$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1ea6ce4e-21f7-4e44-8a74-991cc81c5353.roa File: 1ea6ce4e-21f7-4e44-8a74-991cc81c5353.roa (raw, json) Hash identifier: 1YJXGAnK6j8wWmBBhEjRzmMaAPlQUsbX7XfU260d5ys= Subject key identifier: AE:88:3A:A0:FE:64:36:71:37:E7:A2:6D:95:91:DB:21:05:A1:BB:B4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5D6C659528BDDD5BCFC013D91358AB77ECA175BB Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1ea6ce4e-21f7-4e44-8a74-991cc81c5353.roa Signing time: Thu 30 Oct 2025 21:24:00 +0000 ROA not before: Thu 30 Oct 2025 21:24:00 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:168e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6c:65:95:28:bd:dd:5b:cf:c0:13:d9:13:58:ab:77:ec:a1:75:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:24:00 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=1478da10b7c3e2b9cef7f50cca630afa2f8067dfd2e7b212fe61896a7a1e2133, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:b4:33:2f:37:f1:13:bc:62:17:a2:24:47: f7:61:82:e9:c9:41:e3:b9:31:fd:04:7a:dd:ed:93: e4:88:f6:b2:cc:8a:a9:3c:0b:74:56:85:97:28:cc: 3d:ef:12:46:79:4d:9a:b6:d6:4d:aa:b2:a0:40:11: 87:fe:75:02:27:8a:f0:59:0d:bb:8e:4d:6f:0c:a2: b5:0b:80:1f:ea:d3:0f:e5:fd:58:1f:e7:69:e3:4e: 8d:41:41:43:ee:7c:36:dc:8b:1f:85:7d:9e:11:26: 1a:64:8e:a9:ef:5b:e6:99:63:e5:19:c7:13:4a:aa: 70:55:e7:2c:73:85:9b:40:02:28:89:de:7e:bb:7c: 5a:f5:17:db:27:84:a1:32:4d:31:35:7b:ce:9b:67: af:5e:24:d4:2f:16:89:64:90:a3:a1:58:84:ae:ce: 12:2e:f2:79:8e:04:05:20:60:0d:c0:f3:62:af:d0: c4:ae:0b:68:5d:44:78:f8:94:90:83:84:50:4d:86: d1:ed:51:32:37:08:b0:ef:be:74:f6:48:de:f2:13: 91:a0:b7:d2:4d:38:73:b1:10:c3:f0:7e:1f:12:c6: 83:d1:b3:7b:73:51:65:23:41:07:39:f2:3b:b0:19: 75:a1:a1:a1:af:06:11:23:db:c5:18:99:41:37:a0: c4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:88:3A:A0:FE:64:36:71:37:E7:A2:6D:95:91:DB:21:05:A1:BB:B4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1ea6ce4e-21f7-4e44-8a74-991cc81c5353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:168e::/47 Signature Algorithm: sha256WithRSAEncryption 72:74:db:7a:b0:fb:18:11:0a:e7:86:22:0f:7f:1a:48:27:48: 18:06:87:f3:99:dd:c0:28:2c:16:ad:d6:ce:7c:f7:25:01:d2: 2a:91:90:00:88:b4:cd:75:92:e6:8f:be:e9:d0:ef:f3:78:53: 42:20:a5:a5:5c:11:44:b9:ca:7e:ac:0f:1e:45:d2:6c:9b:8b: 1a:4a:e5:af:c5:3e:c1:42:b0:3f:97:3f:d8:4c:72:f1:5b:75: f0:b0:2b:19:c6:13:36:00:91:3a:85:b7:5c:67:ad:cb:7e:74: c6:d6:49:cd:87:ba:4f:5c:cb:ed:a7:cf:8b:00:d6:23:e9:02: a1:58:07:10:fd:4d:2d:e0:7a:25:a4:ba:50:7a:33:86:f3:9c: fe:bc:cd:49:c8:d2:e6:96:4f:97:71:17:7e:dc:99:08:2c:ee: fc:96:ae:93:c2:15:94:12:33:db:09:5e:91:27:ac:3b:78:a4: 9c:f2:2a:f8:61:de:eb:b9:1d:7a:fd:3b:cd:94:c4:94:ad:38: 3e:32:7e:cd:06:be:98:3d:09:76:df:47:4c:e0:2c:ab:a5:a9: 78:62:56:19:fc:3e:90:93:0e:f5:57:4a:41:25:c4:88:ea:95: 1f:c4:15:c9:22:61:31:7e:60:cf:55:94:6a:52:e7:7f:3f:72: 47:63:55:43 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXWxllSi93VvPwBPZE1ird+yhdbswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyNDAwWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDc4ZGExMGI3YzNlMmI5Y2VmN2Y1MGNjYTYzMGFmYTJm ODA2N2RmZDJlN2IyMTJmZTYxODk2YTdhMWUyMTMzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1U7QzLzfxE7xiF6IkR/dhgunJQeO5Mf0Eet3tk+SI9rLM iqk8C3RWhZcozD3vEkZ5TZq21k2qsqBAEYf+dQInivBZDbuOTW8MorULgB/q0w/l /Vgf52njTo1BQUPufDbcix+FfZ4RJhpkjqnvW+aZY+UZxxNKqnBV5yxzhZtAAiiJ 3n67fFr1F9snhKEyTTE1e86bZ69eJNQvFolkkKOhWISuzhIu8nmOBAUgYA3A82Kv 0MSuC2hdRHj4lJCDhFBNhtHtUTI3CLDvvnT2SN7yE5Ggt9JNOHOxEMPwfh8SxoPR s3tzUWUjQQc58juwGXWhoaGvBhEj28UYmUE3oMQRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrog6oP5kNnE356JtlZHbIQWhu7QwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzFlYTZjZTRlLTIxZjctNGU0NC04YTc0LTk5MWNjODFjNTM1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFo4wDQYJKoZIhvcNAQELBQADggEBAHJ023qw+xgRCueGIg9/Gkgn SBgGh/OZ3cAoLBat1s589yUB0iqRkACItM11kuaPvunQ7/N4U0IgpaVcEUS5yn6s Dx5F0mybixpK5a/FPsFCsD+XP9hMcvFbdfCwKxnGEzYAkTqFt1xnrct+dMbWSc2H uk9cy+2nz4sA1iPpAqFYBxD9TS3geiWkulB6M4bznP68zUnI0uaWT5dxF37cmQgs 7vyWrpPCFZQSM9sJXpEnrDt4pJzyKvhh3uu5HXr9O82UxJStOD4yfs0Gvpg9CXbf R0zgLKulqXhiVhn8PpCTDvVXSkElxIjqlR/EFckiYTF+YM9VlGpS538/ckdjVUM= -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:32 2025 by rpki-client