$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5146499-ec6b-4dab-a468-704150f1e4b4.roa File: a5146499-ec6b-4dab-a468-704150f1e4b4.roa (raw, json) Hash identifier: hwRSJMJ84w5mDZubBeHkkcPvOVbuT2LdeL25H01F4SU= Subject key identifier: 34:9C:15:9C:87:6C:0B:78:82:1C:1C:A2:8C:9A:01:21:9E:24:9B:D5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5A6890C45A1338A8C55E5C11335A5FDBD7B64633 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5146499-ec6b-4dab-a468-704150f1e4b4.roa Signing time: Fri 31 Oct 2025 05:07:02 +0000 ROA not before: Fri 31 Oct 2025 05:07:02 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1290::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:68:90:c4:5a:13:38:a8:c5:5e:5c:11:33:5a:5f:db:d7:b6:46:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:07:02 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e41ea60822815f5ea9c3fe78dc3b3bd8f137c189b8058c4be909977fdcf3cb3d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:1b:97:24:b5:32:2d:6e:99:a8:11:c4:ed: 68:e1:0a:8d:15:8b:9d:82:e4:1d:63:69:7e:1f:6d: dc:6d:a2:67:c6:98:7d:e5:f0:00:eb:2f:84:c3:de: 25:73:05:5e:79:2e:82:0c:26:ac:33:d8:3c:9f:c9: 2e:bf:52:43:62:96:f9:4b:91:42:c1:26:16:65:ee: fa:fb:e2:31:0b:8d:16:95:4e:63:fa:79:38:64:96: a4:ee:b5:d6:3c:1f:54:92:a9:d7:17:9c:1d:11:15: 88:53:0d:48:70:d6:1f:f6:73:9a:0a:9c:66:f6:3a: 34:fc:1b:15:d5:7d:aa:83:90:52:6d:63:6e:38:49: ee:7d:49:71:a2:af:6a:dd:90:b0:1a:2b:97:e2:89: 32:c1:e0:17:97:67:77:4e:8a:ea:8e:3a:4c:cd:19: 0e:7e:f5:bb:3c:e9:c7:ff:4c:a4:dc:57:1b:4c:48: 0e:24:bd:0b:e9:64:52:bd:2f:b0:2f:8b:52:a1:fb: ee:3c:7b:c8:e5:d0:0f:6f:ad:60:de:32:ac:9f:13: 2c:56:9f:83:81:e3:95:24:4f:05:bd:8a:51:71:6d: f2:05:3a:41:7d:85:e5:2d:c4:e7:09:a7:17:e6:93: 72:f4:c6:22:50:d3:18:e0:40:78:cc:2d:f7:72:dd: 71:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9C:15:9C:87:6C:0B:78:82:1C:1C:A2:8C:9A:01:21:9E:24:9B:D5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a5146499-ec6b-4dab-a468-704150f1e4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1290::/45 Signature Algorithm: sha256WithRSAEncryption a4:c9:8c:4e:ac:c2:a6:70:1f:85:82:d9:81:42:7b:6e:e0:b9: e4:ae:ac:57:5c:1a:e0:ae:28:65:11:9b:17:cf:67:79:35:03: 32:93:ad:7c:86:15:67:c0:1b:a2:0a:f7:fc:71:31:a3:bc:52: ff:2c:18:26:58:f1:af:40:f3:85:0f:1a:f5:ca:2f:a5:3f:f6: 1b:1c:c4:21:cf:a8:23:4a:60:cb:5b:5a:be:e9:c4:ca:9c:d5: 8d:5d:c7:e2:ad:16:98:0e:17:5f:c5:9b:f4:88:30:a4:3c:ac: cf:de:d2:d3:90:c4:c9:d6:19:ed:8f:19:51:7d:07:10:80:fe: 5e:17:bf:48:47:a9:8e:e6:ff:09:33:da:77:dc:8d:7a:35:1b: 1f:7c:a4:ea:02:db:0e:92:34:b7:ce:33:5c:2d:2b:97:6f:fd: e9:5e:d3:10:e4:06:42:ca:60:2c:43:cf:03:0e:d5:98:94:61: 84:21:dd:e7:07:56:40:fd:91:3f:59:3f:38:e1:2b:a9:6e:cc: 2c:24:af:40:82:96:b2:82:eb:f0:c4:82:2f:7a:8c:61:ad:eb: 5c:a6:0d:90:2c:28:fc:70:d7:20:19:de:4e:db:61:0c:40:30: fe:f4:3c:c4:2d:8c:eb:c9:9f:b6:17:4d:4a:83:74:58:54:52: 6b:be:56:a5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWmiQxFoTOKjFXlwRM1pf29e2RjMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUwNzAyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDFlYTYwODIyODE1ZjVlYTljM2ZlNzhkYzNiM2JkOGYx MzdjMTg5YjgwNThjNGJlOTA5OTc3ZmRjZjNjYjNkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKuxuXJLUyLW6ZqBHE7WjhCo0Vi52C5B1jaX4fbdxtomfG mH3l8ADrL4TD3iVzBV55LoIMJqwz2DyfyS6/UkNilvlLkULBJhZl7vr74jELjRaV TmP6eThklqTutdY8H1SSqdcXnB0RFYhTDUhw1h/2c5oKnGb2OjT8GxXVfaqDkFJt Y244Se59SXGir2rdkLAaK5fiiTLB4BeXZ3dOiuqOOkzNGQ5+9bs86cf/TKTcVxtM SA4kvQvpZFK9L7Avi1Kh++48e8jl0A9vrWDeMqyfEyxWn4OB45UkTwW9ilFxbfIF OkF9heUtxOcJpxfmk3L0xiJQ0xjgQHjMLfdy3XFtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNJwVnIdsC3iCHByijJoBIZ4km9UwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E1MTQ2NDk5LWVjNmItNGRhYi1hNDY4LTcwNDE1MGYxZTRiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAEpAwDQYJKoZIhvcNAQELBQADggEBAKTJjE6swqZwH4WC2YFCe27g ueSurFdcGuCuKGURmxfPZ3k1AzKTrXyGFWfAG6IK9/xxMaO8Uv8sGCZY8a9A84UP GvXKL6U/9hscxCHPqCNKYMtbWr7pxMqc1Y1dx+KtFpgOF1/Fm/SIMKQ8rM/e0tOQ xMnWGe2PGVF9BxCA/l4Xv0hHqY7m/wkz2nfcjXo1Gx98pOoC2w6SNLfOM1wtK5dv /ele0xDkBkLKYCxDzwMO1ZiUYYQh3ecHVkD9kT9ZPzjhK6luzCwkr0CClrKC6/DE gi96jGGt61ymDZAsKPxw1yAZ3k7bYQxAMP70PMQtjOvJn7YXTUqDdFhUUmu+VqU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:46 2025 by rpki-client