$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d36556b-0d22-4382-b663-29dea691426d.roa File: 9d36556b-0d22-4382-b663-29dea691426d.roa (raw, json) Hash identifier: iasCsuY1hiIYun0sd4/eAUfihm2BG2efMsORc4NVG4o= Subject key identifier: D5:5E:69:E3:64:FC:8F:9E:43:72:87:F7:C6:9F:CF:34:60:A9:C5:CB Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 59B7FAE503DBAEDABFFB8D7E8CDFF8CE51EB3F77 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d36556b-0d22-4382-b663-29dea691426d.roa Signing time: Fri 31 Oct 2025 02:08:14 +0000 ROA not before: Fri 31 Oct 2025 02:08:14 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3fac::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b7:fa:e5:03:db:ae:da:bf:fb:8d:7e:8c:df:f8:ce:51:eb:3f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:08:14 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=aa88206211ebb77d969d1bd6a1f597104b1634b24233772704739500189c35f4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5a:b5:a9:68:b2:4f:9b:10:bd:bb:e7:87:6b: a5:22:99:3f:7c:e8:c7:75:94:1d:de:8a:69:fb:0d: bc:e3:31:aa:af:2e:7e:64:73:58:18:d5:bd:b6:8b: c6:18:93:d7:e8:3b:e4:43:7a:4a:2c:1e:c3:db:bf: 0f:ed:1e:d6:8a:f3:f1:f9:87:5f:b2:79:cb:7f:f6: 88:bd:8d:f4:0c:ef:9a:0e:ac:52:8a:cc:10:75:94: 0b:56:80:81:e3:2c:a6:dd:87:ff:02:22:c3:c5:e6: be:3b:fd:b1:5d:c1:9c:88:98:08:40:2f:7b:c8:13: 93:54:76:69:55:6d:0d:50:31:77:b5:56:67:3d:d5: c3:97:18:20:39:81:61:71:7b:23:91:41:39:65:02: a5:4b:7a:91:e3:1b:e2:eb:80:f8:e5:ab:f9:c6:31: 5b:bf:df:23:39:d5:65:4a:12:50:c8:e5:27:d3:1f: 40:14:5b:94:05:8c:06:4c:83:38:63:9c:51:18:16: 4d:16:48:46:01:54:47:e6:b5:2a:4c:18:4b:83:7f: 2a:d0:ad:05:80:5e:b0:0b:b8:70:75:18:fa:9e:df: 2e:a3:b2:19:02:f3:ef:2f:e3:01:27:89:8c:53:6a: d6:1e:97:49:95:fe:f5:76:06:4a:3a:07:52:7d:db: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5E:69:E3:64:FC:8F:9E:43:72:87:F7:C6:9F:CF:34:60:A9:C5:CB X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9d36556b-0d22-4382-b663-29dea691426d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3fac::/47 Signature Algorithm: sha256WithRSAEncryption 69:f6:23:a7:c9:df:b8:4d:2a:b3:06:bf:21:d1:a3:ab:19:c1: 46:95:2f:aa:13:a9:ff:68:ab:f0:d2:b0:a7:2c:95:d5:66:a0: 46:62:a5:d8:f4:0c:dd:37:c5:81:2d:68:a4:e6:a6:e1:82:f0: b7:8b:ca:97:ff:cd:dd:22:b6:90:fd:72:97:37:02:6f:ba:e9: 81:b5:b5:4b:dc:8e:b0:29:ac:37:45:70:e4:89:e6:8a:fe:94: 2d:16:37:cf:28:1f:b8:e8:95:d4:7f:87:77:97:b9:95:dd:5d: ff:6c:0c:cf:b0:80:42:f2:10:c0:f8:73:0f:e4:36:45:f9:59: b8:12:a8:a1:bb:ad:7c:32:0c:82:2f:10:5b:f4:49:71:a4:9b: d5:90:b9:eb:70:ec:1c:23:a5:9e:35:54:b9:d5:83:64:13:fb: 00:49:01:69:79:8e:53:e2:44:ad:45:bc:3c:0a:a3:4d:88:d9: c4:f8:b8:87:9f:62:57:f9:b8:53:11:8d:e3:d1:26:55:aa:a1: 0f:71:1c:42:59:15:e7:b6:d9:0a:5e:e3:20:18:60:2b:a6:49: 88:30:2e:78:15:86:f8:18:e0:9e:fb:45:7a:2d:70:da:b0:7b: 35:2d:70:bd:fe:72:88:b7:d8:19:82:b9:25:28:f6:7e:3a:2a: 37:f6:2d:1f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWbf65QPbrtq/+41+jN/4zlHrP3cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDIwODE0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTg4MjA2MjExZWJiNzdkOTY5ZDFiZDZhMWY1OTcxMDRi MTYzNGIyNDIzMzc3MjcwNDczOTUwMDE4OWMzNWY0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoWrWpaLJPmxC9u+eHa6UimT986Md1lB3eimn7DbzjMaqv Ln5kc1gY1b22i8YYk9foO+RDekosHsPbvw/tHtaK8/H5h1+yect/9oi9jfQM75oO rFKKzBB1lAtWgIHjLKbdh/8CIsPF5r47/bFdwZyImAhAL3vIE5NUdmlVbQ1QMXe1 Vmc91cOXGCA5gWFxeyORQTllAqVLepHjG+LrgPjlq/nGMVu/3yM51WVKElDI5SfT H0AUW5QFjAZMgzhjnFEYFk0WSEYBVEfmtSpMGEuDfyrQrQWAXrALuHB1GPqe3y6j shkC8+8v4wEniYxTatYel0mV/vV2Bko6B1J927BvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1V5p42T8j55Dcof3xp/PNGCpxcswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzlkMzY1NTZiLTBkMjItNDM4Mi1iNjYzLTI5ZGVhNjkxNDI2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAP6wwDQYJKoZIhvcNAQELBQADggEBAGn2I6fJ37hNKrMGvyHRo6sZ wUaVL6oTqf9oq/DSsKcsldVmoEZipdj0DN03xYEtaKTmpuGC8LeLypf/zd0itpD9 cpc3Am+66YG1tUvcjrAprDdFcOSJ5or+lC0WN88oH7joldR/h3eXuZXdXf9sDM+w gELyEMD4cw/kNkX5WbgSqKG7rXwyDIIvEFv0SXGkm9WQuetw7BwjpZ41VLnVg2QT +wBJAWl5jlPiRK1FvDwKo02I2cT4uIefYlf5uFMRjePRJlWqoQ9xHEJZFee22Qpe 4yAYYCumSYgwLngVhvgY4J77RXotcNqwezUtcL3+coi32BmCuSUo9n46Kjf2LR8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:54 2025 by rpki-client