$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de8156c3-193b-45f8-8124-b47e9f8be567.roa File: de8156c3-193b-45f8-8124-b47e9f8be567.roa (raw, json) Hash identifier: dvXWFm0YAfo8bSWwpqTN2x8yr40ZAWgX/m8o1k6Xlco= Subject key identifier: 36:C0:CF:2E:B5:11:0C:29:2E:C6:A4:8A:32:8A:5B:1A:9A:58:56:87 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5CF66DD692CD27FD9E31C7B27D68639F5F672F8B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de8156c3-193b-45f8-8124-b47e9f8be567.roa Signing time: Thu 30 Oct 2025 21:06:58 +0000 ROA not before: Thu 30 Oct 2025 21:06:58 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:14a2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f6:6d:d6:92:cd:27:fd:9e:31:c7:b2:7d:68:63:9f:5f:67:2f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:06:58 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=cd332e1b4c0e4493e56bbf98055668343742ea4d6f02fcd7d634ed43eea414ea, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:90:78:45:0a:c8:ca:72:62:9e:27:aa:96: a4:78:74:a6:4a:f6:f5:ec:7a:b4:ae:71:de:fa:77: c5:3f:fc:bb:75:be:13:38:db:57:4f:46:54:38:29: 69:06:ac:50:4d:23:46:a9:a2:ed:40:b5:51:7a:48: c9:ff:be:27:a4:9a:cf:e3:af:ae:13:3b:3a:e1:31: 64:51:34:f1:7e:09:d9:6a:e7:be:89:b3:3d:13:ed: a3:54:3e:b3:df:09:ac:15:46:07:31:2b:ae:96:14: 2a:15:29:d4:e6:9f:9c:10:4d:c2:04:26:06:25:1b: 90:6b:7f:f7:63:dc:79:62:d0:ad:08:c6:f0:a5:e4: 6a:23:c2:77:0c:42:17:46:8e:f9:6b:ec:ce:c9:e5: c7:db:b4:c4:51:a7:ca:25:8d:2e:01:70:b2:97:b0: 8a:a3:e6:8c:87:0c:f4:6a:b0:e1:d6:79:80:73:76: 50:09:99:a2:51:e2:3b:02:7d:04:f0:4d:f5:85:05: ff:93:77:93:f0:5a:34:9c:0f:25:c2:c9:73:9e:3e: d8:58:f6:d4:39:0a:f3:bc:75:87:45:a4:87:88:88: 7a:59:30:4d:f4:b8:72:ea:56:97:ea:94:eb:40:a7: d0:53:2e:68:ac:62:39:ef:e8:a1:37:1c:83:ae:24: 2a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C0:CF:2E:B5:11:0C:29:2E:C6:A4:8A:32:8A:5B:1A:9A:58:56:87 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de8156c3-193b-45f8-8124-b47e9f8be567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:14a2::/47 Signature Algorithm: sha256WithRSAEncryption 17:0d:ee:70:96:63:58:63:8a:52:04:66:23:9f:74:70:17:6c: 98:f5:f2:35:be:65:ae:29:e0:27:15:08:a3:9c:f2:62:f1:2f: be:28:ef:d0:72:43:87:35:60:d5:49:2f:8f:ab:82:47:f6:4b: e2:63:03:4c:e4:5e:36:1d:f9:d9:a4:2f:db:98:c9:6c:59:c9: d6:b8:57:c2:4e:98:ad:fc:21:c8:8e:16:89:8e:f7:71:0b:d0: b9:ec:49:be:44:e1:08:3d:a7:9d:41:fd:de:a5:8a:a4:3a:be: 43:d7:5e:f4:83:c3:8f:0e:6a:91:80:72:a9:df:d3:dc:2b:f1: a8:67:6b:1d:9d:44:96:c6:aa:bf:a1:ad:e5:39:2f:51:5d:99: 95:5c:e0:4b:4e:3a:a8:33:e8:1b:05:f8:49:b7:40:5b:4c:c0: 25:07:24:48:16:ce:ef:b0:cd:c6:fc:b2:09:e7:4f:25:1b:33: 82:b3:94:d7:15:b6:41:8a:ee:f8:8d:f7:0f:a6:4a:be:80:b1: 53:05:f9:cc:07:46:eb:4f:e8:d5:b7:17:13:dd:4e:1b:79:fc: 2f:12:a2:6e:20:44:fe:89:82:d2:ba:64:45:88:6c:05:2f:93: 95:b8:0d:1e:63:e7:c0:b5:4d:ab:b7:f2:d0:57:67:25:50:1a: b7:60:5f:5e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXPZt1pLNJ/2eMceyfWhjn19nL4swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEwNjU4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDMzMmUxYjRjMGU0NDkzZTU2YmJmOTgwNTU2NjgzNDM3 NDJlYTRkNmYwMmZjZDdkNjM0ZWQ0M2VlYTQxNGVhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYS5B4RQrIynJinieqlqR4dKZK9vXserSucd76d8U//Lt1 vhM421dPRlQ4KWkGrFBNI0apou1AtVF6SMn/viekms/jr64TOzrhMWRRNPF+Cdlq 576Jsz0T7aNUPrPfCawVRgcxK66WFCoVKdTmn5wQTcIEJgYlG5Brf/dj3Hli0K0I xvCl5GojwncMQhdGjvlr7M7J5cfbtMRRp8oljS4BcLKXsIqj5oyHDPRqsOHWeYBz dlAJmaJR4jsCfQTwTfWFBf+Td5PwWjScDyXCyXOePthY9tQ5CvO8dYdFpIeIiHpZ ME30uHLqVpfqlOtAp9BTLmisYjnv6KE3HIOuJCp9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNsDPLrURDCkuxqSKMopbGppYVocwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RlODE1NmMzLTE5M2ItNDVmOC04MTI0LWI0N2U5ZjhiZTU2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFKIwDQYJKoZIhvcNAQELBQADggEBABcN7nCWY1hjilIEZiOfdHAX bJj18jW+Za4p4CcVCKOc8mLxL74o79ByQ4c1YNVJL4+rgkf2S+JjA0zkXjYd+dmk L9uYyWxZyda4V8JOmK38IciOFomO93EL0LnsSb5E4Qg9p51B/d6liqQ6vkPXXvSD w48OapGAcqnf09wr8ahnax2dRJbGqr+hreU5L1FdmZVc4EtOOqgz6BsF+Em3QFtM wCUHJEgWzu+wzcb8sgnnTyUbM4KzlNcVtkGK7viN9w+mSr6AsVMF+cwHRutP6NW3 FxPdTht5/C8Som4gRP6JgtK6ZEWIbAUvk5W4DR5j58C1Tau38tBXZyVQGrdgX14= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:51 2025 by rpki-client