$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5df48a9f-fe7b-412c-ad88-48630f583536.roa File: 5df48a9f-fe7b-412c-ad88-48630f583536.roa (raw, json) Hash identifier: 8BvR9RRfl8EJ23IbMsxT9UO5tedQpGFTHOfo/Sacj4M= Subject key identifier: B4:9A:E9:62:E6:EC:9A:9D:3E:18:A7:41:90:85:A4:3B:4E:8A:4A:EC Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 139282A386C234FFEAEEE17C26D94F966ECD903C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5df48a9f-fe7b-412c-ad88-48630f583536.roa Signing time: Thu 30 Oct 2025 21:57:17 +0000 ROA not before: Thu 30 Oct 2025 21:57:17 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1a42::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:92:82:a3:86:c2:34:ff:ea:ee:e1:7c:26:d9:4f:96:6e:cd:90:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:57:17 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=afbf7e134d6f331284f40d4ac7bb962ccddb29d91111e52b6ae92b605c988bda, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fa:aa:39:7b:23:56:bb:f0:a7:7d:b3:c1:cf: 54:11:3e:a5:d7:db:17:10:c5:59:49:50:65:5c:36: a7:b8:e9:79:29:4f:d7:66:4b:98:f9:bc:e8:e1:d3: 7d:70:d3:c8:b2:34:4f:73:fa:2c:c9:d7:8f:cb:2c: de:4e:45:13:8e:23:06:ec:02:b6:b6:cb:fb:2f:bf: 51:13:fb:fd:12:77:50:f2:fb:61:8e:81:bc:9e:e0: 3b:75:c7:95:05:5b:f7:da:8c:ca:3c:9a:c2:14:a3: cb:2d:df:09:d1:c4:d9:47:94:9e:d3:97:30:d8:fa: 9a:4d:0e:54:bd:37:c1:b2:f9:8b:53:fd:b3:9c:b9: de:2d:5e:75:af:0a:d6:c1:3b:60:85:57:13:8d:64: cc:08:b8:51:1c:1d:80:66:43:27:e1:a6:00:9a:19: 9f:2d:58:78:a1:37:84:4f:f0:ed:aa:fe:7c:db:5c: 4c:69:12:26:f1:6b:a0:99:f5:a4:46:10:04:52:e9: 04:01:dc:bc:70:59:6f:b7:62:60:3e:95:db:4c:f1: 74:cb:76:de:8e:38:fb:93:14:22:7a:b5:d0:3f:4c: d9:84:a7:ac:fb:47:03:c6:6d:a9:bd:67:0f:74:58: a0:7b:b2:c5:2a:af:b0:69:0c:09:87:de:54:27:ad: 3f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9A:E9:62:E6:EC:9A:9D:3E:18:A7:41:90:85:A4:3B:4E:8A:4A:EC X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5df48a9f-fe7b-412c-ad88-48630f583536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1a42::/47 Signature Algorithm: sha256WithRSAEncryption bf:73:09:9b:80:b9:b1:55:e9:43:48:c3:cf:64:88:62:15:68: 5e:f5:d1:be:c0:b5:95:eb:22:d6:5d:f7:7c:7f:4a:1e:cd:c7: c1:c5:27:28:8f:bf:5e:fc:20:4b:5e:87:80:2c:7e:2d:0b:98: 2e:10:98:da:65:00:45:0a:f6:4c:6a:3e:7f:d7:f9:97:ad:01: a2:16:2e:45:bf:9d:55:31:f4:96:b5:9c:4d:67:5b:46:14:24: b2:6d:88:e6:89:e9:5b:af:06:b6:fc:e6:a0:9a:ac:f3:18:c2: 94:a0:45:91:5b:4a:ed:88:9a:b8:a7:c3:ba:78:c0:ff:cf:21: 87:5c:98:ca:32:70:27:e2:38:4f:85:e5:8b:8d:d7:df:31:2c: b2:f9:b4:75:8f:35:f0:1d:47:b4:7a:59:1a:72:ac:6b:d7:53: f3:7e:c5:cd:a0:bf:e6:0a:36:5b:a0:96:70:6b:8e:0a:c1:e0: 63:b3:a3:a6:cd:d5:24:ea:16:6e:f0:97:d1:b4:12:32:c4:70: a6:e3:76:f8:3a:5e:91:aa:95:e6:69:18:97:ab:bf:a5:b2:29: ed:14:05:c3:29:99:3b:bc:18:f0:5d:5b:6c:b8:6d:d1:c4:98: ab:c6:d6:5a:37:cd:28:55:af:f5:9d:a6:36:ac:3c:2e:95:e0: e9:9e:e5:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE5KCo4bCNP/q7uF8JtlPlm7NkDwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE1NzE3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmJmN2UxMzRkNmYzMzEyODRmNDBkNGFjN2JiOTYyY2Nk ZGIyOWQ5MTExMWU1MmI2YWU5MmI2MDVjOTg4YmRhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV+qo5eyNWu/CnfbPBz1QRPqXX2xcQxVlJUGVcNqe46Xkp T9dmS5j5vOjh031w08iyNE9z+izJ14/LLN5ORROOIwbsAra2y/svv1ET+/0Sd1Dy +2GOgbye4Dt1x5UFW/fajMo8msIUo8st3wnRxNlHlJ7TlzDY+ppNDlS9N8Gy+YtT /bOcud4tXnWvCtbBO2CFVxONZMwIuFEcHYBmQyfhpgCaGZ8tWHihN4RP8O2q/nzb XExpEibxa6CZ9aRGEARS6QQB3LxwWW+3YmA+ldtM8XTLdt6OOPuTFCJ6tdA/TNmE p6z7RwPGbam9Zw90WKB7ssUqr7BpDAmH3lQnrT+5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUtJrpYubsmp0+GKdBkIWkO06KSuwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzVkZjQ4YTlmLWZlN2ItNDEyYy1hZDg4LTQ4NjMwZjU4MzUzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGkIwDQYJKoZIhvcNAQELBQADggEBAL9zCZuAubFV6UNIw89kiGIV aF710b7AtZXrItZd93x/Sh7Nx8HFJyiPv178IEteh4Asfi0LmC4QmNplAEUK9kxq Pn/X+ZetAaIWLkW/nVUx9Ja1nE1nW0YUJLJtiOaJ6VuvBrb85qCarPMYwpSgRZFb Su2Imrinw7p4wP/PIYdcmMoycCfiOE+F5YuN198xLLL5tHWPNfAdR7R6WRpyrGvX U/N+xc2gv+YKNluglnBrjgrB4GOzo6bN1STqFm7wl9G0EjLEcKbjdvg6XpGqleZp GJerv6WyKe0UBcMpmTu8GPBdW2y4bdHEmKvG1lo3zShVr/WdpjasPC6V4Ome5ds= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:51 2025 by rpki-client