$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/523a037e-572e-40af-b8a2-1d8ed93b2134.roa File: 523a037e-572e-40af-b8a2-1d8ed93b2134.roa (raw, json) Hash identifier: qa2USQJqQAeKwhbeLS5QCJGe8MBs2w/haOO5Xulcdfk= Subject key identifier: 70:E7:56:A2:B2:47:C0:6A:D8:5F:A0:32:0B:83:89:6D:BF:51:F6:98 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 18A3841DB0C9FD73C1014D177B0A06C08DE67AF9 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/523a037e-572e-40af-b8a2-1d8ed93b2134.roa Signing time: Fri 31 Oct 2025 05:51:59 +0000 ROA not before: Fri 31 Oct 2025 05:51:59 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2de8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a3:84:1d:b0:c9:fd:73:c1:01:4d:17:7b:0a:06:c0:8d:e6:7a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:51:59 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=210eabb17df1f5d32b3a127b7238f62f4843616eb2e50ce5d559bb3c08c721fc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3c:74:02:a1:7b:38:51:b0:13:07:f1:fe:e1: 7b:cc:19:1d:e0:2f:1f:4b:40:a1:c0:fa:98:14:0d: 06:7f:cc:79:3c:00:32:82:e7:eb:11:2c:a8:79:77: 6d:3e:0c:9b:aa:34:0f:d3:48:0f:6d:2a:b3:80:c2: 34:21:5e:90:90:a5:f2:ae:59:85:55:17:70:e0:eb: 95:46:82:71:81:f5:dd:9e:b1:1e:28:c1:98:ff:3f: df:d4:c6:68:ec:07:4d:45:2c:ed:ef:7d:30:38:f3: c4:74:68:e2:26:04:c4:d9:84:ad:3f:a6:a1:50:e1: 9a:7b:00:92:1d:9b:21:5a:61:49:70:11:3e:8f:cb: 76:05:76:cd:27:88:84:e7:91:6d:bc:8b:e0:9a:ce: 5a:60:d9:c0:fc:12:8c:44:b6:0e:89:64:83:6a:6b: 90:9f:34:b6:77:8d:90:d3:55:60:6a:fa:58:a6:55: e5:49:a3:53:89:90:e8:5d:a6:44:4a:e9:21:2d:72: f0:ea:8f:2b:61:bf:f6:15:48:62:2b:38:52:98:53: 37:7b:00:0a:c9:d1:fe:c8:47:5c:a1:55:d3:69:31: ba:26:34:00:b4:74:9a:3e:30:d4:be:bf:c3:f1:2c: 3e:94:5d:ee:ee:19:f4:79:33:55:27:a2:66:16:61: a8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E7:56:A2:B2:47:C0:6A:D8:5F:A0:32:0B:83:89:6D:BF:51:F6:98 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/523a037e-572e-40af-b8a2-1d8ed93b2134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2de8::/45 Signature Algorithm: sha256WithRSAEncryption 71:64:79:26:4b:36:18:30:b5:ea:3e:a4:ca:4f:3b:4c:d1:6c: da:ad:23:3c:f8:a5:91:88:08:98:92:7d:40:1f:11:70:ad:6b: 5f:6e:ef:15:8d:4d:50:89:16:66:8b:17:60:56:6a:2b:e6:5d: 22:f3:96:46:be:eb:3b:29:70:55:09:f4:e2:41:14:25:f9:36: d2:f0:0e:5e:a9:b0:40:97:21:d7:dd:3c:a8:db:d9:5e:67:bd: b4:22:89:85:66:b2:ac:dd:28:09:88:86:b3:de:08:ad:ff:52: 4c:72:16:5f:a3:49:d8:7a:31:37:36:8a:17:18:a5:f4:12:25: 58:ba:7d:ab:3d:d0:e8:17:55:d7:b4:93:f3:d1:89:7e:47:87: 71:89:71:85:31:86:4d:05:0e:49:83:ff:61:99:06:e8:63:02: 7c:75:c7:df:5a:0c:3e:92:7f:09:96:72:fd:3d:20:5d:ec:f9: 1e:49:ca:d1:6b:34:6c:17:90:eb:18:55:5c:10:8d:f8:8c:89: 91:5c:59:03:1c:33:93:90:06:be:ee:fb:40:8c:ea:68:f2:eb: 1f:6e:dd:ba:09:9c:75:5c:24:3e:c3:eb:4e:2e:f1:e5:95:e3: b0:f3:39:3f:6d:fb:4e:a7:4f:33:d5:d8:81:27:3a:18:34:ab: 07:54:68:73 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGKOEHbDJ/XPBAU0XewoGwI3mevkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU1MTU5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTBlYWJiMTdkZjFmNWQzMmIzYTEyN2I3MjM4ZjYyZjQ4 NDM2MTZlYjJlNTBjZTVkNTU5YmIzYzA4YzcyMWZjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4PHQCoXs4UbATB/H+4XvMGR3gLx9LQKHA+pgUDQZ/zHk8 ADKC5+sRLKh5d20+DJuqNA/TSA9tKrOAwjQhXpCQpfKuWYVVF3Dg65VGgnGB9d2e sR4owZj/P9/UxmjsB01FLO3vfTA488R0aOImBMTZhK0/pqFQ4Zp7AJIdmyFaYUlw ET6Py3YFds0niITnkW28i+Cazlpg2cD8EoxEtg6JZINqa5CfNLZ3jZDTVWBq+lim VeVJo1OJkOhdpkRK6SEtcvDqjythv/YVSGIrOFKYUzd7AArJ0f7IR1yhVdNpMbom NAC0dJo+MNS+v8PxLD6UXe7uGfR5M1UnomYWYaibAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcOdWorJHwGrYX6AyC4OJbb9R9pgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzUyM2EwMzdlLTU3MmUtNDBhZi1iOGEyLTFkOGVkOTNiMjEzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALegwDQYJKoZIhvcNAQELBQADggEBAHFkeSZLNhgwteo+pMpPO0zR bNqtIzz4pZGICJiSfUAfEXCta19u7xWNTVCJFmaLF2BWaivmXSLzlka+6zspcFUJ 9OJBFCX5NtLwDl6psECXIdfdPKjb2V5nvbQiiYVmsqzdKAmIhrPeCK3/UkxyFl+j Sdh6MTc2ihcYpfQSJVi6fas90OgXVde0k/PRiX5Hh3GJcYUxhk0FDkmD/2GZBuhj Anx1x99aDD6SfwmWcv09IF3s+R5JytFrNGwXkOsYVVwQjfiMiZFcWQMcM5OQBr7u +0CM6mjy6x9u3boJnHVcJD7D604u8eWV47DzOT9t+06nTzPV2IEnOhg0qwdUaHM= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:21 2025 by rpki-client