$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5ba54769-464a-423d-baee-98fc189c7435.roa File: 5ba54769-464a-423d-baee-98fc189c7435.roa (raw, json) Hash identifier: oVHlASsUCb/j8/eAJpG+Airj6DwnOZBpNc+UyX5Dd0Q= Subject key identifier: 3D:A3:1D:B1:FE:93:65:B0:02:24:6B:00:C0:6C:86:2D:47:AA:84:CD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 68E83AD7BCE7C3C437717D3BEB08F974ECE4410B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5ba54769-464a-423d-baee-98fc189c7435.roa Signing time: Thu 30 Oct 2025 23:27:17 +0000 ROA not before: Thu 30 Oct 2025 23:27:17 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2d80::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e8:3a:d7:bc:e7:c3:c4:37:71:7d:3b:eb:08:f9:74:ec:e4:41:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:27:17 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=9a06654dc72559605d1c7c00ed99a4a688825b7f97ddeaf777d9ca916f94c9e5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:21:0d:f9:b3:ea:a0:60:a2:72:3f:77:23:33: ba:71:ca:5c:00:a7:97:b6:53:fa:39:3b:6c:d2:14: 7c:d0:df:b2:81:df:3a:b1:5b:c0:1c:4e:1b:4a:37: aa:d8:54:ed:b8:93:5a:3c:23:dd:e7:e2:fa:32:a7: c0:74:a5:24:d4:58:75:4a:92:5f:07:02:7d:b8:7e: 3b:06:f7:d0:b9:1e:aa:44:27:5b:1d:29:ec:1a:39: 05:91:9f:c4:8c:f0:b1:27:12:c8:3d:1f:f9:0d:69: e7:f4:b1:79:b9:2a:db:4b:ce:be:fd:2f:9d:47:3e: fe:48:63:fe:f1:5c:1e:21:a3:b4:69:c0:e2:2a:0e: 27:fb:02:4b:c1:e6:21:30:9f:8d:12:32:88:25:6b: 8b:e0:fc:03:47:55:b6:f4:89:06:cc:13:1b:b4:d3: 05:ef:aa:82:ed:fc:ec:e0:0b:92:e6:e9:ff:1e:88: 07:83:45:97:2e:6d:e7:86:c4:17:f9:1e:0c:4c:8a: af:b4:46:6e:f7:f8:85:95:d1:93:6f:22:18:56:5a: 6f:74:07:8c:cb:76:37:ea:ed:78:1d:69:df:90:23: fe:6f:e2:5f:f2:d8:0c:41:46:17:7e:37:1a:cb:bf: 52:7d:d9:db:bb:57:a9:c5:bc:bd:60:ff:8a:ae:26: ed:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A3:1D:B1:FE:93:65:B0:02:24:6B:00:C0:6C:86:2D:47:AA:84:CD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5ba54769-464a-423d-baee-98fc189c7435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2d80::/47 Signature Algorithm: sha256WithRSAEncryption 63:c6:e8:3b:a6:6e:e1:39:8d:d7:f7:81:df:84:6f:0d:ab:e2: 10:d1:ca:64:dd:b2:26:90:ca:23:ec:b1:5f:2c:2c:b4:2e:9e: d6:cd:58:16:23:d1:86:76:38:30:dd:31:16:c2:27:79:12:b6: 0c:ee:d6:99:76:61:7c:f0:c4:5b:89:7c:c9:d1:69:06:d5:75: 42:b8:0f:9d:ac:39:d6:fb:29:02:41:a8:2c:69:1b:ca:a9:24: ca:ca:91:11:bc:13:34:1e:b1:24:b3:04:a7:ab:50:ae:57:db: 62:7b:5c:81:e1:59:6d:f8:76:70:cb:d6:1e:1f:e7:78:e4:b9: 63:f4:04:0a:1c:39:c5:bc:6a:81:5a:2a:ae:74:1b:f9:9a:af: 5a:30:5c:8e:a4:5f:84:bc:89:5d:4a:7d:07:d9:b9:0d:89:bc: 5c:ce:19:0e:da:0d:a5:45:db:24:8d:58:e1:d4:07:7f:c3:18: 6f:ef:de:ed:40:34:71:95:31:95:ba:c9:e2:62:5f:d3:c5:48: 79:7b:67:a2:5f:72:b9:25:b8:2c:b0:1d:14:41:d2:e6:c3:0f: c9:17:79:81:1c:45:c0:f2:61:fb:50:84:eb:f4:88:e0:2a:28: 6a:8b:2d:51:9c:5e:3e:59:fe:5a:95:80:b2:40:fe:20:32:06: 4f:7a:26:fb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaOg617znw8Q3cX076wj5dOzkQQswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMyNzE3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTA2NjU0ZGM3MjU1OTYwNWQxYzdjMDBlZDk5YTRhNjg4 ODI1YjdmOTdkZGVhZjc3N2Q5Y2E5MTZmOTRjOWU1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbIQ35s+qgYKJyP3cjM7pxylwAp5e2U/o5O2zSFHzQ37KB 3zqxW8AcThtKN6rYVO24k1o8I93n4voyp8B0pSTUWHVKkl8HAn24fjsG99C5HqpE J1sdKewaOQWRn8SM8LEnEsg9H/kNaef0sXm5KttLzr79L51HPv5IY/7xXB4ho7Rp wOIqDif7AkvB5iEwn40SMogla4vg/ANHVbb0iQbMExu00wXvqoLt/OzgC5Lm6f8e iAeDRZcubeeGxBf5HgxMiq+0Rm73+IWV0ZNvIhhWWm90B4zLdjfq7Xgdad+QI/5v 4l/y2AxBRhd+NxrLv1J92du7V6nFvL1g/4quJu07AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPaMdsf6TZbACJGsAwGyGLUeqhM0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzViYTU0NzY5LTQ2NGEtNDIzZC1iYWVlLTk4ZmMxODljNzQzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALYAwDQYJKoZIhvcNAQELBQADggEBAGPG6DumbuE5jdf3gd+Ebw2r 4hDRymTdsiaQyiPssV8sLLQuntbNWBYj0YZ2ODDdMRbCJ3kStgzu1pl2YXzwxFuJ fMnRaQbVdUK4D52sOdb7KQJBqCxpG8qpJMrKkRG8EzQesSSzBKerUK5X22J7XIHh WW34dnDL1h4f53jkuWP0BAocOcW8aoFaKq50G/mar1owXI6kX4S8iV1KfQfZuQ2J vFzOGQ7aDaVF2ySNWOHUB3/DGG/v3u1ANHGVMZW6yeJiX9PFSHl7Z6JfcrkluCyw HRRB0ubDD8kXeYEcRcDyYftQhOv0iOAqKGqLLVGcXj5Z/lqVgLJA/iAyBk96Jvs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:57 2025 by rpki-client