$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a51c1625-7ad3-4857-abf5-0d2a9449a726.roa File: a51c1625-7ad3-4857-abf5-0d2a9449a726.roa (raw, json) Hash identifier: qGXrc4A9gImiFTkc5WjfeORKbx1rDDGHgLAyMAykIwQ= Subject key identifier: 84:12:3C:38:6E:5F:3E:F4:61:B3:E9:62:1F:3C:C6:06:E4:C8:B3:1F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0DDE9CFE563565D4C3B062CE87099E6805B9CC18 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a51c1625-7ad3-4857-abf5-0d2a9449a726.roa Signing time: Fri 31 Oct 2025 05:28:58 +0000 ROA not before: Fri 31 Oct 2025 05:28:58 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1dd0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:de:9c:fe:56:35:65:d4:c3:b0:62:ce:87:09:9e:68:05:b9:cc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:28:58 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e1807422a7a6468980f3d0365232344cbb810fc37bbda75084fd11efc7e92fd0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:99:2e:79:e3:44:b9:26:76:0c:43:53:63: fe:20:fa:e3:70:dc:83:ef:58:4c:c7:25:0b:55:2b: 8f:75:59:f1:0e:d6:17:81:b3:ca:a6:d5:60:3c:0f: da:0a:eb:0d:2a:c8:a7:72:2c:d2:e4:b1:82:cf:ad: 11:1b:68:92:33:6c:4d:c3:0c:47:ee:af:ec:d8:5e: 1c:b9:3e:86:59:b5:87:03:ce:b2:b3:cf:67:56:92: 99:9f:8a:31:a0:61:8c:93:df:2d:f6:b3:ae:6e:f6: 36:17:6c:84:28:98:7c:61:a2:52:14:2e:9c:70:25: b6:3f:51:f0:dd:3e:72:52:17:58:78:cb:7a:90:91: e9:43:42:fa:95:16:9a:0a:2f:d6:7d:20:b6:bc:b8: 38:3e:e9:1e:f8:f4:7a:31:d5:b4:e8:60:c9:07:3e: c5:05:46:6d:ab:b5:10:f8:6f:0b:34:ce:db:c4:67: 01:f4:bf:e0:cc:9e:b3:16:d4:02:2b:58:30:25:fd: cf:67:1e:cb:ac:ec:80:c7:98:e0:87:4c:b0:14:2c: 73:e4:70:ad:93:78:eb:c4:fb:8f:f3:cd:c5:33:3c: 69:87:25:09:93:df:94:c0:f7:e3:a1:d4:76:a7:ae: c9:61:78:8b:6a:19:5f:90:b8:92:17:f6:bc:7f:f8: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:12:3C:38:6E:5F:3E:F4:61:B3:E9:62:1F:3C:C6:06:E4:C8:B3:1F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a51c1625-7ad3-4857-abf5-0d2a9449a726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1dd0::/45 Signature Algorithm: sha256WithRSAEncryption 78:9a:0d:0c:35:b8:27:04:0b:c3:d1:87:57:b7:d7:ac:4b:9d: b3:85:25:a0:d6:be:cb:36:55:2c:9f:85:23:2d:66:c7:6a:06: a3:de:3b:c5:76:e4:0a:40:e6:30:58:45:37:38:98:41:21:a4: 6f:af:31:3f:60:dd:f3:f9:e9:f3:0c:d9:e6:76:d3:f9:e2:43: 8c:a1:dc:9b:fc:06:c5:a2:7d:23:9e:1e:33:df:b4:a6:38:2c: 0a:0a:62:58:d0:8d:9b:03:a7:c6:4d:ca:bc:fc:a1:d5:36:9d: f3:c3:46:e2:13:ac:a4:6d:b1:d7:65:7b:ff:50:25:c8:ba:5e: 15:3e:a3:e9:ed:2e:66:5f:e5:5f:a7:f5:fd:72:92:ab:0e:6b: 64:8b:4f:80:7b:20:1e:04:ca:c9:d5:b0:45:51:e7:3c:aa:1d: 4e:f2:20:b6:71:1e:69:f9:31:ab:5a:83:a6:92:bc:3a:43:2e: de:11:cd:ba:5f:d4:c1:4c:ea:42:4f:7c:2b:8d:0a:f6:46:ef: e3:8b:a6:60:5a:28:ec:85:73:f0:ee:1f:1a:56:86:e6:1a:6e: 44:35:84:13:55:5b:a0:a6:42:ef:87:b7:6c:bc:e1:1c:46:f4: 11:ca:b6:21:52:e0:3e:0a:9a:d9:db:79:c2:a9:c2:92:f4:da: 15:5e:81:9a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDd6c/lY1ZdTDsGLOhwmeaAW5zBgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyODU4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTgwNzQyMmE3YTY0Njg5ODBmM2QwMzY1MjMyMzQ0Y2Ji ODEwZmMzN2JiZGE3NTA4NGZkMTFlZmM3ZTkyZmQwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2iJkueeNEuSZ2DENTY/4g+uNw3IPvWEzHJQtVK491WfEO 1heBs8qm1WA8D9oK6w0qyKdyLNLksYLPrREbaJIzbE3DDEfur+zYXhy5PoZZtYcD zrKzz2dWkpmfijGgYYyT3y32s65u9jYXbIQomHxholIULpxwJbY/UfDdPnJSF1h4 y3qQkelDQvqVFpoKL9Z9ILa8uDg+6R749Hox1bToYMkHPsUFRm2rtRD4bws0ztvE ZwH0v+DMnrMW1AIrWDAl/c9nHsus7IDHmOCHTLAULHPkcK2TeOvE+4/zzcUzPGmH JQmT35TA9+Oh1HanrslheItqGV+QuJIX9rx/+K7VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhBI8OG5fPvRhs+liHzzGBuTIsx8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2E1MWMxNjI1LTdhZDMtNDg1Ny1hYmY1LTBkMmE5NDQ5YTcyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAHdAwDQYJKoZIhvcNAQELBQADggEBAHiaDQw1uCcEC8PRh1e316xL nbOFJaDWvss2VSyfhSMtZsdqBqPeO8V25ApA5jBYRTc4mEEhpG+vMT9g3fP56fMM 2eZ20/niQ4yh3Jv8BsWifSOeHjPftKY4LAoKYljQjZsDp8ZNyrz8odU2nfPDRuIT rKRtsddle/9QJci6XhU+o+ntLmZf5V+n9f1ykqsOa2SLT4B7IB4EysnVsEVR5zyq HU7yILZxHmn5Matag6aSvDpDLt4Rzbpf1MFM6kJPfCuNCvZG7+OLpmBaKOyFc/Du HxpWhuYabkQ1hBNVW6CmQu+Ht2y84RxG9BHKtiFS4D4KmtnbecKpwpL02hVegZo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:53 2025 by rpki-client