$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/51ec7221-875d-4dcc-9ce5-c880b72d8087.roa File: 51ec7221-875d-4dcc-9ce5-c880b72d8087.roa (raw, json) Hash identifier: JOpi5uxU25eapJXeOdYzX8T4p72uyLnnhgKKne+493U= Subject key identifier: 78:A5:C0:DA:6B:0C:27:83:6B:1C:9F:FC:60:E8:65:2E:1B:A2:F4:48 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6A6766752FC309138513107A502720367AD05A7E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/51ec7221-875d-4dcc-9ce5-c880b72d8087.roa Signing time: Thu 30 Oct 2025 20:40:07 +0000 ROA not before: Thu 30 Oct 2025 20:40:07 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:12a2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:67:66:75:2f:c3:09:13:85:13:10:7a:50:27:20:36:7a:d0:5a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:40:07 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=2c53b9b19f38781c2b6096115159dd4ffd0208304ff0766244332a95082cadf0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:d7:f3:2c:91:a1:0d:9b:cd:3d:67:4b:2c: e4:f6:3d:22:96:ab:b4:63:b3:23:a5:af:45:dc:f1: dd:19:2f:c0:5b:3d:c4:20:8b:82:14:52:29:72:a9: c1:44:f1:cf:02:56:13:aa:b4:d6:b4:b6:73:8f:26: 82:e1:91:3d:6d:dd:69:7e:c5:82:75:98:02:79:08: 4c:65:53:e7:05:8d:44:2b:ff:21:ab:92:46:74:87: 7a:9c:11:39:03:dd:98:86:4f:d8:4f:fb:ea:69:b1: 18:1d:ef:ac:97:ba:22:72:d2:a3:9f:36:96:a8:d3: 66:27:e7:94:87:c6:f5:43:61:c2:44:32:61:b6:48: b8:84:eb:a8:72:24:92:df:c6:51:86:c3:c7:74:2d: e1:41:c0:5c:80:7d:26:f3:e7:e5:6d:d6:2a:2f:a6: bf:4b:f0:75:74:cb:a2:49:2b:66:40:0c:92:6d:53: 32:0d:99:67:4b:e4:44:a4:8d:8d:36:64:b3:46:8c: 13:93:0b:43:da:4d:3c:32:44:92:bc:49:61:eb:83: c7:af:a8:da:8d:97:42:90:44:da:ef:47:a1:c2:07: 74:f7:7a:da:11:e3:e7:26:76:5c:8e:07:5d:fa:92: 11:1f:53:ce:24:4f:21:98:50:12:08:6b:9b:97:98: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A5:C0:DA:6B:0C:27:83:6B:1C:9F:FC:60:E8:65:2E:1B:A2:F4:48 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/51ec7221-875d-4dcc-9ce5-c880b72d8087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:12a2::/47 Signature Algorithm: sha256WithRSAEncryption 72:65:a1:67:1a:e7:cb:15:c8:2f:d4:63:b2:31:9f:b3:e3:5b: d3:b8:f0:4a:e1:e1:0e:2b:eb:25:05:9f:51:3f:3d:d0:f1:01: cd:46:f8:6b:f2:89:d1:2a:86:e3:06:83:50:ae:2b:cf:9b:08: 42:9b:5d:ee:4a:d7:01:8b:63:0f:38:e3:f7:46:4d:3d:21:6f: 35:cc:a4:ff:23:91:02:12:9a:12:6d:77:95:8e:e6:f1:0b:ce: 2a:97:58:17:e4:42:84:02:d2:dd:45:3e:38:96:be:40:00:37: 0f:5e:18:7a:59:39:54:88:0d:52:33:94:11:b1:82:7b:0c:06: 1c:6c:a9:64:c6:66:68:30:1c:9a:b8:e1:0d:79:0b:58:67:08: db:89:7a:4e:17:3b:f8:5e:7a:29:37:b6:55:5d:2c:27:a9:95: 66:a2:07:2a:27:9d:47:12:da:d7:9b:5d:b1:39:ed:51:3e:f9: 9c:6c:45:dc:21:cd:51:c8:d2:74:90:d2:92:ff:f7:5c:2a:3c: c2:63:77:18:7d:3d:40:9f:d9:25:02:5e:88:d2:3b:69:84:70: 62:1c:37:ec:f2:4a:ef:c3:08:79:95:79:e2:ac:59:40:c9:a2: 18:16:30:cf:85:23:8a:cd:d1:6c:ba:d8:2b:c0:40:2a:6c:df: b0:a5:6b:eb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUamdmdS/DCROFExB6UCcgNnrQWn4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjA0MDA3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzUzYjliMTlmMzg3ODFjMmI2MDk2MTE1MTU5ZGQ0ZmZk MDIwODMwNGZmMDc2NjI0NDMzMmE5NTA4MmNhZGYwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsa9fzLJGhDZvNPWdLLOT2PSKWq7RjsyOlr0Xc8d0ZL8Bb PcQgi4IUUilyqcFE8c8CVhOqtNa0tnOPJoLhkT1t3Wl+xYJ1mAJ5CExlU+cFjUQr /yGrkkZ0h3qcETkD3ZiGT9hP++ppsRgd76yXuiJy0qOfNpao02Yn55SHxvVDYcJE MmG2SLiE66hyJJLfxlGGw8d0LeFBwFyAfSbz5+Vt1iovpr9L8HV0y6JJK2ZADJJt UzINmWdL5ESkjY02ZLNGjBOTC0PaTTwyRJK8SWHrg8evqNqNl0KQRNrvR6HCB3T3 etoR4+cmdlyOB136khEfU84kTyGYUBIIa5uXmHtzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUeKXA2msMJ4NrHJ/8YOhlLhui9EgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzUxZWM3MjIxLTg3NWQtNGRjYy05Y2U1LWM4ODBiNzJkODA4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAEqIwDQYJKoZIhvcNAQELBQADggEBAHJloWca58sVyC/UY7Ixn7Pj W9O48Erh4Q4r6yUFn1E/PdDxAc1G+GvyidEqhuMGg1CuK8+bCEKbXe5K1wGLYw84 4/dGTT0hbzXMpP8jkQISmhJtd5WO5vELziqXWBfkQoQC0t1FPjiWvkAANw9eGHpZ OVSIDVIzlBGxgnsMBhxsqWTGZmgwHJq44Q15C1hnCNuJek4XO/heeik3tlVdLCep lWaiByonnUcS2tebXbE57VE++ZxsRdwhzVHI0nSQ0pL/91wqPMJjdxh9PUCf2SUC XojSO2mEcGIcN+zySu/DCHmVeeKsWUDJohgWMM+FI4rN0Wy62CvAQCps37Cla+s= -----END CERTIFICATE-----Generated at Wed Nov 5 07:40:24 2025 by rpki-client