$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45f6fc09-a31a-4075-be66-ddb40f5173ec.roa File: 45f6fc09-a31a-4075-be66-ddb40f5173ec.roa (raw, json) Hash identifier: PgH2DdHODELvPbUourQ7l16iOP5FXlqxJT+SPHE7VVU= Subject key identifier: 7C:68:5C:2F:F9:57:A1:10:1A:40:C5:02:A4:03:4E:0C:B9:D6:41:30 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5EB1C64F2E21C04A8CAC1D1DC03A9DEBB05B4022 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45f6fc09-a31a-4075-be66-ddb40f5173ec.roa Signing time: Thu 30 Oct 2025 22:25:33 +0000 ROA not before: Thu 30 Oct 2025 22:25:33 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1d0e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b1:c6:4f:2e:21:c0:4a:8c:ac:1d:1d:c0:3a:9d:eb:b0:5b:40:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:25:33 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=2cfac76dcfdba8d0cca68b0d1ae99a9d6c0bda175ecc15ccd55a3491b68c5ad9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:4d:80:9b:8c:8d:3c:1a:28:64:2c:e8:71: 12:73:37:6f:69:f0:e1:80:56:86:d7:8e:66:31:e8: 44:15:d6:28:0e:37:44:93:f2:70:38:74:c4:5e:8d: da:46:7b:e1:70:18:a7:17:ca:5a:7a:74:31:1d:8f: 84:d7:27:b0:32:99:94:2d:2d:b9:d1:f4:33:08:f0: da:99:13:27:b7:e7:a1:c3:31:19:aa:1d:90:62:c1: 4b:f4:08:b2:65:60:f5:8a:c1:07:53:e9:a5:b3:eb: 7d:e3:c0:b7:50:e5:7b:5d:df:3a:e0:0b:1a:9a:02: c6:5e:5e:08:8c:75:fc:36:14:b4:cc:20:1c:73:6b: 0f:2b:80:d1:84:89:cc:b6:87:bf:cd:35:fb:bd:15: 20:07:81:95:e5:0c:17:38:88:0c:14:f0:cd:09:dc: b9:be:6c:c7:00:22:b1:a9:55:2a:c1:24:36:cb:db: 44:5d:27:4e:7c:04:7c:82:2d:bc:df:7c:1a:80:f1: d7:d6:e7:d3:ad:31:0a:ac:61:8c:38:ff:12:05:44: fe:d2:1b:10:fc:80:e5:b6:2c:68:b6:5b:d7:d9:ab: a9:0e:b4:34:9b:d4:02:a1:d6:43:96:36:75:87:ad: 32:8c:93:e9:1d:37:26:ce:6a:44:ce:db:1e:d8:79: 46:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:68:5C:2F:F9:57:A1:10:1A:40:C5:02:A4:03:4E:0C:B9:D6:41:30 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/45f6fc09-a31a-4075-be66-ddb40f5173ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1d0e::/47 Signature Algorithm: sha256WithRSAEncryption 9d:77:b9:11:74:bd:42:bb:27:e8:65:41:5a:d4:3e:61:bf:ee: 74:ce:b6:a1:81:6c:fd:98:5b:ac:ba:3e:15:8a:71:23:76:44: b1:36:8e:87:a5:09:f6:47:94:27:be:ee:85:79:68:f1:bf:06: dd:d9:a9:db:0c:ae:87:97:dd:bc:62:cf:b4:6a:fa:d2:e4:73: 5e:d7:01:a0:f0:68:72:1c:dc:39:af:d3:8e:05:f1:7f:f6:77: 68:e2:31:ab:79:bd:40:24:5e:51:68:a1:f0:bf:a3:d6:4a:39: b4:e7:12:53:71:8a:1f:bb:ef:fa:2d:bf:c4:90:9f:03:4e:98: 61:80:a4:8d:f2:8f:85:01:bd:77:a7:eb:ed:82:25:aa:b5:69: ef:51:19:ef:4c:96:53:2c:33:16:3e:1b:ea:22:12:06:5d:81: 20:d3:fa:46:1a:58:8b:44:82:43:2a:c8:fa:13:fa:c1:b3:b5: 46:80:64:40:a4:8a:14:06:2b:05:5d:41:07:1a:c8:6d:6d:29: 90:c9:5c:e9:ef:0e:e8:3c:a9:ce:c4:e0:a0:a1:67:fc:09:4b: b9:3d:b0:0e:be:73:1b:96:53:cb:37:9c:7e:99:85:e4:24:28: 1c:5e:05:f3:1a:12:f0:88:68:f2:58:85:b9:e5:cf:9d:fa:8e: 9a:06:f5:8a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXrHGTy4hwEqMrB0dwDqd67BbQCIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIyNTMzWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2ZhYzc2ZGNmZGJhOGQwY2NhNjhiMGQxYWU5OWE5ZDZj MGJkYTE3NWVjYzE1Y2NkNTVhMzQ5MWI2OGM1YWQ5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNVk2Am4yNPBooZCzocRJzN29p8OGAVobXjmYx6EQV1igO N0ST8nA4dMRejdpGe+FwGKcXylp6dDEdj4TXJ7AymZQtLbnR9DMI8NqZEye356HD MRmqHZBiwUv0CLJlYPWKwQdT6aWz633jwLdQ5Xtd3zrgCxqaAsZeXgiMdfw2FLTM IBxzaw8rgNGEicy2h7/NNfu9FSAHgZXlDBc4iAwU8M0J3Lm+bMcAIrGpVSrBJDbL 20RdJ058BHyCLbzffBqA8dfW59OtMQqsYYw4/xIFRP7SGxD8gOW2LGi2W9fZq6kO tDSb1AKh1kOWNnWHrTKMk+kdNybOakTO2x7YeUbZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfGhcL/lXoRAaQMUCpANODLnWQTAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ1ZjZmYzA5LWEzMWEtNDA3NS1iZTY2LWRkYjQwZjUxNzNlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAHQ4wDQYJKoZIhvcNAQELBQADggEBAJ13uRF0vUK7J+hlQVrUPmG/ 7nTOtqGBbP2YW6y6PhWKcSN2RLE2joelCfZHlCe+7oV5aPG/Bt3ZqdsMroeX3bxi z7Rq+tLkc17XAaDwaHIc3Dmv044F8X/2d2jiMat5vUAkXlFoofC/o9ZKObTnElNx ih+77/otv8SQnwNOmGGApI3yj4UBvXen6+2CJaq1ae9RGe9MllMsMxY+G+oiEgZd gSDT+kYaWItEgkMqyPoT+sGztUaAZECkihQGKwVdQQcayG1tKZDJXOnvDug8qc7E 4KChZ/wJS7k9sA6+cxuWU8s3nH6ZheQkKBxeBfMaEvCIaPJYhbnlz536jpoG9Yo= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:40 2025 by rpki-client