$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d83aacf-583e-4f37-99d4-d61d93331e56.roa File: 6d83aacf-583e-4f37-99d4-d61d93331e56.roa (raw, json) Hash identifier: 72u613V2re2JQTmaeQOkBUOlA10kXL/ZQNpenVxkvKg= Subject key identifier: 23:D4:AB:23:39:0E:20:E2:FB:BF:01:2B:C1:5A:AE:96:69:CE:21:C4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 75B42022B664753FE2B08EC88C8093590133DA24 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d83aacf-583e-4f37-99d4-d61d93331e56.roa Signing time: Fri 31 Oct 2025 07:38:47 +0000 ROA not before: Fri 31 Oct 2025 07:38:47 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2900::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b4:20:22:b6:64:75:3f:e2:b0:8e:c8:8c:80:93:59:01:33:da:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:38:47 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=614ae4bc40a0e0822a2bb2b7ce99651bd6dacbeee7100cb0e3c5577711ca972f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:90:ec:49:1d:dd:a7:f8:86:20:e6:0c:b2: c2:48:1a:fb:d6:f8:23:71:86:18:98:02:74:f5:3a: cc:65:9d:e0:13:ad:ca:cf:63:2a:d3:88:0f:83:98: cc:f7:3d:a8:db:71:2d:c1:0b:bf:24:26:e1:7f:8c: 38:b2:c9:f3:f3:16:8d:7c:23:a0:c9:47:d3:70:f2: 4a:50:9d:0b:57:ab:8c:9e:32:02:d7:d2:df:cf:bb: b6:eb:b1:ca:3e:de:7c:0c:c1:da:9a:18:ea:97:a1: ad:16:aa:ec:a4:00:09:30:84:83:38:4a:2d:1b:52: 61:10:94:b8:a6:8d:53:bc:b4:23:41:43:20:57:b5: 10:26:d4:6e:fa:c7:62:be:78:17:a9:71:4e:f2:75: 26:e8:42:a5:90:6c:b2:e0:b8:45:86:42:fd:2d:f3: 02:0f:40:7d:81:0f:99:5d:e2:fa:51:7c:8f:fa:1f: 7b:c2:2b:76:b2:98:64:b7:5f:44:56:0a:74:60:9b: 3f:30:bf:6a:a9:7d:7a:60:89:ec:64:c6:37:05:46: 4a:86:92:cc:ee:ac:0f:f0:4b:72:96:ed:e6:6a:50: 91:51:cb:f6:97:82:69:5c:f3:6b:3c:e4:63:c9:b4: ef:b2:ad:b0:e8:23:b7:a8:a8:0e:e6:e0:4d:85:72: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D4:AB:23:39:0E:20:E2:FB:BF:01:2B:C1:5A:AE:96:69:CE:21:C4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d83aacf-583e-4f37-99d4-d61d93331e56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2900::/42 Signature Algorithm: sha256WithRSAEncryption 3c:a0:a3:e6:cb:d4:74:1f:b2:b3:02:0c:9d:f2:9b:d8:b9:fc: bb:4b:e9:0a:13:74:15:eb:3d:77:c6:97:fa:1f:c7:35:5c:56: 28:70:41:0b:0b:19:c8:bd:b4:2b:c5:c9:b2:00:f7:16:ea:e9: 4f:ce:3e:3e:7c:ff:12:71:33:e3:45:68:41:85:75:65:5d:e8: 83:8c:24:34:99:bd:7d:34:b4:bd:15:15:89:03:03:57:c6:70: ed:48:3d:9c:88:c0:ad:d2:55:3b:76:52:ac:08:47:bd:e1:c7: 5e:26:84:10:65:6a:9d:8a:7c:d1:df:48:bc:c1:ff:35:a1:86: f2:47:89:df:a3:9e:4a:ad:fa:23:a8:a7:49:b8:45:d1:a9:b7: 49:db:91:e3:71:a2:30:67:42:40:49:a5:b2:84:8b:2f:cf:be: 02:b3:62:7b:63:8b:cd:d2:08:ed:82:bd:78:76:0c:cd:6d:8c: f0:b1:b4:11:9f:b3:9a:24:81:82:ee:6b:ae:7b:a3:af:fd:ba: c8:b5:e0:92:05:6f:56:7a:e0:47:25:7d:af:97:da:0d:dd:4c: 42:9e:87:c7:81:b6:83:5d:dc:66:64:b8:d8:bc:e8:66:9a:39: 4f:7d:b5:e3:41:0c:49:19:ca:82:76:42:f5:9a:e7:ea:13:1a: 64:62:ce:d0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdbQgIrZkdT/isI7IjICTWQEz2iQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDczODQ3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTRhZTRiYzQwYTBlMDgyMmEyYmIyYjdjZTk5NjUxYmQ2 ZGFjYmVlZTcxMDBjYjBlM2M1NTc3NzExY2E5NzJmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6mpDsSR3dp/iGIOYMssJIGvvW+CNxhhiYAnT1OsxlneAT rcrPYyrTiA+DmMz3PajbcS3BC78kJuF/jDiyyfPzFo18I6DJR9Nw8kpQnQtXq4ye MgLX0t/Pu7brsco+3nwMwdqaGOqXoa0WquykAAkwhIM4Si0bUmEQlLimjVO8tCNB QyBXtRAm1G76x2K+eBepcU7ydSboQqWQbLLguEWGQv0t8wIPQH2BD5ld4vpRfI/6 H3vCK3aymGS3X0RWCnRgmz8wv2qpfXpgiexkxjcFRkqGkszurA/wS3KW7eZqUJFR y/aXgmlc82s85GPJtO+yrbDoI7eoqA7m4E2FctcbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUI9SrIzkOIOL7vwErwVqulmnOIcQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzZkODNhYWNmLTU4M2UtNGYzNy05OWQ0LWQ2MWQ5MzMzMWU1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAJAAKQAwDQYJKoZIhvcNAQELBQADggEBADygo+bL1HQfsrMCDJ3ym9i5 /LtL6QoTdBXrPXfGl/ofxzVcVihwQQsLGci9tCvFybIA9xbq6U/OPj58/xJxM+NF aEGFdWVd6IOMJDSZvX00tL0VFYkDA1fGcO1IPZyIwK3SVTt2UqwIR73hx14mhBBl ap2KfNHfSLzB/zWhhvJHid+jnkqt+iOop0m4RdGpt0nbkeNxojBnQkBJpbKEiy/P vgKzYntji83SCO2CvXh2DM1tjPCxtBGfs5okgYLua657o6/9usi14JIFb1Z64Ecl fa+X2g3dTEKeh8eBtoNd3GZkuNi86GaaOU99teNBDEkZyoJ2QvWa5+oTGmRiztA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:25 2025 by rpki-client