$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fef6852-e724-49ae-9051-44df6042490d.roa File: 8fef6852-e724-49ae-9051-44df6042490d.roa (raw, json) Hash identifier: 36DQQfIDv6swEdoHSel4deNLG7odI8CSeqZVw637Bks= Subject key identifier: 07:94:A7:0D:31:C4:29:34:E5:D0:14:44:05:23:F3:6D:76:54:49:EE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 70F06086DA6D1DAAC3A2F7B6180F76AD548D33CD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fef6852-e724-49ae-9051-44df6042490d.roa Signing time: Fri 31 Oct 2025 07:37:05 +0000 ROA not before: Fri 31 Oct 2025 07:37:05 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1cc0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f0:60:86:da:6d:1d:aa:c3:a2:f7:b6:18:0f:76:ad:54:8d:33:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:37:05 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e15cc3d68848fd34bd5af37bd667e49870fa140e668e812ae5b22ade15d62c87, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:6a:6e:15:b8:ae:9d:d1:98:f8:70:b0:3f: 98:d7:6d:d7:86:a4:f9:f8:af:fd:47:ad:6e:58:42: ab:cc:6d:de:73:df:55:3f:fe:a6:b4:f9:ab:2b:86: 99:7b:07:6b:2d:e5:fd:b6:88:f0:61:77:a8:06:95: ce:32:bf:21:2b:7b:95:d6:bc:e7:40:0f:13:aa:b8: 7a:fd:66:3e:28:d4:b0:40:b4:fb:02:3d:76:c3:d0: 17:55:43:d9:b8:ff:e6:1b:b9:53:31:19:c7:67:53: ae:7d:84:b8:b6:a9:31:eb:3f:af:bc:f3:a1:ab:27: be:66:ae:c4:84:c4:bc:c3:67:43:fd:ce:11:42:a1: 43:97:e7:71:10:99:e5:52:8c:cf:67:51:00:e0:af: 67:31:03:37:86:05:9c:45:47:ca:a5:9c:ba:9b:42: 06:ec:25:60:19:69:05:3c:d7:e3:7c:25:bb:86:cc: 35:70:c8:82:37:64:53:81:b2:91:90:e2:cd:ae:71: 7d:8f:87:55:1e:43:d9:6b:9e:20:18:96:ee:f0:dc: 21:2f:1b:97:7c:87:27:1b:fe:ed:47:af:f9:b2:52: ca:68:48:ae:be:1e:4f:68:3c:40:4e:bd:2e:c2:38: a0:f0:2d:36:39:6d:56:1b:1c:a5:f3:3d:b0:65:5b: e6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:94:A7:0D:31:C4:29:34:E5:D0:14:44:05:23:F3:6D:76:54:49:EE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8fef6852-e724-49ae-9051-44df6042490d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1cc0::/42 Signature Algorithm: sha256WithRSAEncryption 5f:23:ad:a8:11:9c:5d:5e:f8:03:6c:a0:86:82:9a:92:5f:4a: 88:63:57:09:c2:16:16:79:67:c9:80:8f:e6:c1:8a:ee:84:18: c5:0f:d0:ea:75:9c:69:66:a5:19:8b:f9:a2:2c:b2:c3:e3:33: 7a:1c:b5:62:f8:6e:98:32:50:fd:be:42:92:ae:8f:fa:ed:33: fa:7a:ab:be:01:6b:97:f5:86:07:92:60:0b:a0:c8:5d:96:ab: c5:f6:41:d8:4a:34:f3:ac:3f:ee:3d:c2:ae:81:d6:a7:86:d5: 4d:20:27:5a:2b:84:78:60:92:42:97:05:11:7d:1b:16:43:5b: 5b:8e:ab:82:7a:f2:3f:1f:a2:79:28:db:53:c2:a8:77:e2:ed: d6:75:2d:4e:d6:19:ec:26:0b:a3:9d:ec:9a:02:e7:23:38:01: b0:76:cb:da:e6:de:f2:dc:23:58:c0:9a:8f:a7:6d:1e:e1:e0: 7e:87:04:2e:4b:4b:1d:b9:36:ef:ec:fc:20:5e:cf:b1:ca:3d: 64:53:ef:ab:33:13:50:37:b6:57:99:43:74:16:73:12:7c:2b: fe:3d:ff:4f:3b:16:da:d3:b9:3a:72:66:ba:c3:4b:ef:ae:de: 88:27:93:64:98:85:ee:27:b7:02:71:0c:b2:09:d6:db:f7:0f: b6:07:59:13 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcPBghtptHarDove2GA92rVSNM80wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDczNzA1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTVjYzNkNjg4NDhmZDM0YmQ1YWYzN2JkNjY3ZTQ5ODcw ZmExNDBlNjY4ZTgxMmFlNWIyMmFkZTE1ZDYyYzg3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGnGpuFbiundGY+HCwP5jXbdeGpPn4r/1HrW5YQqvMbd5z 31U//qa0+asrhpl7B2st5f22iPBhd6gGlc4yvyEre5XWvOdADxOquHr9Zj4o1LBA tPsCPXbD0BdVQ9m4/+YbuVMxGcdnU659hLi2qTHrP6+886GrJ75mrsSExLzDZ0P9 zhFCoUOX53EQmeVSjM9nUQDgr2cxAzeGBZxFR8qlnLqbQgbsJWAZaQU81+N8JbuG zDVwyII3ZFOBspGQ4s2ucX2Ph1UeQ9lrniAYlu7w3CEvG5d8hycb/u1Hr/myUspo SK6+Hk9oPEBOvS7COKDwLTY5bVYbHKXzPbBlW+bVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUB5SnDTHEKTTl0BREBSPzbXZUSe4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzhmZWY2ODUyLWU3MjQtNDlhZS05MDUxLTQ0ZGY2MDQyNDkwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAJAAHMAwDQYJKoZIhvcNAQELBQADggEBAF8jragRnF1e+ANsoIaCmpJf SohjVwnCFhZ5Z8mAj+bBiu6EGMUP0Op1nGlmpRmL+aIsssPjM3octWL4bpgyUP2+ QpKuj/rtM/p6q74Ba5f1hgeSYAugyF2Wq8X2QdhKNPOsP+49wq6B1qeG1U0gJ1or hHhgkkKXBRF9GxZDW1uOq4J68j8fonko21PCqHfi7dZ1LU7WGewmC6Od7JoC5yM4 AbB2y9rm3vLcI1jAmo+nbR7h4H6HBC5LSx25Nu/s/CBez7HKPWRT76szE1A3tleZ Q3QWcxJ8K/49/087FtrTuTpyZrrDS++u3ognk2SYhe4ntwJxDLIJ1tv3D7YHWRM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:58:53 2025 by rpki-client