$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b8f38fc-3dae-42ba-94e4-d10993e2848b.roa File: 8b8f38fc-3dae-42ba-94e4-d10993e2848b.roa (raw, json) Hash identifier: 1n19YQeVzRCaKV+ldoqC2DzOX2dUl51tV7YtEwhFuls= Subject key identifier: 1F:BD:31:82:16:0E:59:37:66:9C:39:49:E0:A5:C0:6B:11:E1:04:77 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 36AE9E34064EAF090EAB421ABF5B5932EFF927 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b8f38fc-3dae-42ba-94e4-d10993e2848b.roa Signing time: Fri 31 Oct 2025 06:23:59 +0000 ROA not before: Fri 31 Oct 2025 06:23:59 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3eb0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ae:9e:34:06:4e:af:09:0e:ab:42:1a:bf:5b:59:32:ef:f9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:23:59 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=2b0e575684157c394cef9c2e2743ba0ce75c10abf0bf04a430b651ba05802ee6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:83:07:40:22:01:59:bc:0e:0b:8a:76:6d:d7: 61:1e:a5:66:47:38:e9:ed:ef:f7:96:bb:cf:91:8f: d9:86:50:43:e5:e7:9c:a9:24:69:84:c8:ad:0b:1f: f1:f3:e7:9a:f6:92:c7:4a:df:29:10:b1:dc:a1:b9: b1:fc:70:e2:ee:ce:b8:1c:ae:f7:8c:1e:a7:1b:10: 99:72:48:e1:b6:bb:1f:46:2f:1d:19:61:a0:52:35: 67:cf:05:e5:88:03:24:f8:34:fe:70:58:f9:be:83: 12:6a:06:2a:a4:6d:6e:05:a9:6e:6f:4f:03:08:f5: 07:1d:68:2d:71:6d:73:9b:e0:87:2a:1f:b6:64:2c: 7a:5a:60:5d:97:7c:60:c3:e7:f2:6a:b5:90:d2:5d: 22:14:3b:7f:a2:e8:fe:4c:43:7f:11:53:20:15:3c: 26:0a:aa:de:cc:24:24:7d:85:4e:98:ad:d4:d7:26: e0:20:5e:5d:e9:ee:ec:d9:f4:86:32:27:d3:3e:ec: b9:cc:c8:f6:2d:a2:6c:11:df:88:46:b9:db:0a:69: 03:c0:63:d9:8d:2c:2f:11:85:73:74:57:49:04:22: 5a:2a:d6:52:3a:bb:d2:10:41:d7:fb:c0:30:d6:1c: bb:8c:f4:b8:d0:6a:a4:5e:89:06:7c:6c:92:86:85: 24:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BD:31:82:16:0E:59:37:66:9C:39:49:E0:A5:C0:6B:11:E1:04:77 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8b8f38fc-3dae-42ba-94e4-d10993e2848b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3eb0::/45 Signature Algorithm: sha256WithRSAEncryption bc:01:57:ac:65:0b:4a:dd:e5:6a:ae:7f:d2:83:4a:a6:c8:50: 15:10:48:74:6e:a1:2e:51:52:5e:5e:f2:8d:e8:e9:d7:dd:82: ed:47:64:9b:6f:bd:b5:7d:43:82:98:c7:6e:4e:6c:18:60:23: 46:3a:e2:7b:be:c8:1a:31:b3:da:24:df:1f:b0:e7:a5:8e:a3: d4:fe:b9:a7:46:06:17:1e:db:08:91:aa:6c:74:b9:7c:8e:4b: f7:0c:b2:85:19:54:29:68:bd:e9:1b:7a:67:2b:2a:b9:ee:5f: e2:06:b2:a7:71:ee:09:bf:a6:c8:4e:13:e3:00:90:d7:6e:b3: 1f:90:d2:d3:cc:1a:90:eb:37:a5:d9:69:d7:2e:f8:76:70:58: 54:fe:45:aa:e0:43:54:61:5b:8a:94:53:e5:45:a2:d4:ca:ce: 0d:2a:4d:4d:f8:03:c7:cb:cc:38:35:5e:5b:80:24:78:a5:8b: 52:20:f8:0a:57:de:77:91:71:f6:57:77:aa:c7:a3:79:38:2f: e2:77:15:c1:8a:25:e7:7a:3a:34:82:8b:e5:6d:71:b8:fd:06: d6:6e:5a:81:92:ec:8a:13:ff:5f:c0:3d:e2:c3:e6:08:cb:72: 0d:88:21:ae:b1:74:96:83:8a:6d:4c:1b:ab:46:d4:57:ad:13: 6b:ea:4b:c7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITNq6eNAZOrwkOq0Iav1tZMu/5JzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTEwMzEwNjIzNTlaFw0yNTEyMDUyMzU5NTla MHoxSTBHBgNVBAUTQDJiMGU1NzU2ODQxNTdjMzk0Y2VmOWMyZTI3NDNiYTBjZTc1 YzEwYWJmMGJmMDRhNDMwYjY1MWJhMDU4MDJlZTYxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAO2DB0AiAVm8DguKdm3XYR6lZkc46e3v95a7z5GP2YZQQ+Xn nKkkaYTIrQsf8fPnmvaSx0rfKRCx3KG5sfxw4u7OuByu94wepxsQmXJI4ba7H0Yv HRlhoFI1Z88F5YgDJPg0/nBY+b6DEmoGKqRtbgWpbm9PAwj1Bx1oLXFtc5vghyof tmQselpgXZd8YMPn8mq1kNJdIhQ7f6Lo/kxDfxFTIBU8Jgqq3swkJH2FTpit1Ncm 4CBeXenu7Nn0hjIn0z7suczI9i2ibBHfiEa52wppA8Bj2Y0sLxGFc3RXSQQiWirW Ujq70hBB1/vAMNYcu4z0uNBqpF6JBnxskoaFJCkCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBQfvTGCFg5ZN2acOUngpcBrEeEEdzAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvOGI4ZjM4ZmMtM2RhZS00MmJhLTk0ZTQtZDEwOTkzZTI4NDhiLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHAyYAkAA+sDANBgkqhkiG9w0BAQsFAAOCAQEAvAFXrGULSt3laq5/0oNKpshQ FRBIdG6hLlFSXl7yjejp192C7Udkm2+9tX1DgpjHbk5sGGAjRjrie77IGjGz2iTf H7DnpY6j1P65p0YGFx7bCJGqbHS5fI5L9wyyhRlUKWi96Rt6Zysque5f4gayp3Hu Cb+myE4T4wCQ126zH5DS08wakOs3pdlp1y74dnBYVP5FquBDVGFbipRT5UWi1MrO DSpNTfgDx8vMODVeW4AkeKWLUiD4Clfed5Fx9ld3qsejeTgv4ncVwYol53o6NIKL 5W1xuP0G1m5agZLsihP/X8A94sPmCMtyDYghrrF0loOKbUwbq0bUV60Ta+pLxw== -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:03 2025 by rpki-client