$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21f25df7-f320-448b-aa91-134cbc46dc74.roa File: 21f25df7-f320-448b-aa91-134cbc46dc74.roa (raw, json) Hash identifier: FVthrRrBF+RNAPCM0IJQzWiNLeQD0jAupMRzpa++Inc= Subject key identifier: 26:FF:EC:F6:AB:96:27:61:97:45:4E:DA:9A:CC:3B:9B:DE:58:0C:99 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 33C32E815C0227B632526E1B477C3B81813857DD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21f25df7-f320-448b-aa91-134cbc46dc74.roa Signing time: Fri 31 Oct 2025 06:06:47 +0000 ROA not before: Fri 31 Oct 2025 06:06:47 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3628::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c3:2e:81:5c:02:27:b6:32:52:6e:1b:47:7c:3b:81:81:38:57:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:06:47 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=7503e588ec78d398f38c9e33baf17b43a9a31a3222dd0db371ceb82eb00cbb70, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:08:a5:2c:b5:82:c3:a4:25:40:78:60:11:bb: 12:51:d7:c4:23:0e:b0:51:0e:59:b7:2f:a6:ec:36: c2:79:65:38:43:5c:ad:c9:f7:b1:b3:f6:ae:f5:5e: 8c:be:c6:a4:1e:a9:e7:36:7b:c3:86:b4:14:ae:a7: b8:b5:2c:d2:93:8a:cf:73:7f:73:90:d5:a2:c1:ca: 7a:fc:80:49:21:3e:c8:65:9a:43:c1:f5:fd:8c:10: 18:11:05:f0:3f:03:59:c2:50:bd:f8:ae:bc:f5:52: b8:44:b6:09:c8:8f:fb:1b:39:04:fc:8e:b4:a1:1a: 20:9f:a8:27:e2:f4:9b:6e:4d:5f:5c:11:c2:3c:4d: 7e:0c:35:ab:f2:64:f3:ab:23:d1:6c:d5:9c:cb:3c: e9:39:be:1c:5a:0d:a9:c8:65:f7:e6:0b:e6:85:a5: ec:a4:3b:d7:41:ea:3e:eb:37:51:af:93:59:6d:0e: 22:0f:33:e8:d9:84:a6:1b:ca:3f:77:a5:f9:72:ed: 77:eb:ae:ab:bb:f4:6e:a6:02:0f:45:e9:fb:55:b7: 3e:32:2b:2d:9a:6f:cb:0a:7a:ef:d5:72:18:ee:27: f3:00:bc:32:35:e9:77:72:ff:a0:6b:94:72:5b:96: 1f:69:69:e7:c3:f5:bb:45:bb:89:04:c5:db:2c:e4: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FF:EC:F6:AB:96:27:61:97:45:4E:DA:9A:CC:3B:9B:DE:58:0C:99 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/21f25df7-f320-448b-aa91-134cbc46dc74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3628::/45 Signature Algorithm: sha256WithRSAEncryption 64:02:37:50:50:87:ac:ba:11:33:82:d4:38:13:e5:75:31:e7: 86:11:cc:40:ed:2d:c4:4e:1b:b5:1a:fa:74:c2:ff:5d:cb:70: 6a:85:75:cf:54:99:04:a3:ad:af:70:ae:7d:73:d5:40:79:9b: 96:38:6f:87:b1:f3:37:7d:14:e6:ed:cf:49:25:e3:d5:e8:b7: fb:17:72:99:f9:fa:06:52:d3:32:a2:b9:a2:e0:97:a9:97:8d: ac:7f:5a:c3:52:c6:c3:c6:9b:c3:0b:07:ae:ca:fd:c6:93:d7: 6e:b1:ff:26:7a:bd:9d:0c:7d:9d:44:cd:fa:11:ab:bf:66:df: 55:32:09:e5:99:7c:b6:64:d3:f7:65:83:59:eb:26:c0:ed:95: a9:58:8a:26:e9:11:c6:51:ca:7c:ab:a3:f5:b2:ed:35:86:63: 00:f5:63:92:1b:03:fd:29:9a:ac:f1:67:27:5f:72:e2:ea:f5: fd:12:20:fa:4f:5b:26:f9:da:c5:6d:ae:d5:2a:8a:48:fa:de: c3:cb:4f:71:87:8e:93:70:f3:52:bc:59:60:80:30:c6:fa:8f: 05:ef:77:b6:25:86:53:ea:75:a2:6c:d1:81:1b:ad:37:57:0a: 25:cb:2a:19:ba:7a:e2:53:a4:32:32:14:d5:39:a9:22:4a:ae: f8:26:f3:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUM8MugVwCJ7YyUm4bR3w7gYE4V90wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYwNjQ3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTAzZTU4OGVjNzhkMzk4ZjM4YzllMzNiYWYxN2I0M2E5 YTMxYTMyMjJkZDBkYjM3MWNlYjgyZWIwMGNiYjcwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMCKUstYLDpCVAeGARuxJR18QjDrBRDlm3L6bsNsJ5ZThD XK3J97Gz9q71Xoy+xqQeqec2e8OGtBSup7i1LNKTis9zf3OQ1aLBynr8gEkhPshl mkPB9f2MEBgRBfA/A1nCUL34rrz1UrhEtgnIj/sbOQT8jrShGiCfqCfi9JtuTV9c EcI8TX4MNavyZPOrI9Fs1ZzLPOk5vhxaDanIZffmC+aFpeykO9dB6j7rN1Gvk1lt DiIPM+jZhKYbyj93pfly7Xfrrqu79G6mAg9F6ftVtz4yKy2ab8sKeu/VchjuJ/MA vDI16Xdy/6BrlHJblh9paefD9btFu4kExdss5ByDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJv/s9quWJ2GXRU7amsw7m95YDJkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIxZjI1ZGY3LWYzMjAtNDQ4Yi1hYTkxLTEzNGNiYzQ2ZGM3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAANigwDQYJKoZIhvcNAQELBQADggEBAGQCN1BQh6y6ETOC1DgT5XUx 54YRzEDtLcROG7Ua+nTC/13LcGqFdc9UmQSjra9wrn1z1UB5m5Y4b4ex8zd9FObt z0kl49Xot/sXcpn5+gZS0zKiuaLgl6mXjax/WsNSxsPGm8MLB67K/caT126x/yZ6 vZ0MfZ1EzfoRq79m31UyCeWZfLZk0/dlg1nrJsDtlalYiibpEcZRynyro/Wy7TWG YwD1Y5IbA/0pmqzxZydfcuLq9f0SIPpPWyb52sVtrtUqikj63sPLT3GHjpNw81K8 WWCAMMb6jwXvd7YlhlPqdaJs0YEbrTdXCiXLKhm6euJTpDIyFNU5qSJKrvgm87Y= -----END CERTIFICATE-----Generated at Tue Nov 18 08:25:00 2025 by rpki-client