$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3588765b-1a3b-4e69-87e8-4051140e1309.roa File: 3588765b-1a3b-4e69-87e8-4051140e1309.roa (raw, json) Hash identifier: QEqvclGaXkXOgUQ2ru/WCg6NFbVYQuZVMk8RbGyDFG8= Subject key identifier: 04:33:5B:A8:29:7C:A7:C2:B5:06:F9:B8:53:A5:10:C4:54:CE:74:46 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 11B921E10778F49926EC4C5558923C265436E6CB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3588765b-1a3b-4e69-87e8-4051140e1309.roa Signing time: Fri 31 Oct 2025 01:06:57 +0000 ROA not before: Fri 31 Oct 2025 01:06:57 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3940::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b9:21:e1:07:78:f4:99:26:ec:4c:55:58:92:3c:26:54:36:e6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:06:57 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=cdc71f2fa03a246761201039613622e032eefe773700b8fb4ee93f5e744a0726, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:17:b2:f3:fa:ed:14:b4:38:51:27:b8:a2:e0: ab:ae:d6:3e:ba:52:8b:3f:35:20:f7:d8:6c:10:d7: bb:e9:f6:9b:a1:f8:43:39:a4:4d:ab:ff:88:bc:7a: 16:03:38:e6:8f:7e:c1:25:da:d1:9e:c1:9f:d5:de: cb:29:77:68:b3:89:bf:bb:4b:8e:93:42:3e:c7:4b: 88:80:60:e6:6f:c0:f8:f4:1b:5c:44:57:82:7b:92: a4:c7:e4:7e:e2:4a:a7:f2:42:ec:b5:85:3d:52:53: 2b:be:88:22:33:23:21:0d:91:47:b9:ae:96:e2:54: 94:7e:1b:f8:53:19:2e:01:6e:76:e0:ad:a1:78:dd: 0a:75:84:47:a4:97:a9:89:40:38:5a:2f:1c:c5:e5: 4b:51:93:5d:ed:f6:f5:fd:24:3c:9c:1a:06:8a:4c: e4:cc:54:16:bc:6e:f3:fa:a9:4f:0d:84:25:69:27: 07:bf:29:7e:76:c9:4e:8c:05:b3:a1:3d:72:28:54: d2:d4:99:12:9b:b2:3c:ab:13:7b:05:7e:8d:11:f5: 32:f2:0d:9c:9f:ce:74:71:ef:6b:2b:76:7d:9d:15: 72:2f:50:ac:fb:0b:9b:4c:d7:8a:0c:e1:a7:0d:ef: 68:c0:f5:b4:13:85:db:0c:52:4f:53:4a:cc:4f:03: 36:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:33:5B:A8:29:7C:A7:C2:B5:06:F9:B8:53:A5:10:C4:54:CE:74:46 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3588765b-1a3b-4e69-87e8-4051140e1309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3940::/47 Signature Algorithm: sha256WithRSAEncryption 75:c6:24:3e:85:44:cb:9c:fd:e6:de:74:ee:ab:39:85:bc:f1: e5:9b:2f:94:44:f5:73:74:4d:b7:85:b2:42:53:75:c4:0b:15: fa:ce:79:47:42:1a:9e:51:dc:32:b4:ca:f0:94:a5:09:df:ef: b9:fb:81:be:f5:7c:bf:f2:f1:23:11:59:52:f3:6c:8c:39:dc: e5:61:ae:0d:80:b4:1d:53:03:ff:f9:4d:85:aa:c4:b7:c0:50: 94:b6:0b:52:f0:aa:f2:4b:c9:0f:8e:87:bc:f3:ea:c3:6c:80: 65:25:1f:66:50:6f:01:b5:b8:78:3a:75:84:e5:47:e7:32:3e: 5a:73:42:ab:0c:d8:c2:66:30:bf:51:76:50:5c:21:0b:73:ff: 70:dd:dd:63:2d:4d:40:ac:d9:57:d7:15:ba:c8:85:c7:58:bb: 6d:77:7f:6b:63:7f:e6:88:6f:60:2d:92:a1:4c:c3:a1:f5:b2: 88:3e:44:ac:0f:a0:64:02:b7:e8:b0:45:e1:91:72:67:6f:b1: 46:7a:39:6d:81:d8:39:8c:27:3c:91:51:34:c3:98:f5:71:a9: b7:53:4b:5a:00:59:56:8b:bf:b9:cd:95:4c:f6:13:dd:f4:45: 00:07:a0:75:c3:e4:1e:0d:52:6d:6c:3d:1b:c1:9d:f9:67:5b: 69:48:66:23 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEbkh4Qd49Jkm7ExVWJI8JlQ25sswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDEwNjU3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZGM3MWYyZmEwM2EyNDY3NjEyMDEwMzk2MTM2MjJlMDMy ZWVmZTc3MzcwMGI4ZmI0ZWU5M2Y1ZTc0NGEwNzI2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoF7Lz+u0UtDhRJ7ii4Kuu1j66Uos/NSD32GwQ17vp9puh +EM5pE2r/4i8ehYDOOaPfsEl2tGewZ/V3sspd2izib+7S46TQj7HS4iAYOZvwPj0 G1xEV4J7kqTH5H7iSqfyQuy1hT1SUyu+iCIzIyENkUe5rpbiVJR+G/hTGS4Bbnbg raF43Qp1hEekl6mJQDhaLxzF5UtRk13t9vX9JDycGgaKTOTMVBa8bvP6qU8NhCVp Jwe/KX52yU6MBbOhPXIoVNLUmRKbsjyrE3sFfo0R9TLyDZyfznRx72srdn2dFXIv UKz7C5tM14oM4acN72jA9bQThdsMUk9TSsxPAzY1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBDNbqCl8p8K1Bvm4U6UQxFTOdEYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzM1ODg3NjViLTFhM2ItNGU2OS04N2U4LTQwNTExNDBlMTMwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOUAwDQYJKoZIhvcNAQELBQADggEBAHXGJD6FRMuc/ebedO6rOYW8 8eWbL5RE9XN0TbeFskJTdcQLFfrOeUdCGp5R3DK0yvCUpQnf77n7gb71fL/y8SMR WVLzbIw53OVhrg2AtB1TA//5TYWqxLfAUJS2C1LwqvJLyQ+Oh7zz6sNsgGUlH2ZQ bwG1uHg6dYTlR+cyPlpzQqsM2MJmML9RdlBcIQtz/3Dd3WMtTUCs2VfXFbrIhcdY u213f2tjf+aIb2AtkqFMw6H1sog+RKwPoGQCt+iwReGRcmdvsUZ6OW2B2DmMJzyR UTTDmPVxqbdTS1oAWVaLv7nNlUz2E930RQAHoHXD5B4NUm1sPRvBnflnW2lIZiM= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:16 2025 by rpki-client