$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0604790a-fa67-4350-8180-a29893e2a39c.roa File: 0604790a-fa67-4350-8180-a29893e2a39c.roa (raw, json) Hash identifier: odmYEv3p58itJiGJa5G/CFtl2vc/eZCQbRGjlAwcBsg= Subject key identifier: 73:A5:87:6D:AC:AB:97:1F:90:09:DE:ED:52:D2:67:99:F8:9F:73:23 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2BFEC0305DB48111B2BE5F53831CCE0BAF4239C0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0604790a-fa67-4350-8180-a29893e2a39c.roa Signing time: Fri 31 Oct 2025 04:56:53 +0000 ROA not before: Fri 31 Oct 2025 04:56:53 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3ee4::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:fe:c0:30:5d:b4:81:11:b2:be:5f:53:83:1c:ce:0b:af:42:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:56:53 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=cbe868c68cd9dfa66684f488b7b891b2ab77f01fc28f516d71af5727e1f511e7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:f7:1c:d6:5c:04:c6:05:e2:ac:4c:db:8a: 37:07:74:c4:d9:58:b4:92:91:48:4b:88:12:f0:2c: d2:85:e5:47:6f:c7:9d:25:86:e3:b2:59:2b:b3:96: 04:af:7a:f8:6d:d2:17:8f:b3:a8:cc:94:53:2f:cf: fd:9c:01:38:73:84:65:1d:eb:31:06:1d:1e:a4:a2: 0b:b5:9d:2a:33:f3:a6:43:d8:32:0c:fe:00:5d:41: bd:db:d3:82:8e:db:aa:a2:96:ad:8b:8c:30:9b:0e: 07:d1:c0:0e:2c:b8:7b:1d:8f:fa:ef:8c:50:74:43: 96:4c:a5:3c:a1:a4:1b:da:80:e5:87:19:9f:89:34: b6:4a:1f:86:ed:73:4f:7b:46:9c:c8:e6:52:46:aa: 7c:fe:a2:83:86:f0:3d:cd:6e:a1:0b:e4:a1:df:e3: b8:9c:7c:2c:e7:bf:7c:ca:dc:7d:a9:08:65:c6:a6: 4b:6c:36:47:e4:5e:1c:3e:ef:b5:59:00:95:7f:77: 9e:4b:ca:bb:0d:59:b2:05:79:44:93:54:58:97:fc: f2:8d:6d:fe:0d:2b:45:cd:06:74:c4:50:4d:c3:90: ce:fb:e8:f1:70:f0:af:3a:1d:6c:1e:f8:b3:86:53: bb:67:47:45:c6:2f:da:50:6c:37:17:c3:6d:09:b8: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A5:87:6D:AC:AB:97:1F:90:09:DE:ED:52:D2:67:99:F8:9F:73:23 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0604790a-fa67-4350-8180-a29893e2a39c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3ee4::/46 Signature Algorithm: sha256WithRSAEncryption 5d:6a:e3:fe:e7:83:2e:53:38:22:6e:2c:ae:0e:b6:3e:8e:63: a2:60:91:3d:ee:32:2c:ae:96:c2:8e:58:1e:64:41:3d:ba:36: 55:93:8c:86:a4:f8:e7:e6:09:c4:1e:13:67:1e:b3:98:e7:25: 59:38:ae:49:4b:b8:e0:78:f0:97:31:58:37:eb:c3:14:a7:d8: ab:ff:96:c1:3c:04:f0:e8:67:c2:b3:bc:60:45:ba:36:08:5b: b6:9a:f8:b0:1c:d6:94:e1:8b:20:0b:f9:d8:68:9d:79:88:2d: 37:bb:e4:f9:8a:84:65:9d:68:8a:d1:fd:08:ae:67:db:79:02: 24:c1:08:9c:0b:c1:e1:d4:29:2b:cf:30:71:b0:28:87:35:7b: 9c:2a:98:81:11:5e:f3:84:5f:fe:e3:b4:4f:79:bc:38:00:91: d0:5c:e9:9f:50:fc:05:c9:83:20:c0:ef:95:83:08:c4:3b:94: bf:fe:ea:4c:0c:14:96:f7:2a:d6:10:f3:4c:da:02:3a:9c:4f: 3e:9f:8a:52:63:5c:62:1e:cb:fc:e4:93:dd:33:53:1a:9d:4a: cf:d5:69:cb:2b:1e:ad:8a:cb:1d:33:68:26:76:cd:b6:49:33: 26:3c:d2:88:6d:01:6d:b0:12:3c:63:bc:68:d3:f3:36:cc:55: c3:be:1b:31 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK/7AMF20gRGyvl9TgxzOC69COcAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ1NjUzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYmU4NjhjNjhjZDlkZmE2NjY4NGY0ODhiN2I4OTFiMmFi NzdmMDFmYzI4ZjUxNmQ3MWFmNTcyN2UxZjUxMWU3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjaPcc1lwExgXirEzbijcHdMTZWLSSkUhLiBLwLNKF5Udv x50lhuOyWSuzlgSvevht0hePs6jMlFMvz/2cAThzhGUd6zEGHR6kogu1nSoz86ZD 2DIM/gBdQb3b04KO26qilq2LjDCbDgfRwA4suHsdj/rvjFB0Q5ZMpTyhpBvagOWH GZ+JNLZKH4btc097RpzI5lJGqnz+ooOG8D3NbqEL5KHf47icfCznv3zK3H2pCGXG pktsNkfkXhw+77VZAJV/d55LyrsNWbIFeUSTVFiX/PKNbf4NK0XNBnTEUE3DkM77 6PFw8K86HWwe+LOGU7tnR0XGL9pQbDcXw20JuG6DAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUc6WHbayrlx+QCd7tUtJnmfifcyMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzA2MDQ3OTBhLWZhNjctNDM1MC04MTgwLWEyOTg5M2UyYTM5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAPuQwDQYJKoZIhvcNAQELBQADggEBAF1q4/7ngy5TOCJuLK4Otj6O Y6JgkT3uMiyulsKOWB5kQT26NlWTjIak+OfmCcQeE2ces5jnJVk4rklLuOB48Jcx WDfrwxSn2Kv/lsE8BPDoZ8KzvGBFujYIW7aa+LAc1pThiyAL+dhonXmILTe75PmK hGWdaIrR/QiuZ9t5AiTBCJwLweHUKSvPMHGwKIc1e5wqmIERXvOEX/7jtE95vDgA kdBc6Z9Q/AXJgyDA75WDCMQ7lL/+6kwMFJb3KtYQ80zaAjqcTz6filJjXGIey/zk k90zUxqdSs/VacsrHq2Kyx0zaCZ2zbZJMyY80ohtAW2wEjxjvGjT8zbMVcO+GzE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:35 2025 by rpki-client