$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a064791-b1b6-438b-b7f8-efacecbea859.roa File: 8a064791-b1b6-438b-b7f8-efacecbea859.roa (raw, json) Hash identifier: RIEV/+nYd+1F22xLYTpqahomF0U0eY608bZH5Z1CDOo= Subject key identifier: D7:22:9F:B8:69:34:DC:C0:FD:89:55:DC:1F:A8:95:FD:14:89:6F:56 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1100CC993EBFF3D5E505B5F4330DDED430096CB5 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a064791-b1b6-438b-b7f8-efacecbea859.roa Signing time: Fri 31 Oct 2025 00:23:41 +0000 ROA not before: Fri 31 Oct 2025 00:23:41 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:34fa::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:00:cc:99:3e:bf:f3:d5:e5:05:b5:f4:33:0d:de:d4:30:09:6c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:23:41 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=4c37e0ffb3222edb956051b604c0ab59ce6ae0659273965c0837e7a27d254552, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:75:f4:bd:e3:3a:b1:4e:2e:9c:c1:cf:6e:74: 38:e8:8f:7c:40:f0:43:99:f6:e9:2c:06:19:8d:73: 17:c8:9f:73:25:5f:ba:5d:f6:99:56:6d:fd:bd:76: 20:e3:35:b6:28:a8:ec:24:ed:84:78:f1:0c:14:11: ad:93:24:d6:b9:65:23:cb:f2:e3:14:67:52:12:a9: 4b:ff:82:1a:38:cb:a2:3e:c0:0b:6d:76:3a:cb:59: a6:45:36:bb:2c:01:1f:32:3d:ab:14:ba:aa:02:7e: ae:1f:9b:61:3e:3e:0b:b5:dc:72:bd:48:f0:96:d3: 08:f3:53:59:56:f6:b8:20:09:db:78:82:12:2f:5a: 71:aa:b2:ef:f1:b7:52:55:b4:66:ee:e3:57:53:7e: 89:61:2e:ad:5c:7e:eb:4d:79:56:df:5a:b7:60:e5: 33:8c:0c:68:5a:aa:1b:d5:a5:8c:cc:7c:9c:35:29: 7a:d8:e6:d7:b3:e3:56:cb:fa:1b:b0:2b:e3:90:3a: 53:ee:70:7a:16:3c:2f:ad:67:83:62:73:51:f1:03: 9a:8a:84:ec:f5:1c:94:db:10:0e:48:81:13:df:3b: 18:91:cf:cd:60:5b:31:5c:88:c4:fc:fb:3d:71:bc: 38:62:29:8e:8b:87:ca:8b:5e:cd:4c:d0:06:65:02: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:22:9F:B8:69:34:DC:C0:FD:89:55:DC:1F:A8:95:FD:14:89:6F:56 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8a064791-b1b6-438b-b7f8-efacecbea859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:34fa::/47 Signature Algorithm: sha256WithRSAEncryption b3:30:40:06:7b:ad:cc:d0:91:81:7a:be:a6:82:e6:b7:95:02: ef:ef:53:03:cc:fa:af:40:dd:b8:14:16:ad:f3:30:93:30:2f: 5c:64:04:ce:38:39:5f:6e:68:97:28:7e:57:c5:78:a9:d9:1c: 6f:e1:d8:78:db:b2:28:52:2e:ca:c0:9d:27:a0:2d:a7:2e:38: e2:81:00:d8:97:72:9d:19:9c:54:62:21:b5:75:5e:7b:c0:ea: 6c:57:63:61:85:3f:23:a8:98:92:4d:b3:11:02:94:bb:41:44: f0:3b:d6:35:f2:77:3a:40:78:7b:21:fe:58:0a:41:3d:24:a4: 37:ca:35:21:be:81:fb:6d:20:a1:cb:66:f1:c9:1d:95:58:0d: 86:28:40:f6:12:23:de:01:6d:d1:67:33:5a:ca:0f:bd:73:33: 6f:58:d9:37:de:18:74:35:10:87:65:20:0a:65:a5:7e:f3:ec: 86:f7:f0:e3:f4:b4:88:5e:dd:a7:e4:99:0e:a9:58:e3:69:09: 3a:9c:5c:30:64:98:57:e3:62:d3:53:89:18:4c:89:2c:d5:67: 93:ff:e5:8b:9d:44:1c:f3:4a:86:e2:08:ed:96:0a:9b:4c:c1: d9:ab:19:d6:b9:de:5a:72:0d:2a:31:3e:96:cd:48:5a:3f:b5: 5f:46:29:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEQDMmT6/89XlBbX0Mw3e1DAJbLUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAyMzQxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzM3ZTBmZmIzMjIyZWRiOTU2MDUxYjYwNGMwYWI1OWNl NmFlMDY1OTI3Mzk2NWMwODM3ZTdhMjdkMjU0NTUyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3dfS94zqxTi6cwc9udDjoj3xA8EOZ9uksBhmNcxfIn3Ml X7pd9plWbf29diDjNbYoqOwk7YR48QwUEa2TJNa5ZSPL8uMUZ1ISqUv/gho4y6I+ wAttdjrLWaZFNrssAR8yPasUuqoCfq4fm2E+Pgu13HK9SPCW0wjzU1lW9rggCdt4 ghIvWnGqsu/xt1JVtGbu41dTfolhLq1cfutNeVbfWrdg5TOMDGhaqhvVpYzMfJw1 KXrY5tez41bL+huwK+OQOlPucHoWPC+tZ4Nic1HxA5qKhOz1HJTbEA5IgRPfOxiR z81gWzFciMT8+z1xvDhiKY6Lh8qLXs1M0AZlAg9BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1yKfuGk03MD9iVXcH6iV/RSJb1YwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhhMDY0NzkxLWIxYjYtNDM4Yi1iN2Y4LWVmYWNlY2JlYTg1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANPowDQYJKoZIhvcNAQELBQADggEBALMwQAZ7rczQkYF6vqaC5reV Au/vUwPM+q9A3bgUFq3zMJMwL1xkBM44OV9uaJcoflfFeKnZHG/h2HjbsihSLsrA nSegLacuOOKBANiXcp0ZnFRiIbV1XnvA6mxXY2GFPyOomJJNsxEClLtBRPA71jXy dzpAeHsh/lgKQT0kpDfKNSG+gfttIKHLZvHJHZVYDYYoQPYSI94BbdFnM1rKD71z M29Y2TfeGHQ1EIdlIAplpX7z7Ib38OP0tIhe3afkmQ6pWONpCTqcXDBkmFfjYtNT iRhMiSzVZ5P/5YudRBzzSobiCO2WCptMwdmrGda53lpyDSoxPpbNSFo/tV9GKUY= -----END CERTIFICATE-----Generated at Wed Nov 5 09:34:55 2025 by rpki-client