$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bccc950f-8e63-4c95-89d6-0b57b3882213.roa File: bccc950f-8e63-4c95-89d6-0b57b3882213.roa (raw, json) Hash identifier: NrwU7IcoVcucabGu4anfk51vometu1GaBNRfAMOvfvE= Subject key identifier: 6F:A9:B3:82:F0:D7:69:41:F5:9B:6A:37:CC:31:18:8A:0D:26:81:B9 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7CCA48D4FF245E220795FCF70507606934FEEBC8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bccc950f-8e63-4c95-89d6-0b57b3882213.roa Signing time: Thu 30 Oct 2025 20:08:30 +0000 ROA not before: Thu 30 Oct 2025 20:08:30 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2400::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ca:48:d4:ff:24:5e:22:07:95:fc:f7:05:07:60:69:34:fe:eb:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:08:30 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=1dbb74b58053c3d2005f6d58f94289f2fcaf9989f87b83b03b443fe0c462fe17, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5e:f7:62:61:2b:76:fd:4d:1e:54:b8:48:96: 34:cb:78:93:d5:12:1e:98:70:e2:08:ef:0c:9b:22: 2c:1c:23:98:b0:46:da:a2:74:9b:f2:b7:36:eb:b7: 13:b8:97:b2:06:3b:1e:e3:cc:b9:9b:81:0d:b9:5d: 62:c0:51:a5:3f:99:49:22:86:5f:05:8b:c2:5a:bb: 64:0d:fe:f9:8e:e6:8a:11:72:56:80:0f:9f:4c:bb: 27:ed:6d:a9:a2:b5:3b:71:f3:a4:a2:a6:5a:c7:8b: 72:3c:ad:93:ff:0a:46:74:db:cc:63:fd:cd:1a:d0: c1:82:f7:68:55:bd:f4:f6:52:e1:f5:b8:b4:64:0e: d5:ef:b5:08:5b:8f:49:66:ea:25:d3:2d:fc:3e:1a: 93:42:db:50:8c:18:f5:ef:c9:e3:ed:1d:ba:64:ac: 32:13:8f:83:93:ff:0b:85:61:36:b9:4e:74:34:9b: 17:2e:c8:16:dd:5e:23:2d:85:e8:9e:75:c4:60:d2: 46:53:e6:2c:38:cb:e1:d9:f2:39:49:40:8b:df:39: 02:20:33:c2:d5:9e:9b:32:d8:23:50:4d:a9:38:92: a1:2f:1d:e8:e6:30:87:92:cb:90:64:81:49:15:7e: e5:51:a5:b3:e1:1f:40:f9:41:ad:90:82:cd:4a:b1: 92:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A9:B3:82:F0:D7:69:41:F5:9B:6A:37:CC:31:18:8A:0D:26:81:B9 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bccc950f-8e63-4c95-89d6-0b57b3882213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2400::/43 Signature Algorithm: sha256WithRSAEncryption 36:3b:f5:ee:a1:ea:09:29:e7:a5:b8:ea:d5:54:bc:1d:a4:8e: 27:8a:f3:c3:74:35:11:88:5d:e3:34:59:47:63:d9:74:09:e2: 06:75:40:ae:43:fb:3d:a3:b5:d5:2e:2c:bd:67:02:85:1c:1f: 7c:92:a6:20:d4:3e:44:61:30:37:0b:86:19:d9:54:a4:8c:1d: c0:79:c9:23:97:84:86:3b:33:77:81:9e:d2:f3:a4:f6:07:a7: 8a:d9:c3:4d:56:e9:19:6d:6b:ba:77:6e:12:90:7c:c6:00:5b: f7:b3:be:8f:4a:cf:ee:3b:b8:35:7c:5e:b9:7c:42:e9:d0:00: 13:9d:76:88:ad:ed:e5:68:c4:05:51:3b:d2:e6:d1:da:64:95: 45:69:22:0b:30:a1:5b:26:26:31:63:1e:54:53:bd:3c:91:4f: 1b:a3:3e:58:d4:03:d5:0b:db:e0:8d:fe:93:dc:88:7e:76:61: fb:dc:ad:fa:72:3a:1b:c0:dc:1f:4e:34:2a:bf:7f:61:63:3d: 27:8a:3f:03:7c:33:75:3c:a5:fe:5f:ee:5a:c4:8a:69:76:ef: 8e:f6:28:8d:ab:3b:a4:ba:06:d8:73:80:37:14:8e:cb:1d:66: 62:48:19:2f:f0:80:ef:14:36:f0:63:cd:28:96:8a:e5:dd:07: ea:9d:2e:64 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfMpI1P8kXiIHlfz3BQdgaTT+68gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjAwODMwWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGJiNzRiNTgwNTNjM2QyMDA1ZjZkNThmOTQyODlmMmZj YWY5OTg5Zjg3YjgzYjAzYjQ0M2ZlMGM0NjJmZTE3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzXvdiYSt2/U0eVLhIljTLeJPVEh6YcOII7wybIiwcI5iw RtqidJvytzbrtxO4l7IGOx7jzLmbgQ25XWLAUaU/mUkihl8Fi8Jau2QN/vmO5ooR claAD59MuyftbamitTtx86SiplrHi3I8rZP/CkZ028xj/c0a0MGC92hVvfT2UuH1 uLRkDtXvtQhbj0lm6iXTLfw+GpNC21CMGPXvyePtHbpkrDITj4OT/wuFYTa5TnQ0 mxcuyBbdXiMtheiedcRg0kZT5iw4y+HZ8jlJQIvfOQIgM8LVnpsy2CNQTak4kqEv HejmMIeSy5BkgUkVfuVRpbPhH0D5Qa2Qgs1KsZIPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUb6mzgvDXaUH1m2o3zDEYig0mgbkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JjY2M5NTBmLThlNjMtNGM5NS04OWQ2LTBiNTdiMzg4MjIxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAJAAwDQYJKoZIhvcNAQELBQADggEBADY79e6h6gkp56W46tVUvB2k jieK88N0NRGIXeM0WUdj2XQJ4gZ1QK5D+z2jtdUuLL1nAoUcH3ySpiDUPkRhMDcL hhnZVKSMHcB5ySOXhIY7M3eBntLzpPYHp4rZw01W6Rlta7p3bhKQfMYAW/ezvo9K z+47uDV8Xrl8QunQABOddoit7eVoxAVRO9Lm0dpklUVpIgswoVsmJjFjHlRTvTyR TxujPljUA9UL2+CN/pPciH52YfvcrfpyOhvA3B9ONCq/f2FjPSeKPwN8M3U8pf5f 7lrEiml27472KI2rO6S6BthzgDcUjssdZmJIGS/wgO8UNvBjzSiWiuXdB+qdLmQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:57 2025 by rpki-client