$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6da9ab3e-35e7-4651-97cc-6a6b43010395.roa File: 6da9ab3e-35e7-4651-97cc-6a6b43010395.roa (raw, json) Hash identifier: pVWLThQCctIpsWLrYm6edF6gDcEzYyhAgVyOoeZ24Ms= Subject key identifier: 64:7E:DF:60:69:0C:ED:8C:35:9A:A9:63:12:62:17:84:9A:56:56:8E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3DB8C0E9C7C5E8309E771712E7858C52ACB52925 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6da9ab3e-35e7-4651-97cc-6a6b43010395.roa Signing time: Fri 31 Oct 2025 05:06:58 +0000 ROA not before: Fri 31 Oct 2025 05:06:58 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1248::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b8:c0:e9:c7:c5:e8:30:9e:77:17:12:e7:85:8c:52:ac:b5:29:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:06:58 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=fceabab459c20da9d77f6de796ca5b7c5564cee0c590ce432a26eb9ba9949aad, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:92:a1:88:c2:b1:0a:ca:af:ba:4c:fc:99: 95:8a:92:ec:2e:79:2b:05:ba:9b:36:f9:3d:a6:a0: 7b:56:be:06:7d:43:1d:cb:d2:fa:13:f3:2e:bf:f6: b3:14:ae:86:98:eb:d1:cd:1f:8c:61:f0:a6:47:46: 4c:47:56:3f:51:e7:21:cf:0a:c7:49:8f:57:2a:7e: 39:8f:88:fd:56:9b:cb:af:73:1f:dc:48:d5:aa:27: 1d:1f:be:fc:d5:55:20:32:d5:97:3e:74:6f:8c:b2: 1f:bd:28:bd:e4:b7:fa:e5:df:2e:61:5f:da:dc:fc: 6e:21:23:09:05:b4:3b:42:c1:1d:28:69:70:36:b2: ca:92:ed:15:1f:e5:fa:bc:23:f0:de:c1:07:6d:60: 1c:24:b2:3d:ee:6b:74:df:db:66:a0:9d:c5:b5:8a: 5b:2a:b0:29:29:f1:8d:27:c0:c4:e3:2b:90:90:20: 00:e7:e3:72:f0:94:f5:7b:fb:ac:e1:c2:28:32:ec: 41:02:7a:41:69:c9:9f:3a:43:f3:85:c5:49:2f:46: 57:f2:9e:a1:4d:47:ff:06:4c:fc:ef:0b:ec:0c:fb: 65:a9:63:9b:67:90:f5:db:5b:21:34:f8:cb:cc:4e: 1f:84:d2:35:2c:0d:4f:34:3a:b6:54:7b:21:68:d3: 34:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7E:DF:60:69:0C:ED:8C:35:9A:A9:63:12:62:17:84:9A:56:56:8E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6da9ab3e-35e7-4651-97cc-6a6b43010395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1248::/45 Signature Algorithm: sha256WithRSAEncryption 41:07:6d:2b:68:d1:7d:b0:72:7e:cf:a4:0d:6e:5b:32:81:c6: 98:49:ef:17:22:fa:db:f9:a7:88:e4:b5:24:c4:96:96:c0:15: b1:77:c4:49:5d:3f:d2:90:ea:2c:9b:85:9e:c6:bb:ed:44:c6: 7c:44:cf:19:19:80:82:b6:4f:55:13:04:6b:c6:1d:f0:66:58: ff:2c:96:fb:53:92:9f:30:d5:52:45:ee:02:1b:76:e5:7a:a9: bc:ce:27:fc:b6:8d:c0:3f:75:12:13:74:5b:55:45:e2:40:f3: 54:a4:1b:b6:9a:39:40:96:f2:09:1f:6b:f2:ed:95:17:66:16: d2:81:98:57:c5:c4:8a:52:cb:c3:c1:58:c0:29:38:0b:ea:02: 3d:f7:32:9d:74:5a:46:e9:3b:10:d2:32:a7:fe:2c:0d:a2:be: f5:66:ce:6c:38:7c:8d:9a:6c:14:de:72:29:52:86:ed:c1:c6: 1f:a0:7a:31:1d:55:66:9f:f1:41:d5:ef:71:97:44:a7:04:9c: 41:ed:3f:27:ab:9c:a3:5e:8a:bd:61:3e:bb:e5:ba:39:25:8b: 34:08:e0:a5:97:0d:e2:29:74:68:4d:e2:6d:e5:d7:81:22:cc: ad:b5:6a:13:8f:e6:a2:9d:f5:10:71:27:2a:bf:6e:a6:36:fc: a4:b2:e6:87 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPbjA6cfF6DCedxcS54WMUqy1KSUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUwNjU4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2VhYmFiNDU5YzIwZGE5ZDc3ZjZkZTc5NmNhNWI3YzU1 NjRjZWUwYzU5MGNlNDMyYTI2ZWI5YmE5OTQ5YWFkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNW5KhiMKxCsqvukz8mZWKkuwueSsFups2+T2moHtWvgZ9 Qx3L0voT8y6/9rMUroaY69HNH4xh8KZHRkxHVj9R5yHPCsdJj1cqfjmPiP1Wm8uv cx/cSNWqJx0fvvzVVSAy1Zc+dG+Msh+9KL3kt/rl3y5hX9rc/G4hIwkFtDtCwR0o aXA2ssqS7RUf5fq8I/DewQdtYBwksj3ua3Tf22agncW1ilsqsCkp8Y0nwMTjK5CQ IADn43LwlPV7+6zhwigy7EECekFpyZ86Q/OFxUkvRlfynqFNR/8GTPzvC+wM+2Wp Y5tnkPXbWyE0+MvMTh+E0jUsDU80OrZUeyFo0zTRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZH7fYGkM7Yw1mqljEmIXhJpWVo4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzZkYTlhYjNlLTM1ZTctNDY1MS05N2NjLTZhNmI0MzAxMDM5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAEkgwDQYJKoZIhvcNAQELBQADggEBAEEHbSto0X2wcn7PpA1uWzKB xphJ7xci+tv5p4jktSTElpbAFbF3xEldP9KQ6iybhZ7Gu+1ExnxEzxkZgIK2T1UT BGvGHfBmWP8slvtTkp8w1VJF7gIbduV6qbzOJ/y2jcA/dRITdFtVReJA81SkG7aa OUCW8gkfa/LtlRdmFtKBmFfFxIpSy8PBWMApOAvqAj33Mp10WkbpOxDSMqf+LA2i vvVmzmw4fI2abBTecilShu3Bxh+gejEdVWaf8UHV73GXRKcEnEHtPyernKNeir1h PrvlujklizQI4KWXDeIpdGhN4m3l14EizK21ahOP5qKd9RBxJyq/bqY2/KSy5oc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:01 2025 by rpki-client