$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b367833f-0991-4027-8d76-c710d2f07d4b.roa File: b367833f-0991-4027-8d76-c710d2f07d4b.roa (raw, json) Hash identifier: ZukAZfwNnMFtRfRLo5YdDHowykoilWvHk4URrpLNfIs= Subject key identifier: FD:34:87:A8:F9:B9:5F:24:DA:6A:82:F0:99:29:EA:D5:2F:69:AE:16 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6453428628C9493938B217781F97AB33DF3E22D6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b367833f-0991-4027-8d76-c710d2f07d4b.roa Signing time: Fri 31 Oct 2025 06:27:11 +0000 ROA not before: Fri 31 Oct 2025 06:27:11 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1280::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:53:42:86:28:c9:49:39:38:b2:17:78:1f:97:ab:33:df:3e:22:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:27:11 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a8c022a8d2cd0abf35ce34f5b2be9ef9daa0990e4b50110f4f388ac031d20da6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:52:e4:be:65:82:10:37:24:ca:28:04:4a: e3:2e:c7:ab:54:61:3b:2e:94:ac:e7:89:73:06:44: e4:17:21:86:cc:c4:a5:95:56:fd:09:d0:49:9f:c2: 82:f3:9a:1e:ad:fd:6f:8a:ab:20:1c:eb:37:7f:07: 85:45:09:fd:7a:51:b6:20:c5:71:48:fd:f7:d5:58: f9:0d:a7:5f:dc:1e:99:02:65:a5:f4:c3:b1:54:0f: 65:53:56:d7:55:da:22:68:eb:23:b7:33:71:89:8b: 7b:8e:5c:05:67:af:8e:6f:29:61:0a:f6:26:fb:29: d0:33:10:58:7a:cc:4e:1d:ae:57:8e:c2:b6:e9:62: 5a:db:d6:a2:90:97:41:3f:6c:d1:3b:ba:f8:fc:66: 15:ff:a2:a6:36:24:d2:e6:bd:20:62:b8:22:b4:9c: 67:cc:a7:d9:96:ee:ba:f4:4f:d1:ee:d6:9d:d8:0f: eb:5e:b3:c3:c1:8d:e9:9b:5c:0a:2e:dc:99:f5:d6: 30:32:0d:80:8a:1a:eb:c2:e0:85:a8:8d:f7:a8:54: 45:4c:7d:3f:76:4e:91:69:d0:80:a6:bd:cb:e5:5c: 5a:72:2b:bb:31:82:43:22:e4:84:30:c7:76:dc:9f: ae:f2:cd:f3:e7:bd:a8:44:e8:c4:c0:5d:e0:31:95: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:34:87:A8:F9:B9:5F:24:DA:6A:82:F0:99:29:EA:D5:2F:69:AE:16 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b367833f-0991-4027-8d76-c710d2f07d4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1280::/44 Signature Algorithm: sha256WithRSAEncryption 66:10:d1:5e:b5:47:17:f8:c3:66:e8:d8:18:d3:2f:1c:53:16: 9f:2a:45:7d:9d:e4:a9:c9:06:9d:46:e0:65:56:3c:79:8a:87: 3a:2d:8c:3f:26:e9:e3:26:f9:ed:5c:b1:ea:bb:f1:e7:7d:f7: fc:0a:4d:92:91:3d:99:b4:63:93:e1:cf:b2:1b:ae:97:60:9f: 1f:8c:a2:00:a6:39:cd:bf:99:4c:b9:53:30:07:05:20:e4:5c: 96:a3:90:6f:05:f7:20:2b:60:e3:03:07:a5:a5:e3:d6:e0:1d: e6:09:68:dc:3f:87:25:c3:4f:b9:66:cd:a7:2b:34:e8:65:83: 7d:9e:67:5a:e2:6f:9f:18:01:26:f1:1d:c3:2e:d4:1f:40:80: a0:a0:79:1b:b4:16:aa:54:98:7a:19:cd:03:7a:1e:d7:58:e7: c7:b5:84:70:34:15:07:bc:43:d0:62:6b:0e:ec:fe:2b:7d:fe: 84:de:17:eb:a1:10:c9:9f:9b:df:20:e2:35:27:d0:97:53:ce: 7d:59:be:29:df:43:ad:92:17:31:41:e9:64:94:fa:34:1b:55: dd:e3:4f:e8:49:ad:f6:70:2f:c6:84:2b:74:ac:25:41:c8:79: f5:7c:f2:bb:c7:92:11:6c:dd:ec:94:f3:fe:00:3d:10:63:89: cd:e8:18:a2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZFNChijJSTk4shd4H5erM98+ItYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYyNzExWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOGMwMjJhOGQyY2QwYWJmMzVjZTM0ZjViMmJlOWVmOWRh YTA5OTBlNGI1MDExMGY0ZjM4OGFjMDMxZDIwZGE2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6TlLkvmWCEDckyigESuMux6tUYTsulKzniXMGROQXIYbM xKWVVv0J0EmfwoLzmh6t/W+KqyAc6zd/B4VFCf16UbYgxXFI/ffVWPkNp1/cHpkC ZaX0w7FUD2VTVtdV2iJo6yO3M3GJi3uOXAVnr45vKWEK9ib7KdAzEFh6zE4drleO wrbpYlrb1qKQl0E/bNE7uvj8ZhX/oqY2JNLmvSBiuCK0nGfMp9mW7rr0T9Hu1p3Y D+tes8PBjembXAou3Jn11jAyDYCKGuvC4IWojfeoVEVMfT92TpFp0ICmvcvlXFpy K7sxgkMi5IQwx3bcn67yzfPnvahE6MTAXeAxlZFXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/TSHqPm5XyTaaoLwmSnq1S9prhYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2IzNjc4MzNmLTA5OTEtNDAyNy04ZDc2LWM3MTBkMmYwN2Q0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAEoAwDQYJKoZIhvcNAQELBQADggEBAGYQ0V61Rxf4w2bo2BjTLxxT Fp8qRX2d5KnJBp1G4GVWPHmKhzotjD8m6eMm+e1cseq78ed99/wKTZKRPZm0Y5Ph z7Ibrpdgnx+MogCmOc2/mUy5UzAHBSDkXJajkG8F9yArYOMDB6Wl49bgHeYJaNw/ hyXDT7lmzacrNOhlg32eZ1rib58YASbxHcMu1B9AgKCgeRu0FqpUmHoZzQN6HtdY 58e1hHA0FQe8Q9Biaw7s/it9/oTeF+uhEMmfm98g4jUn0JdTzn1ZvinfQ62SFzFB 6WSU+jQbVd3jT+hJrfZwL8aEK3SsJUHIefV88rvHkhFs3eyU8/4APRBjic3oGKI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:37 2025 by rpki-client