$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e6d30f8-5821-4614-a430-918ce4314604.roa File: 0e6d30f8-5821-4614-a430-918ce4314604.roa (raw, json) Hash identifier: UV8AWX8gP5uGBRfSCe7m3TJjVOaNLq2Hp7sLl6Fx8IY= Subject key identifier: DC:56:42:0D:A7:0D:3E:AF:DE:D6:D9:C2:1C:11:12:90:CD:93:C6:BD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5A5858C0A4C915F5483FB6D066458060F3322ED0 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e6d30f8-5821-4614-a430-918ce4314604.roa Signing time: Thu 30 Oct 2025 21:08:37 +0000 ROA not before: Thu 30 Oct 2025 21:08:37 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:14e6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:58:58:c0:a4:c9:15:f5:48:3f:b6:d0:66:45:80:60:f3:32:2e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:08:37 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=4a0f227405cd09d3dd35188b1e9af5f1d92d6598f8156cd62cb09dd5e1de8133, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:75:c3:d9:30:eb:4c:5b:89:f7:5b:bb:8b: ea:4d:1f:5b:59:c1:fa:74:e1:c2:f1:c2:66:fe:83: 88:71:f4:4e:ec:2a:c5:d5:30:bd:28:68:1a:bc:1a: 08:ec:78:bf:eb:87:1c:c0:41:f5:b7:a1:16:ee:ad: 8c:9b:52:35:6e:fd:f4:8c:35:be:d3:74:03:50:f9: 14:41:78:04:dd:79:54:6c:1d:9b:fa:fc:54:ba:d9: b8:e7:a4:d2:be:94:e2:97:1d:22:c4:43:0d:64:c1: 96:0f:9b:14:ae:2e:d2:a4:67:31:fb:54:d9:0f:1e: 78:f7:92:d2:29:2a:b9:c5:51:5b:0f:f8:a2:05:fa: 9d:39:b8:ab:84:1d:5d:be:da:20:11:53:53:cc:68: a2:dc:f2:2d:44:30:5b:4b:e9:ba:bb:bd:5f:10:ee: fb:ca:3e:f4:32:1e:76:08:6a:53:b5:60:d7:2b:cf: 37:b9:5d:73:90:c7:d7:bb:1f:17:1e:f6:8c:d5:27: 91:92:da:b9:4d:4f:4f:0c:21:e1:81:06:4f:3f:3d: c8:32:8b:34:1c:c7:05:27:55:15:a1:7a:56:11:88: d5:ac:5e:3d:b5:14:2b:ab:61:f5:83:ff:01:86:fd: fd:0c:eb:14:10:45:c0:64:3a:0d:29:b1:cb:c9:c9: 8b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:56:42:0D:A7:0D:3E:AF:DE:D6:D9:C2:1C:11:12:90:CD:93:C6:BD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e6d30f8-5821-4614-a430-918ce4314604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:14e6::/47 Signature Algorithm: sha256WithRSAEncryption bf:aa:6a:d8:50:35:cf:58:2a:65:b9:32:fd:a0:0a:93:dd:0d: c7:ff:eb:d7:38:9c:94:8b:69:bd:5a:72:b4:d0:c1:1f:28:4a: 88:ba:29:b0:aa:b6:f8:85:d8:ba:a7:f1:59:53:bb:fb:18:0f: cd:32:b3:d0:c0:4d:41:d2:63:b4:62:fa:ab:d8:bd:0c:a8:a6: 1d:25:ea:b9:96:50:61:97:4c:50:20:e0:aa:cc:09:e1:c8:bf: 2a:04:f0:91:1e:3d:49:73:ff:71:50:08:5d:0f:41:14:10:95: 93:1d:34:fe:db:92:13:75:e5:41:1c:9e:53:6f:9f:d9:d6:06: 1b:fe:a8:b6:55:7b:1e:60:73:40:bc:9c:f2:be:2e:86:0b:ef: 6f:ff:83:83:6e:fd:47:1f:53:8b:5f:c5:6f:a0:80:a4:b5:40: ee:bd:40:ae:58:31:6f:f6:07:58:ad:d9:73:d8:4f:76:be:63: 49:a5:c2:52:23:46:63:b6:0c:2d:e3:9d:2d:2c:13:0e:d4:bc: af:20:6e:cd:1e:2b:e3:ca:3b:ac:d0:08:74:00:ca:3b:19:ab: db:16:87:4f:84:f5:20:fa:cf:a2:73:d6:14:5c:16:46:09:03: 3b:cb:17:e7:bf:9b:9d:dc:52:9a:9a:05:88:ce:0e:24:54:cc: 2f:57:dc:4f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWlhYwKTJFfVIP7bQZkWAYPMyLtAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEwODM3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTBmMjI3NDA1Y2QwOWQzZGQzNTE4OGIxZTlhZjVmMWQ5 MmQ2NTk4ZjgxNTZjZDYyY2IwOWRkNWUxZGU4MTMzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqaHXD2TDrTFuJ91u7i+pNH1tZwfp04cLxwmb+g4hx9E7s KsXVML0oaBq8GgjseL/rhxzAQfW3oRburYybUjVu/fSMNb7TdANQ+RRBeATdeVRs HZv6/FS62bjnpNK+lOKXHSLEQw1kwZYPmxSuLtKkZzH7VNkPHnj3ktIpKrnFUVsP +KIF+p05uKuEHV2+2iARU1PMaKLc8i1EMFtL6bq7vV8Q7vvKPvQyHnYIalO1YNcr zze5XXOQx9e7Hxce9ozVJ5GS2rlNT08MIeGBBk8/PcgyizQcxwUnVRWhelYRiNWs Xj21FCurYfWD/wGG/f0M6xQQRcBkOg0pscvJyYvnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3FZCDacNPq/e1tnCHBESkM2Txr0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzBlNmQzMGY4LTU4MjEtNDYxNC1hNDMwLTkxOGNlNDMxNDYwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFOYwDQYJKoZIhvcNAQELBQADggEBAL+qathQNc9YKmW5Mv2gCpPd Dcf/69c4nJSLab1acrTQwR8oSoi6KbCqtviF2Lqn8VlTu/sYD80ys9DATUHSY7Ri +qvYvQyoph0l6rmWUGGXTFAg4KrMCeHIvyoE8JEePUlz/3FQCF0PQRQQlZMdNP7b khN15UEcnlNvn9nWBhv+qLZVex5gc0C8nPK+LoYL72//g4Nu/UcfU4tfxW+ggKS1 QO69QK5YMW/2B1it2XPYT3a+Y0mlwlIjRmO2DC3jnS0sEw7UvK8gbs0eK+PKO6zQ CHQAyjsZq9sWh0+E9SD6z6Jz1hRcFkYJAzvLF+e/m53cUpqaBYjODiRUzC9X3E8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:04 2025 by rpki-client