$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bdec4368-edc7-4e2c-9219-69c889f9389b.roa File: bdec4368-edc7-4e2c-9219-69c889f9389b.roa (raw, json) Hash identifier: Egtul3mmamA8pXrwu5jaMeULOnZ5706HZcY3ociJ2Gs= Subject key identifier: 39:83:BB:63:1C:83:12:5E:87:74:7A:4B:30:F2:84:35:E8:C6:F4:7C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 619C8C1310084C0EEEA36AD39ADED3A12267494D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bdec4368-edc7-4e2c-9219-69c889f9389b.roa Signing time: Fri 31 Oct 2025 05:56:58 +0000 ROA not before: Fri 31 Oct 2025 05:56:58 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:32f8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9c:8c:13:10:08:4c:0e:ee:a3:6a:d3:9a:de:d3:a1:22:67:49:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:56:58 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a6f1640ad5f59a3725b46974cfeedd411dc738d412d8e4434e08f6b35ae303d5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:d1:a5:b5:d0:f4:d3:aa:c9:b4:3e:93:d0: 14:16:dd:56:77:fc:60:0b:aa:c4:59:fc:d2:1d:77: d5:be:b4:cb:5c:0a:29:a2:05:10:9f:3e:6e:46:6e: 9d:3d:a2:27:05:95:db:7b:c0:12:88:a7:df:12:f6: 79:bd:1b:ca:b4:a9:2c:34:f9:b2:60:62:2a:83:0a: 4f:bb:ba:99:ba:1c:45:b1:fd:e2:95:2f:19:20:c7: 4e:fd:93:e7:9a:0f:db:42:67:3f:d7:89:b7:30:1e: 94:aa:70:fd:e3:0a:2f:12:e4:e3:ff:56:6a:b8:1e: 5f:aa:b8:38:c0:53:18:70:cf:25:15:8d:b2:04:69: e6:27:cd:a1:2d:7d:6c:8e:3b:d9:a5:e2:a3:0c:24: 1d:1b:aa:02:a0:a5:4f:e5:2d:0a:f7:97:03:17:47: 32:c9:51:7f:f3:44:e7:15:d2:13:71:ea:d6:fb:94: 65:b9:f9:39:a8:9c:50:e6:45:91:03:b2:1e:c6:f5: 4c:db:ee:b4:c4:51:9e:95:3c:ea:1f:9c:09:72:7b: c3:e2:68:01:a6:19:6d:4b:0b:b3:6b:69:a2:79:42: 53:bc:44:1f:f0:8b:7b:bc:03:4b:51:fd:df:7f:43: 74:ac:3a:61:2a:f3:52:1d:8a:5a:3a:90:08:3c:7e: 43:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:83:BB:63:1C:83:12:5E:87:74:7A:4B:30:F2:84:35:E8:C6:F4:7C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bdec4368-edc7-4e2c-9219-69c889f9389b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:32f8::/45 Signature Algorithm: sha256WithRSAEncryption b5:84:12:90:5a:4d:f1:b7:33:14:14:08:e8:67:3c:49:8e:5f: 20:3b:78:be:3a:3d:f8:fd:3f:62:dc:6a:b1:c0:fc:bb:76:0a: 50:91:de:27:ad:ce:f6:78:df:26:90:3f:39:d7:9e:25:13:c3: 85:e4:bf:b2:4b:83:f3:29:c5:fd:48:a2:5a:a2:c4:1c:34:03: e9:e6:13:ac:be:85:55:07:06:31:bd:b1:74:82:c0:cd:f5:98: 7e:7f:a1:b9:eb:cc:ea:c3:f6:f3:28:bb:56:47:aa:f5:32:a4: 7b:82:45:6a:61:35:ab:74:d4:34:65:76:7f:b3:47:ef:c9:c8: 0a:c1:89:ed:9b:a9:3e:09:28:dd:fa:d6:3a:52:25:36:87:e9: d5:17:53:66:b6:0c:ca:c3:8f:aa:e5:c7:bb:9b:ab:41:62:65: 76:9f:39:cf:fa:ba:3c:f2:93:da:5b:8c:14:c3:71:24:e7:6f: 6a:fd:6c:a2:da:c6:d0:9f:48:fd:87:ba:ff:0c:2c:89:d4:0f: 66:70:ab:5e:26:06:c8:85:e3:4b:c3:b8:62:f3:3a:0e:c0:66: a9:21:cf:c4:53:8f:4f:57:55:2c:a9:6b:32:03:71:03:42:a7: e3:3a:a9:2e:e0:b5:39:5e:74:9a:9c:12:92:27:c5:3e:2b:29: 0e:17:e9:5e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYZyMExAITA7uo2rTmt7ToSJnSU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU1NjU4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNmYxNjQwYWQ1ZjU5YTM3MjViNDY5NzRjZmVlZGQ0MTFk YzczOGQ0MTJkOGU0NDM0ZTA4ZjZiMzVhZTMwM2Q1MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl4dGltdD006rJtD6T0BQW3VZ3/GALqsRZ/NIdd9W+tMtc CimiBRCfPm5Gbp09oicFldt7wBKIp98S9nm9G8q0qSw0+bJgYiqDCk+7upm6HEWx /eKVLxkgx079k+eaD9tCZz/XibcwHpSqcP3jCi8S5OP/Vmq4Hl+quDjAUxhwzyUV jbIEaeYnzaEtfWyOO9ml4qMMJB0bqgKgpU/lLQr3lwMXRzLJUX/zROcV0hNx6tb7 lGW5+TmonFDmRZEDsh7G9Uzb7rTEUZ6VPOofnAlye8PiaAGmGW1LC7NraaJ5QlO8 RB/wi3u8A0tR/d9/Q3SsOmEq81Idilo6kAg8fkONAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOYO7YxyDEl6HdHpLMPKENejG9HwwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JkZWM0MzY4LWVkYzctNGUyYy05MjE5LTY5Yzg4OWY5Mzg5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAMvgwDQYJKoZIhvcNAQELBQADggEBALWEEpBaTfG3MxQUCOhnPEmO XyA7eL46Pfj9P2LcarHA/Lt2ClCR3ietzvZ43yaQPznXniUTw4Xkv7JLg/Mpxf1I olqixBw0A+nmE6y+hVUHBjG9sXSCwM31mH5/obnrzOrD9vMou1ZHqvUypHuCRWph Nat01DRldn+zR+/JyArBie2bqT4JKN361jpSJTaH6dUXU2a2DMrDj6rlx7ubq0Fi ZXafOc/6ujzyk9pbjBTDcSTnb2r9bKLaxtCfSP2Huv8MLInUD2Zwq14mBsiF40vD uGLzOg7AZqkhz8RTj09XVSypazIDcQNCp+M6qS7gtTledJqcEpInxT4rKQ4X6V4= -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:45 2025 by rpki-client