$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d8b3b115-29d1-4da6-b572-8dab85316b13.roa File: d8b3b115-29d1-4da6-b572-8dab85316b13.roa (raw, json) Hash identifier: NoifePi5tdinvT1NMgreBRM4yIsWwsUJ36qvyBgfhBs= Subject key identifier: 08:03:8D:BF:AF:62:4E:FB:F8:00:B8:DB:C3:64:CA:AF:05:1B:18:98 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7BCC0ABDA6416E88A647D040BA5C5CF2CDDB54E5 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d8b3b115-29d1-4da6-b572-8dab85316b13.roa Signing time: Fri 31 Oct 2025 00:13:49 +0000 ROA not before: Fri 31 Oct 2025 00:13:49 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3428::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:cc:0a:bd:a6:41:6e:88:a6:47:d0:40:ba:5c:5c:f2:cd:db:54:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:13:49 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=5c25370c1a9979102ab9d1f31ba871364a746efed2211610336e7fa288946e17, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:c4:ea:9e:cf:91:4a:4a:e1:d7:01:4a:fc: 59:c7:1a:b6:05:14:78:63:21:99:82:09:e1:0c:84: bb:0c:b4:63:a7:78:d8:71:36:d1:69:29:63:69:a7: 0a:34:93:d0:62:b3:e7:39:ad:c0:43:21:d5:c6:41: d5:f6:aa:d9:d5:64:c5:ee:20:54:a7:ed:5d:73:db: 83:1d:81:b4:89:4d:ad:15:76:3a:8c:9c:47:3a:e0: 03:9b:7b:46:9e:ce:f2:cf:b0:20:c5:0f:ce:1a:7c: f8:9a:a1:17:ea:76:b0:46:20:6e:32:39:39:e6:8a: d3:72:12:e7:01:85:f3:58:24:26:81:84:88:50:d9: bf:e7:8b:41:14:d2:0d:ab:6e:00:a2:8d:3f:8e:b8: 1b:3d:38:7f:86:39:1c:e1:20:8e:bf:dd:fc:7f:0a: 81:2e:e3:9e:97:b5:fb:09:7e:63:9b:42:ad:87:e7: fd:77:94:96:a4:01:da:31:fe:77:df:75:82:b5:5a: 83:a9:05:2e:70:7b:e5:d3:50:84:87:8c:65:1b:d1: 01:a4:c3:06:e8:e3:a3:30:65:bd:a3:b7:3a:40:d4: 8f:cf:4e:11:4e:ee:04:22:56:e9:c7:49:7e:b9:d2: c6:27:06:dd:12:cd:98:87:82:e0:63:af:f3:66:d6: dd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:03:8D:BF:AF:62:4E:FB:F8:00:B8:DB:C3:64:CA:AF:05:1B:18:98 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d8b3b115-29d1-4da6-b572-8dab85316b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3428::/47 Signature Algorithm: sha256WithRSAEncryption 4b:6c:b3:cf:1e:b8:09:3d:37:47:59:95:6a:95:f1:f4:5c:7c: 0d:69:5e:c1:ee:4a:c7:23:12:a9:24:31:f5:19:b0:16:17:b6: 83:cd:37:93:c9:ac:63:e0:f6:c4:54:46:8c:19:4f:ee:4b:88: 5e:bc:16:8a:96:9b:34:62:52:72:cf:36:cd:7b:35:7a:9a:71: 36:d5:ab:53:d0:aa:6b:b5:53:3a:a4:be:71:30:44:7c:c1:1a: 54:96:5e:b4:7c:74:e9:b9:5d:c0:d3:df:bc:ba:db:48:0f:03: 27:da:57:0b:a5:17:17:ee:e5:19:7d:02:66:73:cf:6e:4c:0e: 9e:1b:76:87:13:13:46:b0:95:9f:c7:de:10:9d:f8:e7:ed:32: 13:ce:ad:ee:cf:eb:3c:8d:f0:43:62:52:91:d4:93:77:e3:d0: 43:cf:33:6c:19:27:ea:05:8e:61:88:ed:d6:a3:8a:7a:13:f8: 60:e5:d7:e5:41:0a:a1:11:fa:1c:84:a4:38:3f:22:35:48:ed: 5f:82:8f:84:b9:d8:a3:6b:e6:37:67:1d:c9:33:aa:e9:e1:67: 3e:15:36:36:a7:e6:51:3a:bc:65:2b:bd:25:ff:31:08:cd:e9: a0:69:c1:54:e8:75:f3:5a:80:64:ab:19:99:c4:4d:e3:5f:e0: 9c:38:99:d0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe8wKvaZBboimR9BAulxc8s3bVOUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAxMzQ5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzI1MzcwYzFhOTk3OTEwMmFiOWQxZjMxYmE4NzEzNjRh NzQ2ZWZlZDIyMTE2MTAzMzZlN2ZhMjg4OTQ2ZTE3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvy8Tqns+RSkrh1wFK/FnHGrYFFHhjIZmCCeEMhLsMtGOn eNhxNtFpKWNppwo0k9Bis+c5rcBDIdXGQdX2qtnVZMXuIFSn7V1z24MdgbSJTa0V djqMnEc64AObe0aezvLPsCDFD84afPiaoRfqdrBGIG4yOTnmitNyEucBhfNYJCaB hIhQ2b/ni0EU0g2rbgCijT+OuBs9OH+GORzhII6/3fx/CoEu456XtfsJfmObQq2H 5/13lJakAdox/nffdYK1WoOpBS5we+XTUISHjGUb0QGkwwbo46MwZb2jtzpA1I/P ThFO7gQiVunHSX650sYnBt0SzZiHguBjr/Nm1t0NAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCAONv69iTvv4ALjbw2TKrwUbGJgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Q4YjNiMTE1LTI5ZDEtNGRhNi1iNTcyLThkYWI4NTMxNmIxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANCgwDQYJKoZIhvcNAQELBQADggEBAEtss88euAk9N0dZlWqV8fRc fA1pXsHuSscjEqkkMfUZsBYXtoPNN5PJrGPg9sRURowZT+5LiF68FoqWmzRiUnLP Ns17NXqacTbVq1PQqmu1UzqkvnEwRHzBGlSWXrR8dOm5XcDT37y620gPAyfaVwul Fxfu5Rl9AmZzz25MDp4bdocTE0awlZ/H3hCd+OftMhPOre7P6zyN8ENiUpHUk3fj 0EPPM2wZJ+oFjmGI7dajinoT+GDl1+VBCqER+hyEpDg/IjVI7V+Cj4S52KNr5jdn HckzqunhZz4VNjan5lE6vGUrvSX/MQjN6aBpwVTodfNagGSrGZnETeNf4Jw4mdA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:47 2025 by rpki-client