$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8863a8eb-1927-44ad-af9d-3419319ffd76.roa File: 8863a8eb-1927-44ad-af9d-3419319ffd76.roa (raw, json) Hash identifier: 8ux39+DlyE+yn8ScwAUnYkIFnLXOdF4jKqnGmy44SY4= Subject key identifier: B4:EF:CA:57:B3:14:A1:1D:14:82:CD:53:1E:8D:7E:83:F9:CE:7C:03 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3BC865A6865B3DA7B2135E1C458025590AB60584 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8863a8eb-1927-44ad-af9d-3419319ffd76.roa Signing time: Thu 30 Oct 2025 20:37:09 +0000 ROA not before: Thu 30 Oct 2025 20:37:09 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1240::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c8:65:a6:86:5b:3d:a7:b2:13:5e:1c:45:80:25:59:0a:b6:05:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:37:09 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=dfba00e74ddebd83eae72860bd47ec6b2f9784f8fbe8cd4e66efe25acf6a12d0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:5e:ff:65:32:43:cb:36:cb:66:e7:f0:36: f6:4e:40:a8:35:64:5c:cf:2e:5d:97:65:6a:35:cd: dc:36:e0:2d:f9:e7:7e:50:58:24:ea:a8:8d:1d:93: 66:49:e7:ec:8c:0d:96:48:32:58:0c:fc:db:3a:97: eb:ac:d5:6a:6f:da:e4:8e:db:bd:de:6e:09:1c:be: 3c:db:71:28:9c:1a:71:56:bd:17:1a:61:a4:57:98: 47:5f:c7:3d:58:4c:dc:ce:88:e5:72:50:b6:75:96: 0d:41:dd:30:41:6c:08:9c:f3:96:1d:cd:bc:76:e4: 27:71:9e:01:af:79:52:b9:e7:c8:ab:4e:92:af:59: fb:5c:f0:69:ba:73:d9:2f:a3:93:df:f9:ea:0b:db: fd:15:26:85:0f:b8:27:e6:79:e1:04:8f:c0:1d:0e: 38:30:14:ec:8e:65:58:e0:cc:88:05:f6:4a:86:81: 46:4d:9f:de:cb:f3:a1:a7:14:39:b2:4f:37:4a:a7: 61:cf:48:da:1d:70:9e:4e:c6:7a:63:22:bb:4a:a0: 70:73:19:76:71:54:79:d2:5e:de:44:ac:35:a0:dc: 7b:89:19:00:22:89:15:d6:17:85:2a:10:16:bc:57: 9a:d7:e7:a0:5a:d3:47:f9:21:20:10:65:97:de:e0: d0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EF:CA:57:B3:14:A1:1D:14:82:CD:53:1E:8D:7E:83:F9:CE:7C:03 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8863a8eb-1927-44ad-af9d-3419319ffd76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1240::/47 Signature Algorithm: sha256WithRSAEncryption a7:93:e1:43:54:d9:ea:4a:c8:09:b9:71:59:fd:94:96:1d:bd: 6c:6a:7d:2b:9e:81:7f:2a:19:d1:56:d6:0d:ee:79:e4:0e:80: de:7b:f5:be:1d:0f:05:43:50:6d:9b:d6:2e:95:2b:07:89:ec: 0b:57:87:43:ec:c9:4c:62:38:af:92:17:4d:ab:3a:46:38:13: 7c:50:63:0c:0e:4f:f6:4d:85:38:af:ae:de:ab:93:e3:e9:ce: 63:58:63:45:f2:61:22:1a:52:49:41:19:3f:5a:86:da:e8:5f: 5f:71:93:b8:94:c2:33:78:92:c9:a0:6c:6b:e7:1c:2f:d2:5d: 96:91:94:b8:f2:d4:58:27:0e:07:33:ae:47:bc:4c:21:65:42: 9e:23:60:f1:01:1c:46:33:02:21:23:a1:4b:f8:b6:4e:d2:7b: 15:55:2a:94:d9:77:74:6f:63:d1:e2:04:1a:d8:a4:d1:bb:1d: 27:31:73:bf:3b:21:6e:a0:89:c3:05:89:d6:b4:42:29:ef:d2: 82:38:cb:fb:a7:fe:1f:f6:6b:4b:cc:a8:65:a3:76:cf:ef:e5: ed:ec:d8:55:b5:53:7a:1e:fa:54:08:b2:b3:3f:40:ef:6e:0f: 97:57:ea:41:3e:33:f5:92:50:6c:53:ff:34:6a:9c:ac:18:20: 5d:8a:5e:42 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUO8hlpoZbPaeyE14cRYAlWQq2BYQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjAzNzA5WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmJhMDBlNzRkZGViZDgzZWFlNzI4NjBiZDQ3ZWM2YjJm OTc4NGY4ZmJlOGNkNGU2NmVmZTI1YWNmNmExMmQwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4qF7/ZTJDyzbLZufwNvZOQKg1ZFzPLl2XZWo1zdw24C35 535QWCTqqI0dk2ZJ5+yMDZZIMlgM/Ns6l+us1Wpv2uSO273ebgkcvjzbcSicGnFW vRcaYaRXmEdfxz1YTNzOiOVyULZ1lg1B3TBBbAic85Ydzbx25CdxngGveVK558ir TpKvWftc8Gm6c9kvo5Pf+eoL2/0VJoUPuCfmeeEEj8AdDjgwFOyOZVjgzIgF9kqG gUZNn97L86GnFDmyTzdKp2HPSNodcJ5OxnpjIrtKoHBzGXZxVHnSXt5ErDWg3HuJ GQAiiRXWF4UqEBa8V5rX56Ba00f5ISAQZZfe4NBTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtO/KV7MUoR0Ugs1THo1+g/nOfAMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg4NjNhOGViLTE5MjctNDRhZC1hZjlkLTM0MTkzMTlmZmQ3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAEkAwDQYJKoZIhvcNAQELBQADggEBAKeT4UNU2epKyAm5cVn9lJYd vWxqfSuegX8qGdFW1g3ueeQOgN579b4dDwVDUG2b1i6VKweJ7AtXh0PsyUxiOK+S F02rOkY4E3xQYwwOT/ZNhTivrt6rk+PpzmNYY0XyYSIaUklBGT9ahtroX19xk7iU wjN4ksmgbGvnHC/SXZaRlLjy1FgnDgczrke8TCFlQp4jYPEBHEYzAiEjoUv4tk7S exVVKpTZd3RvY9HiBBrYpNG7HScxc787IW6gicMFida0Qinv0oI4y/un/h/2a0vM qGWjds/v5e3s2FW1U3oe+lQIsrM/QO9uD5dX6kE+M/WSUGxT/zRqnKwYIF2KXkI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:36 2025 by rpki-client