$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03829cf2-ef91-474c-895f-8d84b50129cc.roa File: 03829cf2-ef91-474c-895f-8d84b50129cc.roa (raw, json) Hash identifier: fpnzDqX+AOyr53fK8em538dc+foCG5F5INgKhZ+GVAo= Subject key identifier: 25:12:AC:99:2C:EA:49:AE:8D:D6:3E:47:ED:B2:FF:CE:03:BA:0A:67 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5F138141A911DD29823F558B70D13C4BC47D5917 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03829cf2-ef91-474c-895f-8d84b50129cc.roa Signing time: Fri 31 Oct 2025 06:06:58 +0000 ROA not before: Fri 31 Oct 2025 06:06:58 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:36c8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:13:81:41:a9:11:dd:29:82:3f:55:8b:70:d1:3c:4b:c4:7d:59:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:06:58 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=da4b1557f326dd6114e829b50d00f5995316e6f35b8912e22790f990d40dd734, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:50:a2:50:6c:8e:4c:03:de:7b:97:b2:c4:e2: e1:ba:71:8a:7a:01:d7:6e:15:0d:bb:06:f1:6d:88: 14:01:f3:86:72:ac:95:fd:89:c9:70:a9:0a:5a:1b: b9:8e:00:9e:97:63:17:d7:f8:64:24:4b:9c:d9:b1: 8c:53:7c:7b:75:5f:b8:68:30:8e:84:45:81:6c:bf: 10:52:f1:f4:01:b7:e1:4c:9e:fe:ca:2e:10:c5:28: 7d:b5:bc:a2:63:ee:0d:98:3a:29:b5:98:86:44:67: c1:58:48:5d:28:2a:3e:bf:64:7f:7b:37:9b:91:a7: f9:be:59:1e:c3:4c:0e:00:8d:65:80:dc:ae:c1:1e: 34:a2:86:3a:5b:89:a6:e0:bc:10:c7:e7:02:86:32: 2c:87:32:d3:0f:18:f8:8b:55:ad:0e:d1:31:ea:24: 0b:51:26:82:f6:ef:f7:cc:c1:b1:fd:d3:13:f2:53: a9:12:b5:85:42:3e:89:2f:95:c6:63:ac:bc:38:37: 27:f5:31:0a:a8:79:90:94:e8:5e:c9:50:ad:91:cb: 02:b3:46:90:83:26:68:85:68:e4:8c:85:71:07:a7: f9:23:44:96:14:56:69:e2:a6:0d:54:f6:9c:ed:f4: 9c:b3:31:28:55:2d:90:e4:18:9d:a5:dd:a8:38:15: 03:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:12:AC:99:2C:EA:49:AE:8D:D6:3E:47:ED:B2:FF:CE:03:BA:0A:67 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/03829cf2-ef91-474c-895f-8d84b50129cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:36c8::/45 Signature Algorithm: sha256WithRSAEncryption 7c:bf:45:47:7c:8c:be:f4:21:26:d6:22:c5:5b:dc:9a:02:85: aa:f3:9a:0e:ed:05:7a:38:df:1b:f8:ef:61:99:49:7b:78:00: a0:47:b9:e7:3d:56:20:32:9a:e8:81:98:8d:0c:ad:55:da:75: 74:59:cc:62:bc:30:fb:95:21:34:26:53:09:3c:d6:01:0f:8d: cc:ec:55:7c:00:c2:3d:37:df:b5:35:46:51:44:00:bb:62:60: 2f:2a:35:10:c7:aa:f0:4a:5c:b9:0d:07:b6:43:d2:0b:d6:df: 3b:92:0d:10:e5:2d:9c:78:4c:74:a3:5a:59:54:a1:be:9e:ed: 03:17:9b:2f:74:72:e9:17:ea:0c:51:97:2c:94:1b:7e:34:3c: 8c:3a:6d:b1:29:03:79:23:3a:dd:a1:2d:21:97:fe:4f:2a:88: c1:57:70:1f:81:de:7a:32:54:7a:71:b8:5c:e6:7d:83:bd:06: 8e:15:ac:e5:0a:e7:98:b1:3b:93:15:56:e2:f8:5b:17:fe:0a: c3:38:2b:79:d3:5b:42:1c:24:71:01:8a:27:91:1e:88:50:9d: ec:dd:99:88:7d:f3:a3:5f:f7:66:0b:d3:32:89:0e:98:ab:47: 8c:a8:ca:35:5c:72:71:ee:e3:6c:9e:cd:a6:a2:22:a0:c1:2f: aa:e4:ec:8d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXxOBQakR3SmCP1WLcNE8S8R9WRcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYwNjU4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTRiMTU1N2YzMjZkZDYxMTRlODI5YjUwZDAwZjU5OTUz MTZlNmYzNWI4OTEyZTIyNzkwZjk5MGQ0MGRkNzM0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvUKJQbI5MA957l7LE4uG6cYp6AdduFQ27BvFtiBQB84Zy rJX9iclwqQpaG7mOAJ6XYxfX+GQkS5zZsYxTfHt1X7hoMI6ERYFsvxBS8fQBt+FM nv7KLhDFKH21vKJj7g2YOim1mIZEZ8FYSF0oKj6/ZH97N5uRp/m+WR7DTA4AjWWA 3K7BHjSihjpbiabgvBDH5wKGMiyHMtMPGPiLVa0O0THqJAtRJoL27/fMwbH90xPy U6kStYVCPokvlcZjrLw4Nyf1MQqoeZCU6F7JUK2RywKzRpCDJmiFaOSMhXEHp/kj RJYUVmnipg1U9pzt9JyzMShVLZDkGJ2l3ag4FQNTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJRKsmSzqSa6N1j5H7bL/zgO6CmcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzAzODI5Y2YyLWVmOTEtNDc0Yy04OTVmLThkODRiNTAxMjljYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAANsgwDQYJKoZIhvcNAQELBQADggEBAHy/RUd8jL70ISbWIsVb3JoC harzmg7tBXo43xv472GZSXt4AKBHuec9ViAymuiBmI0MrVXadXRZzGK8MPuVITQm Uwk81gEPjczsVXwAwj0337U1RlFEALtiYC8qNRDHqvBKXLkNB7ZD0gvW3zuSDRDl LZx4THSjWllUob6e7QMXmy90cukX6gxRlyyUG340PIw6bbEpA3kjOt2hLSGX/k8q iMFXcB+B3noyVHpxuFzmfYO9Bo4VrOUK55ixO5MVVuL4Wxf+CsM4K3nTW0IcJHEB iieRHohQnezdmYh986Nf92YL0zKJDpirR4yoyjVccnHu42yezaaiIqDBL6rk7I0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:40:25 2025 by rpki-client