$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/955dd925-093b-4cc5-8367-82d54738ad7c.roa File: 955dd925-093b-4cc5-8367-82d54738ad7c.roa (raw, json) Hash identifier: 7bzXxpPFzfnXAkft2esI6xldKJO+b71s75qj0Ax7q4s= Subject key identifier: 80:FD:CF:F2:B7:2A:A5:9C:8B:D5:0F:19:CD:4B:06:09:83:AC:49:9F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5C61714A23DBCAB311D1179DE2B0922739E5CCB4 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/955dd925-093b-4cc5-8367-82d54738ad7c.roa Signing time: Thu 30 Oct 2025 20:26:07 +0000 ROA not before: Thu 30 Oct 2025 20:26:07 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1238::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:61:71:4a:23:db:ca:b3:11:d1:17:9d:e2:b0:92:27:39:e5:cc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:26:07 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=6a12773ce47f34804c9811cb81b2ce5853ffd0b4e7cafecca6a5302ddeeb6ab1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e1:3b:c2:18:e1:a1:30:87:89:29:13:fa:bd: 58:05:29:9f:9d:63:68:9d:18:e7:b1:c2:c1:bf:fd: 11:c8:fd:fc:49:88:bf:bc:ff:6f:a9:cc:7b:e1:2f: 21:38:b4:a7:0b:6c:69:39:7f:94:b5:f3:23:03:18: 01:48:01:7a:27:cf:72:d3:37:27:82:38:79:49:3b: 4b:f1:85:23:bd:ea:06:98:0a:d7:3d:fd:cd:78:3f: 38:7e:47:f6:a7:6f:9f:bc:e2:df:2b:8a:35:e1:79: 03:df:99:d2:31:d6:d9:0f:0f:c3:d2:7c:7b:46:42: de:74:cf:6c:ad:74:0e:f3:d5:4e:5b:f4:ad:12:36: ab:be:43:c3:d4:66:88:62:4a:78:a3:be:aa:3a:8f: e8:1c:ac:1d:44:79:46:b4:b8:87:06:39:df:b7:5d: 27:38:a5:77:7c:28:8d:4a:e0:73:9a:93:fb:f3:1e: 34:54:12:e0:82:8d:00:54:ae:92:d8:97:bc:67:41: e7:b9:c0:b5:65:a9:26:97:64:5c:c8:02:38:ac:c8: 7c:24:34:13:66:3d:66:b4:60:a2:ed:db:80:28:46: af:1e:41:6b:4f:a3:7a:b9:3f:a3:ef:3c:c1:c8:6b: 41:b6:b6:56:dc:3c:58:33:a8:84:c3:ed:4e:9f:db: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FD:CF:F2:B7:2A:A5:9C:8B:D5:0F:19:CD:4B:06:09:83:AC:49:9F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/955dd925-093b-4cc5-8367-82d54738ad7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1238::/48 Signature Algorithm: sha256WithRSAEncryption b4:0c:ea:12:d8:14:67:4b:7f:46:03:8d:f2:be:41:e7:69:8b: f4:9c:71:ea:57:c3:14:fa:70:bc:d2:04:2d:5a:5c:81:c0:7e: 07:c4:2d:de:c8:c1:01:26:00:ea:3b:79:89:45:ca:a8:54:f7: 46:66:d8:22:3c:5a:6b:57:26:53:9d:bf:8d:3f:6f:de:22:40: aa:29:b9:2e:b9:d2:90:64:7d:ee:c4:5b:6e:ae:4b:6e:bf:0b: bf:b5:4d:b2:eb:0c:93:4a:ae:ff:cd:16:8b:9e:87:20:1f:dd: ed:22:4f:6d:90:cb:ee:5f:cd:8c:0a:f4:24:21:33:eb:d0:ff: db:a5:e9:3c:1a:39:bf:07:c9:69:e4:a2:a5:bc:06:cc:10:2d: 0c:5d:45:5c:76:0a:a1:dd:55:fe:4b:4f:d6:83:d0:44:f8:3d: b8:9d:3f:b9:1d:46:58:fd:62:43:36:31:b1:8f:17:42:c7:69: f5:3a:f9:3d:32:b1:cd:c8:19:fb:21:3d:31:35:30:df:f1:d5: 7e:38:ea:b3:8a:cb:ef:45:ac:c1:5e:16:c8:51:96:87:70:81: 75:00:f0:9f:e1:44:66:7e:89:b5:e8:2e:7b:af:53:09:91:b9: fe:60:22:1c:eb:57:46:c1:4a:3b:66:38:ab:5a:fe:a8:fc:90: 5e:75:06:8c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXGFxSiPbyrMR0Red4rCSJznlzLQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjAyNjA3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTEyNzczY2U0N2YzNDgwNGM5ODExY2I4MWIyY2U1ODUz ZmZkMGI0ZTdjYWZlY2NhNmE1MzAyZGRlZWI2YWIxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc4TvCGOGhMIeJKRP6vVgFKZ+dY2idGOexwsG//RHI/fxJ iL+8/2+pzHvhLyE4tKcLbGk5f5S18yMDGAFIAXonz3LTNyeCOHlJO0vxhSO96gaY Ctc9/c14Pzh+R/anb5+84t8rijXheQPfmdIx1tkPD8PSfHtGQt50z2ytdA7z1U5b 9K0SNqu+Q8PUZohiSnijvqo6j+gcrB1EeUa0uIcGOd+3XSc4pXd8KI1K4HOak/vz HjRUEuCCjQBUrpLYl7xnQee5wLVlqSaXZFzIAjisyHwkNBNmPWa0YKLt24AoRq8e QWtPo3q5P6PvPMHIa0G2tlbcPFgzqITD7U6f2/49AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgP3P8rcqpZyL1Q8ZzUsGCYOsSZ8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk1NWRkOTI1LTA5M2ItNGNjNS04MzY3LTgyZDU0NzM4YWQ3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAEjgwDQYJKoZIhvcNAQELBQADggEBALQM6hLYFGdLf0YDjfK+Qedp i/SccepXwxT6cLzSBC1aXIHAfgfELd7IwQEmAOo7eYlFyqhU90Zm2CI8WmtXJlOd v40/b94iQKopuS650pBkfe7EW26uS26/C7+1TbLrDJNKrv/NFouehyAf3e0iT22Q y+5fzYwK9CQhM+vQ/9ul6TwaOb8HyWnkoqW8BswQLQxdRVx2CqHdVf5LT9aD0ET4 PbidP7kdRlj9YkM2MbGPF0LHafU6+T0ysc3IGfshPTE1MN/x1X446rOKy+9FrMFe FshRlodwgXUA8J/hRGZ+ibXoLnuvUwmRuf5gIhzrV0bBSjtmOKta/qj8kF51Bow= -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:40 2025 by rpki-client