$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6449f237-fd5d-40fd-ab9c-fc63662fac31.roa File: 6449f237-fd5d-40fd-ab9c-fc63662fac31.roa (raw, json) Hash identifier: xz2a1btTYWKI1RTllqv0Ef3ZwGVon2TRlcQ+ZnHkHvQ= Subject key identifier: 43:04:D9:71:98:C1:58:9D:5F:58:38:07:C6:47:D9:E2:EE:F5:4E:21 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 22C64470D0AD795C6C76AD1E6EF085A8758694ED Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6449f237-fd5d-40fd-ab9c-fc63662fac31.roa Signing time: Fri 31 Oct 2025 02:42:00 +0000 ROA not before: Fri 31 Oct 2025 02:42:00 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:173c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c6:44:70:d0:ad:79:5c:6c:76:ad:1e:6e:f0:85:a8:75:86:94:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:42:00 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=88d66e693a87976dc5346e4bb7e83b58a915e0fe9f61012b19652a6b3eb88bfd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1b:ea:a9:52:7d:a1:6d:e1:f3:8f:44:4a:81: 46:1c:c5:19:94:1b:58:d1:28:05:35:e1:ad:c9:a7: 62:5c:6a:12:8d:d7:1e:e5:df:61:da:b8:63:7d:a3: f2:67:42:31:04:fe:bb:78:ef:6f:be:62:a5:29:a3: 62:0a:09:26:50:fd:bd:0a:2a:a2:01:73:50:1b:60: 85:9a:2a:61:0a:2f:8c:4a:60:d9:9c:98:a1:a0:11: c1:f0:f8:13:00:36:46:eb:c6:15:d3:58:cf:be:5c: 15:75:92:f9:65:72:ba:ff:45:47:d5:d9:06:24:ee: f9:62:b8:eb:d5:b1:40:b3:2e:6b:2d:60:f4:d2:f3: 46:b6:9a:c5:cf:87:8c:05:d5:bc:11:5a:76:26:0a: 53:df:5f:14:8a:a0:b3:0b:a0:0b:e0:98:79:8c:be: 1a:0e:5a:d6:10:e1:7d:1c:30:5d:66:be:92:ed:ef: 80:0b:bc:a7:1d:6d:c6:8a:ef:97:9e:2c:0f:19:75: 42:ea:61:f6:30:ef:26:81:0a:54:e5:f7:be:be:82: 08:88:19:51:e7:69:35:b9:e6:68:b7:48:66:f1:31: cf:bf:7c:30:39:d0:30:14:d0:58:4f:f6:2a:f9:e7: 79:a7:0d:0b:7d:71:68:40:19:cf:7a:f6:63:90:73: 7f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:04:D9:71:98:C1:58:9D:5F:58:38:07:C6:47:D9:E2:EE:F5:4E:21 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6449f237-fd5d-40fd-ab9c-fc63662fac31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:173c::/46 Signature Algorithm: sha256WithRSAEncryption 9c:48:cb:c7:df:ef:be:80:ff:f5:c5:42:61:d0:fd:50:b4:81: 84:ed:ef:54:f9:38:ea:29:e1:88:e8:36:64:ce:93:ef:93:08: ea:44:ff:5f:2d:d8:3a:a6:3d:4b:fb:6e:5e:17:46:53:6e:c8: 88:87:9a:06:86:89:d0:8b:b0:a6:ab:db:e9:8f:84:d8:54:bd: 5e:9c:d2:34:c1:43:61:87:e0:18:05:0a:37:04:f3:b4:c9:ee: 70:7c:1a:65:bd:ea:89:a3:af:0e:20:61:fd:b5:b9:08:b4:c9: ae:89:d2:3b:af:7e:6a:32:4a:4f:ee:d2:84:91:3c:ba:a7:67: 64:d6:44:de:ef:4c:69:47:17:18:d9:68:9d:06:43:d5:6e:7f: be:72:e7:0d:c0:d6:4d:1e:1c:d1:00:f3:56:c8:7a:a7:0e:bf: 93:64:7b:24:95:aa:d8:91:4e:bf:81:13:f8:8e:cb:d2:24:eb: 06:5c:57:9c:18:d2:04:dc:f1:05:66:69:4a:be:09:61:b0:a9: a1:41:39:aa:8c:b6:6c:cc:6f:51:4f:08:6a:10:76:b3:16:b9: ac:68:19:64:91:97:ef:75:93:37:ff:7f:21:7f:52:a4:1a:85: 30:2e:b7:ae:1f:d6:cd:f0:30:bc:54:d8:5a:14:85:37:7d:7f: 7e:85:70:06 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIsZEcNCteVxsdq0ebvCFqHWGlO0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI0MjAwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGQ2NmU2OTNhODc5NzZkYzUzNDZlNGJiN2U4M2I1OGE5 MTVlMGZlOWY2MTAxMmIxOTY1MmE2YjNlYjg4YmZkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhG+qpUn2hbeHzj0RKgUYcxRmUG1jRKAU14a3Jp2JcahKN 1x7l32HauGN9o/JnQjEE/rt472++YqUpo2IKCSZQ/b0KKqIBc1AbYIWaKmEKL4xK YNmcmKGgEcHw+BMANkbrxhXTWM++XBV1kvllcrr/RUfV2QYk7vliuOvVsUCzLmst YPTS80a2msXPh4wF1bwRWnYmClPfXxSKoLMLoAvgmHmMvhoOWtYQ4X0cMF1mvpLt 74ALvKcdbcaK75eeLA8ZdULqYfYw7yaBClTl976+ggiIGVHnaTW55mi3SGbxMc+/ fDA50DAU0FhP9ir553mnDQt9cWhAGc969mOQc38rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQwTZcZjBWJ1fWDgHxkfZ4u71TiEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzY0NDlmMjM3LWZkNWQtNDBmZC1hYjljLWZjNjM2NjJmYWMzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAFzwwDQYJKoZIhvcNAQELBQADggEBAJxIy8ff776A//XFQmHQ/VC0 gYTt71T5OOop4YjoNmTOk++TCOpE/18t2DqmPUv7bl4XRlNuyIiHmgaGidCLsKar 2+mPhNhUvV6c0jTBQ2GH4BgFCjcE87TJ7nB8GmW96omjrw4gYf21uQi0ya6J0juv fmoySk/u0oSRPLqnZ2TWRN7vTGlHFxjZaJ0GQ9Vuf75y5w3A1k0eHNEA81bIeqcO v5NkeySVqtiRTr+BE/iOy9Ik6wZcV5wY0gTc8QVmaUq+CWGwqaFBOaqMtmzMb1FP CGoQdrMWuaxoGWSRl+91kzf/fyF/UqQahTAut64f1s3wMLxU2FoUhTd9f36FcAY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:59 2025 by rpki-client