$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8654180a-2628-4c85-9ef0-ea9ef3f5ccab.roa File: 8654180a-2628-4c85-9ef0-ea9ef3f5ccab.roa (raw, json) Hash identifier: MwGts4XYs1h7hVCqQzDcHcFEb1BgSc1RckLmri9+4XQ= Subject key identifier: DF:79:5E:92:22:AA:4A:14:76:F1:25:26:A6:07:A9:43:2B:B3:72:37 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 57FE7E5660A75BC300DACAA6C091749292F0831C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8654180a-2628-4c85-9ef0-ea9ef3f5ccab.roa Signing time: Fri 31 Oct 2025 05:23:40 +0000 ROA not before: Fri 31 Oct 2025 05:23:40 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:19d0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:fe:7e:56:60:a7:5b:c3:00:da:ca:a6:c0:91:74:92:92:f0:83:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:23:40 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=b2574bcdad8a50acec9e2d20b7b9995b0e19b98dba4e3fc87743be1c7ed862c6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:b1:ff:59:d5:eb:9c:6b:fd:c2:c8:23:24: 82:ff:6f:f9:26:37:1a:cf:ee:c3:12:dc:88:9f:69: ac:96:32:61:c3:f4:dd:df:6b:4f:71:fb:87:89:28: b3:84:05:9a:1b:b1:7a:06:03:49:d6:44:0a:09:f8: 3d:de:55:af:8a:36:00:74:ca:1d:da:98:77:fe:98: 78:75:33:aa:92:23:ae:66:b3:0b:db:f4:0b:3d:54: 0f:7b:3d:53:90:41:73:61:08:c3:77:a4:00:04:1b: 7b:75:31:35:a8:44:3a:69:d6:61:86:d0:b2:2c:1f: 9c:75:ce:26:be:91:2e:97:6a:64:9b:a1:18:80:64: 10:b3:b4:bc:14:56:81:22:f8:04:8d:73:b1:5f:94: 18:46:34:77:bd:89:20:10:1c:81:9f:d0:43:ab:43: 88:ae:49:99:29:77:35:c3:4f:6d:b3:5e:42:8c:d9: 8e:11:95:ba:61:94:79:45:ee:dc:3d:97:e9:d8:3e: c0:af:28:2b:80:62:3d:15:44:c6:e8:f0:18:39:fa: 61:c3:c1:fd:cf:42:89:01:60:9f:7a:3d:bd:9f:e6: 07:8a:f1:27:83:79:85:00:e9:d2:07:98:74:e1:ba: b6:78:4b:86:1c:87:35:12:fe:cb:58:66:49:53:6a: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:79:5E:92:22:AA:4A:14:76:F1:25:26:A6:07:A9:43:2B:B3:72:37 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8654180a-2628-4c85-9ef0-ea9ef3f5ccab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:19d0::/45 Signature Algorithm: sha256WithRSAEncryption c0:58:0b:a7:0d:70:27:25:4f:dc:37:f1:d4:1f:7d:95:34:e4: 32:f7:e5:e9:14:45:27:d3:9f:0b:a6:c3:d6:66:b9:0a:8f:93: 74:3d:f9:16:2f:4a:7b:d2:88:ac:4a:5d:eb:29:71:b7:ba:62: 65:63:09:fa:ff:a2:b5:ed:3a:6b:ce:6c:08:b2:de:e9:97:4b: 74:ac:10:fa:95:1e:ea:ed:ad:8c:d0:c9:9a:a3:07:d0:07:c0: a4:dd:5a:82:58:b6:23:de:40:c1:a8:c0:2d:5c:ed:ba:32:33: 53:21:fd:ce:b4:62:1e:b1:7d:5f:d3:95:72:0e:f1:fe:ea:1f: 03:5a:54:85:c9:bc:7d:cf:3d:b3:68:68:be:a3:cb:6e:e3:55: 01:e3:cb:b9:28:4a:a5:e4:a6:96:dc:09:a2:23:57:8d:a1:cd: 22:44:58:80:db:79:90:e9:77:db:53:2e:08:f4:56:9e:d6:ce: 6d:91:fc:a4:98:e8:c9:e1:73:8c:cd:23:aa:bd:5b:cb:35:85: 2f:85:37:52:a3:87:c1:26:96:08:3d:32:eb:74:f4:ff:14:2b: c7:c0:95:41:fa:bd:eb:90:e7:de:67:b1:07:4c:c0:b2:c7:c8: aa:78:91:3e:f0:ed:c2:c7:7f:98:07:08:93:87:4e:f8:bb:a3: 5b:e0:cf:a8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUV/5+VmCnW8MA2sqmwJF0kpLwgxwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyMzQwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMjU3NGJjZGFkOGE1MGFjZWM5ZTJkMjBiN2I5OTk1YjBl MTliOThkYmE0ZTNmYzg3NzQzYmUxYzdlZDg2MmM2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaO7H/WdXrnGv9wsgjJIL/b/kmNxrP7sMS3IifaayWMmHD 9N3fa09x+4eJKLOEBZobsXoGA0nWRAoJ+D3eVa+KNgB0yh3amHf+mHh1M6qSI65m swvb9As9VA97PVOQQXNhCMN3pAAEG3t1MTWoRDpp1mGG0LIsH5x1zia+kS6XamSb oRiAZBCztLwUVoEi+ASNc7FflBhGNHe9iSAQHIGf0EOrQ4iuSZkpdzXDT22zXkKM 2Y4RlbphlHlF7tw9l+nYPsCvKCuAYj0VRMbo8Bg5+mHDwf3PQokBYJ96Pb2f5geK 8SeDeYUA6dIHmHThurZ4S4YchzUS/stYZklTaiilAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU33lekiKqShR28SUmpgepQyuzcjcwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg2NTQxODBhLTI2MjgtNGM4NS05ZWYwLWVhOWVmM2Y1Y2NhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAGdAwDQYJKoZIhvcNAQELBQADggEBAMBYC6cNcCclT9w38dQffZU0 5DL35ekURSfTnwumw9ZmuQqPk3Q9+RYvSnvSiKxKXespcbe6YmVjCfr/orXtOmvO bAiy3umXS3SsEPqVHurtrYzQyZqjB9AHwKTdWoJYtiPeQMGowC1c7boyM1Mh/c60 Yh6xfV/TlXIO8f7qHwNaVIXJvH3PPbNoaL6jy27jVQHjy7koSqXkppbcCaIjV42h zSJEWIDbeZDpd9tTLgj0Vp7Wzm2R/KSY6Mnhc4zNI6q9W8s1hS+FN1Kjh8Emlgg9 Mut09P8UK8fAlUH6veuQ595nsQdMwLLHyKp4kT7w7cLHf5gHCJOHTvi7o1vgz6g= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:11 2025 by rpki-client