$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f8117359-41c8-4b4a-8606-589763f02881.roa File: f8117359-41c8-4b4a-8606-589763f02881.roa (raw, json) Hash identifier: 6AzLJnQuMJ7YN28GNkE/ZzFeXl1c3erLLNjqc9eQB+M= Subject key identifier: 5A:7C:37:26:8F:14:77:68:AB:0C:2E:08:14:CC:01:ED:93:51:DA:85 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 42F7FECBEC4E124B478A55FC941E72952F2D83ED Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f8117359-41c8-4b4a-8606-589763f02881.roa Signing time: Fri 31 Oct 2025 07:06:49 +0000 ROA not before: Fri 31 Oct 2025 07:06:49 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3b20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f7:fe:cb:ec:4e:12:4b:47:8a:55:fc:94:1e:72:95:2f:2d:83:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:06:49 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f8c5c8b00eb4d0de7eb8cbb254bb2f3204ead4c2aa20ec21a04b1c38f26fdc11, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6f:a8:fd:1b:84:00:5b:c0:07:7f:ae:12:0a: 14:7e:35:80:0b:c5:3f:9a:36:4b:c0:15:56:47:de: e6:01:5d:47:6e:35:2b:b4:ab:ad:3f:14:45:5d:d1: 56:d7:28:be:14:15:f9:5c:2a:c4:ee:2e:2a:01:32: c9:61:f1:24:d0:36:7a:3c:b1:a4:1a:f9:ed:5a:af: 72:1b:80:4e:9f:e1:93:2a:c2:6c:ab:26:a3:98:86: fd:5e:d9:f2:22:1c:5f:4b:d8:09:99:86:19:82:79: 56:a8:27:c4:5f:8e:5c:cd:1b:c1:a1:6b:80:1e:25: 15:4d:d5:29:61:20:e7:d0:7d:7d:2c:ca:53:0f:3f: 88:0c:57:68:8b:1f:2e:e0:26:ca:fc:9c:b6:0d:30: 40:fa:f3:5d:d5:b5:47:82:c4:fe:a5:ef:c3:77:c3: aa:40:7e:27:ca:67:b1:fe:f5:c0:14:57:6b:88:12: 7e:3e:6a:79:02:e5:8e:59:fe:89:e2:1d:97:35:b3: d6:61:32:d2:f8:f5:db:3b:21:ed:a0:82:69:a3:8c: 5c:58:a0:1b:8b:3f:08:3c:6d:ff:eb:4e:1c:62:12: ce:3b:28:49:92:46:84:0f:0b:c1:3b:42:8e:d8:40: 90:02:01:6b:36:92:da:d2:87:b9:49:f8:54:3f:21: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7C:37:26:8F:14:77:68:AB:0C:2E:08:14:CC:01:ED:93:51:DA:85 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f8117359-41c8-4b4a-8606-589763f02881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3b20::/44 Signature Algorithm: sha256WithRSAEncryption 63:cf:bc:ee:68:68:a6:60:a6:f1:e8:f0:65:88:b5:71:d2:be: 41:b4:11:66:35:7f:72:b4:26:db:9a:d4:20:b4:0d:88:f8:75: ba:de:a9:5b:e5:da:c5:1a:ef:a0:96:a1:42:e8:dc:e8:98:2f: 3d:70:24:f8:0e:4f:70:0b:f4:d8:90:2e:06:9f:30:c0:bb:82: 30:fe:83:62:e2:ce:40:28:a9:66:d3:0b:76:1a:27:3b:dc:b2: ab:69:5d:59:61:ff:4d:a7:ac:5f:ab:ef:45:e1:41:c0:a3:c8: a0:4d:05:bd:d9:a2:1d:06:f6:0d:03:0f:4c:71:17:7b:67:74: a6:0b:76:a4:e2:33:cf:9f:61:70:3a:db:c5:81:f4:ee:ef:a1: 37:85:9f:41:1d:e3:8f:36:80:f0:db:88:29:fc:19:42:83:cf: 2b:7d:31:f5:1e:68:dd:93:3c:48:4a:2a:8a:59:d9:1b:34:e8: 13:a8:43:0a:05:2f:b1:14:85:f8:1f:a7:61:82:52:6e:52:15: 42:fb:21:7e:97:95:5e:f7:80:62:d4:1b:1a:fc:3e:aa:cd:d4: 4c:c7:17:9e:85:f7:cc:a7:97:a5:b7:34:02:02:ec:35:91:de: 11:33:f4:93:c4:f7:6e:21:0e:c3:7e:cd:53:21:f6:a0:c6:73: 4f:f4:6b:c2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQvf+y+xOEktHilX8lB5ylS8tg+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcwNjQ5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGM1YzhiMDBlYjRkMGRlN2ViOGNiYjI1NGJiMmYzMjA0 ZWFkNGMyYWEyMGVjMjFhMDRiMWMzOGYyNmZkYzExMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDab6j9G4QAW8AHf64SChR+NYALxT+aNkvAFVZH3uYBXUdu NSu0q60/FEVd0VbXKL4UFflcKsTuLioBMslh8STQNno8saQa+e1ar3IbgE6f4ZMq wmyrJqOYhv1e2fIiHF9L2AmZhhmCeVaoJ8RfjlzNG8Gha4AeJRVN1SlhIOfQfX0s ylMPP4gMV2iLHy7gJsr8nLYNMED6813VtUeCxP6l78N3w6pAfifKZ7H+9cAUV2uI En4+ankC5Y5Z/oniHZc1s9ZhMtL49ds7Ie2ggmmjjFxYoBuLPwg8bf/rThxiEs47 KEmSRoQPC8E7Qo7YQJACAWs2ktrSh7lJ+FQ/IVUrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWnw3Jo8Ud2irDC4IFMwB7ZNR2oUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Y4MTE3MzU5LTQxYzgtNGI0YS04NjA2LTU4OTc2M2YwMjg4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAOyAwDQYJKoZIhvcNAQELBQADggEBAGPPvO5oaKZgpvHo8GWItXHS vkG0EWY1f3K0Jtua1CC0DYj4dbreqVvl2sUa76CWoULo3OiYLz1wJPgOT3AL9NiQ LgafMMC7gjD+g2LizkAoqWbTC3YaJzvcsqtpXVlh/02nrF+r70XhQcCjyKBNBb3Z oh0G9g0DD0xxF3tndKYLdqTiM8+fYXA628WB9O7voTeFn0Ed4482gPDbiCn8GUKD zyt9MfUeaN2TPEhKKopZ2Rs06BOoQwoFL7EUhfgfp2GCUm5SFUL7IX6XlV73gGLU Gxr8PqrN1EzHF56F98ynl6W3NAIC7DWR3hEz9JPE924hDsN+zVMh9qDGc0/0a8I= -----END CERTIFICATE-----Generated at Tue Nov 18 08:22:31 2025 by rpki-client