$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74ef010c-fcec-4102-8113-ebb40b209337.roa File: 74ef010c-fcec-4102-8113-ebb40b209337.roa (raw, json) Hash identifier: aJXHl0WlVe7uOslLZvUwBrgZdXG4HegtedY6zE2hvtI= Subject key identifier: 99:A6:0E:CB:B3:52:CC:C1:2B:01:FD:18:65:A2:68:48:B1:1E:0F:61 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 32DC74AA7F9B9482D5BB854DCC15E8E9831724C0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74ef010c-fcec-4102-8113-ebb40b209337.roa Signing time: Fri 31 Oct 2025 04:10:30 +0000 ROA not before: Fri 31 Oct 2025 04:10:30 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:352c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:dc:74:aa:7f:9b:94:82:d5:bb:85:4d:cc:15:e8:e9:83:17:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:10:30 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=77bf627e7986e67e0947e6e80b19aea40da72b60a73bc1d4bd11390ab2b53d68, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:50:55:9d:79:84:0b:25:34:47:91:67:d8: 0e:c9:d9:bb:18:25:3a:15:bb:82:df:6f:45:76:d7: 40:7f:bb:89:4b:30:91:8a:b5:17:1b:90:b5:25:25: 38:08:1c:05:3a:24:88:c6:06:76:4f:74:39:7a:42: 03:13:f9:42:6d:75:40:7d:4a:30:28:e8:ba:84:b9: 6d:03:02:6f:57:35:b8:c6:64:c6:a5:58:05:e3:68: 4d:c1:0d:36:ac:02:6d:5f:60:b0:86:bc:1e:41:20: 9f:04:89:e3:ff:d2:63:cc:06:26:15:3f:20:bc:95: 33:9e:90:4c:f1:82:81:99:d3:5c:23:64:26:91:8c: 09:99:3d:3d:f1:43:3d:e1:80:b1:99:2d:00:79:58: 51:d1:ce:df:b0:ab:78:51:28:1f:23:51:6e:a9:9a: 93:12:16:2d:92:cb:5c:67:14:17:9f:20:3c:7d:cb: 01:a7:2c:6d:94:50:73:71:ef:63:72:26:02:ac:e9: af:df:1c:52:77:61:8d:6d:e8:22:90:6b:9c:77:b0: 2b:3f:fc:c8:8a:9e:b8:84:03:fe:3a:41:56:a5:a8: 6e:50:16:e3:36:0f:99:ce:26:e7:8a:29:0f:19:ae: 25:01:ee:71:de:23:36:1b:ce:de:f8:b6:8d:77:d7: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A6:0E:CB:B3:52:CC:C1:2B:01:FD:18:65:A2:68:48:B1:1E:0F:61 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/74ef010c-fcec-4102-8113-ebb40b209337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:352c::/46 Signature Algorithm: sha256WithRSAEncryption 37:11:78:ec:f0:9a:b4:73:1b:7b:8e:aa:ac:84:2b:1b:cc:0d: 55:fd:b1:3c:78:f5:96:09:68:c0:49:65:12:d3:19:28:8a:65: 77:af:31:59:cc:fa:a4:6d:73:4e:7d:1f:6a:1c:51:d5:1c:49: cb:c5:de:bb:30:d6:16:4d:28:16:d1:ed:a6:e3:2b:d9:f3:35: 4f:12:2d:8d:c4:d9:1a:f3:37:91:5c:4a:7c:dd:dd:12:62:c0: 6d:9f:85:bc:cd:ed:f5:24:f7:10:7c:69:fa:14:28:4a:f8:db: b5:97:73:74:8a:59:81:2e:bd:02:53:cf:2d:c3:6a:3f:06:76: 93:79:81:77:54:f7:2c:18:e7:24:a4:ab:b2:1a:88:5d:0a:3a: 53:01:0a:09:67:89:1b:22:4c:36:8e:ae:32:ee:e6:e7:81:0b: b2:38:de:20:63:da:12:de:c3:f7:c9:dd:8a:6b:f6:b3:8a:f5: 50:aa:db:27:fe:ea:c6:15:a4:ad:83:7b:df:c5:bd:fe:ff:d7: 5d:cb:1d:3f:67:85:22:12:6c:85:7e:ad:80:4b:c0:86:b6:30: 0f:48:fc:cd:4b:c2:b9:73:4b:b5:6e:01:dd:3e:4d:16:96:08: 81:25:68:8c:8b:5b:15:0e:de:77:dd:e5:e2:d4:cf:e1:37:09: 7d:6f:fb:dc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMtx0qn+blILVu4VNzBXo6YMXJMAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQxMDMwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3N2JmNjI3ZTc5ODZlNjdlMDk0N2U2ZTgwYjE5YWVhNDBk YTcyYjYwYTczYmMxZDRiZDExMzkwYWIyYjUzZDY4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEv1BVnXmECyU0R5Fn2A7J2bsYJToVu4Lfb0V210B/u4lL MJGKtRcbkLUlJTgIHAU6JIjGBnZPdDl6QgMT+UJtdUB9SjAo6LqEuW0DAm9XNbjG ZMalWAXjaE3BDTasAm1fYLCGvB5BIJ8EieP/0mPMBiYVPyC8lTOekEzxgoGZ01wj ZCaRjAmZPT3xQz3hgLGZLQB5WFHRzt+wq3hRKB8jUW6pmpMSFi2Sy1xnFBefIDx9 ywGnLG2UUHNx72NyJgKs6a/fHFJ3YY1t6CKQa5x3sCs//MiKnriEA/46QValqG5Q FuM2D5nOJueKKQ8ZriUB7nHeIzYbzt74to13126rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmaYOy7NSzMErAf0YZaJoSLEeD2EwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzc0ZWYwMTBjLWZjZWMtNDEwMi04MTEzLWViYjQwYjIwOTMzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAANSwwDQYJKoZIhvcNAQELBQADggEBADcReOzwmrRzG3uOqqyEKxvM DVX9sTx49ZYJaMBJZRLTGSiKZXevMVnM+qRtc059H2ocUdUcScvF3rsw1hZNKBbR 7abjK9nzNU8SLY3E2RrzN5FcSnzd3RJiwG2fhbzN7fUk9xB8afoUKEr427WXc3SK WYEuvQJTzy3Daj8GdpN5gXdU9ywY5ySkq7IaiF0KOlMBCglniRsiTDaOrjLu5ueB C7I43iBj2hLew/fJ3Ypr9rOK9VCq2yf+6sYVpK2De9/Fvf7/113LHT9nhSISbIV+ rYBLwIa2MA9I/M1LwrlzS7VuAd0+TRaWCIElaIyLWxUO3nfd5eLUz+E3CX1v+9w= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:06 2025 by rpki-client