$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6491c887-8cf6-477e-9225-9216d404c561.roa File: 6491c887-8cf6-477e-9225-9216d404c561.roa (raw, json) Hash identifier: X5z3pQkSJZ9z+6bddl3H6QVO2nv7uLE9NY5y+/+PLJM= Subject key identifier: C8:FC:9D:0D:16:3D:E7:3B:7B:9C:9C:7B:2E:D9:9E:49:BE:13:29:12 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 01DB4D993C6BE629C6AE433B52D0369936A49BDC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6491c887-8cf6-477e-9225-9216d404c561.roa Signing time: Thu 30 Oct 2025 23:40:31 +0000 ROA not before: Thu 30 Oct 2025 23:40:31 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2eac::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:db:4d:99:3c:6b:e6:29:c6:ae:43:3b:52:d0:36:99:36:a4:9b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:40:31 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=92f89c48d9df588baa1a1e1d73a24eebd4d75f0691ef9ba696b26eec0c68c10d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:6c:da:d5:e2:1a:d5:0c:ac:d9:c9:8c:b2: 83:5a:2a:af:90:14:83:7d:11:1f:6d:86:f0:6e:3d: 7d:37:66:2b:09:0f:ac:dd:41:f0:08:34:51:3f:4f: 6e:5f:32:e3:2a:b3:36:57:14:9b:3d:d5:e2:8c:f0: 12:03:8d:cd:7e:6a:3a:09:61:06:2d:cc:ff:18:fa: f7:a6:0f:93:8d:f5:a1:a3:03:51:2e:1b:56:76:a1: 95:e9:7f:23:2e:ad:41:16:31:27:28:5f:35:aa:ec: 81:7d:48:3d:3d:13:e2:39:8b:4a:db:3b:bd:7b:19: 64:76:90:86:a0:d8:c5:75:ba:d7:39:8d:7e:37:9a: aa:dd:bd:9b:8f:13:fa:1d:85:cd:7b:13:6c:f2:cd: 8b:96:07:bc:c1:bf:60:f4:01:75:30:68:c8:76:42: 73:12:ad:c8:58:22:de:82:32:45:3d:7c:e9:43:9d: 87:4f:d9:01:2a:c3:9a:95:9d:40:99:68:27:45:4f: f3:e5:bb:18:80:54:fd:76:ce:6c:c1:72:fb:c3:c5: db:20:3c:cb:ff:a2:09:b5:3c:2a:79:70:d3:39:e1: 77:cd:da:78:48:34:e8:92:07:9b:9b:56:56:2e:e7: 84:ae:67:b3:70:0b:db:91:1a:69:40:34:00:0c:c3: e8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FC:9D:0D:16:3D:E7:3B:7B:9C:9C:7B:2E:D9:9E:49:BE:13:29:12 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6491c887-8cf6-477e-9225-9216d404c561.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2eac::/47 Signature Algorithm: sha256WithRSAEncryption 12:16:35:bd:c7:0b:3a:2d:2c:ba:cb:5e:b3:db:eb:b9:2e:1a: 4f:94:e2:1a:ba:be:30:94:11:5a:6c:9a:d4:fc:12:d7:99:21: f1:f7:23:79:c9:33:17:b4:1f:67:bf:1b:2a:e8:32:79:22:9c: 54:77:c5:01:55:b4:a8:54:31:08:67:29:90:d7:a9:6e:19:b7: 23:f2:5e:f0:ad:44:df:69:c4:32:a3:e6:e7:54:32:8b:cd:f1: be:c5:03:69:c1:56:61:57:c7:b6:f0:74:a6:d6:10:a6:1c:19: 4d:73:0a:12:51:fd:b4:9c:a5:9c:89:dd:12:b0:a2:50:3e:c9: be:fa:8a:ac:d4:61:aa:64:d7:91:cd:7c:3e:17:9c:40:08:e4: e2:31:6b:bb:af:e3:d0:2b:ac:4a:2f:06:24:21:be:cb:05:2b: 38:a5:bd:42:7b:25:71:b2:d2:b6:fb:7b:3b:37:3c:29:e4:87: 07:e9:a1:2c:f4:08:3b:6e:27:69:0e:30:bd:88:35:89:95:de: 4a:db:ea:d8:2d:d9:b2:68:92:db:06:b2:41:72:c8:ce:e0:a1: fe:65:eb:9c:74:2a:cf:0a:da:26:3e:71:ca:31:d9:4a:e3:eb: 16:3b:8a:62:c7:50:e3:e8:6d:10:df:08:7d:01:46:a8:c4:52: 25:2f:f5:df -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAdtNmTxr5inGrkM7UtA2mTakm9wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjM0MDMxWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MmY4OWM0OGQ5ZGY1ODhiYWExYTFlMWQ3M2EyNGVlYmQ0 ZDc1ZjA2OTFlZjliYTY5NmIyNmVlYzBjNjhjMTBkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEOmza1eIa1Qys2cmMsoNaKq+QFIN9ER9thvBuPX03ZisJ D6zdQfAINFE/T25fMuMqszZXFJs91eKM8BIDjc1+ajoJYQYtzP8Y+vemD5ON9aGj A1EuG1Z2oZXpfyMurUEWMScoXzWq7IF9SD09E+I5i0rbO717GWR2kIag2MV1utc5 jX43mqrdvZuPE/odhc17E2zyzYuWB7zBv2D0AXUwaMh2QnMSrchYIt6CMkU9fOlD nYdP2QEqw5qVnUCZaCdFT/PluxiAVP12zmzBcvvDxdsgPMv/ogm1PCp5cNM54XfN 2nhINOiSB5ubVlYu54SuZ7NwC9uRGmlANAAMw+gnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyPydDRY95zt7nJx7LtmeSb4TKRIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzY0OTFjODg3LThjZjYtNDc3ZS05MjI1LTkyMTZkNDA0YzU2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALqwwDQYJKoZIhvcNAQELBQADggEBABIWNb3HCzotLLrLXrPb67ku Gk+U4hq6vjCUEVpsmtT8EteZIfH3I3nJMxe0H2e/GyroMnkinFR3xQFVtKhUMQhn KZDXqW4ZtyPyXvCtRN9pxDKj5udUMovN8b7FA2nBVmFXx7bwdKbWEKYcGU1zChJR /bScpZyJ3RKwolA+yb76iqzUYapk15HNfD4XnEAI5OIxa7uv49ArrEovBiQhvssF KzilvUJ7JXGy0rb7ezs3PCnkhwfpoSz0CDtuJ2kOML2INYmV3krb6tgt2bJoktsG skFyyM7gof5l65x0Ks8K2iY+ccox2Urj6xY7imLHUOPobRDfCH0BRqjEUiUv9d8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:25:25 2025 by rpki-client