$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/65c6a34e-e815-4645-92c8-8201a1036f46.roa File: 65c6a34e-e815-4645-92c8-8201a1036f46.roa (raw, json) Hash identifier: z58sFhi5Py/pozvh+QFhWlEqf8B87bwu15SQMJWNx7o= Subject key identifier: AC:0E:71:AF:0A:5A:52:95:A3:05:35:8D:88:96:E2:6B:B3:6F:41:45 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 18FFABBF9850DCDBC340A7E0670BE7F93BD12698 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/65c6a34e-e815-4645-92c8-8201a1036f46.roa Signing time: Thu 30 Oct 2025 21:27:27 +0000 ROA not before: Thu 30 Oct 2025 21:27:27 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:172e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ff:ab:bf:98:50:dc:db:c3:40:a7:e0:67:0b:e7:f9:3b:d1:26:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:27:27 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=5be934696a9de1274b6df9f83527c6f8d315ba637ed0bc4a229fcd7190b3f453, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:17:de:7c:90:1a:e6:15:5d:f7:2c:c1:31:10: 48:c9:06:e1:8b:b6:43:91:b7:02:52:f5:a1:c0:45: 71:72:4b:d4:d6:11:cc:6e:1c:64:02:e0:8a:23:7f: f2:80:8a:7e:0c:99:2b:12:94:25:4d:30:bd:83:ce: 5d:e9:4b:18:dc:6c:a3:84:74:8a:de:1a:31:e3:e9: 1d:0d:7c:8c:09:6a:76:9d:52:c5:98:62:5d:5b:ff: 61:22:3e:d1:15:dd:c2:71:e1:89:b6:34:4b:dc:c8: 16:a0:b8:31:af:19:95:56:60:cd:02:dd:16:70:48: 55:a3:6e:52:4c:33:6d:f8:81:b7:0c:56:a5:7e:17: ea:b9:f2:1f:72:4f:cf:f3:e6:2d:e0:c4:ca:85:8f: 1a:37:25:76:fd:ad:d2:19:54:47:d4:02:3e:9b:13: 04:38:40:e7:0b:e7:5a:ab:bb:15:3b:be:e4:58:07: 5a:ff:8e:3c:36:6b:ce:10:90:9f:28:91:64:cf:80: b5:27:85:4c:3c:90:49:db:36:f2:f9:25:62:f5:25: 70:b9:aa:4f:39:2c:4f:16:42:77:97:ca:57:b3:4a: 3d:d1:00:bb:0e:00:ff:b5:ea:ea:67:60:cc:31:7d: a7:75:70:6d:34:17:79:2d:e3:e7:3f:11:a1:b0:9b: 9a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0E:71:AF:0A:5A:52:95:A3:05:35:8D:88:96:E2:6B:B3:6F:41:45 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/65c6a34e-e815-4645-92c8-8201a1036f46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:172e::/47 Signature Algorithm: sha256WithRSAEncryption 79:d4:a8:ea:3c:e0:a4:45:c1:a6:e4:b2:95:09:62:15:e6:0e: 09:6a:94:0d:e5:74:90:9c:ec:7b:a3:79:21:6f:dd:0a:29:fb: af:5d:8c:4d:c7:86:f9:d8:e7:64:51:d2:6f:1f:f9:36:07:22: 95:a3:33:65:6a:75:fb:60:8e:eb:d4:7c:9c:27:ed:54:50:0a: 0f:b4:e7:8a:ee:f6:5d:3a:4d:96:db:4f:b8:cc:c3:26:7b:84: 0b:47:2f:a7:76:2f:e7:b4:67:31:65:86:98:04:03:dc:f2:f9: 88:aa:43:13:ad:e6:54:cc:b2:02:84:5a:67:ca:2d:38:ad:2c: 20:89:5c:6b:8f:7a:50:63:dd:35:04:c0:f3:7e:cf:6d:9b:a9: 91:e9:4d:ac:f3:2d:ab:26:c0:82:e5:26:9c:33:8f:df:0c:4a: 44:db:f4:77:95:f3:58:f1:ba:77:95:8f:26:06:b3:4f:4d:19: 1e:32:33:aa:87:ed:6a:07:10:50:bc:3a:cf:ea:ed:da:4e:b9: b5:63:7f:39:67:a2:dc:d0:73:4a:68:51:29:48:58:fb:3b:5e: 76:39:2c:6f:18:00:7d:2e:52:99:f3:3d:7a:90:f0:79:a0:58: 33:1a:82:7d:48:4c:e2:b2:df:1c:dc:ec:e5:2a:de:8b:0c:db: 96:4b:79:f6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGP+rv5hQ3NvDQKfgZwvn+TvRJpgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyNzI3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YmU5MzQ2OTZhOWRlMTI3NGI2ZGY5ZjgzNTI3YzZmOGQz MTViYTYzN2VkMGJjNGEyMjlmY2Q3MTkwYjNmNDUzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsF958kBrmFV33LMExEEjJBuGLtkORtwJS9aHARXFyS9TW EcxuHGQC4Iojf/KAin4MmSsSlCVNML2Dzl3pSxjcbKOEdIreGjHj6R0NfIwJanad UsWYYl1b/2EiPtEV3cJx4Ym2NEvcyBaguDGvGZVWYM0C3RZwSFWjblJMM234gbcM VqV+F+q58h9yT8/z5i3gxMqFjxo3JXb9rdIZVEfUAj6bEwQ4QOcL51qruxU7vuRY B1r/jjw2a84QkJ8okWTPgLUnhUw8kEnbNvL5JWL1JXC5qk85LE8WQneXylezSj3R ALsOAP+16upnYMwxfad1cG00F3kt4+c/EaGwm5qRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrA5xrwpaUpWjBTWNiJbia7NvQUUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzY1YzZhMzRlLWU4MTUtNDY0NS05MmM4LTgyMDFhMTAzNmY0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFy4wDQYJKoZIhvcNAQELBQADggEBAHnUqOo84KRFwabkspUJYhXm DglqlA3ldJCc7HujeSFv3Qop+69djE3HhvnY52RR0m8f+TYHIpWjM2VqdftgjuvU fJwn7VRQCg+054ru9l06TZbbT7jMwyZ7hAtHL6d2L+e0ZzFlhpgEA9zy+YiqQxOt 5lTMsgKEWmfKLTitLCCJXGuPelBj3TUEwPN+z22bqZHpTazzLasmwILlJpwzj98M SkTb9HeV81jxuneVjyYGs09NGR4yM6qH7WoHEFC8Os/q7dpOubVjfzlnotzQc0po USlIWPs7XnY5LG8YAH0uUpnzPXqQ8HmgWDMagn1ITOKy3xzc7OUq3osM25ZLefY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:20 2025 by rpki-client