$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6254f5f4-4295-496c-a121-daffc3868ab8.roa File: 6254f5f4-4295-496c-a121-daffc3868ab8.roa (raw, json) Hash identifier: MS9WyRvSXQcSnSyO5tDl2ysUipMBSJparl5be9Eszew= Subject key identifier: B1:4D:1F:A3:9D:EE:C9:F1:89:E0:2F:30:D7:63:58:48:C2:27:05:60 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 595F9D85A7A12ECF0125B59E814F267FFB424D76 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6254f5f4-4295-496c-a121-daffc3868ab8.roa Signing time: Fri 31 Oct 2025 06:53:34 +0000 ROA not before: Fri 31 Oct 2025 06:53:34 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2f10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5f:9d:85:a7:a1:2e:cf:01:25:b5:9e:81:4f:26:7f:fb:42:4d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:53:34 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=ee8fcac373cafaf9d53d5d33abf1c616b691a2781a8becccb514d263b7f3569e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a6:e8:b2:ba:74:f8:9b:7a:cd:4a:14:ef:f6: 3b:3b:fd:8f:80:07:0a:2e:4f:a1:17:c5:aa:14:64: de:0b:82:0f:bb:09:f3:2d:82:3e:9e:46:a7:6e:28: ee:63:4d:e8:ee:2a:2c:c7:c7:5d:13:58:0b:2f:e1: 93:b0:aa:45:0c:54:82:c6:e0:f2:99:f3:c5:e4:d1: 2e:79:a8:ee:c0:d3:e4:f1:5f:71:6c:a7:f5:68:b8: 4e:c8:15:1f:e2:d6:24:28:4d:03:ae:9d:e7:3e:9d: 60:58:ca:48:97:0d:a3:76:24:4b:7a:43:ec:86:b7: 29:d4:f1:68:e0:2d:ff:ff:de:32:8b:6f:be:6a:06: e7:bf:96:09:78:4b:bf:3d:d2:d9:57:b7:48:41:b7: 60:09:45:3d:bd:be:a8:0e:7f:93:e8:58:0a:43:90: 64:87:b5:d6:29:bc:15:bd:57:12:35:8a:7d:b2:a7: 33:12:45:4e:e5:7b:9c:42:c1:47:1d:d6:4e:ca:05: b8:82:64:9d:61:7d:32:b1:56:d1:4b:77:2a:fc:de: ae:e0:d2:17:59:29:07:b2:0f:5f:c9:da:19:b8:60: 64:5e:c5:1c:1a:8a:19:9a:76:86:64:4a:b2:c5:84: 1e:de:ca:8a:2c:35:a5:2e:ee:f9:24:c2:db:7e:84: bf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4D:1F:A3:9D:EE:C9:F1:89:E0:2F:30:D7:63:58:48:C2:27:05:60 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6254f5f4-4295-496c-a121-daffc3868ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2f10::/44 Signature Algorithm: sha256WithRSAEncryption 04:1f:6e:40:ce:a9:35:c2:51:c0:66:d2:46:25:9b:2a:a4:59: 7b:af:ad:d5:5a:3c:14:fc:a4:2f:87:71:7e:77:75:ab:63:4b: 20:29:32:a5:35:f2:7d:d3:6c:79:83:76:a0:30:c4:b5:2c:e6: 2f:53:d5:d1:ec:35:7b:46:8b:7d:8d:f2:37:7e:ab:cc:ca:a9: 5b:c4:cb:54:bb:92:a2:d9:3c:97:be:10:83:7f:33:67:d4:40: 7f:1e:11:41:6c:79:ac:aa:16:18:75:34:1a:5c:64:43:68:e8: 5d:e6:b7:03:a8:4f:c7:96:a3:46:81:8c:80:bf:56:c5:ed:35: c8:02:22:2f:e6:a0:c0:e6:c9:bf:eb:ef:20:b3:24:0b:d6:14: 10:d6:6e:3c:39:b0:49:c3:30:f9:4b:05:66:ba:10:0a:d7:d2: 64:99:b3:4e:ad:53:51:cf:d2:32:cf:b6:4b:af:8b:c4:73:11: 74:2d:a7:6b:67:f8:4f:4e:fb:fa:9b:ac:bd:fe:38:e8:62:c1: 27:fb:a3:9a:86:54:70:73:23:c2:fe:e1:3e:20:25:49:41:8a: f8:61:08:00:95:1a:02:d8:0e:40:45:96:d0:ed:6a:4f:c0:a1: 27:ba:84:9d:45:f0:1a:7f:62:65:b6:0b:40:7b:87:79:64:3b: 65:fa:76:c5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWV+dhaehLs8BJbWegU8mf/tCTXYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY1MzM0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZThmY2FjMzczY2FmYWY5ZDUzZDVkMzNhYmYxYzYxNmI2 OTFhMjc4MWE4YmVjY2NiNTE0ZDI2M2I3ZjM1NjllMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDipuiyunT4m3rNShTv9js7/Y+ABwouT6EXxaoUZN4Lgg+7 CfMtgj6eRqduKO5jTejuKizHx10TWAsv4ZOwqkUMVILG4PKZ88Xk0S55qO7A0+Tx X3Fsp/VouE7IFR/i1iQoTQOunec+nWBYykiXDaN2JEt6Q+yGtynU8WjgLf//3jKL b75qBue/lgl4S7890tlXt0hBt2AJRT29vqgOf5PoWApDkGSHtdYpvBW9VxI1in2y pzMSRU7le5xCwUcd1k7KBbiCZJ1hfTKxVtFLdyr83q7g0hdZKQeyD1/J2hm4YGRe xRwaihmadoZkSrLFhB7eyoosNaUu7vkkwtt+hL/7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsU0fo53uyfGJ4C8w12NYSMInBWAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzYyNTRmNWY0LTQyOTUtNDk2Yy1hMTIxLWRhZmZjMzg2OGFiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAALxAwDQYJKoZIhvcNAQELBQADggEBAAQfbkDOqTXCUcBm0kYlmyqk WXuvrdVaPBT8pC+HcX53datjSyApMqU18n3TbHmDdqAwxLUs5i9T1dHsNXtGi32N 8jd+q8zKqVvEy1S7kqLZPJe+EIN/M2fUQH8eEUFseayqFhh1NBpcZENo6F3mtwOo T8eWo0aBjIC/VsXtNcgCIi/moMDmyb/r7yCzJAvWFBDWbjw5sEnDMPlLBWa6EArX 0mSZs06tU1HP0jLPtkuvi8RzEXQtp2tn+E9O+/qbrL3+OOhiwSf7o5qGVHBzI8L+ 4T4gJUlBivhhCACVGgLYDkBFltDtak/AoSe6hJ1F8Bp/YmW2C0B7h3lkO2X6dsU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:56:11 2025 by rpki-client