$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3985307d-7750-450d-a341-d88023223dc9.roa File: 3985307d-7750-450d-a341-d88023223dc9.roa (raw, json) Hash identifier: MmxUL8ClNm85WGDdg3AK2cJ6EejSWClWHIJtmUYaDMU= Subject key identifier: 73:84:68:50:D6:38:72:B2:0D:E1:5C:6A:37:17:8D:13:80:26:FE:7B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5B188D2EE8E08CF17A61EB973EB71CF3A5543621 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3985307d-7750-450d-a341-d88023223dc9.roa Signing time: Fri 31 Oct 2025 05:25:20 +0000 ROA not before: Fri 31 Oct 2025 05:25:20 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1b08::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:18:8d:2e:e8:e0:8c:f1:7a:61:eb:97:3e:b7:1c:f3:a5:54:36:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:25:20 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=165342ed7558d56fe723a5e4214c7697a1498509c81f3b38f60c7c000bbc29f9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:23:2a:48:80:78:3a:f9:a2:8c:2b:3b:ae: eb:65:7c:35:9c:a7:a0:6d:87:ff:ba:00:3b:85:ce: 78:c4:2b:07:75:25:78:b7:a4:0c:9b:52:5b:62:6a: d8:94:bb:cc:9d:b2:2f:93:58:d3:56:21:0c:9a:ed: d6:fc:9d:d7:bf:52:1a:33:44:5e:e9:3c:70:92:e9: fc:b7:40:2b:60:56:83:a5:b5:99:77:f2:83:cc:86: f0:e6:7b:e6:02:ca:6f:24:a8:56:ad:e3:2f:4f:03: cd:59:cf:a2:5f:74:4b:02:82:76:b1:af:77:87:34: 55:27:18:ba:8c:bc:88:a3:89:6a:d8:fe:cc:e4:55: 91:27:ad:0d:70:4e:6f:33:0c:0e:f8:77:34:15:d2: 6e:af:5f:ce:b2:37:70:ae:ef:50:da:3e:99:0a:c0: 1e:c9:1f:f1:89:0f:ba:bf:8e:d7:58:87:83:09:9e: de:d4:ae:90:ac:88:81:3c:2b:36:ea:89:f9:30:d0: ce:73:1e:fd:3e:d7:a4:9d:12:45:71:d7:0d:97:37: 72:fc:b0:27:b9:b5:2b:ab:df:80:f4:30:da:39:41: 91:24:7f:dc:76:43:33:e0:65:2e:c4:bd:35:11:b6: f5:64:93:c9:0a:3d:09:72:c4:2d:12:14:85:f8:5e: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:84:68:50:D6:38:72:B2:0D:E1:5C:6A:37:17:8D:13:80:26:FE:7B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3985307d-7750-450d-a341-d88023223dc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1b08::/45 Signature Algorithm: sha256WithRSAEncryption 4a:3b:24:8d:ce:a8:57:24:18:82:15:03:f8:8f:7d:43:d4:1b: aa:c8:61:4d:dd:93:a1:b1:d4:3c:37:fc:87:52:0a:fb:a1:49: 74:62:0a:10:d0:a7:c1:f7:e5:e5:d9:e7:8c:7e:12:a9:20:55: 67:e4:53:01:27:d5:48:af:b5:8d:9a:fd:91:70:13:c6:49:dc: d2:9c:53:f2:9a:7d:b5:18:a6:bf:9f:0a:79:7f:1b:ad:83:e4: 43:9a:03:6c:04:f3:3a:0e:f6:83:67:34:1b:2c:59:14:a2:63: 1e:c0:b0:24:a7:dd:40:ce:32:97:3a:e8:03:f8:ec:93:ce:7a: ed:38:d0:38:c5:30:a9:6b:ad:16:bf:68:29:01:5c:ed:6e:95: 49:a7:65:94:81:c9:7d:50:c5:0b:df:e6:00:81:d6:46:70:66: bc:6b:b6:da:74:2f:f7:bf:ea:29:94:b4:bb:b1:9b:4f:b8:a7: 56:a8:11:fa:32:90:e9:4d:98:88:c0:3a:cc:25:f6:e5:af:05: 37:43:49:2d:ae:15:83:d9:49:36:2f:b3:b0:ea:00:aa:8a:8b: eb:c8:3b:b3:1a:2f:72:d0:51:26:54:ef:c6:55:6a:2e:3c:bf: 2b:14:e4:e0:8c:9e:b3:66:5d:0f:53:55:e0:09:4f:22:49:3d: cd:f5:27:67 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWxiNLujgjPF6YeuXPrcc86VUNiEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyNTIwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjUzNDJlZDc1NThkNTZmZTcyM2E1ZTQyMTRjNzY5N2Ex NDk4NTA5YzgxZjNiMzhmNjBjN2MwMDBiYmMyOWY5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9NiMqSIB4OvmijCs7rutlfDWcp6Bth/+6ADuFznjEKwd1 JXi3pAybUltiatiUu8ydsi+TWNNWIQya7db8nde/UhozRF7pPHCS6fy3QCtgVoOl tZl38oPMhvDme+YCym8kqFat4y9PA81Zz6JfdEsCgnaxr3eHNFUnGLqMvIijiWrY /szkVZEnrQ1wTm8zDA74dzQV0m6vX86yN3Cu71DaPpkKwB7JH/GJD7q/jtdYh4MJ nt7UrpCsiIE8Kzbqifkw0M5zHv0+16SdEkVx1w2XN3L8sCe5tSur34D0MNo5QZEk f9x2QzPgZS7EvTURtvVkk8kKPQlyxC0SFIX4XlIFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUc4RoUNY4crIN4VxqNxeNE4Am/nswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzM5ODUzMDdkLTc3NTAtNDUwZC1hMzQxLWQ4ODAyMzIyM2RjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAGwgwDQYJKoZIhvcNAQELBQADggEBAEo7JI3OqFckGIIVA/iPfUPU G6rIYU3dk6Gx1Dw3/IdSCvuhSXRiChDQp8H35eXZ54x+EqkgVWfkUwEn1UivtY2a /ZFwE8ZJ3NKcU/KafbUYpr+fCnl/G62D5EOaA2wE8zoO9oNnNBssWRSiYx7AsCSn 3UDOMpc66AP47JPOeu040DjFMKlrrRa/aCkBXO1ulUmnZZSByX1QxQvf5gCB1kZw Zrxrttp0L/e/6imUtLuxm0+4p1aoEfoykOlNmIjAOswl9uWvBTdDSS2uFYPZSTYv s7DqAKqKi+vIO7MaL3LQUSZU78ZVai48vysU5OCMnrNmXQ9TVeAJTyJJPc31J2c= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:22 2025 by rpki-client