$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8e3d5fc3-c1fc-44b2-9d0f-3f63046f1c52.roa File: 8e3d5fc3-c1fc-44b2-9d0f-3f63046f1c52.roa (raw, json) Hash identifier: XrSsfGof1L/CVrAcDquxjO1twDxkedZ3A9YXfPRGoNA= Subject key identifier: DB:E3:03:B3:AF:3A:C1:7F:C6:26:85:99:98:EA:52:EA:B7:2D:98:48 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7B065ED2A52F2B8841C39A18270A781B6CE346C6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8e3d5fc3-c1fc-44b2-9d0f-3f63046f1c52.roa Signing time: Fri 31 Oct 2025 05:52:06 +0000 ROA not before: Fri 31 Oct 2025 05:52:06 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2e50::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:06:5e:d2:a5:2f:2b:88:41:c3:9a:18:27:0a:78:1b:6c:e3:46:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:52:06 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=d61a671801d7259d2c5510afc2678793cdc1f0b4e784a5f9c5c371de8ca4f2b5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:de:2f:93:9e:c0:f7:e0:22:5f:f1:37:d2: 78:dc:a2:5b:f9:7c:f4:4d:ea:3d:83:8c:b0:34:13: 98:19:b2:77:dd:a8:71:a0:dc:35:11:25:7a:89:f2: 58:77:7e:ca:e8:60:b1:0c:d4:98:df:50:da:8b:34: fc:07:e1:c1:5d:ce:a3:70:4d:90:8b:15:e4:dd:95: ad:c3:08:b2:8f:ed:f8:2e:0b:2b:ca:0a:aa:0c:83: 63:2f:c0:d4:45:b1:2b:9d:86:a8:fa:e4:20:26:3b: 36:3b:45:45:37:c2:aa:f2:e3:2f:f5:eb:aa:3e:7f: 1c:12:a9:66:2b:b0:78:a6:d3:45:c6:42:91:92:d8: 08:b8:46:34:d5:94:dc:f7:cc:87:e0:65:f6:04:84: 67:cb:51:1f:a0:07:aa:26:13:1b:0c:91:1a:84:a6: 82:1f:3c:ed:2b:37:85:75:85:c9:58:dc:ae:ac:02: 6a:a3:90:6c:51:11:b0:76:fe:8f:3f:90:98:ad:fa: 31:fc:60:1e:ae:9d:01:29:cc:c1:2f:25:f5:1e:4e: e9:72:e2:ce:57:f2:93:26:e3:90:f6:57:ad:ee:bc: 4d:39:8e:3e:82:a6:c6:e2:b1:91:7c:16:5f:4d:8c: f0:d6:f6:d3:9d:e3:ca:35:4f:d8:b1:e8:2e:74:c2: c2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E3:03:B3:AF:3A:C1:7F:C6:26:85:99:98:EA:52:EA:B7:2D:98:48 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8e3d5fc3-c1fc-44b2-9d0f-3f63046f1c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2e50::/45 Signature Algorithm: sha256WithRSAEncryption 66:d0:e6:a9:0f:a9:67:95:af:6e:7d:41:e2:92:da:e7:93:d2: 95:12:5d:17:d0:d9:51:54:92:3a:0f:e9:6f:1b:b4:91:92:e1: f2:37:a8:9b:7c:ca:a7:4d:1e:e0:14:5a:d8:cb:1b:f8:ae:52: 81:1a:a2:f9:65:07:d9:0b:17:3d:25:f0:76:90:54:97:7b:b7: ed:cf:c3:fb:f3:7b:40:b2:55:cd:05:99:76:aa:94:19:5e:7f: ad:fa:f5:85:5c:cd:37:a1:44:a8:96:e1:d4:9d:86:61:bf:06: 44:ca:10:2d:1e:9b:a6:97:7c:02:f3:12:72:28:69:6d:b5:ae: 02:e0:d1:35:79:f7:72:0b:89:d6:e4:75:ae:9d:95:3d:56:00: 99:c3:73:63:b7:dc:38:db:59:4f:5e:7c:3e:2b:2c:a5:04:da: 84:90:b5:be:d2:7f:49:fb:68:f6:fa:cf:2d:2a:2e:19:32:48: 71:76:65:f7:a7:c9:71:1f:39:5e:99:ff:69:97:11:1a:08:9e: 5e:38:d6:29:68:bb:d0:e6:7a:93:51:2f:07:96:c4:4c:11:56: 6f:74:13:48:99:f0:b1:87:f1:b9:29:4f:7a:9e:5d:76:f0:0b: 62:68:93:6f:6a:70:0f:f4:ce:82:bd:7b:f9:4a:3a:93:11:d6: 9b:42:23:1a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUewZe0qUvK4hBw5oYJwp4G2zjRsYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU1MjA2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjFhNjcxODAxZDcyNTlkMmM1NTEwYWZjMjY3ODc5M2Nk YzFmMGI0ZTc4NGE1ZjljNWMzNzFkZThjYTRmMmI1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiu94vk57A9+AiX/E30njcolv5fPRN6j2DjLA0E5gZsnfd qHGg3DURJXqJ8lh3fsroYLEM1JjfUNqLNPwH4cFdzqNwTZCLFeTdla3DCLKP7fgu CyvKCqoMg2MvwNRFsSudhqj65CAmOzY7RUU3wqry4y/166o+fxwSqWYrsHim00XG QpGS2Ai4RjTVlNz3zIfgZfYEhGfLUR+gB6omExsMkRqEpoIfPO0rN4V1hclY3K6s AmqjkGxREbB2/o8/kJit+jH8YB6unQEpzMEvJfUeTuly4s5X8pMm45D2V63uvE05 jj6CpsbisZF8Fl9NjPDW9tOd48o1T9ix6C50wsKPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2+MDs686wX/GJoWZmOpS6rctmEgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhlM2Q1ZmMzLWMxZmMtNDRiMi05ZDBmLTNmNjMwNDZmMWM1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALlAwDQYJKoZIhvcNAQELBQADggEBAGbQ5qkPqWeVr259QeKS2ueT 0pUSXRfQ2VFUkjoP6W8btJGS4fI3qJt8yqdNHuAUWtjLG/iuUoEaovllB9kLFz0l 8HaQVJd7t+3Pw/vze0CyVc0FmXaqlBlef6369YVczTehRKiW4dSdhmG/BkTKEC0e m6aXfALzEnIoaW21rgLg0TV593ILidbkda6dlT1WAJnDc2O33DjbWU9efD4rLKUE 2oSQtb7Sf0n7aPb6zy0qLhkySHF2ZfenyXEfOV6Z/2mXERoInl441ilou9DmepNR LweWxEwRVm90E0iZ8LGH8bkpT3qeXXbwC2Jok29qcA/0zoK9e/lKOpMR1ptCIxo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:21 2025 by rpki-client