$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d60d2ded-dcd2-4df1-84df-bbcb010b35d7.roa File: d60d2ded-dcd2-4df1-84df-bbcb010b35d7.roa (raw, json) Hash identifier: EWuOPQuLP2CTjReXIp8IURhcd7R1FabR7x6o0vneTF0= Subject key identifier: 48:C8:3D:5F:ED:70:FD:4E:7B:F9:91:80:30:01:FA:F6:7E:25:15:9F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4725E67DEF5BECB3FEA7BA8CE7AA04EC2EF2CF94 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d60d2ded-dcd2-4df1-84df-bbcb010b35d7.roa Signing time: Fri 31 Oct 2025 04:58:40 +0000 ROA not before: Fri 31 Oct 2025 04:58:40 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3fc0::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:25:e6:7d:ef:5b:ec:b3:fe:a7:ba:8c:e7:aa:04:ec:2e:f2:cf:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:58:40 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=fa6972d0ebfe403af9324c22680319ec8454cdc68905e4c143f03c9c101371c2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:45:43:78:54:7e:30:f0:97:2d:bf:d9:4a:01: f4:c0:e4:e1:7e:7d:f0:17:0a:5b:fa:ec:59:68:ff: d6:1a:1e:b0:14:62:1f:4e:6d:c4:01:8a:5b:82:5e: 6e:14:0f:8b:56:16:7a:c6:5c:dc:2a:fb:8f:36:f8: 60:dc:2f:07:40:a6:51:60:83:12:be:db:8d:13:35: 78:c5:49:42:e1:f2:60:f3:43:16:22:a7:d1:40:44: 94:3b:09:eb:87:3f:b5:67:6e:f0:eb:90:0c:90:22: e1:f3:53:4b:f6:03:67:b7:2a:ba:1f:2a:08:4a:79: 2b:48:da:ca:a0:83:d6:94:49:6a:f9:a5:ac:97:0a: 12:2f:6e:7f:49:cb:77:f5:4b:04:d6:6e:b1:1b:5e: 3b:c8:57:f1:78:46:62:b6:6e:3c:b3:93:f7:88:44: 90:1f:85:15:3b:57:be:4e:7f:68:0a:fd:8f:cf:66: 57:ac:c2:27:89:95:c4:15:9e:ae:ff:4a:65:88:6c: a6:2d:70:2e:55:5d:37:24:10:36:29:e4:06:71:58: 61:21:ba:46:57:81:b0:aa:06:b5:58:40:69:2d:ee: af:bb:49:a7:3f:03:5a:d9:86:67:68:83:b3:56:5c: 59:40:8b:86:94:4a:6d:72:f2:ea:4d:d4:4f:a8:26: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C8:3D:5F:ED:70:FD:4E:7B:F9:91:80:30:01:FA:F6:7E:25:15:9F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d60d2ded-dcd2-4df1-84df-bbcb010b35d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3fc0::/46 Signature Algorithm: sha256WithRSAEncryption 0e:e4:05:0c:b8:4e:f3:df:67:a0:77:0f:40:cf:cf:37:ae:67: 01:9d:f5:db:53:d6:5c:80:79:62:3a:37:d8:3c:d9:52:bf:0f: 88:ab:af:aa:3e:10:45:c6:98:a3:5c:9d:f7:b2:f9:ce:73:6b: 45:7d:6d:27:e5:a5:b9:b1:2c:db:87:66:7b:64:fe:04:56:bc: 2d:66:d0:0d:5a:17:57:a5:92:e5:a0:48:1b:c2:b0:29:08:bc: 74:f9:6a:01:8d:c0:06:09:e8:5f:db:f5:73:7e:15:60:a6:1c: 3f:4a:fe:61:6b:5b:21:61:d1:28:20:94:27:0f:4c:98:10:13: fb:3b:f4:c2:52:34:a2:76:6d:dc:37:95:df:a2:94:ea:2b:91: d1:fb:02:c7:d3:16:26:67:35:2a:3d:52:07:be:c4:45:0a:99: dd:5a:9c:99:b6:55:4f:67:2c:ba:21:be:50:c5:92:49:26:6c: fa:26:70:e3:92:55:56:4f:47:92:e5:a1:13:34:10:cd:eb:96: 8a:6e:03:40:ea:f5:f9:40:1d:08:88:a4:00:92:52:8b:6f:f4: 1b:d6:7a:31:d2:0d:6a:68:00:cc:ac:f2:47:93:f0:2b:49:66: c4:1b:36:72:94:1b:39:10:40:90:9d:09:b4:e3:bb:52:08:fa: 2b:8b:ab:1b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURyXmfe9b7LP+p7qM56oE7C7yz5QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ1ODQwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTY5NzJkMGViZmU0MDNhZjkzMjRjMjI2ODAzMTllYzg0 NTRjZGM2ODkwNWU0YzE0M2YwM2M5YzEwMTM3MWMyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuRUN4VH4w8Jctv9lKAfTA5OF+ffAXClv67Flo/9YaHrAU Yh9ObcQBiluCXm4UD4tWFnrGXNwq+482+GDcLwdAplFggxK+240TNXjFSULh8mDz QxYip9FARJQ7CeuHP7VnbvDrkAyQIuHzU0v2A2e3KrofKghKeStI2sqgg9aUSWr5 payXChIvbn9Jy3f1SwTWbrEbXjvIV/F4RmK2bjyzk/eIRJAfhRU7V75Of2gK/Y/P ZleswieJlcQVnq7/SmWIbKYtcC5VXTckEDYp5AZxWGEhukZXgbCqBrVYQGkt7q+7 Sac/A1rZhmdog7NWXFlAi4aUSm1y8upN1E+oJv25AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSMg9X+1w/U57+ZGAMAH69n4lFZ8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Q2MGQyZGVkLWRjZDItNGRmMS04NGRmLWJiY2IwMTBiMzVkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAP8AwDQYJKoZIhvcNAQELBQADggEBAA7kBQy4TvPfZ6B3D0DPzzeu ZwGd9dtT1lyAeWI6N9g82VK/D4irr6o+EEXGmKNcnfey+c5za0V9bSflpbmxLNuH Zntk/gRWvC1m0A1aF1elkuWgSBvCsCkIvHT5agGNwAYJ6F/b9XN+FWCmHD9K/mFr WyFh0SgglCcPTJgQE/s79MJSNKJ2bdw3ld+ilOorkdH7AsfTFiZnNSo9Uge+xEUK md1anJm2VU9nLLohvlDFkkkmbPomcOOSVVZPR5LloRM0EM3rlopuA0Dq9flAHQiI pACSUotv9BvWejHSDWpoAMys8keT8CtJZsQbNnKUGzkQQJCdCbTju1II+iuLqxs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:56:07 2025 by rpki-client