$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/81cf49c8-cefe-4acc-a080-805caac78592.roa File: 81cf49c8-cefe-4acc-a080-805caac78592.roa (raw, json) Hash identifier: znLpCWzPNCPcvaDC+wwz+y0PyYrTQ9FonyxfSWo9x50= Subject key identifier: 2C:5A:1B:D5:7A:42:D9:05:A6:85:01:C9:72:E6:BA:D1:20:27:6A:81 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5BF38D1356F31F2AF00F318C4C4157599D71BCB3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/81cf49c8-cefe-4acc-a080-805caac78592.roa Signing time: Fri 31 Oct 2025 00:57:58 +0000 ROA not before: Fri 31 Oct 2025 00:57:58 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:38de::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f3:8d:13:56:f3:1f:2a:f0:0f:31:8c:4c:41:57:59:9d:71:bc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:57:58 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=5d9bcc04d9f27b3cc381a26d40e003e444b0436b2a7d15f9edaab90983ef1c2c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a9:93:4e:d9:c1:35:fc:2f:b0:b5:16:4e:82: 5a:bf:9d:1b:20:5b:86:aa:dc:f2:ce:90:df:b1:ad: 00:02:81:21:f9:d1:0f:62:9e:b8:eb:22:58:4c:ac: 55:6f:4a:61:0e:9b:b1:bf:36:89:b3:dd:dd:92:4d: 6b:ed:72:d4:b5:9e:62:48:07:a1:ed:58:e3:4e:e6: 92:c7:8f:e6:cb:43:57:11:c7:4d:55:61:a1:8b:41: 83:6c:e0:54:9d:88:e1:c3:ef:77:f4:9a:c9:24:63: 8e:9b:36:ee:89:36:96:57:e2:58:04:9d:c4:f3:f9: 47:ee:47:e2:89:1e:47:ba:8a:bd:a1:86:db:a0:25: 43:7b:2b:ab:a2:01:b1:9a:4a:59:55:8c:8e:71:18: 82:a6:54:a8:2c:09:81:37:1a:d8:58:7e:90:7f:2b: d9:f2:34:bb:fb:e4:92:5b:e8:20:f3:47:a5:d9:9c: b4:b0:33:07:41:23:f0:0c:09:6e:78:78:04:dd:5f: ac:1b:d3:cd:43:bd:33:61:ec:7e:52:78:ae:9f:70: 27:b3:e5:21:c5:1b:75:ca:1e:c1:a4:c2:e7:94:2d: 3b:54:fb:5d:b9:78:66:ce:e0:d2:6c:6b:9f:dc:8d: a5:da:bd:c7:04:da:90:47:5e:5f:52:c6:47:06:46: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5A:1B:D5:7A:42:D9:05:A6:85:01:C9:72:E6:BA:D1:20:27:6A:81 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/81cf49c8-cefe-4acc-a080-805caac78592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:38de::/47 Signature Algorithm: sha256WithRSAEncryption 87:57:de:aa:14:9e:e2:16:54:23:6c:4d:51:f4:38:63:d1:32: eb:3a:b5:f0:6d:b3:dd:ba:07:fa:72:e8:e6:2d:10:06:c1:9a: 10:58:16:8a:ed:ba:3c:12:85:c2:05:a9:0e:85:46:90:8e:b8: 56:b9:ae:ed:55:07:af:37:31:b4:ac:d7:ea:07:57:c3:8c:0d: 50:24:28:a8:81:7d:9f:ed:5c:8f:fd:db:55:a1:21:15:df:8e: b5:3c:73:c6:ca:47:cc:b2:b6:2f:f5:b1:64:2c:ec:12:29:39: 9e:2c:04:f0:51:9d:d6:9a:08:5d:c7:c8:27:af:80:a0:2b:af: 22:b6:f8:9d:ef:f3:ed:35:30:1c:40:c7:66:28:2e:d1:6f:1d: ed:a3:3d:2d:fd:86:73:e2:27:71:1f:bc:49:ba:cd:5f:19:be: 18:19:ee:31:92:e3:02:fa:de:b4:b5:44:22:80:e1:ee:12:08: 66:d2:17:df:1b:2b:d3:7b:d1:33:14:b7:ea:d8:fb:97:24:03: 4a:79:02:3d:7b:94:12:f7:76:b3:4f:95:d6:20:90:fa:67:a0: 93:e0:30:d5:5f:b3:57:d6:47:16:77:8f:10:c5:61:09:f4:81: f3:5a:11:d4:46:9d:94:85:d3:79:6f:57:4d:83:79:9c:c3:a6: 5a:be:7d:89 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUW/ONE1bzHyrwDzGMTEFXWZ1xvLMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA1NzU4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDliY2MwNGQ5ZjI3YjNjYzM4MWEyNmQ0MGUwMDNlNDQ0 YjA0MzZiMmE3ZDE1ZjllZGFhYjkwOTgzZWYxYzJjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTqZNO2cE1/C+wtRZOglq/nRsgW4aq3PLOkN+xrQACgSH5 0Q9inrjrIlhMrFVvSmEOm7G/Nomz3d2STWvtctS1nmJIB6HtWONO5pLHj+bLQ1cR x01VYaGLQYNs4FSdiOHD73f0mskkY46bNu6JNpZX4lgEncTz+UfuR+KJHke6ir2h htugJUN7K6uiAbGaSllVjI5xGIKmVKgsCYE3GthYfpB/K9nyNLv75JJb6CDzR6XZ nLSwMwdBI/AMCW54eATdX6wb081DvTNh7H5SeK6fcCez5SHFG3XKHsGkwueULTtU +125eGbO4NJsa5/cjaXavccE2pBHXl9SxkcGRi3HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULFob1XpC2QWmhQHJcua60SAnaoEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzgxY2Y0OWM4LWNlZmUtNGFjYy1hMDgwLTgwNWNhYWM3ODU5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAON4wDQYJKoZIhvcNAQELBQADggEBAIdX3qoUnuIWVCNsTVH0OGPR Mus6tfBts926B/py6OYtEAbBmhBYFortujwShcIFqQ6FRpCOuFa5ru1VB683MbSs 1+oHV8OMDVAkKKiBfZ/tXI/921WhIRXfjrU8c8bKR8yyti/1sWQs7BIpOZ4sBPBR ndaaCF3HyCevgKArryK2+J3v8+01MBxAx2YoLtFvHe2jPS39hnPiJ3EfvEm6zV8Z vhgZ7jGS4wL63rS1RCKA4e4SCGbSF98bK9N70TMUt+rY+5ckA0p5Aj17lBL3drNP ldYgkPpnoJPgMNVfs1fWRxZ3jxDFYQn0gfNaEdRGnZSF03lvV02DeZzDplq+fYk= -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:32 2025 by rpki-client