$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f61a1cd-88f9-429b-8715-b32fc8638506.roa File: 5f61a1cd-88f9-429b-8715-b32fc8638506.roa (raw, json) Hash identifier: KV5z+FcOZwiko7PHj45YqgTmSWu2gG/uky1yD+Vp2b8= Subject key identifier: B1:33:3D:08:2D:0A:67:C6:38:1F:7C:A2:85:F9:C6:D1:14:79:0E:C0 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1A59022CC7ED34FC5B88BD084800C3B466D6FE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f61a1cd-88f9-429b-8715-b32fc8638506.roa Signing time: Fri 31 Oct 2025 02:28:51 +0000 ROA not before: Fri 31 Oct 2025 02:28:51 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:14ec::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:59:02:2c:c7:ed:34:fc:5b:88:bd:08:48:00:c3:b4:66:d6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:28:51 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=415da0f5c943a6dbb85fbd908919f367d6ee358c547d68fbd47b913966bbd74d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:07:82:30:57:40:e4:87:0f:4a:29:53:a4:c6: f4:13:41:44:46:a8:66:bd:ff:0b:8f:50:72:99:78: 2a:e0:3d:e7:be:7b:f4:1c:5d:57:8f:81:bc:65:0a: 52:ce:3d:ab:db:dd:5f:9c:be:ed:5e:74:92:8e:e0: 44:08:12:3d:9a:63:95:4e:47:c1:f5:13:49:f4:e3: b3:71:be:2c:59:c9:61:97:ba:b8:93:5c:4c:57:bc: 70:12:c0:a0:a7:ae:e5:dd:b1:e3:09:11:12:63:95: b7:4d:1a:59:c6:00:bc:1b:c8:60:a8:07:f4:5d:7e: 33:f5:6a:99:02:7c:62:88:92:c2:aa:9a:80:82:de: 7c:09:15:14:4d:09:ef:4f:de:fe:3f:39:68:5f:bf: 1c:b5:12:6b:e7:3a:57:bd:81:20:d8:e2:d5:07:f7: cc:42:de:12:e0:9b:3f:45:a6:99:62:69:55:99:ef: 31:f5:9e:cf:57:c7:5d:5d:53:67:e2:49:c7:00:a1: d6:7d:bc:7e:77:a2:55:ec:16:be:c2:4e:fc:0e:c2: 2a:c9:f1:ad:c6:50:ea:7b:42:a5:5b:4b:e7:cb:65: 73:80:3d:61:41:ea:33:7e:8e:9d:6e:97:be:1d:5a: 82:c0:41:94:5f:9c:c4:57:f5:5e:26:f3:cd:a5:f1: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:33:3D:08:2D:0A:67:C6:38:1F:7C:A2:85:F9:C6:D1:14:79:0E:C0 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5f61a1cd-88f9-429b-8715-b32fc8638506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:14ec::/46 Signature Algorithm: sha256WithRSAEncryption 40:b3:80:a3:84:88:68:da:b1:4e:0b:74:48:dc:86:44:6d:27: ca:7a:55:9b:ee:eb:8f:c0:2d:54:39:0c:ec:22:1c:d8:53:a0: 8f:72:08:af:78:f2:89:3d:33:ed:f4:fc:6a:d8:27:1b:42:44: c2:3c:74:ce:2b:a9:d6:f1:2e:66:27:f7:7d:cb:ca:26:50:29: 00:7c:e2:fa:de:22:a6:dc:11:57:35:64:22:54:08:8d:ab:3b: a0:b0:20:bb:17:ef:e5:84:f2:e4:15:ba:4d:17:22:d1:71:ae: 4a:67:88:93:52:8f:4f:42:19:37:d9:28:45:6f:68:3f:de:8c: 38:07:c8:1d:d1:de:af:36:cd:b8:a6:34:db:e9:63:c8:25:8f: 0b:21:51:93:8f:cb:a4:15:e3:2d:30:ff:89:2e:50:a4:96:d0: 62:6a:d2:93:ed:5c:7c:b1:16:e4:ee:8b:1a:7b:8c:88:2d:b8: c3:7c:99:3b:25:5b:ee:b9:2a:c3:c7:b9:35:f7:12:eb:fa:24: f4:ad:18:42:a5:b3:c4:fa:08:91:7b:f6:ae:60:85:51:93:97: 70:8e:84:7e:d5:ea:22:3c:c6:dd:a6:04:bf:33:02:95:54:5a: cc:f0:11:97:8e:3d:7c:b7:81:d9:a8:0f:40:50:61:d1:60:4b: bf:e0:20:7b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITGlkCLMftNPxbiL0ISADDtGbW/jANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTEwMzEwMjI4NTFaFw0yNTEyMDUyMzU5NTla MHoxSTBHBgNVBAUTQDQxNWRhMGY1Yzk0M2E2ZGJiODVmYmQ5MDg5MTlmMzY3ZDZl ZTM1OGM1NDdkNjhmYmQ0N2I5MTM5NjZiYmQ3NGQxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJgHgjBXQOSHD0opU6TG9BNBREaoZr3/C49Qcpl4KuA95757 9BxdV4+BvGUKUs49q9vdX5y+7V50ko7gRAgSPZpjlU5HwfUTSfTjs3G+LFnJYZe6 uJNcTFe8cBLAoKeu5d2x4wkREmOVt00aWcYAvBvIYKgH9F1+M/VqmQJ8YoiSwqqa gILefAkVFE0J70/e/j85aF+/HLUSa+c6V72BINji1Qf3zELeEuCbP0WmmWJpVZnv MfWez1fHXV1TZ+JJxwCh1n28fneiVewWvsJO/A7CKsnxrcZQ6ntCpVtL58tlc4A9 YUHqM36OnW6Xvh1agsBBlF+cxFf1XibzzaXxg/MCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBSxMz0ILQpnxjgffKKF+cbRFHkOwDAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvNWY2MWExY2QtODhmOS00MjliLTg3MTUtYjMyZmM4NjM4NTA2LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHAiYAkAAU7DANBgkqhkiG9w0BAQsFAAOCAQEAQLOAo4SIaNqxTgt0SNyGRG0n ynpVm+7rj8AtVDkM7CIc2FOgj3IIr3jyiT0z7fT8atgnG0JEwjx0ziup1vEuZif3 fcvKJlApAHzi+t4iptwRVzVkIlQIjas7oLAguxfv5YTy5BW6TRci0XGuSmeIk1KP T0IZN9koRW9oP96MOAfIHdHerzbNuKY02+ljyCWPCyFRk4/LpBXjLTD/iS5QpJbQ YmrSk+1cfLEW5O6LGnuMiC24w3yZOyVb7rkqw8e5NfcS6/ok9K0YQqWzxPoIkXv2 rmCFUZOXcI6EftXqIjzG3aYEvzMClVRazPARl449fLeB2agPQFBh0WBLv+Agew== -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:05 2025 by rpki-client