$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8317c013-1a64-4a11-ae08-8b880654e6a6.roa File: 8317c013-1a64-4a11-ae08-8b880654e6a6.roa (raw, json) Hash identifier: HhM1yB97GLwjxmOhKbCsRKiDWSeiz3VvbECWQyhwLd4= Subject key identifier: 72:50:29:EF:4C:CA:1C:0D:D0:35:63:7E:BA:9D:B1:F3:B6:46:79:14 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5D3392AA34BE510AFB677DF9E0B9AB4BFA3F8301 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8317c013-1a64-4a11-ae08-8b880654e6a6.roa Signing time: Fri 31 Oct 2025 00:36:55 +0000 ROA not before: Fri 31 Oct 2025 00:36:55 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3626::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:33:92:aa:34:be:51:0a:fb:67:7d:f9:e0:b9:ab:4b:fa:3f:83:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:36:55 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a366f91c37f1758feacec39c49b70196bc43fe6a28a368917a356e99e5ce9f36, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ca:46:f2:90:05:63:51:62:64:46:34:3a:61: fa:7a:0d:9e:41:30:c2:b3:c9:ad:6e:14:74:02:37: 2d:ea:72:a9:89:20:36:ea:af:26:8e:6d:e9:65:ac: 75:08:a4:53:fa:f1:20:84:fc:4b:5b:2c:40:a3:46: f6:e5:3a:4e:a5:f3:de:6f:e4:61:85:de:65:dc:c0: 0a:7b:d7:02:46:c5:2f:22:da:e9:2a:bd:88:a4:51: 65:b6:fc:6d:31:69:64:3f:2b:75:f4:80:89:dd:c5: 0b:01:1b:f8:13:e9:1e:9e:e0:1b:41:9d:40:bc:e8: 68:1d:1d:f1:f4:a4:13:0f:19:c8:99:8f:a4:76:c8: 3b:dc:a7:f7:4d:fd:ee:67:47:c9:7e:28:a9:4c:5a: ff:25:b5:f7:c5:88:1e:a2:ee:65:8c:df:90:13:cc: 7a:19:4f:73:a9:17:af:53:b3:8b:9d:28:6d:8a:e1: c9:65:4c:fa:b6:32:4b:20:04:17:68:61:be:9e:c6: 87:e7:0e:76:1f:c6:2d:55:b9:74:c0:b7:a8:0f:01: 83:c5:8a:08:0a:aa:a5:3e:fa:6f:8c:21:40:45:72: cb:42:71:13:5d:50:39:01:6e:dd:13:13:d9:82:d7: 38:b0:1e:bf:1c:1d:21:a4:9f:35:c6:3f:d9:5a:58: b6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:50:29:EF:4C:CA:1C:0D:D0:35:63:7E:BA:9D:B1:F3:B6:46:79:14 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8317c013-1a64-4a11-ae08-8b880654e6a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3626::/47 Signature Algorithm: sha256WithRSAEncryption 97:da:74:31:97:be:be:be:47:9b:3d:cf:29:76:e5:36:9a:61: 47:a0:5f:78:d2:c4:51:51:b2:57:ba:39:31:f9:68:02:4e:c0: f8:e0:bb:6e:e2:eb:14:2a:fd:93:bb:40:a6:ae:d6:31:2d:de: 45:65:19:6b:d3:ed:f3:6a:0f:5d:50:8c:03:54:91:64:da:23: df:8e:49:cd:6a:33:4e:89:b8:79:39:b3:36:6e:ef:45:42:66: b1:0f:39:a5:d0:6a:36:62:5c:af:0d:c5:6c:33:d2:5e:c0:81: 20:32:54:29:d5:5e:5e:54:11:cf:80:be:f1:55:70:7a:33:b6: 5e:77:db:92:4f:02:0b:ef:6c:94:e5:ff:47:70:7d:32:95:70: 34:b7:d2:06:7a:9a:36:c0:b6:40:06:17:d8:38:f4:e2:41:2b: 9a:7c:9e:77:51:15:9d:ea:f8:57:bf:60:2d:d0:db:1a:60:57: d1:59:4b:77:0f:20:b0:71:25:f0:10:72:87:78:71:22:ce:15: a0:ab:ec:88:23:d9:76:5a:8d:d6:40:4c:95:1a:5a:4e:13:c5: f9:44:30:ff:8c:fe:6a:92:46:d5:6b:12:9a:92:15:7e:59:93: f8:02:b1:56:9d:68:df:dc:2f:27:68:c8:4d:86:4a:95:f3:0c: e8:cb:ec:b6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXTOSqjS+UQr7Z3354LmrS/o/gwEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAzNjU1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzY2ZjkxYzM3ZjE3NThmZWFjZWMzOWM0OWI3MDE5NmJj NDNmZTZhMjhhMzY4OTE3YTM1NmU5OWU1Y2U5ZjM2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOykbykAVjUWJkRjQ6Yfp6DZ5BMMKzya1uFHQCNy3qcqmJ IDbqryaObellrHUIpFP68SCE/EtbLECjRvblOk6l895v5GGF3mXcwAp71wJGxS8i 2ukqvYikUWW2/G0xaWQ/K3X0gIndxQsBG/gT6R6e4BtBnUC86GgdHfH0pBMPGciZ j6R2yDvcp/dN/e5nR8l+KKlMWv8ltffFiB6i7mWM35ATzHoZT3OpF69Ts4udKG2K 4cllTPq2MksgBBdoYb6exofnDnYfxi1VuXTAt6gPAYPFiggKqqU++m+MIUBFcstC cRNdUDkBbt0TE9mC1ziwHr8cHSGknzXGP9laWLabAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUclAp70zKHA3QNWN+up2x87ZGeRQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzgzMTdjMDEzLTFhNjQtNGExMS1hZTA4LThiODgwNjU0ZTZhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANiYwDQYJKoZIhvcNAQELBQADggEBAJfadDGXvr6+R5s9zyl25Taa YUegX3jSxFFRsle6OTH5aAJOwPjgu27i6xQq/ZO7QKau1jEt3kVlGWvT7fNqD11Q jANUkWTaI9+OSc1qM06JuHk5szZu70VCZrEPOaXQajZiXK8NxWwz0l7AgSAyVCnV Xl5UEc+AvvFVcHoztl5325JPAgvvbJTl/0dwfTKVcDS30gZ6mjbAtkAGF9g49OJB K5p8nndRFZ3q+Fe/YC3Q2xpgV9FZS3cPILBxJfAQcod4cSLOFaCr7Igj2XZajdZA TJUaWk4TxflEMP+M/mqSRtVrEpqSFX5Zk/gCsVadaN/cLydoyE2GSpXzDOjL7LY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:39 2025 by rpki-client