$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc45eaaa-f810-4b4c-afe6-254e60c2b988.roa File: cc45eaaa-f810-4b4c-afe6-254e60c2b988.roa (raw, json) Hash identifier: BPMOl04TWEUU2N3GPKimnofVP8so/BAnK5eS8dlX2u8= Subject key identifier: 6A:BB:C0:81:A6:F8:35:FF:95:DA:E8:F7:50:C4:31:B8:DB:F3:9C:75 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5C4310789D4841183384FDE80873176D5241E23F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc45eaaa-f810-4b4c-afe6-254e60c2b988.roa Signing time: Thu 30 Oct 2025 23:36:56 +0000 ROA not before: Thu 30 Oct 2025 23:36:56 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2de6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:43:10:78:9d:48:41:18:33:84:fd:e8:08:73:17:6d:52:41:e2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:36:56 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=d3863fe1c0be12f3177529bb5e439dce588303adc0ca290f357d13a39db84816, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:08:56:d1:35:16:a4:1a:13:85:3a:f1:21:46: 0d:ad:4d:06:5f:20:30:12:72:f0:fa:10:e3:41:82: 72:f8:50:dd:12:6d:a8:41:59:97:75:9b:e8:52:15: f1:06:21:11:f4:32:68:dd:b4:24:62:5d:16:6f:ad: 35:ac:3d:3d:4a:39:c2:e1:8c:4a:f5:7f:c7:81:ee: 87:51:f4:c6:f5:34:0d:2a:f6:e2:36:b9:6e:18:98: 9b:76:6f:dd:0d:0d:b1:4a:a6:14:94:e7:c3:ad:52: 8f:4f:09:76:18:b2:86:85:24:f5:22:05:98:ba:2f: 03:1a:16:2b:fe:9a:6b:22:66:61:6c:db:5e:f8:64: 2b:06:4d:07:01:d4:f5:4b:da:84:86:db:69:64:c6: 90:57:ac:dd:77:81:c8:18:8d:b2:61:87:3a:fa:bf: 17:30:07:17:0c:5d:da:cc:d5:6a:3f:62:eb:7c:bf: 20:90:da:27:bb:79:58:91:06:ac:fc:fd:8c:92:ad: 4f:68:d5:e5:0b:e7:24:58:e8:24:36:da:f5:15:67: 30:ac:1a:3f:a0:1a:03:2f:4f:2d:d2:27:ab:e5:8e: 20:3b:c5:a5:3c:32:00:df:88:0a:d7:33:a0:9c:04: 25:e7:04:d9:6e:fe:d8:a7:3b:fb:c0:37:4c:0e:fc: e7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BB:C0:81:A6:F8:35:FF:95:DA:E8:F7:50:C4:31:B8:DB:F3:9C:75 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc45eaaa-f810-4b4c-afe6-254e60c2b988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2de6::/47 Signature Algorithm: sha256WithRSAEncryption 68:f5:0f:95:38:d0:d6:16:e4:f6:80:54:a8:50:4d:6c:89:c7: 15:ec:94:c5:34:9a:5c:51:4e:07:cf:8d:be:9e:21:bb:21:ac: 27:80:99:78:e5:53:2a:70:7c:de:b3:27:47:7e:3b:c2:32:0e: 18:05:de:66:98:3f:81:28:81:1e:fd:dc:3b:a0:9a:80:16:bd: 83:dc:66:c3:f1:eb:83:a3:a8:12:ed:bd:5b:83:0e:68:a8:92: ab:0d:c1:98:a7:98:93:f5:69:70:8e:12:2c:19:c1:05:72:e5: 26:e9:83:67:d8:56:69:15:4d:a7:53:49:58:19:f9:26:ec:b9: 6b:94:c8:de:81:e8:bb:18:ee:28:7d:6b:48:65:8f:ed:e2:95: dd:da:0f:74:98:12:5f:60:e8:f2:de:a5:cb:95:25:6e:43:c6: e8:cc:14:e3:40:18:f2:46:c6:ca:78:16:d0:26:f3:37:25:16: bb:01:12:5f:ac:03:52:a7:cb:57:5a:45:b7:02:a8:af:84:77: d4:9b:1b:e9:6f:de:15:a5:c1:51:a6:83:82:fb:65:9a:c1:0d: a4:e5:6e:62:88:0b:98:6e:93:3d:d2:af:b7:01:55:7c:1b:c9: 8b:0c:87:75:a1:97:c5:22:94:2e:6b:e2:ad:0b:c6:b6:e6:62: 68:26:c9:97 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXEMQeJ1IQRgzhP3oCHMXbVJB4j8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMzNjU2WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzg2M2ZlMWMwYmUxMmYzMTc3NTI5YmI1ZTQzOWRjZTU4 ODMwM2FkYzBjYTI5MGYzNTdkMTNhMzlkYjg0ODE2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLCFbRNRakGhOFOvEhRg2tTQZfIDAScvD6EONBgnL4UN0S bahBWZd1m+hSFfEGIRH0MmjdtCRiXRZvrTWsPT1KOcLhjEr1f8eB7odR9Mb1NA0q 9uI2uW4YmJt2b90NDbFKphSU58OtUo9PCXYYsoaFJPUiBZi6LwMaFiv+mmsiZmFs 2174ZCsGTQcB1PVL2oSG22lkxpBXrN13gcgYjbJhhzr6vxcwBxcMXdrM1Wo/Yut8 vyCQ2ie7eViRBqz8/YySrU9o1eUL5yRY6CQ22vUVZzCsGj+gGgMvTy3SJ6vljiA7 xaU8MgDfiArXM6CcBCXnBNlu/tinO/vAN0wO/OezAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUarvAgab4Nf+V2uj3UMQxuNvznHUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NjNDVlYWFhLWY4MTAtNGI0Yy1hZmU2LTI1NGU2MGMyYjk4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALeYwDQYJKoZIhvcNAQELBQADggEBAGj1D5U40NYW5PaAVKhQTWyJ xxXslMU0mlxRTgfPjb6eIbshrCeAmXjlUypwfN6zJ0d+O8IyDhgF3maYP4EogR79 3DugmoAWvYPcZsPx64OjqBLtvVuDDmiokqsNwZinmJP1aXCOEiwZwQVy5Sbpg2fY VmkVTadTSVgZ+SbsuWuUyN6B6LsY7ih9a0hlj+3ild3aD3SYEl9g6PLepcuVJW5D xujMFONAGPJGxsp4FtAm8zclFrsBEl+sA1Kny1daRbcCqK+Ed9SbG+lv3hWlwVGm g4L7ZZrBDaTlbmKIC5hukz3Sr7cBVXwbyYsMh3Whl8UilC5r4q0LxrbmYmgmyZc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:48 2025 by rpki-client