$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a03fd4c1-e287-4f16-a325-32393de08c36.roa File: a03fd4c1-e287-4f16-a325-32393de08c36.roa (raw, json) Hash identifier: nwfOhiraTqvIbHiUP812LI1wNXsK0q68Nur2fdafMNI= Subject key identifier: CF:02:39:BE:C7:3A:A8:58:D9:5B:59:AE:23:B1:C0:60:84:E2:04:6E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0EEEA37BA1F55231E2CF595CB4EE419B574BF602 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a03fd4c1-e287-4f16-a325-32393de08c36.roa Signing time: Fri 31 Oct 2025 01:13:04 +0000 ROA not before: Fri 31 Oct 2025 01:13:04 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3a5e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ee:a3:7b:a1:f5:52:31:e2:cf:59:5c:b4:ee:41:9b:57:4b:f6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:13:04 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0b9fccb29ab1396774020a58cf559b530810187d429aed15d9371a9e373048dc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:02:48:7e:e4:6d:7e:36:10:a5:a3:3c:7b: 02:f4:be:ee:30:f3:6f:8a:64:73:6f:fb:f4:1d:20: eb:4e:68:60:df:16:a3:37:ad:1c:8c:7a:97:9e:4c: 17:5a:84:fe:2f:a3:f3:aa:6d:ce:eb:24:38:d3:ba: f9:8d:ad:d6:c5:69:fc:c2:a1:58:1e:61:99:ee:e9: ba:49:d1:26:92:2a:55:31:e0:24:1e:57:a9:48:51: a8:17:22:da:7b:6e:c6:c4:d3:34:27:c5:ee:ec:69: 4d:2c:0c:fd:8d:c3:e5:a6:53:f1:5a:b3:61:07:0a: 37:4b:b9:4e:4b:58:8a:a9:2f:64:6c:f9:57:aa:ae: 54:57:d3:51:80:48:38:ec:3a:a9:bc:b7:99:01:44: 76:0e:fb:60:fa:78:bc:3b:66:17:f3:4a:16:ee:85: 3b:3e:82:25:c5:42:33:56:79:aa:52:02:cd:a0:32: 6b:00:7f:5e:d9:10:7d:11:1e:b6:42:b5:dc:4b:14: 61:bd:84:d4:fd:4e:ac:2e:f0:1f:6c:24:75:97:13: 77:9d:4d:96:d1:56:80:96:59:ae:41:bc:03:b8:20: 62:45:c2:24:4d:1f:1c:ea:b4:e7:8b:93:5f:44:da: 13:8e:48:32:ee:30:4c:85:e6:93:7e:71:55:83:e4: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:02:39:BE:C7:3A:A8:58:D9:5B:59:AE:23:B1:C0:60:84:E2:04:6E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a03fd4c1-e287-4f16-a325-32393de08c36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3a5e::/47 Signature Algorithm: sha256WithRSAEncryption c0:30:c6:7f:a1:92:29:19:98:51:d3:d0:87:c7:3b:20:53:c3: 02:dd:1f:78:fc:4e:2d:a8:20:09:5e:59:20:0d:41:4f:b2:57: b2:64:a9:8c:cd:84:c7:3d:46:e1:b8:55:46:b5:18:1c:31:16: 23:80:21:fa:b4:a4:21:a7:b4:1e:47:a0:c1:eb:6f:b4:ea:95: 01:e6:ff:cc:4b:9a:c6:cd:fc:5d:75:ce:d7:95:59:7d:7b:b5: 11:de:c1:a8:72:96:01:02:1d:49:1f:58:cc:9f:29:7e:f5:74: 9e:b4:ae:9e:85:3a:93:6f:09:8e:a8:f2:ee:13:e5:00:c3:3d: 7c:2b:47:08:4b:d3:fe:c0:9a:b0:65:76:69:9f:2b:1b:59:6b: e8:26:b5:d8:80:4b:cf:af:98:ea:1d:d7:7a:22:36:e4:8e:55: d7:99:55:39:3b:ac:9a:ea:ce:ef:2f:ed:75:47:44:0a:18:57: 2f:e1:fe:8e:36:51:d6:86:c0:79:16:9b:01:20:99:11:b1:3d: 1b:13:d5:63:51:7b:85:c0:61:92:55:05:ab:e3:3d:0f:1d:96: 37:b6:eb:41:e4:ca:26:f6:4e:05:0f:2f:b6:f7:5e:6a:78:fe: 64:af:05:7c:c3:47:8a:f0:73:70:eb:df:0f:db:68:d4:75:af: 53:ce:e5:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDu6je6H1UjHiz1lctO5Bm1dL9gIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDExMzA0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjlmY2NiMjlhYjEzOTY3NzQwMjBhNThjZjU1OWI1MzA4 MTAxODdkNDI5YWVkMTVkOTM3MWE5ZTM3MzA0OGRjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjwgJIfuRtfjYQpaM8ewL0vu4w82+KZHNv+/QdIOtOaGDf FqM3rRyMepeeTBdahP4vo/Oqbc7rJDjTuvmNrdbFafzCoVgeYZnu6bpJ0SaSKlUx 4CQeV6lIUagXItp7bsbE0zQnxe7saU0sDP2Nw+WmU/Fas2EHCjdLuU5LWIqpL2Rs +VeqrlRX01GASDjsOqm8t5kBRHYO+2D6eLw7ZhfzShbuhTs+giXFQjNWeapSAs2g MmsAf17ZEH0RHrZCtdxLFGG9hNT9Tqwu8B9sJHWXE3edTZbRVoCWWa5BvAO4IGJF wiRNHxzqtOeLk19E2hOOSDLuMEyF5pN+cVWD5BpNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzwI5vsc6qFjZW1muI7HAYITiBG4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EwM2ZkNGMxLWUyODctNGYxNi1hMzI1LTMyMzkzZGUwOGMzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOl4wDQYJKoZIhvcNAQELBQADggEBAMAwxn+hkikZmFHT0IfHOyBT wwLdH3j8Ti2oIAleWSANQU+yV7JkqYzNhMc9RuG4VUa1GBwxFiOAIfq0pCGntB5H oMHrb7TqlQHm/8xLmsbN/F11zteVWX17tRHewahylgECHUkfWMyfKX71dJ60rp6F OpNvCY6o8u4T5QDDPXwrRwhL0/7AmrBldmmfKxtZa+gmtdiAS8+vmOod13oiNuSO VdeZVTk7rJrqzu8v7XVHRAoYVy/h/o42UdaGwHkWmwEgmRGxPRsT1WNRe4XAYZJV BavjPQ8dlje260Hkyib2TgUPL7b3Xmp4/mSvBXzDR4rwc3Dr3w/baNR1r1PO5S4= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:20 2025 by rpki-client