$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15857344-8c5f-43e2-846f-724a397e05b2.roa File: 15857344-8c5f-43e2-846f-724a397e05b2.roa (raw, json) Hash identifier: 06V/8icZK65j831AOmrXuMrO0pde3ghDkNldBy3OXEE= Subject key identifier: 89:4D:76:D1:D3:5B:2A:DB:C9:C5:83:03:31:CB:0E:C4:A5:90:55:D8 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3287911C230CE959FA7A33537990062BA3008CB2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15857344-8c5f-43e2-846f-724a397e05b2.roa Signing time: Fri 31 Oct 2025 07:08:21 +0000 ROA not before: Fri 31 Oct 2025 07:08:21 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3d20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:87:91:1c:23:0c:e9:59:fa:7a:33:53:79:90:06:2b:a3:00:8c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:08:21 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=8d00749f76ffe5a3b0726a97021b220c8cf7e6813f98cbf316e9a74ec078c86b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:d8:39:ca:fe:58:49:d3:5b:aa:1e:8b:27: fc:c5:2e:6a:cf:f9:0f:82:22:44:d6:c3:d3:7b:e6: f9:02:af:8e:01:3f:31:25:3d:1f:f9:c9:58:a4:d7: 93:dc:71:81:dc:26:26:78:ca:16:fb:d0:9b:6e:81: 5e:1f:80:be:d5:17:07:da:cc:ba:e6:72:7c:4e:e0: 4d:06:d7:12:bd:42:43:b2:9c:e3:f8:fd:6c:a9:ce: 9f:a3:ac:04:1d:5d:cf:30:cf:b2:39:f9:fe:c8:6e: f2:ed:4a:bb:7a:f5:9a:46:aa:d0:16:02:6d:28:d9: 35:5a:24:cf:5e:e6:b5:d4:2d:bc:ba:87:e5:2b:4c: 2a:9b:d9:fa:55:34:c0:3c:85:7e:ae:6b:18:43:72: 0e:ac:9a:b0:6c:2c:c2:51:4c:c6:16:91:50:bb:1c: 38:c4:3a:91:86:ab:de:82:3c:15:22:37:db:c2:fb: 5c:2d:b7:03:e5:1f:85:02:54:b0:ca:1c:7b:d8:4a: e5:22:a0:ff:bd:72:1c:7a:cd:ce:9b:6c:3c:6a:16: 66:0d:a9:c7:a4:a3:52:85:60:ec:6e:81:4d:36:4c: ca:78:6e:e9:23:56:93:9d:7a:9e:7d:85:69:e3:5d: cb:d1:c8:86:98:c0:ec:f5:9b:0c:d0:25:7d:1c:f6: 8f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4D:76:D1:D3:5B:2A:DB:C9:C5:83:03:31:CB:0E:C4:A5:90:55:D8 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15857344-8c5f-43e2-846f-724a397e05b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3d20::/44 Signature Algorithm: sha256WithRSAEncryption 5e:56:04:94:8d:bb:67:9b:d9:6d:68:b0:13:8c:62:d8:1a:f1: 51:ca:42:e2:0d:5b:7c:2f:a0:c7:51:f9:a9:a0:03:49:9c:96: 20:91:3f:a0:56:c5:1e:21:c9:ac:95:7b:3e:0e:82:b8:c2:d7: 85:84:22:b5:9b:36:7c:5c:15:2d:bc:1b:24:2a:9e:03:1f:ea: cb:4e:a7:c5:a5:17:d2:1a:37:33:78:2e:ab:05:1a:47:85:6c: 83:c4:3c:43:75:44:cd:11:89:7a:32:25:76:c7:61:e4:77:70: 13:4a:20:ef:8f:83:6f:f8:62:3f:cc:d0:9f:26:6c:58:71:e6: f1:e9:ad:08:42:4b:ee:58:ec:a3:b4:c8:0b:d5:65:89:55:71: f6:8e:5a:51:61:22:0e:d7:85:7e:bf:eb:6d:da:2b:53:db:f3: 8a:57:fe:30:70:c4:04:fd:be:66:d8:04:98:06:7b:a4:1f:58: 3e:93:8b:28:a9:6d:31:fc:18:d4:f1:06:45:ee:ac:67:d7:28: 39:5e:b0:8a:e8:5f:8e:b9:4d:03:0b:e5:16:00:36:86:96:3a: 9a:85:c4:a2:02:47:82:46:fc:a7:c0:91:26:2d:fe:94:37:cb: b3:a4:b5:20:70:fc:2b:b1:1c:8a:78:3e:c8:15:9b:b8:f6:fa: a6:0f:7e:b7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMoeRHCMM6Vn6ejNTeZAGK6MAjLIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcwODIxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDAwNzQ5Zjc2ZmZlNWEzYjA3MjZhOTcwMjFiMjIwYzhj ZjdlNjgxM2Y5OGNiZjMxNmU5YTc0ZWMwNzhjODZiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3XNg5yv5YSdNbqh6LJ/zFLmrP+Q+CIkTWw9N75vkCr44B PzElPR/5yVik15PccYHcJiZ4yhb70JtugV4fgL7VFwfazLrmcnxO4E0G1xK9QkOy nOP4/Wypzp+jrAQdXc8wz7I5+f7IbvLtSrt69ZpGqtAWAm0o2TVaJM9e5rXULby6 h+UrTCqb2fpVNMA8hX6uaxhDcg6smrBsLMJRTMYWkVC7HDjEOpGGq96CPBUiN9vC +1wttwPlH4UCVLDKHHvYSuUioP+9chx6zc6bbDxqFmYNqceko1KFYOxugU02TMp4 bukjVpOdep59hWnjXcvRyIaYwOz1mwzQJX0c9o+1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUiU120dNbKtvJxYMDMcsOxKWQVdgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzE1ODU3MzQ0LThjNWYtNDNlMi04NDZmLTcyNGEzOTdlMDViMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAPSAwDQYJKoZIhvcNAQELBQADggEBAF5WBJSNu2eb2W1osBOMYtga 8VHKQuINW3wvoMdR+amgA0mcliCRP6BWxR4hyayVez4OgrjC14WEIrWbNnxcFS28 GyQqngMf6stOp8WlF9IaNzN4LqsFGkeFbIPEPEN1RM0RiXoyJXbHYeR3cBNKIO+P g2/4Yj/M0J8mbFhx5vHprQhCS+5Y7KO0yAvVZYlVcfaOWlFhIg7XhX6/623aK1Pb 84pX/jBwxAT9vmbYBJgGe6QfWD6TiyipbTH8GNTxBkXurGfXKDlesIroX465TQML 5RYANoaWOpqFxKICR4JG/KfAkSYt/pQ3y7OktSBw/CuxHIp4PsgVm7j2+qYPfrc= -----END CERTIFICATE-----Generated at Wed Nov 5 09:29:14 2025 by rpki-client