$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5507186-4ea1-4076-a85c-662a85ff3c13.roa File: a5507186-4ea1-4076-a85c-662a85ff3c13.roa (raw, json) Hash identifier: JuICgvlk186KUHqfk0CFXtHCCocUvX5AlKKtOk3IYQ0= Subject key identifier: 0D:93:32:C9:66:A2:67:12:D8:F8:A4:32:6F:4E:17:2A:65:93:01:F5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 343EF82D8F88123EC3624973316A4BAAB1FAFDBB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5507186-4ea1-4076-a85c-662a85ff3c13.roa Signing time: Thu 30 Oct 2025 23:08:43 +0000 ROA not before: Thu 30 Oct 2025 23:08:43 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2b36::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3e:f8:2d:8f:88:12:3e:c3:62:49:73:31:6a:4b:aa:b1:fa:fd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:08:43 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=8b25a17dc0b654216bbf41c650170b09fcad8223a6df5101d0790450bae91634, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:07:6b:00:96:03:ad:ef:fd:c0:bb:63:0b: fa:07:65:ca:9b:96:ea:33:a3:44:34:b6:ae:22:70: 5c:cb:a0:81:3e:38:d8:ce:24:84:08:cc:ce:f4:e1: eb:a3:04:b5:fb:5f:66:f4:0a:82:83:82:ea:fa:9a: 30:cf:da:8c:0d:f4:3e:bb:3b:73:7e:a0:84:03:c2: 22:45:e0:42:55:dd:d9:b4:d9:83:4b:53:cd:5f:f1: cf:52:7f:2f:af:14:3a:85:a2:61:dd:17:f6:d6:68: bf:d1:fc:1d:11:7d:bb:27:36:9f:ad:ce:9e:56:4f: 91:1f:11:73:2d:2c:f2:22:d3:f2:a9:83:d3:87:c8: 66:ad:80:d0:d8:7c:b4:7b:ee:60:2d:5e:2b:35:f9: 42:e6:a2:c8:51:42:98:5a:f8:63:12:dd:9a:fe:4b: ed:66:cf:66:37:d5:b5:31:d6:7d:9c:73:88:99:cd: ed:bf:d9:82:1f:a7:25:73:b6:4a:3b:d7:7b:e2:1b: 17:a9:4e:3c:40:45:74:7e:e2:8a:aa:a7:1f:bf:a8: 56:ff:74:21:84:f0:77:ba:0d:21:58:6d:0a:16:85: a2:fd:1f:0f:33:20:2f:24:32:53:96:af:45:0b:20: 6a:f0:21:f9:79:0a:a8:7f:a8:70:90:13:31:00:9c: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:93:32:C9:66:A2:67:12:D8:F8:A4:32:6F:4E:17:2A:65:93:01:F5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5507186-4ea1-4076-a85c-662a85ff3c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2b36::/47 Signature Algorithm: sha256WithRSAEncryption 01:a2:42:a3:c1:2c:07:1c:fa:d5:2a:2d:1a:9f:0b:00:e1:5c: 2d:c7:2e:88:cd:23:de:05:10:f6:24:ec:ea:41:8a:7b:96:c4: e4:a9:25:01:28:40:cb:2f:f5:01:9b:42:b3:c9:5b:2b:03:b9: ce:d4:10:68:8a:4b:ad:7e:d8:73:e1:fc:d3:6a:2c:db:a6:37: 26:85:ac:73:23:11:73:7e:5a:de:66:62:06:f4:47:01:70:fa: 7a:45:33:05:19:96:f2:87:bd:6f:ef:0a:39:60:4e:73:a7:02: 62:c6:5b:40:bd:25:20:63:cd:36:4b:23:78:02:e8:a7:90:11: 3b:71:cf:22:dc:cd:e4:32:1c:14:4e:1d:b7:c8:da:00:04:a1: 99:f5:e5:3e:98:ef:9f:30:65:40:14:0b:03:40:4b:c9:c5:40: 33:07:97:8a:1b:54:a0:80:57:17:ff:7b:42:1f:fa:c9:ad:8c: 5e:d3:fd:24:7e:e8:6c:8d:f4:8e:92:ca:03:7f:26:c2:4e:2d: fb:b9:cb:13:71:21:59:ae:83:4e:b5:69:a4:b6:66:a2:ad:97: 00:eb:ae:83:a0:cf:85:b9:6c:8d:d3:e3:f1:45:3b:36:6d:c8: 40:5d:2e:4f:3b:04:59:3c:e3:a2:55:7d:e1:a2:08:eb:75:93: 45:a7:2c:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUND74LY+IEj7DYklzMWpLqrH6/bswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMwODQzWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjI1YTE3ZGMwYjY1NDIxNmJiZjQxYzY1MDE3MGIwOWZj YWQ4MjIzYTZkZjUxMDFkMDc5MDQ1MGJhZTkxNjM0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv0gdrAJYDre/9wLtjC/oHZcqbluozo0Q0tq4icFzLoIE+ ONjOJIQIzM704eujBLX7X2b0CoKDgur6mjDP2owN9D67O3N+oIQDwiJF4EJV3dm0 2YNLU81f8c9Sfy+vFDqFomHdF/bWaL/R/B0RfbsnNp+tzp5WT5EfEXMtLPIi0/Kp g9OHyGatgNDYfLR77mAtXis1+ULmoshRQpha+GMS3Zr+S+1mz2Y31bUx1n2cc4iZ ze2/2YIfpyVztko713viGxepTjxARXR+4oqqpx+/qFb/dCGE8He6DSFYbQoWhaL9 Hw8zIC8kMlOWr0ULIGrwIfl5Cqh/qHCQEzEAnLvTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDZMyyWaiZxLY+KQyb04XKmWTAfUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E1NTA3MTg2LTRlYTEtNDA3Ni1hODVjLTY2MmE4NWZmM2MxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKzYwDQYJKoZIhvcNAQELBQADggEBAAGiQqPBLAcc+tUqLRqfCwDh XC3HLojNI94FEPYk7OpBinuWxOSpJQEoQMsv9QGbQrPJWysDuc7UEGiKS61+2HPh /NNqLNumNyaFrHMjEXN+Wt5mYgb0RwFw+npFMwUZlvKHvW/vCjlgTnOnAmLGW0C9 JSBjzTZLI3gC6KeQETtxzyLczeQyHBROHbfI2gAEoZn15T6Y758wZUAUCwNAS8nF QDMHl4obVKCAVxf/e0If+smtjF7T/SR+6GyN9I6SygN/JsJOLfu5yxNxIVmug061 aaS2ZqKtlwDrroOgz4W5bI3T4/FFOzZtyEBdLk87BFk846JVfeGiCOt1k0WnLCA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:14 2025 by rpki-client