$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a39316a1-12df-4c42-a647-5cdeab80f617.roa File: a39316a1-12df-4c42-a647-5cdeab80f617.roa (raw, json) Hash identifier: M18zoD2jcKLUsaJIuBNhw0HHMUaHCLDxmW7S60WAO2Q= Subject key identifier: 31:71:35:9B:F0:D5:FA:CD:CB:21:38:C3:F3:1A:38:D6:2A:F0:E7:03 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 04402CE84291D1731A1BC4E6082E136384CF2C47 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a39316a1-12df-4c42-a647-5cdeab80f617.roa Signing time: Fri 31 Oct 2025 05:27:06 +0000 ROA not before: Fri 31 Oct 2025 05:27:06 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1c40::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:40:2c:e8:42:91:d1:73:1a:1b:c4:e6:08:2e:13:63:84:cf:2c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:27:06 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=9f8aa721950d3c6aaf9fcdd6f60e5ebd7b7028c66cc3452ad86deb2ad1927125, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:bf:90:e1:60:af:d4:91:2f:0d:e2:ab:1e: a5:9e:04:cc:2b:71:f9:cb:cf:c8:cc:13:05:af:a6: 88:34:1f:80:1d:c9:c1:3a:a9:7a:bf:b4:e8:93:3d: b6:ea:13:e6:6c:9e:29:e3:c1:62:da:96:10:a2:fe: e9:89:f3:34:67:57:4e:21:f9:3a:df:64:dd:ab:17: 33:55:e6:27:3e:58:4e:34:80:00:93:c1:e5:1e:bc: 5a:5a:e0:89:ec:3b:bf:88:fb:e2:fe:3e:a9:33:eb: ed:1b:f3:93:25:b1:1c:b2:82:1e:4b:32:ff:64:17: 04:51:3a:0f:0a:3c:4b:44:28:40:28:26:cf:31:51: 17:d7:3e:47:12:3a:9c:41:5c:ef:24:de:41:73:8d: fa:a3:87:f0:26:76:73:51:1b:79:80:5b:46:6d:5c: 2a:af:ff:8f:a3:51:86:f9:b9:55:e8:34:24:fa:5e: 0f:19:7f:49:a9:3a:b4:c8:d9:e7:24:69:d4:b1:b1: 6c:52:17:53:23:6f:6b:64:ca:3b:76:42:a9:df:5c: 3b:94:e3:f4:88:3e:7a:5b:20:20:0f:cb:eb:be:ef: 59:a0:76:06:3a:cc:65:9d:cc:db:37:6f:e2:bd:98: 3d:f2:89:a0:94:9c:8c:5e:e9:7c:70:d3:9e:44:04: 93:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:71:35:9B:F0:D5:FA:CD:CB:21:38:C3:F3:1A:38:D6:2A:F0:E7:03 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a39316a1-12df-4c42-a647-5cdeab80f617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1c40::/45 Signature Algorithm: sha256WithRSAEncryption 71:fa:63:77:1b:0b:61:d8:55:d5:6a:8b:96:7a:60:df:75:9d: db:dd:84:fb:1f:a0:a4:e7:77:8a:4e:66:9e:70:99:d1:2a:aa: 48:94:e2:9c:ec:d1:05:94:3d:da:7f:5f:aa:d4:b1:53:5c:01: 09:83:7b:a0:2b:9b:9b:f0:23:3d:9b:0b:e6:03:3e:74:be:3e: 84:77:27:94:05:a4:cc:6f:47:82:3e:b6:b0:bb:a1:75:73:00: b9:99:8a:e8:ec:09:1f:63:d7:f4:74:29:3e:9f:f2:bb:ee:00: 1e:32:1e:02:74:0f:79:03:e6:e2:df:9b:78:48:76:17:82:8d: ec:a4:3b:28:b8:83:2e:4c:3a:d0:a5:36:ca:aa:82:ee:0c:4e: f5:1d:d8:e4:2c:bd:b7:4c:4c:e3:c4:97:ba:74:6f:f8:ad:a6: 99:47:e2:5c:56:b9:a1:73:85:01:74:55:93:84:fa:9a:97:f7: 08:78:ab:68:e5:9e:b0:56:6b:3e:23:b8:af:71:9c:59:c6:f0: f4:b4:f3:1e:9f:7c:cd:56:9c:7c:6c:d9:43:e2:92:92:c7:e4: 4f:02:f8:ad:8e:c8:cc:e6:02:58:9c:ee:c0:36:e8:3d:09:e9: da:42:83:c7:f9:30:9c:ee:b3:66:f6:b4:2b:3c:54:66:db:e3: 57:bb:4e:25 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBEAs6EKR0XMaG8TmCC4TY4TPLEcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyNzA2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjhhYTcyMTk1MGQzYzZhYWY5ZmNkZDZmNjBlNWViZDdi NzAyOGM2NmNjMzQ1MmFkODZkZWIyYWQxOTI3MTI1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj7r+Q4WCv1JEvDeKrHqWeBMwrcfnLz8jMEwWvpog0H4Ad ycE6qXq/tOiTPbbqE+ZsninjwWLalhCi/umJ8zRnV04h+TrfZN2rFzNV5ic+WE40 gACTweUevFpa4InsO7+I++L+Pqkz6+0b85MlsRyygh5LMv9kFwRROg8KPEtEKEAo Js8xURfXPkcSOpxBXO8k3kFzjfqjh/AmdnNRG3mAW0ZtXCqv/4+jUYb5uVXoNCT6 Xg8Zf0mpOrTI2eckadSxsWxSF1Mjb2tkyjt2QqnfXDuU4/SIPnpbICAPy+u+71mg dgY6zGWdzNs3b+K9mD3yiaCUnIxe6Xxw055EBJOXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMXE1m/DV+s3LITjD8xo41irw5wMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EzOTMxNmExLTEyZGYtNGM0Mi1hNjQ3LTVjZGVhYjgwZjYxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAHEAwDQYJKoZIhvcNAQELBQADggEBAHH6Y3cbC2HYVdVqi5Z6YN91 ndvdhPsfoKTnd4pOZp5wmdEqqkiU4pzs0QWUPdp/X6rUsVNcAQmDe6Arm5vwIz2b C+YDPnS+PoR3J5QFpMxvR4I+trC7oXVzALmZiujsCR9j1/R0KT6f8rvuAB4yHgJ0 D3kD5uLfm3hIdheCjeykOyi4gy5MOtClNsqqgu4MTvUd2OQsvbdMTOPEl7p0b/it pplH4lxWuaFzhQF0VZOE+pqX9wh4q2jlnrBWaz4juK9xnFnG8PS08x6ffM1WnHxs 2UPikpLH5E8C+K2OyMzmAlic7sA26D0J6dpCg8f5MJzus2b2tCs8VGbb41e7TiU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:34 2025 by rpki-client