$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e5fe853-eb40-4178-bf6e-989654606c7e.roa File: 5e5fe853-eb40-4178-bf6e-989654606c7e.roa (raw, json) Hash identifier: PpqVstS81+OGaNy9E3VRZO307bDG9vlh0r+aPliXJRU= Subject key identifier: 85:92:65:56:C0:73:D2:4C:8C:47:59:52:20:B8:44:46:F5:CF:5C:63 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4E471ED25E1204E2CFAE60AEA8D38FDDEC412064 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e5fe853-eb40-4178-bf6e-989654606c7e.roa Signing time: Fri 31 Oct 2025 07:42:32 +0000 ROA not before: Fri 31 Oct 2025 07:42:32 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:39c0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:47:1e:d2:5e:12:04:e2:cf:ae:60:ae:a8:d3:8f:dd:ec:41:20:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:42:32 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=735dd058263b9f6404fa5f674e70d0948d3f14b4cb9b5b4e3dd09d3ec02d7c49, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6e:b6:80:a4:7c:a6:2a:b3:1a:a2:cb:41:f9: cb:0e:68:fa:76:e4:2a:9a:a8:c5:38:46:86:1b:7f: 27:db:9d:35:fc:d7:77:e6:59:16:eb:57:f1:06:49: a2:1e:d1:34:02:45:33:f3:c9:b9:81:0e:b7:9d:45: 33:ff:36:e3:eb:c7:db:14:90:2d:b7:f2:1c:d6:0c: 1e:c0:3f:a1:ff:60:74:aa:c2:fa:ae:fa:53:07:39: bb:6e:d4:df:08:85:6e:c9:d9:f9:bb:74:19:2a:c4: c3:31:bb:2c:2f:50:2c:70:4e:d2:10:41:fb:b8:10: d6:c5:60:64:30:85:c9:ab:87:d0:c5:7f:45:80:77: f0:b0:89:30:a9:ad:4a:50:21:0d:12:9c:d9:e2:8b: 1a:da:12:bd:3b:28:cf:e1:f9:03:32:45:70:30:b5: 47:28:53:95:3e:ea:ae:e0:e2:e7:73:f4:0c:e4:f0: 86:54:07:22:dd:09:d3:92:87:ed:e3:8c:16:77:16: 2e:93:e7:41:82:da:36:8c:94:30:db:a4:48:a2:3d: 74:b8:48:31:23:c0:65:d4:8a:6a:9f:7b:fd:70:da: 2d:9e:75:a2:c7:26:5a:7d:8e:ed:4d:2a:df:0f:94: ed:56:34:d6:66:af:08:85:c8:b7:80:98:54:39:2e: 71:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:92:65:56:C0:73:D2:4C:8C:47:59:52:20:B8:44:46:F5:CF:5C:63 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e5fe853-eb40-4178-bf6e-989654606c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:39c0::/42 Signature Algorithm: sha256WithRSAEncryption 1a:a2:a6:66:88:dc:c5:d1:44:30:18:81:38:39:37:a6:c0:00: 81:27:3b:ff:73:5f:5f:f1:58:86:83:0c:45:5d:62:45:f3:2c: 95:33:ba:35:d8:e1:9f:9a:ef:a3:02:16:3b:a6:6c:15:4e:0f: 0d:de:9c:33:43:6b:0d:60:ef:58:a0:06:44:96:c4:6a:a8:62: 90:d2:0d:28:a9:f8:03:b6:ce:e7:aa:88:4f:33:77:27:ee:35: 96:ae:d8:d2:34:d1:6b:22:19:64:fd:61:54:60:2f:eb:f5:5e: b4:42:d9:17:be:55:80:ea:68:49:b5:c3:72:f0:78:50:34:af: 72:07:41:72:4e:3f:7d:43:de:01:d6:c4:57:c5:3e:ac:b9:21: 4f:59:c3:82:ba:c8:f8:88:d6:99:cc:35:39:a6:e7:2c:df:e7: 79:4f:89:7f:fa:29:99:52:cb:72:4b:18:f9:b6:db:4b:67:a1: 36:9a:b3:e6:30:c8:58:2a:4a:d4:b8:fa:09:3a:08:6b:d7:3c: 01:0b:e4:81:95:40:88:8f:2e:26:a6:2e:c6:45:99:69:8e:93: 83:62:57:c8:5a:9e:b6:ed:f0:eb:be:2a:f9:24:f3:97:47:ad: 28:3e:e7:af:12:b7:1c:78:6c:a7:b4:43:72:ff:4e:5f:af:02: 04:ec:27:d8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTkce0l4SBOLPrmCuqNOP3exBIGQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc0MjMyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzVkZDA1ODI2M2I5ZjY0MDRmYTVmNjc0ZTcwZDA5NDhk M2YxNGI0Y2I5YjViNGUzZGQwOWQzZWMwMmQ3YzQ5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCFbraApHymKrMaostB+csOaPp25CqaqMU4RoYbfyfbnTX8 13fmWRbrV/EGSaIe0TQCRTPzybmBDredRTP/NuPrx9sUkC238hzWDB7AP6H/YHSq wvqu+lMHObtu1N8IhW7J2fm7dBkqxMMxuywvUCxwTtIQQfu4ENbFYGQwhcmrh9DF f0WAd/CwiTCprUpQIQ0SnNniixraEr07KM/h+QMyRXAwtUcoU5U+6q7g4udz9Azk 8IZUByLdCdOSh+3jjBZ3Fi6T50GC2jaMlDDbpEiiPXS4SDEjwGXUimqfe/1w2i2e daLHJlp9ju1NKt8PlO1WNNZmrwiFyLeAmFQ5LnGNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhZJlVsBz0kyMR1lSILhERvXPXGMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzVlNWZlODUzLWViNDAtNDE3OC1iZjZlLTk4OTY1NDYwNmM3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAJAAOcAwDQYJKoZIhvcNAQELBQADggEBABqipmaI3MXRRDAYgTg5N6bA AIEnO/9zX1/xWIaDDEVdYkXzLJUzujXY4Z+a76MCFjumbBVODw3enDNDaw1g71ig BkSWxGqoYpDSDSip+AO2zueqiE8zdyfuNZau2NI00WsiGWT9YVRgL+v1XrRC2Re+ VYDqaEm1w3LweFA0r3IHQXJOP31D3gHWxFfFPqy5IU9Zw4K6yPiI1pnMNTmm5yzf 53lPiX/6KZlSy3JLGPm220tnoTaas+YwyFgqStS4+gk6CGvXPAEL5IGVQIiPLiam LsZFmWmOk4NiV8hanrbt8Ou+Kvkk85dHrSg+568Stxx4bKe0Q3L/Tl+vAgTsJ9g= -----END CERTIFICATE-----Generated at Wed Nov 5 07:40:34 2025 by rpki-client