$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0cbadd82-6cdb-428d-9016-1ac8a180987e.roa File: 0cbadd82-6cdb-428d-9016-1ac8a180987e.roa (raw, json) Hash identifier: hrW1n89FgDuzdGcoFFnAcPqe25OFYE8loMKTMkqL51A= Subject key identifier: 59:15:EC:CB:63:53:37:36:81:D2:E6:3D:DC:59:1B:AB:3E:4D:CF:2C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6C6ED650E7DC2FF189420B9CD32B9A9A0B231488 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0cbadd82-6cdb-428d-9016-1ac8a180987e.roa Signing time: Thu 30 Oct 2025 22:40:25 +0000 ROA not before: Thu 30 Oct 2025 22:40:25 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1f6e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6e:d6:50:e7:dc:2f:f1:89:42:0b:9c:d3:2b:9a:9a:0b:23:14:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:40:25 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=b95d4a7c7344b580e6545ce9fd1dc9eba00fda3334fcfebb977ec349f3ecfe63, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:ef:59:db:1d:61:aa:22:ef:41:48:f5:b3: 59:68:f1:46:28:94:e8:68:ee:4d:fc:9f:fe:44:81: 54:cb:67:7d:99:33:da:b5:5c:80:7e:29:b1:83:08: 5b:8c:76:52:7b:7e:0d:c8:da:d8:74:4f:f9:16:8b: f9:3c:99:14:0f:0a:dd:1e:17:2d:ca:0a:ea:f2:a9: a2:2f:ec:d0:92:56:b9:ce:7f:cd:8b:eb:25:d3:f9: 84:85:e4:1e:5b:3a:ff:c6:56:03:c4:43:aa:ff:83: fa:0b:14:29:ab:e9:b0:0e:b5:ee:4d:e7:18:77:8a: f5:4b:2f:a0:d3:c5:ea:88:2d:eb:89:cf:f5:21:39: 5b:2b:94:bd:4b:65:88:dd:48:cc:72:3e:e2:a3:d6: c6:56:bb:a6:78:3e:63:40:9e:db:0e:9e:51:5b:e0: 82:d6:3a:05:e1:a6:1d:bd:69:eb:fa:6d:2b:97:25: 84:49:7a:13:3f:02:b9:53:ef:ff:6d:66:c5:22:cc: ea:d3:6e:d6:dd:d2:44:cf:50:f9:c1:b9:4b:79:ee: b0:2c:83:2a:64:71:cf:03:fc:f4:6d:ad:16:f4:6b: 92:12:ca:4b:49:aa:bf:9f:f3:aa:58:17:5a:cd:62: 17:80:49:95:f6:f7:7a:e5:15:2e:2c:c1:3a:cd:0e: 54:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:15:EC:CB:63:53:37:36:81:D2:E6:3D:DC:59:1B:AB:3E:4D:CF:2C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0cbadd82-6cdb-428d-9016-1ac8a180987e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1f6e::/47 Signature Algorithm: sha256WithRSAEncryption b5:91:e2:57:fc:8f:dd:20:2f:6a:d3:f3:85:ba:61:0f:05:5b: 58:fa:8e:2e:c2:df:63:b2:61:b0:15:88:3b:73:e5:40:ed:5c: b4:01:ba:be:04:4a:65:2b:c4:01:35:7e:05:f8:ed:6d:ee:d9: 8b:ea:04:42:b6:62:9d:9c:e3:02:66:13:38:ea:9e:e1:45:99: eb:46:5f:6c:dd:cc:e5:d0:8e:2b:25:af:89:1a:61:d4:34:3b: d0:5e:79:51:8a:b3:19:08:65:23:c0:3a:52:c1:1a:e1:fc:65: 7b:f5:5d:ba:e7:ac:8b:a3:03:20:4e:e1:17:15:72:2f:0c:96: 84:ef:ad:d4:92:4c:0a:be:16:1a:d7:ae:15:83:d2:7b:22:a2: 5b:ff:f8:90:55:28:d5:d5:c3:e7:d8:16:bc:13:56:bb:6f:79: 02:36:78:87:9e:18:1b:06:db:46:5c:f7:be:84:19:03:54:f5: 51:4b:b1:97:74:6e:d5:16:6c:4b:05:4f:e8:42:ac:d7:7d:a9: 80:39:19:d2:5f:ab:ba:4b:0d:cc:da:a8:06:c1:e5:47:ee:c6: f5:3c:16:af:fd:9a:47:a4:15:8c:40:a3:9a:65:f4:10:81:15: 68:f3:73:eb:69:0f:db:66:7d:9e:48:86:0a:55:6a:17:83:29: ce:2b:c8:55 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbG7WUOfcL/GJQguc0yuamgsjFIgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI0MDI1WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTVkNGE3YzczNDRiNTgwZTY1NDVjZTlmZDFkYzllYmEw MGZkYTMzMzRmY2ZlYmI5NzdlYzM0OWYzZWNmZTYzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxMO9Z2x1hqiLvQUj1s1lo8UYolOho7k38n/5EgVTLZ32Z M9q1XIB+KbGDCFuMdlJ7fg3I2th0T/kWi/k8mRQPCt0eFy3KCuryqaIv7NCSVrnO f82L6yXT+YSF5B5bOv/GVgPEQ6r/g/oLFCmr6bAOte5N5xh3ivVLL6DTxeqILeuJ z/UhOVsrlL1LZYjdSMxyPuKj1sZWu6Z4PmNAntsOnlFb4ILWOgXhph29aev6bSuX JYRJehM/ArlT7/9tZsUizOrTbtbd0kTPUPnBuUt57rAsgypkcc8D/PRtrRb0a5IS yktJqr+f86pYF1rNYheASZX293rlFS4swTrNDlS7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUWRXsy2NTNzaB0uY93Fkbqz5NzywwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBjYmFkZDgyLTZjZGItNDI4ZC05MDE2LTFhYzhhMTgwOTg3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAH24wDQYJKoZIhvcNAQELBQADggEBALWR4lf8j90gL2rT84W6YQ8F W1j6ji7C32OyYbAViDtz5UDtXLQBur4ESmUrxAE1fgX47W3u2YvqBEK2Yp2c4wJm EzjqnuFFmetGX2zdzOXQjislr4kaYdQ0O9BeeVGKsxkIZSPAOlLBGuH8ZXv1Xbrn rIujAyBO4RcVci8MloTvrdSSTAq+FhrXrhWD0nsiolv/+JBVKNXVw+fYFrwTVrtv eQI2eIeeGBsG20Zc976EGQNU9VFLsZd0btUWbEsFT+hCrNd9qYA5GdJfq7pLDcza qAbB5UfuxvU8Fq/9mkekFYxAo5pl9BCBFWjzc+tpD9tmfZ5IhgpVaheDKc4ryFU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:47 2025 by rpki-client