$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6fa1d45e-02f2-488f-b870-c3cb0781f2a4.roa File: 6fa1d45e-02f2-488f-b870-c3cb0781f2a4.roa (raw, json) Hash identifier: UehWffUdLrODkN8KdFgnTcjflB6YhuVnf5pTNTmNahc= Subject key identifier: A2:8B:B3:6A:F6:C6:91:FD:E9:55:D0:6D:CF:BC:C0:76:A8:FC:17:1A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 22BD8540BE0347CE98D52CF6218EFA964AAC5447 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6fa1d45e-02f2-488f-b870-c3cb0781f2a4.roa Signing time: Thu 30 Oct 2025 23:23:43 +0000 ROA not before: Thu 30 Oct 2025 23:23:43 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2cba::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:bd:85:40:be:03:47:ce:98:d5:2c:f6:21:8e:fa:96:4a:ac:54:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:23:43 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=3ba8901ba137428ac673e78268d0ee7400ffca6d09fed2f4f6c33e16cc9bcec2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:80:62:7f:d9:ec:c9:2b:f4:ed:86:4d:9f: fb:0a:95:9f:98:22:2e:73:d5:3c:a1:0d:f4:31:e5: c9:df:ca:f7:0b:e3:76:80:28:ac:20:c6:53:53:24: d5:12:b6:04:4f:2f:05:eb:d5:33:6f:60:30:26:45: 3b:2e:8d:08:4a:3a:c8:95:1a:03:21:5d:f9:6e:e3: 8f:5b:c9:98:24:85:07:66:1a:45:fc:b8:b1:b4:58: 9e:ee:ca:0d:de:bb:aa:5d:79:5b:92:22:3c:dc:15: 49:7b:4f:6f:1e:3d:32:d3:3a:30:c4:23:ae:70:ad: 84:2c:05:ae:8d:8a:9c:bc:4c:c3:ad:64:fd:cc:ca: ac:fe:ab:cb:51:13:a3:c4:e4:49:31:d1:2c:0c:2a: f8:5f:eb:82:23:3c:f7:17:53:e3:aa:bf:9d:70:4c: e7:c8:e9:69:f1:f1:1a:d2:bf:d5:75:99:54:96:c7: 3c:d8:53:d8:65:c9:8e:29:a8:70:94:55:90:fb:87: b3:3a:98:ce:b5:2d:b4:0e:13:4d:43:72:97:86:d1: cb:f8:c6:68:67:b5:5a:b7:d8:30:19:4f:cf:2d:b2: 8f:21:5e:94:bf:5b:9e:f8:cb:b1:87:ae:45:79:a4: 50:bf:a3:3e:0d:cb:5f:1d:2e:bc:da:4b:78:14:5e: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8B:B3:6A:F6:C6:91:FD:E9:55:D0:6D:CF:BC:C0:76:A8:FC:17:1A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6fa1d45e-02f2-488f-b870-c3cb0781f2a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2cba::/47 Signature Algorithm: sha256WithRSAEncryption 70:09:89:77:90:d8:47:81:8e:ad:d9:04:a0:cc:ee:8c:85:d7: b3:78:cd:8b:e9:3c:3c:74:54:58:c6:f2:c4:a3:a6:a9:2d:23: f6:6e:e8:48:74:c6:ea:37:1c:99:b7:ed:2e:d7:ff:49:68:b3: f5:6c:96:5b:d9:b6:ca:53:08:52:28:92:d4:34:46:03:f9:03: f7:41:69:ea:a7:29:b8:4d:bb:7a:68:fe:5a:43:54:69:a6:d9: 97:76:f0:26:32:ee:a3:36:c2:40:93:7c:76:1b:11:e5:9d:57: 84:9e:48:b2:88:22:eb:8e:a2:9d:68:30:b0:82:cf:69:c4:64: 87:06:2a:a9:66:f7:7d:ca:9f:6e:dc:9a:c1:4c:f0:68:10:98: e0:ff:c5:1d:60:01:bf:94:44:0d:a1:5e:b8:33:25:6b:c6:80: 58:dd:a0:57:9e:81:c1:ef:55:73:65:a2:8e:54:8d:36:c3:ac: 32:57:9c:6c:bf:af:d6:c5:c4:ad:93:de:cd:d3:47:d3:c1:ae: d3:c0:d0:b2:5d:4d:c0:3a:f2:73:78:dd:44:05:78:20:9a:8a: e4:ba:d2:fa:42:48:f2:2d:5f:26:1d:ea:48:73:bb:86:31:a2: af:63:bd:4d:b2:3d:82:01:83:26:84:57:a1:9f:31:9a:61:6e: f2:94:c0:64 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIr2FQL4DR86Y1Sz2IY76lkqsVEcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMyMzQzWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYmE4OTAxYmExMzc0MjhhYzY3M2U3ODI2OGQwZWU3NDAw ZmZjYTZkMDlmZWQyZjRmNmMzM2UxNmNjOWJjZWMyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC1oBif9nsySv07YZNn/sKlZ+YIi5z1TyhDfQx5cnfyvcL 43aAKKwgxlNTJNUStgRPLwXr1TNvYDAmRTsujQhKOsiVGgMhXflu449byZgkhQdm GkX8uLG0WJ7uyg3eu6pdeVuSIjzcFUl7T28ePTLTOjDEI65wrYQsBa6Nipy8TMOt ZP3Myqz+q8tRE6PE5Ekx0SwMKvhf64IjPPcXU+Oqv51wTOfI6Wnx8RrSv9V1mVSW xzzYU9hlyY4pqHCUVZD7h7M6mM61LbQOE01DcpeG0cv4xmhntVq32DAZT88tso8h XpS/W574y7GHrkV5pFC/oz4Ny18dLrzaS3gUXk9zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoouzavbGkf3pVdBtz7zAdqj8FxowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzZmYTFkNDVlLTAyZjItNDg4Zi1iODcwLWMzY2IwNzgxZjJhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALLowDQYJKoZIhvcNAQELBQADggEBAHAJiXeQ2EeBjq3ZBKDM7oyF 17N4zYvpPDx0VFjG8sSjpqktI/Zu6Eh0xuo3HJm37S7X/0los/VsllvZtspTCFIo ktQ0RgP5A/dBaeqnKbhNu3po/lpDVGmm2Zd28CYy7qM2wkCTfHYbEeWdV4SeSLKI IuuOop1oMLCCz2nEZIcGKqlm933Kn27cmsFM8GgQmOD/xR1gAb+URA2hXrgzJWvG gFjdoFeegcHvVXNloo5UjTbDrDJXnGy/r9bFxK2T3s3TR9PBrtPA0LJdTcA68nN4 3UQFeCCaiuS60vpCSPItXyYd6khzu4Yxoq9jvU2yPYIBgyaEV6GfMZphbvKUwGQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:37:49 2025 by rpki-client