$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c8b33e40-5780-4df1-b295-fbf644cb2f0e.roa File: c8b33e40-5780-4df1-b295-fbf644cb2f0e.roa (raw, json) Hash identifier: K0bdSv7yxCSC4Pijas9Uu1mmZrj2yGTHWY+o64WpCq4= Subject key identifier: 54:90:1D:9C:06:8F:4F:FE:7C:A1:80:40:22:73:1B:A5:C0:F4:E7:72 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 66BEA6400D3236ECB0E176C009731F67E0A5BA28 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c8b33e40-5780-4df1-b295-fbf644cb2f0e.roa Signing time: Thu 30 Oct 2025 21:10:14 +0000 ROA not before: Thu 30 Oct 2025 21:10:14 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:152a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:be:a6:40:0d:32:36:ec:b0:e1:76:c0:09:73:1f:67:e0:a5:ba:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:10:14 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=ad365a5ebb19d6cc4ff1148fe5ca652394d62c0f7ffd62d83fb40c275f66d9eb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d6:80:da:84:12:5a:c2:e6:92:cc:d4:b9:9a: 0a:7a:03:72:63:d0:ed:54:6a:fd:31:90:47:28:5d: c5:e2:af:b2:89:2f:c5:29:cd:db:cf:99:2c:49:af: e2:85:73:04:ea:5c:9a:43:72:a1:9a:b5:61:19:b9: 4c:5e:c6:52:56:47:c0:da:c2:10:5e:bc:c5:f5:b1: 2d:01:1b:ed:47:62:3d:6a:d2:ed:e1:7c:c3:74:82: 75:6c:ac:bd:e8:09:8a:34:82:72:b9:a0:e5:57:fa: c9:c2:3d:d3:53:f0:89:c8:6c:d8:12:38:27:9e:c5: aa:37:0d:4b:01:a8:c7:6b:74:40:ad:67:5a:9a:a8: 21:28:ea:90:cb:69:8f:f7:9e:e5:98:1e:28:a6:af: f8:c8:ff:1a:42:7f:0c:da:ec:da:0e:dd:10:ce:c2: 48:17:51:04:67:f6:fb:91:e9:f4:4a:71:ee:f8:f5: fb:13:4f:08:73:ee:d7:ed:4a:1a:17:65:78:2d:1c: 3d:a2:f4:26:70:fc:01:38:8d:89:fc:71:96:f5:4c: de:7a:25:1f:f3:ab:a2:e2:68:b1:66:62:aa:ca:ff: 25:6c:a2:c1:ba:34:5d:5c:c8:8a:85:af:a3:e1:47: 59:cc:aa:6f:0d:31:29:56:72:03:34:dd:ce:ff:c1: 5d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:90:1D:9C:06:8F:4F:FE:7C:A1:80:40:22:73:1B:A5:C0:F4:E7:72 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c8b33e40-5780-4df1-b295-fbf644cb2f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:152a::/47 Signature Algorithm: sha256WithRSAEncryption 98:27:aa:c7:0d:b0:a5:e2:c3:21:85:a6:dc:06:3f:43:10:c7: f2:11:74:d3:f0:7b:ac:c9:b9:ce:1c:9b:57:f1:ff:21:3a:2c: 73:82:21:68:94:d5:5a:5a:f0:8e:b6:42:2e:45:18:98:b1:63: f7:9c:5b:d7:a0:42:60:96:00:53:34:ba:53:34:c7:3c:62:71: 9d:f1:1d:ea:58:78:b2:55:60:91:8f:0e:36:cf:bd:8d:0b:18: 56:db:a1:9a:18:1d:df:d2:b7:7a:65:bc:60:7a:b0:ae:81:b8: 41:68:cd:20:f7:72:86:95:6d:23:1d:1d:0e:08:54:04:1e:91: 84:0f:bc:2d:85:20:26:cf:d6:cb:0e:86:c7:14:2a:17:2a:12: 65:05:5c:d3:f8:77:f3:76:99:a9:db:95:ba:ca:15:66:82:8e: 39:bb:78:3e:02:86:ca:f7:d3:b7:23:da:71:f2:ec:aa:e0:07: 43:d4:e0:bd:ff:a5:13:03:a4:f4:e1:95:48:c8:1b:c5:b2:44: 06:13:0d:f1:73:43:34:b0:bc:9e:eb:2d:91:a8:46:77:0d:26: 8a:fb:74:6f:7f:e6:07:0b:96:60:73:a6:4e:08:ed:ed:a1:87: 17:1e:a5:b9:96:99:0b:7d:6f:12:e0:5d:b6:66:29:09:b8:be: 84:10:52:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZr6mQA0yNuyw4XbACXMfZ+CluigwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjExMDE0WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDM2NWE1ZWJiMTlkNmNjNGZmMTE0OGZlNWNhNjUyMzk0 ZDYyYzBmN2ZmZDYyZDgzZmI0MGMyNzVmNjZkOWViMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM1oDahBJawuaSzNS5mgp6A3Jj0O1Uav0xkEcoXcXir7KJ L8UpzdvPmSxJr+KFcwTqXJpDcqGatWEZuUxexlJWR8DawhBevMX1sS0BG+1HYj1q 0u3hfMN0gnVsrL3oCYo0gnK5oOVX+snCPdNT8InIbNgSOCeexao3DUsBqMdrdECt Z1qaqCEo6pDLaY/3nuWYHiimr/jI/xpCfwza7NoO3RDOwkgXUQRn9vuR6fRKce74 9fsTTwhz7tftShoXZXgtHD2i9CZw/AE4jYn8cZb1TN56JR/zq6LiaLFmYqrK/yVs osG6NF1cyIqFr6PhR1nMqm8NMSlWcgM03c7/wV1zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVJAdnAaPT/58oYBAInMbpcD053IwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M4YjMzZTQwLTU3ODAtNGRmMS1iMjk1LWZiZjY0NGNiMmYwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFSowDQYJKoZIhvcNAQELBQADggEBAJgnqscNsKXiwyGFptwGP0MQ x/IRdNPwe6zJuc4cm1fx/yE6LHOCIWiU1Vpa8I62Qi5FGJixY/ecW9egQmCWAFM0 ulM0xzxicZ3xHepYeLJVYJGPDjbPvY0LGFbboZoYHd/St3plvGB6sK6BuEFozSD3 coaVbSMdHQ4IVAQekYQPvC2FICbP1ssOhscUKhcqEmUFXNP4d/N2manblbrKFWaC jjm7eD4Chsr307cj2nHy7KrgB0PU4L3/pRMDpPThlUjIG8WyRAYTDfFzQzSwvJ7r LZGoRncNJor7dG9/5gcLlmBzpk4I7e2hhxcepbmWmQt9bxLgXbZmKQm4voQQUkA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:42 2025 by rpki-client