE:61:0D:0F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff48b3b8-a56c-40da-87ef-ace55a8f4ccb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:34a2::/47 Signature Algorithm: sha256WithRSAEncryption 32:af:4e:42:fa:a3:15:ae:e4:08:97:6f:30:92:e2:94:0b:3a: 74:c7:4a:4a:65:11:4f:26:46:4b:6f:16:c8:3d:7e:64:eb:5f: ad:d9:b3:88:fb:b5:aa:2b:9a:80:2e:8f:c0:0a:3c:3c:04:00: cd:74:fc:19:54:8f:61:41:f5:ab:f1:65:b8:b8:90:8b:d7:7b: e7:2e:83:23:91:c0:7f:cb:94:05:44:e5:1e:c3:d3:b7:0d:79: b3:36:12:af:c9:61:d7:49:12:b9:52:97:0d:6b:bc:9e:cb:b2: 46:87:b1:77:00:53:85:b9:71:da:e3:6f:8f:bf:6d:bb:5b:02: 0f:6f:c9:4e:2a:a9:5d:cf:4a:5e:be:d3:0f:d2:d4:3d:c9:25: 6f:25:19:6f:aa:aa:78:3d:2a:aa:76:03:dc:e2:c5:6f:0b:8a: a1:a6:b4:6f:92:7a:69:6c:4f:2b:87:a9:ef:ec:01:06:17:b2: 91:77:fc:bd:0e:d2:b5:96:3b:47:d0:5d:7b:e9:9e:fe:16:d8: 86:6f:cd:4c:04:ec:b7:b8:ed:da:75:d6:a3:ff:f9:be:14:c4: be:5a:75:c4:3f:0c:d9:ec:0a:c4:d0:bc:67:15:ec:df:c9:c4: f6:f3:f1:b6:fa:0a:f6:c6:3b:2a:22:48:5a:16:99:b0:ee:52: 11:88:57:6e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUanJwrceK6uI5KYBPjJRp21JiCaUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyMjAyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzM5YTczMjVhNzAzNDE5MjYxYjNkZjgxMGE1OGE2ODQx NDU2YzBjZmJiMGM1ZGFmNmM5OGNkNDY0YjhmMWMyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgHRy/TVPuPk3Q7YJl3dh1Uq5ZO0yg1MAxYOYjS7IFxyin 4Sa675rf4YjKaJomllGO6SHGst7NI+6WYFu2bjDllwjo6x6k92+dZbRVh6h0T1rB tjjoPVewNCwK/WHHFuTRCUsbPlltkqMS7twXjG8BP25Q06yOwPhGte814ILLVlFn 87LIeqR9IHXmN1Czb8/TkCThfSXdaajIpArhJGREe7+CuV8IHd/cj2psMwXDNAQg DC/noNdfMjCGb4gAw3FkQAqQ50NKENO+OfWMfeXC0KrK65wcfMi0TRgnVvxBNKTC SSNlLYE3e5l06bdOyfx62501WigLruZF27dVoviJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULDUh+AHkuU2akIhEJCKu1t5hDQ8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2ZmNDhiM2I4LWE1NmMtNDBkYS04N2VmLWFjZTU1YThmNGNjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANKIwDQYJKoZIhvcNAQELBQADggEBADKvTkL6oxWu5AiXbzCS4pQL OnTHSkplEU8mRktvFsg9fmTrX63Zs4j7taormoAuj8AKPDwEAM10/BlUj2FB9avx Zbi4kIvXe+cugyORwH/LlAVE5R7D07cNebM2Eq/JYddJErlSlw1rvJ7LskaHsXcA U4W5cdrjb4+/bbtbAg9vyU4qqV3PSl6+0w/S1D3JJW8lGW+qqng9Kqp2A9zixW8L iqGmtG+SemlsTyuHqe/sAQYXspF3/L0O0rWWO0fQXXvpnv4W2IZvzUwE7Le47dp1 1qP/+b4UxL5adcQ/DNnsCsTQvGcV7N/JxPbz8bb6CvbGOyoiSFoWmbDuUhGIV24= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:05 2025 by rpki-client