$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0cf2858e-0edd-426d-8b40-6671ca9c5413.roa File: 0cf2858e-0edd-426d-8b40-6671ca9c5413.roa (raw, json) Hash identifier: V5bk/qGdhT1UvW/98b48I7hydyGp04tTmlMC3n0vH0c= Subject key identifier: 55:21:0B:20:D8:B4:51:D8:2F:B2:DF:D2:88:15:74:99:48:46:95:B4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6347CBC141FAEF62FA289A72C868E99941190574 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0cf2858e-0edd-426d-8b40-6671ca9c5413.roa Signing time: Fri 31 Oct 2025 02:23:46 +0000 ROA not before: Fri 31 Oct 2025 02:23:46 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1318::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:47:cb:c1:41:fa:ef:62:fa:28:9a:72:c8:68:e9:99:41:19:05:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:23:46 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=462c4eefaac937d1fc52d529c9bdb4be5699001600a035a115e1c2e3e4efd5df, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:a3:85:f9:e2:e6:86:75:39:74:bb:6c:b5: 2b:2a:0d:a8:12:03:d0:0a:19:bc:46:7b:32:80:04: 85:36:8f:76:e4:ac:c0:43:3b:f0:2f:7b:c7:34:a4: d9:36:57:06:f8:4c:4d:97:6c:e0:19:d1:f1:de:cc: f0:40:d9:da:a3:7b:8b:71:60:e6:a5:ed:c8:d6:66: 28:c8:fa:a1:ff:6d:cc:cd:31:e5:f3:7f:62:91:8e: 42:c3:f3:fe:19:1a:27:7c:5f:10:84:9d:18:8d:a4: 87:5b:22:b0:7b:72:a0:04:22:62:10:2e:d0:3b:8c: f6:b3:cf:e3:a2:98:75:c5:5b:e9:85:f9:34:a1:64: 47:b8:89:1f:6d:f1:64:4f:ec:a2:3a:c8:a4:71:b5: 96:ab:7c:2a:6a:25:26:6c:7c:4b:86:b9:80:c6:52: 94:90:7b:c5:fc:bd:7d:fa:9c:c6:f1:e1:34:92:cc: c9:00:23:44:59:e2:fa:2a:7d:32:be:2a:c5:a6:f2: 4e:c1:0d:ee:8f:0a:bd:e5:44:19:ec:51:7d:f1:66: ce:ba:ae:ea:59:a3:f3:29:b7:2a:94:79:5b:3a:c5: 3d:59:1f:f9:95:59:ac:8a:29:7a:6d:1a:b7:c3:46: 98:f6:96:2e:82:ea:68:d4:0a:a8:9b:53:ec:f9:4d: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:21:0B:20:D8:B4:51:D8:2F:B2:DF:D2:88:15:74:99:48:46:95:B4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0cf2858e-0edd-426d-8b40-6671ca9c5413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1318::/46 Signature Algorithm: sha256WithRSAEncryption c0:4c:e8:80:93:13:f5:49:d4:5c:b3:10:91:7b:fd:94:20:b0: d5:47:86:da:76:9d:47:eb:7a:cf:73:5e:84:65:69:34:28:a3: 57:93:3d:7d:86:63:71:71:38:d7:2b:bf:0f:b4:d2:2b:d3:cf: c1:ec:db:ee:57:a3:96:d3:cf:7d:88:06:06:69:ce:15:5f:26: 8f:cc:d0:37:f8:77:d4:7f:e3:4e:74:f7:81:f4:42:17:ac:2e: 94:9d:7e:f9:bf:b7:0e:d1:a1:1e:0b:fb:0a:1b:a7:af:3b:0f: 44:57:ff:f6:e8:4e:57:e2:2f:95:87:a1:74:c8:7c:d8:9f:3f: 99:87:d4:78:95:72:2b:75:8b:92:99:5d:cc:ec:55:7f:5c:47: 2f:56:0b:80:a9:04:a9:2c:f4:c7:07:64:b8:c2:be:a3:e9:f4: e6:dc:a0:1e:c2:81:a9:77:46:f3:73:af:b0:da:68:93:0e:87: 44:5a:84:a9:ba:0d:28:4e:4a:8d:ee:bf:c2:a9:3e:5d:7c:88: 4e:65:7e:11:32:3d:55:16:33:33:df:4c:98:dc:fa:a0:97:f8: 87:3c:ec:b2:51:3f:6a:b8:48:ac:c8:31:3f:c5:f4:1f:74:06: ae:ca:49:30:12:00:18:30:1b:aa:74:c5:d3:36:7a:16:ac:68: 09:5b:a2:79 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY0fLwUH672L6KJpyyGjpmUEZBXQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDIyMzQ2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjJjNGVlZmFhYzkzN2QxZmM1MmQ1MjljOWJkYjRiZTU2 OTkwMDE2MDBhMDM1YTExNWUxYzJlM2U0ZWZkNWRmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfaKOF+eLmhnU5dLtstSsqDagSA9AKGbxGezKABIU2j3bk rMBDO/Ave8c0pNk2Vwb4TE2XbOAZ0fHezPBA2dqje4txYOal7cjWZijI+qH/bczN MeXzf2KRjkLD8/4ZGid8XxCEnRiNpIdbIrB7cqAEImIQLtA7jPazz+OimHXFW+mF +TShZEe4iR9t8WRP7KI6yKRxtZarfCpqJSZsfEuGuYDGUpSQe8X8vX36nMbx4TSS zMkAI0RZ4voqfTK+KsWm8k7BDe6PCr3lRBnsUX3xZs66rupZo/MptyqUeVs6xT1Z H/mVWayKKXptGrfDRpj2li6C6mjUCqibU+z5Tab3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVSELINi0Udgvst/SiBV0mUhGlbQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBjZjI4NThlLTBlZGQtNDI2ZC04YjQwLTY2NzFjYTljNTQxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAExgwDQYJKoZIhvcNAQELBQADggEBAMBM6ICTE/VJ1FyzEJF7/ZQg sNVHhtp2nUfres9zXoRlaTQoo1eTPX2GY3FxONcrvw+00ivTz8Hs2+5Xo5bTz32I BgZpzhVfJo/M0Df4d9R/405094H0QhesLpSdfvm/tw7RoR4L+wobp687D0RX//bo TlfiL5WHoXTIfNifP5mH1HiVcit1i5KZXczsVX9cRy9WC4CpBKks9McHZLjCvqPp 9ObcoB7Cgal3RvNzr7DaaJMOh0RahKm6DShOSo3uv8KpPl18iE5lfhEyPVUWMzPf TJjc+qCX+Ic87LJRP2q4SKzIMT/F9B90Bq7KSTASABgwG6p0xdM2ehasaAlbonk= -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:38 2025 by rpki-client