$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b25fc34-b73c-476c-a71e-3f2597314872.roa File: 8b25fc34-b73c-476c-a71e-3f2597314872.roa (raw, json) Hash identifier: yGBgW8AFmBDC8ObJf5z9+gP7tql4fF480Dso9+0fj2A= Subject key identifier: 73:A4:B0:49:24:61:82:4E:DD:03:D4:23:A2:3C:C7:6B:E3:D3:A5:44 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 45DD952F06276DA0A2B46A386BE4C1E11740ECA8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b25fc34-b73c-476c-a71e-3f2597314872.roa Signing time: Fri 31 Oct 2025 04:58:29 +0000 ROA not before: Fri 31 Oct 2025 04:58:29 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f68::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:dd:95:2f:06:27:6d:a0:a2:b4:6a:38:6b:e4:c1:e1:17:40:ec:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:58:29 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=db54bdac2dbd840f530612ff9e876bfe9e44d2fc555d5a889b0858c274d4491d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:90:c9:93:77:97:88:0c:0e:1a:10:77:3d: 90:19:2a:87:28:6b:95:49:aa:02:d6:d5:bd:9d:13: fe:4a:79:94:cc:a6:0c:4c:80:48:d9:02:1f:93:11: a8:3e:11:76:9e:16:b7:52:88:ad:a0:36:1a:b6:61: 52:9e:26:f6:74:44:2d:dd:bc:97:05:fe:53:36:96: d6:7c:f4:ec:18:d3:93:fb:da:77:89:de:ba:b9:b9: e5:6e:34:55:79:d4:5e:59:22:0f:d2:c5:27:a5:3b: 42:b2:d7:28:72:28:6d:8d:05:10:28:d3:c3:7c:2c: 1d:80:df:f3:c2:fe:8c:b1:1b:02:67:63:fa:54:1c: 51:6f:97:92:5a:81:e3:e7:80:38:32:b9:36:95:03: ac:fb:16:2e:6f:da:cb:d8:e0:9e:7f:ec:ca:39:cb: 8e:3a:ad:62:32:81:68:ee:37:1c:d4:3c:b0:d8:c3: a9:d1:4f:ea:8e:c4:7f:26:63:c1:7d:49:18:f1:76: f1:a0:af:de:a0:50:71:1c:65:4a:b4:9d:96:80:ff: f0:ae:cd:50:08:94:f8:a0:e4:8b:10:b6:e0:2f:7b: f7:e3:17:4d:2c:49:0b:5e:23:4d:48:c4:70:4e:21: 17:0e:f7:37:1e:ad:37:5d:c2:3c:d5:d2:da:ea:a6: bc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A4:B0:49:24:61:82:4E:DD:03:D4:23:A2:3C:C7:6B:E3:D3:A5:44 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b25fc34-b73c-476c-a71e-3f2597314872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f68::/46 Signature Algorithm: sha256WithRSAEncryption 12:9c:ec:87:5f:63:1c:99:e6:b1:40:16:88:34:69:07:0e:83: 4a:48:62:9d:09:f4:b6:aa:8e:1c:5c:56:69:87:70:8e:9d:bb: 0c:28:e3:90:b9:fe:ba:bc:a8:e5:dc:b8:0c:45:c4:12:9b:5b: 55:2b:c0:6e:0f:eb:71:54:5e:db:d3:f7:f9:15:6b:2a:06:2d: 56:11:76:c0:a5:ee:23:56:33:55:39:75:b1:1b:14:a9:bc:f6: 4a:64:40:dd:d3:f2:8d:90:75:0d:59:bb:be:7d:2d:76:0d:bd: c0:d4:fe:e9:c3:c4:e1:e7:a0:69:a0:28:e5:7c:14:a0:bb:4a: 6c:bf:cf:ff:dc:82:1f:71:30:ba:1f:f9:f8:e2:7a:71:6c:29: 43:8f:31:4a:03:89:04:25:c9:de:58:2a:ed:8f:49:6e:ba:03: c0:e5:da:a9:df:67:3a:84:60:21:54:b8:54:0f:99:0e:d2:dc: 67:f5:c5:9e:02:9d:2e:13:a8:e4:d3:37:de:e4:f8:8c:4a:93: db:de:08:3f:ee:fb:6d:42:3c:d6:0f:3f:cb:21:1b:b0:92:cd: 5b:2a:59:4b:1f:ce:17:54:f0:1c:ae:2b:27:e2:41:53:5b:38: 8f:4b:76:2d:e3:c2:27:82:f8:dc:9d:20:5b:f8:ff:da:0f:23: 31:63:c0:83 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURd2VLwYnbaCitGo4a+TB4RdA7KgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ1ODI5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjU0YmRhYzJkYmQ4NDBmNTMwNjEyZmY5ZTg3NmJmZTll NDRkMmZjNTU1ZDVhODg5YjA4NThjMjc0ZDQ0OTFkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKhJDJk3eXiAwOGhB3PZAZKocoa5VJqgLW1b2dE/5KeZTM pgxMgEjZAh+TEag+EXaeFrdSiK2gNhq2YVKeJvZ0RC3dvJcF/lM2ltZ89OwY05P7 2neJ3rq5ueVuNFV51F5ZIg/SxSelO0Ky1yhyKG2NBRAo08N8LB2A3/PC/oyxGwJn Y/pUHFFvl5JagePngDgyuTaVA6z7Fi5v2svY4J5/7Mo5y446rWIygWjuNxzUPLDY w6nRT+qOxH8mY8F9SRjxdvGgr96gUHEcZUq0nZaA//CuzVAIlPig5IsQtuAve/fj F00sSQteI01IxHBOIRcO9zcerTddwjzV0trqprzfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUc6SwSSRhgk7dA9QjojzHa+PTpUQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhiMjVmYzM0LWI3M2MtNDc2Yy1hNzFlLTNmMjU5NzMxNDg3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAP2gwDQYJKoZIhvcNAQELBQADggEBABKc7IdfYxyZ5rFAFog0aQcO g0pIYp0J9LaqjhxcVmmHcI6duwwo45C5/rq8qOXcuAxFxBKbW1UrwG4P63FUXtvT 9/kVayoGLVYRdsCl7iNWM1U5dbEbFKm89kpkQN3T8o2QdQ1Zu759LXYNvcDU/unD xOHnoGmgKOV8FKC7Smy/z//cgh9xMLof+fjienFsKUOPMUoDiQQlyd5YKu2PSW66 A8Dl2qnfZzqEYCFUuFQPmQ7S3Gf1xZ4CnS4TqOTTN97k+IxKk9veCD/u+21CPNYP P8shG7CSzVsqWUsfzhdU8ByuKyfiQVNbOI9Ldi3jwieC+NydIFv4/9oPIzFjwIM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:59 2025 by rpki-client