$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf36df38-e2a7-4b66-93af-d9a3663a01fc.roa File: bf36df38-e2a7-4b66-93af-d9a3663a01fc.roa (raw, json) Hash identifier: FNyjYnpXRRe9bBfHAqWM3UUUFbPTjvLjDIWPAIwx1PQ= Subject key identifier: 65:C2:B8:C8:20:C0:88:9F:1B:5F:CE:6A:3B:72:48:32:14:C1:C2:10 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5BBCEB7762F3B6F8AE8D09CF6D8A18CF21827073 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf36df38-e2a7-4b66-93af-d9a3663a01fc.roa Signing time: Thu 30 Oct 2025 21:08:34 +0000 ROA not before: Thu 30 Oct 2025 21:08:34 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:14dc::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:bc:eb:77:62:f3:b6:f8:ae:8d:09:cf:6d:8a:18:cf:21:82:70:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:08:34 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=2d7fcb1d99d85031d5ac3a71daf83d648d43a5b1a452da1a24c9fd8b553758cc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d8:a1:f9:ed:a6:4a:4e:5b:68:c3:98:37:e5: c9:0e:23:95:6c:6c:32:8a:d1:b0:9a:4f:78:40:cf: 09:11:e4:fe:86:b7:c3:ab:f0:73:1f:21:9a:bd:21: 1c:60:a1:47:bb:7e:ad:0e:7c:5d:ad:5e:f4:f6:25: bc:4a:bc:fe:8d:65:e1:f7:67:46:8e:3e:e8:e4:64: 68:52:ae:09:7d:05:6a:d1:be:c3:4f:fe:36:8e:38: 35:39:24:14:4c:43:cb:96:44:5c:df:8f:60:40:8b: d3:38:d2:69:9b:74:45:78:0a:63:ee:7b:54:49:e4: 30:98:09:11:d4:ba:50:b8:14:c5:2d:49:d1:f1:f4: 90:c1:c7:d8:73:aa:b1:75:94:a7:8b:0b:af:e0:a3: 3c:d5:c8:91:29:68:53:10:67:51:10:60:5e:00:75: b9:25:59:1f:02:8d:4e:78:f9:ed:a1:bb:2d:1d:f0: 95:24:69:57:a1:46:78:01:b3:44:b2:2f:b2:ca:c6: cd:94:f8:73:61:f5:9d:82:07:7c:27:b2:8e:32:3d: d5:2c:e0:81:81:7b:5b:1d:45:0d:8c:83:b8:d5:32: 50:05:d5:d0:1a:20:68:82:ea:10:8d:35:4b:e5:ef: 96:fe:d8:dd:e4:71:a0:54:5a:99:59:61:25:5c:35: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C2:B8:C8:20:C0:88:9F:1B:5F:CE:6A:3B:72:48:32:14:C1:C2:10 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bf36df38-e2a7-4b66-93af-d9a3663a01fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:14dc::/47 Signature Algorithm: sha256WithRSAEncryption 27:e5:5a:d4:84:18:d2:5b:db:0d:6e:df:dd:20:6f:38:92:02: 64:58:8d:b8:ca:02:67:4f:50:cd:20:d0:4f:6f:5c:af:4a:98: 77:d5:0a:a7:b3:7d:8b:ea:77:c4:9f:97:9c:df:c8:31:4f:1b: 8b:9c:e5:48:e3:f1:d6:f5:71:4f:86:54:e6:4f:17:0d:a2:d7: 55:ef:38:fe:7e:23:f8:aa:ac:e6:4c:d9:0b:ed:64:4f:a8:55: ce:e6:c7:ae:84:87:5f:ac:cf:33:85:dc:fa:eb:70:0b:d2:b5: 47:fb:f0:f5:20:c7:28:ce:65:20:05:01:09:17:03:19:64:c5: 08:b4:e7:47:30:35:92:e3:3b:a8:a1:95:49:74:34:7a:38:8e: b4:af:8e:31:26:03:33:8e:9c:82:4e:e5:e4:21:59:80:0f:03: 08:67:cf:37:82:16:59:4d:11:21:1b:bf:e1:8c:7f:5b:7e:ce: c3:d8:a5:86:db:f4:4b:c5:48:c9:b7:74:a6:15:29:4e:cc:3d: a4:e3:c0:18:b8:75:21:48:7c:2a:10:07:36:6b:62:08:58:7c: 90:06:29:85:fa:5a:20:0f:a3:e5:7c:6a:66:32:3f:b4:f6:12: 48:e0:be:6d:2a:f4:4b:fb:c0:2a:73:f5:6c:8f:0a:9c:2a:3e: 90:6d:a8:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUW7zrd2LztviujQnPbYoYzyGCcHMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEwODM0WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDdmY2IxZDk5ZDg1MDMxZDVhYzNhNzFkYWY4M2Q2NDhk NDNhNWIxYTQ1MmRhMWEyNGM5ZmQ4YjU1Mzc1OGNjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi2KH57aZKTltow5g35ckOI5VsbDKK0bCaT3hAzwkR5P6G t8Or8HMfIZq9IRxgoUe7fq0OfF2tXvT2JbxKvP6NZeH3Z0aOPujkZGhSrgl9BWrR vsNP/jaOODU5JBRMQ8uWRFzfj2BAi9M40mmbdEV4CmPue1RJ5DCYCRHUulC4FMUt SdHx9JDBx9hzqrF1lKeLC6/gozzVyJEpaFMQZ1EQYF4AdbklWR8CjU54+e2huy0d 8JUkaVehRngBs0SyL7LKxs2U+HNh9Z2CB3wnso4yPdUs4IGBe1sdRQ2Mg7jVMlAF 1dAaIGiC6hCNNUvl75b+2N3kcaBUWplZYSVcNUCzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZcK4yCDAiJ8bX85qO3JIMhTBwhAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JmMzZkZjM4LWUyYTctNGI2Ni05M2FmLWQ5YTM2NjNhMDFmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFNwwDQYJKoZIhvcNAQELBQADggEBACflWtSEGNJb2w1u390gbziS AmRYjbjKAmdPUM0g0E9vXK9KmHfVCqezfYvqd8Sfl5zfyDFPG4uc5Ujj8db1cU+G VOZPFw2i11XvOP5+I/iqrOZM2QvtZE+oVc7mx66Eh1+szzOF3PrrcAvStUf78PUg xyjOZSAFAQkXAxlkxQi050cwNZLjO6ihlUl0NHo4jrSvjjEmAzOOnIJO5eQhWYAP AwhnzzeCFllNESEbv+GMf1t+zsPYpYbb9EvFSMm3dKYVKU7MPaTjwBi4dSFIfCoQ BzZrYghYfJAGKYX6WiAPo+V8amYyP7T2Ekjgvm0q9Ev7wCpz9WyPCpwqPpBtqNE= -----END CERTIFICATE-----Generated at Wed Nov 5 18:11:56 2025 by rpki-client