$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5f2bcbf-a532-426e-823e-62269e503abe.roa File: c5f2bcbf-a532-426e-823e-62269e503abe.roa (raw, json) Hash identifier: DdKFRxePVp6daqrCtS9Of6D1eiPu5FZQbslEeseVnqY= Subject key identifier: BC:A5:36:04:45:39:4A:B7:DC:D8:F6:35:AA:A7:DC:93:5D:37:A4:79 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 476386E7E865BEF5E65EA8B2E72695693916715D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5f2bcbf-a532-426e-823e-62269e503abe.roa Signing time: Fri 31 Oct 2025 05:07:08 +0000 ROA not before: Fri 31 Oct 2025 05:07:08 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:12e0::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:63:86:e7:e8:65:be:f5:e6:5e:a8:b2:e7:26:95:69:39:16:71:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:07:08 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=7542efef97b05145587e0d51a4ddc1ee9f49867613ed5bcb52b3f663b74f7573, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cc:15:d4:77:91:6b:a6:f0:67:d2:2f:d5:85: 72:ec:ad:7c:3d:aa:d0:5a:53:1b:ea:56:63:8a:3c: 1b:8b:42:c8:82:8b:f1:96:f9:f1:15:bd:32:d0:5f: b7:da:a1:f8:b2:93:d6:8b:02:a4:a8:af:44:4a:d7: 4c:3a:a4:6a:1c:88:79:5a:47:97:25:65:a2:1a:39: 8b:58:0b:78:5c:77:5d:b8:9d:d0:6d:68:b8:a2:ef: d7:51:2f:19:c6:02:e9:2b:99:bb:c6:e0:7f:bf:49: 40:fa:e2:1c:2f:4f:e4:21:39:2c:38:e4:a4:39:9f: b3:dc:ae:9f:34:ca:a2:d8:41:1f:b2:10:7d:51:c5: ed:20:d0:54:cb:ae:03:8c:ed:2c:e0:14:df:11:30: 6f:3e:84:a9:bb:fa:ab:72:da:b0:b2:20:54:32:a1: 30:25:56:88:73:90:72:44:e7:ea:9f:43:24:6d:16: 4e:cd:c9:d5:7e:42:05:8f:de:9f:39:fb:93:4f:77: 66:bb:4c:92:aa:09:a8:f4:d9:2e:70:6c:0b:50:1a: dd:f1:09:ef:d9:9c:de:fc:98:87:b9:e2:54:80:d8: 42:29:7a:9e:00:34:7a:ff:ab:9b:47:58:f4:65:11: 10:2f:c4:d6:be:c4:f3:03:37:61:ab:a1:df:23:bf: dd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A5:36:04:45:39:4A:B7:DC:D8:F6:35:AA:A7:DC:93:5D:37:A4:79 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5f2bcbf-a532-426e-823e-62269e503abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:12e0::/45 Signature Algorithm: sha256WithRSAEncryption 86:91:d3:59:77:a3:7b:89:75:82:b7:1f:2b:9e:e9:a4:38:67: 87:17:ad:24:df:59:e5:97:22:f2:e3:b4:fb:3f:05:9f:ff:e5: 4a:20:d2:07:2f:24:03:9e:17:5a:df:12:cf:ed:c2:cb:86:b5: 8c:ea:17:11:1f:53:e0:91:d2:56:66:d4:72:a9:28:63:eb:9a: 50:88:97:bf:4b:2e:cd:ab:9c:cd:f8:2f:d9:37:61:fa:a5:ee: c2:2b:8e:18:35:81:92:1e:b1:79:b6:2a:cd:d6:2d:2b:ee:f3: b3:8d:c4:73:83:0e:e9:55:bf:ce:d9:80:51:f7:f2:0f:f1:26: a3:18:37:e9:00:19:24:19:53:d2:8f:09:0c:54:31:63:c7:1c: b3:df:25:ce:4c:5b:ec:fa:f5:4e:ef:4e:b0:36:4f:f8:61:1b: 67:31:e5:30:1b:90:10:08:17:ec:6a:b1:b9:3c:81:24:dd:f7: 9c:d3:fe:e8:09:ef:5b:93:28:a3:47:2c:13:0a:cf:ae:7b:4a: e5:bf:17:c8:70:b7:75:63:74:0b:33:09:0b:12:90:7c:2a:6f: 78:bd:a1:e5:6e:b8:7f:4d:17:ab:d0:64:b5:7e:66:db:d8:43: 93:09:9d:e0:c8:c0:90:f3:80:b0:04:f2:82:09:57:eb:5c:0f: b8:62:56:28 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR2OG5+hlvvXmXqiy5yaVaTkWcV0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUwNzA4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTQyZWZlZjk3YjA1MTQ1NTg3ZTBkNTFhNGRkYzFlZTlm NDk4Njc2MTNlZDViY2I1MmIzZjY2M2I3NGY3NTczMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJzBXUd5FrpvBn0i/VhXLsrXw9qtBaUxvqVmOKPBuLQsiC i/GW+fEVvTLQX7faofiyk9aLAqSor0RK10w6pGociHlaR5clZaIaOYtYC3hcd124 ndBtaLii79dRLxnGAukrmbvG4H+/SUD64hwvT+QhOSw45KQ5n7Pcrp80yqLYQR+y EH1Rxe0g0FTLrgOM7SzgFN8RMG8+hKm7+qty2rCyIFQyoTAlVohzkHJE5+qfQyRt Fk7NydV+QgWP3p85+5NPd2a7TJKqCaj02S5wbAtQGt3xCe/ZnN78mIe54lSA2EIp ep4ANHr/q5tHWPRlERAvxNa+xPMDN2Grod8jv913AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvKU2BEU5Srfc2PY1qqfck103pHkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2M1ZjJiY2JmLWE1MzItNDI2ZS04MjNlLTYyMjY5ZTUwM2FiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAEuAwDQYJKoZIhvcNAQELBQADggEBAIaR01l3o3uJdYK3Hyue6aQ4 Z4cXrSTfWeWXIvLjtPs/BZ//5Uog0gcvJAOeF1rfEs/twsuGtYzqFxEfU+CR0lZm 1HKpKGPrmlCIl79LLs2rnM34L9k3Yfql7sIrjhg1gZIesXm2Ks3WLSvu87ONxHOD DulVv87ZgFH38g/xJqMYN+kAGSQZU9KPCQxUMWPHHLPfJc5MW+z69U7vTrA2T/hh G2cx5TAbkBAIF+xqsbk8gSTd95zT/ugJ71uTKKNHLBMKz657SuW/F8hwt3VjdAsz CQsSkHwqb3i9oeVuuH9NF6vQZLV+ZtvYQ5MJneDIwJDzgLAE8oIJV+tcD7hiVig= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:12 2025 by rpki-client