$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d385e80-9fba-47b1-8536-9ef1dabd79c3.roa File: 8d385e80-9fba-47b1-8536-9ef1dabd79c3.roa (raw, json) Hash identifier: 5GCtJqTw2yyMLfmLc+mwGarnYvBEd9087t82ZnKiiQE= Subject key identifier: E0:3E:17:37:D1:C2:E7:DD:49:FE:D9:EA:9F:8A:60:49:C5:11:7C:12 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 56C359649A8AF89E5368DCE38CC3A0659C2BA2FD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d385e80-9fba-47b1-8536-9ef1dabd79c3.roa Signing time: Fri 31 Oct 2025 06:08:30 +0000 ROA not before: Fri 31 Oct 2025 06:08:30 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3790::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c3:59:64:9a:8a:f8:9e:53:68:dc:e3:8c:c3:a0:65:9c:2b:a2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:08:30 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=41c512c1cd363252c77c3ddba3f5af45d0d9d3e20353ac1e81813a1bb8b04151, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:c1:59:53:fa:70:d0:b2:b2:06:19:17:4c: 8b:d7:3c:9f:99:9c:03:ba:66:82:16:d2:c5:85:50: 62:f1:11:6d:a9:91:3e:f1:04:7f:29:56:56:0e:c8: 99:b2:cf:6b:bd:26:25:80:1d:28:14:c7:aa:1a:f6: 8b:3d:50:6e:0c:09:38:e6:54:18:4c:c0:1a:15:37: d2:4f:45:1f:a5:dd:fc:c8:8f:23:3c:fc:dc:93:ae: 86:78:fb:22:a7:9e:f1:55:7e:78:23:03:06:85:f8: 66:84:91:db:3d:7f:41:74:1d:97:c6:78:e5:a5:9c: e8:b7:d2:0b:ac:30:99:3d:51:2a:21:35:3e:32:e2: 2b:64:1d:95:97:44:b0:55:21:b2:c9:5c:32:f3:be: 6e:96:7d:c2:32:8e:3e:7f:76:31:08:df:cc:01:02: f6:17:51:d8:61:11:73:ae:b2:bc:2b:4e:4e:4f:0e: 02:48:d0:f2:e5:c4:f6:3c:6c:f8:ab:35:91:91:f9: 3e:46:e8:35:fd:3b:65:c3:90:ad:af:ce:b2:f4:5a: ec:c3:ff:51:87:0a:0a:20:93:3c:0d:a9:8e:67:55: 64:47:09:f2:5c:0c:b8:df:ac:af:d6:d0:3c:ac:71: 7d:72:86:4b:12:ab:21:b0:2b:99:07:a8:d0:1a:b1: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3E:17:37:D1:C2:E7:DD:49:FE:D9:EA:9F:8A:60:49:C5:11:7C:12 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8d385e80-9fba-47b1-8536-9ef1dabd79c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3790::/45 Signature Algorithm: sha256WithRSAEncryption 9b:44:7a:4c:c4:f5:75:c2:8d:5b:e3:9e:8b:2b:dc:b8:1f:fc: f2:84:a5:fd:cb:15:9c:84:ae:ca:60:e8:a1:e1:95:dd:c3:fc: 3e:2f:44:72:d0:dc:04:96:97:e9:74:8b:eb:d7:ce:21:1a:cd: 49:53:2a:6c:3f:30:a8:17:3f:4a:81:00:b7:8e:2b:93:e4:d8: bd:75:13:3e:55:c6:0f:d7:a1:34:44:ed:1f:b6:6a:6a:a0:54: 25:eb:7e:19:7f:1e:a3:57:7f:17:a7:ab:e3:02:58:8f:9a:df: 13:4b:e7:a8:f9:18:95:45:15:f1:a4:e9:44:5d:c9:4c:d6:47: 9e:b0:c6:8b:17:ea:07:49:17:d1:c6:26:43:bb:ed:6d:4e:84: 54:ad:dd:ab:78:4b:5e:c6:f5:43:05:d0:2c:45:a6:78:18:05: 3a:01:c5:54:58:1a:c4:2a:68:f1:9a:1f:fb:28:eb:3f:09:f6: 72:3f:ba:81:f4:be:da:66:8b:a5:c8:13:a9:d8:6e:a9:2b:01: 6f:d2:e9:ca:10:8c:29:d7:32:dc:90:48:f9:d6:63:ae:7d:5c: 25:66:61:0f:0a:69:23:7d:05:32:71:dc:45:84:08:5c:06:2f: 7a:ac:49:34:93:d8:c3:24:a4:ef:77:7a:a1:f7:3d:bb:5e:ac: 74:33:9d:a4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVsNZZJqK+J5TaNzjjMOgZZwrov0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYwODMwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MWM1MTJjMWNkMzYzMjUyYzc3YzNkZGJhM2Y1YWY0NWQw ZDlkM2UyMDM1M2FjMWU4MTgxM2ExYmI4YjA0MTUxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHWsFZU/pw0LKyBhkXTIvXPJ+ZnAO6ZoIW0sWFUGLxEW2p kT7xBH8pVlYOyJmyz2u9JiWAHSgUx6oa9os9UG4MCTjmVBhMwBoVN9JPRR+l3fzI jyM8/NyTroZ4+yKnnvFVfngjAwaF+GaEkds9f0F0HZfGeOWlnOi30gusMJk9USoh NT4y4itkHZWXRLBVIbLJXDLzvm6WfcIyjj5/djEI38wBAvYXUdhhEXOusrwrTk5P DgJI0PLlxPY8bPirNZGR+T5G6DX9O2XDkK2vzrL0WuzD/1GHCgogkzwNqY5nVWRH CfJcDLjfrK/W0DyscX1yhksSqyGwK5kHqNAasbdFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4D4XN9HC591J/tnqn4pgScURfBIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhkMzg1ZTgwLTlmYmEtNDdiMS04NTM2LTllZjFkYWJkNzljMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAN5AwDQYJKoZIhvcNAQELBQADggEBAJtEekzE9XXCjVvjnosr3Lgf /PKEpf3LFZyErspg6KHhld3D/D4vRHLQ3ASWl+l0i+vXziEazUlTKmw/MKgXP0qB ALeOK5Pk2L11Ez5Vxg/XoTRE7R+2amqgVCXrfhl/HqNXfxenq+MCWI+a3xNL56j5 GJVFFfGk6URdyUzWR56wxosX6gdJF9HGJkO77W1OhFSt3at4S17G9UMF0CxFpngY BToBxVRYGsQqaPGaH/so6z8J9nI/uoH0vtpmi6XIE6nYbqkrAW/S6coQjCnXMtyQ SPnWY659XCVmYQ8KaSN9BTJx3EWECFwGL3qsSTST2MMkpO93eqH3PbterHQznaQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:06 2025 by rpki-client