$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/62ac601c-a014-472b-a61c-63eb38ff6f52.roa File: 62ac601c-a014-472b-a61c-63eb38ff6f52.roa (raw, json) Hash identifier: nYIxATmiAH0BEKXPwDyBe+6APTsnEh4WAfglZoHntsI= Subject key identifier: 58:B1:6E:EB:C7:4F:2C:41:BB:C1:3B:F9:27:33:27:AE:1B:CB:A8:E1 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 35655F617FA0DE5C537E32A60250B89F27CFA30B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/62ac601c-a014-472b-a61c-63eb38ff6f52.roa Signing time: Fri 31 Oct 2025 01:40:02 +0000 ROA not before: Fri 31 Oct 2025 01:40:02 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2606:8140:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:65:5f:61:7f:a0:de:5c:53:7e:32:a6:02:50:b8:9f:27:cf:a3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 31 01:40:02 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=47758d3d5c4b8c1aa2e75af2d8dabc9d38ddb6e607cf745bfefac93c3b5a2b8f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:5b:51:fa:f1:a1:57:52:6a:dc:17:b8:1e: d3:84:23:46:62:02:d9:9a:74:f6:e8:45:25:7e:2b: 4a:1a:29:06:74:c7:09:54:75:d7:25:c8:4e:30:c7: 1c:18:c5:02:cc:a6:b4:7f:d2:4f:32:18:81:58:9e: 0a:74:ab:67:90:af:73:6a:2c:a5:30:f1:cf:aa:f6: 0f:04:c9:df:d1:ba:d8:40:1c:0d:33:3d:91:48:bc: ff:42:57:46:e4:42:1a:2b:ba:1c:c2:a2:0d:3c:e9: 12:9c:39:17:04:b6:fb:15:e7:1c:9a:c3:02:d8:c6: 4f:aa:5c:68:03:8b:3e:5b:9c:8f:d4:6a:ca:8b:88: 4e:1c:08:31:f3:5a:d9:4b:2e:52:e0:6a:d2:55:6e: 40:91:cd:3e:09:2f:5f:80:87:e6:ad:c2:ec:23:02: 04:07:5a:3d:5c:ab:64:30:0e:00:4c:42:9f:e4:b3: c3:e0:6c:dd:73:10:48:63:fb:80:95:f3:4c:91:19: 92:89:47:16:06:c2:3f:a8:44:6c:11:d3:bf:68:58: 36:b5:35:62:00:79:80:e8:f7:70:8b:1d:34:f7:1b: 21:c8:58:35:9c:c7:aa:b7:f4:aa:f0:3f:38:6d:53: 95:be:92:06:04:cc:9f:c1:a7:7c:46:72:18:f9:2f: 40:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B1:6E:EB:C7:4F:2C:41:BB:C1:3B:F9:27:33:27:AE:1B:CB:A8:E1 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/62ac601c-a014-472b-a61c-63eb38ff6f52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140:400::/40 Signature Algorithm: sha256WithRSAEncryption 45:2a:fb:b2:87:83:7d:35:d7:9d:5c:5a:4f:aa:d6:f7:e9:e7: 86:86:a3:6d:7c:bc:44:11:37:10:bf:b4:e4:20:00:f0:5d:b8: e2:f9:bc:f0:44:96:16:e3:6d:a7:aa:c0:c4:a1:ce:da:d6:58: 38:b2:75:55:a1:df:6e:de:41:25:f1:0f:4f:21:2b:37:54:c4: 46:9f:63:9b:80:2c:19:25:f8:3a:d6:6b:5f:9e:c8:3e:5e:b3: cc:5c:1d:f3:24:a5:12:62:34:c2:e7:44:f3:d1:37:6b:fc:8b: 00:bb:a6:c1:ee:d9:48:e0:ad:b1:42:42:de:0d:2e:a1:a9:b1: 60:25:8e:c0:b4:11:6c:0b:82:17:20:f0:76:1a:c7:74:81:05: 3d:11:f1:28:28:2c:f4:2d:79:f7:ec:93:87:fc:a0:b1:f6:f1: 9f:c7:38:5f:7b:a3:4e:ad:cd:52:94:5e:bb:73:6d:15:b9:46: f9:5b:d1:32:52:a8:5f:15:32:bf:ec:9a:1f:e8:32:65:32:5f: 65:54:0d:82:31:51:16:d0:e9:34:2d:4e:aa:f6:41:e5:7b:65: 88:1b:40:ce:b1:c2:e1:d2:15:16:5c:73:be:7f:be:b7:a5:c6: 17:c5:89:d3:44:b0:98:9e:4a:fd:1a:e4:30:7f:09:c5:21:ab: b8:3d:9b:bb -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNWVfYX+g3lxTfjKmAlC4nyfPowswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDMxMDE0MDAyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Nzc1OGQzZDVjNGI4YzFhYTJlNzVhZjJkOGRhYmM5ZDM4 ZGRiNmU2MDdjZjc0NWJmZWZhYzkzYzNiNWEyYjhmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+8FtR+vGhV1Jq3Be4HtOEI0ZiAtmadPboRSV+K0oaKQZ0 xwlUddclyE4wxxwYxQLMprR/0k8yGIFYngp0q2eQr3NqLKUw8c+q9g8Eyd/RuthA HA0zPZFIvP9CV0bkQhoruhzCog086RKcORcEtvsV5xyawwLYxk+qXGgDiz5bnI/U asqLiE4cCDHzWtlLLlLgatJVbkCRzT4JL1+Ah+atwuwjAgQHWj1cq2QwDgBMQp/k s8PgbN1zEEhj+4CV80yRGZKJRxYGwj+oRGwR079oWDa1NWIAeYDo93CLHTT3GyHI WDWcx6q39KrwPzhtU5W+kgYEzJ/Bp3xGchj5L0CxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUWLFu68dPLEG7wTv5JzMnrhvLqOEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzYyYWM2MDFjLWEwMTQtNDcyYi1hNjFjLTYzZWIzOGZmNmY1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBoFABDANBgkqhkiG9w0BAQsFAAOCAQEARSr7soeDfTXXnVxaT6rW9+nn hoajbXy8RBE3EL+05CAA8F244vm88ESWFuNtp6rAxKHO2tZYOLJ1VaHfbt5BJfEP TyErN1TERp9jm4AsGSX4OtZrX57IPl6zzFwd8ySlEmI0wudE89E3a/yLALumwe7Z SOCtsUJC3g0uoamxYCWOwLQRbAuCFyDwdhrHdIEFPRHxKCgs9C159+yTh/ygsfbx n8c4X3ujTq3NUpReu3NtFblG+VvRMlKoXxUyv+yaH+gyZTJfZVQNgjFRFtDpNC1O qvZB5XtliBtAzrHC4dIVFlxzvn++t6XGF8WJ00SwmJ5K/RrkMH8JxSGruD2buw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:50:11 2025 by rpki-client