$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9283981-19f2-4ce9-be37-5194ca738464.roa File: d9283981-19f2-4ce9-be37-5194ca738464.roa (raw, json) Hash identifier: 5vnUl56dKtDTDJJkZA5QrMCzcJSHT7xAioOH9P5Jtvg= Subject key identifier: EB:BC:A5:4E:A3:F4:0D:7F:59:E1:FB:87:A1:9C:B2:46:E0:F6:0A:06 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 25664B554FA219407A52822D8671A162AD2D347D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9283981-19f2-4ce9-be37-5194ca738464.roa Signing time: Thu 30 Oct 2025 21:10:21 +0000 ROA not before: Thu 30 Oct 2025 21:10:21 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1546::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:66:4b:55:4f:a2:19:40:7a:52:82:2d:86:71:a1:62:ad:2d:34:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:10:21 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=72bf59db5627d3bdef5cdf2d4f59b249fc97836a1ac823711ec83dccf48d5f3a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:41:45:be:fb:37:28:06:a1:bc:a0:76:6f:af: 95:b9:2f:31:3c:19:cc:60:7d:7f:0a:4a:79:dd:46: a3:37:76:81:14:c6:ee:fd:d4:5e:2a:56:d1:6c:e6: 28:dd:5c:27:1b:9d:fa:b0:d9:c0:33:87:74:d6:32: 4f:6f:48:5b:42:f8:3f:b0:6f:df:3d:2e:d2:a0:a3: b0:36:70:82:2e:04:82:24:1d:86:99:5c:9f:54:86: 1f:06:92:12:01:d9:c9:92:ae:ab:7c:9e:83:d8:5d: e1:40:a5:e8:82:7c:da:06:5e:ce:10:ff:eb:93:24: 52:be:78:f7:f2:62:70:f0:ce:03:b5:6e:8e:cf:e2: 59:fa:4c:69:61:0c:33:68:68:8b:42:74:3c:ab:3a: cd:63:c7:db:48:7e:41:d0:4e:e8:64:04:33:ae:7c: c0:69:bc:38:02:53:7e:81:11:68:ff:2a:81:38:b3: ed:10:4d:f6:22:d9:7b:02:c9:f1:0d:dc:ce:59:3d: 40:56:dc:30:48:de:f9:2e:9d:f4:17:70:7e:51:e8: d9:3d:53:ae:14:76:3f:ea:6c:d5:43:54:dc:58:b4: 63:f0:51:96:fa:e1:91:1c:1d:e0:2b:bc:a5:66:fd: 96:85:77:cd:34:61:87:f0:6d:fe:d2:02:e1:ca:6f: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BC:A5:4E:A3:F4:0D:7F:59:E1:FB:87:A1:9C:B2:46:E0:F6:0A:06 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9283981-19f2-4ce9-be37-5194ca738464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1546::/47 Signature Algorithm: sha256WithRSAEncryption 5e:11:fb:74:bd:a8:e2:b6:bd:b7:3e:b3:2d:71:11:26:2f:d5: 23:47:98:e6:e1:a4:8e:dc:9e:3a:29:17:ef:fb:0f:a6:f4:cc: 3c:d9:f1:50:ee:1b:2a:77:63:f4:f5:17:bc:c0:93:ea:56:0f: df:ed:b3:76:41:18:0f:f3:b3:4b:62:e7:f1:ae:1d:f5:c4:a9: da:c5:84:67:27:d4:e4:02:8a:23:e2:76:5b:14:47:80:a4:e4: ce:9e:3a:a2:27:3d:c0:21:4e:4f:66:d5:29:0b:0e:7f:2d:14: 39:a3:87:00:16:58:44:56:d4:48:2f:d2:e8:25:6b:85:3e:0a: 50:39:80:d0:f5:61:00:14:70:6b:5e:d4:75:35:4b:b3:a7:c8: 49:d2:3a:31:e6:e5:1c:9c:3b:d8:e6:43:e8:38:db:04:3d:ae: 21:ab:e0:a4:3a:ab:1e:ec:7c:a0:12:eb:7d:41:88:38:15:8c: eb:84:70:5c:d1:31:e2:31:40:1d:d7:26:ad:2c:4c:92:91:c8: 8b:f4:ba:5d:8c:aa:3c:f9:15:53:cc:da:61:38:06:89:64:ad: 07:f2:8c:ba:44:e2:ba:c6:6a:7f:43:a2:1c:11:b8:ed:15:6b: 6c:1d:25:fd:02:c9:21:f5:d5:ad:95:d0:43:1a:f4:d3:cb:2b: f6:96:fc:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJWZLVU+iGUB6UoIthnGhYq0tNH0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjExMDIxWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MmJmNTlkYjU2MjdkM2JkZWY1Y2RmMmQ0ZjU5YjI0OWZj OTc4MzZhMWFjODIzNzExZWM4M2RjY2Y0OGQ1ZjNhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsQUW++zcoBqG8oHZvr5W5LzE8GcxgfX8KSnndRqM3doEU xu791F4qVtFs5ijdXCcbnfqw2cAzh3TWMk9vSFtC+D+wb989LtKgo7A2cIIuBIIk HYaZXJ9Uhh8GkhIB2cmSrqt8noPYXeFApeiCfNoGXs4Q/+uTJFK+ePfyYnDwzgO1 bo7P4ln6TGlhDDNoaItCdDyrOs1jx9tIfkHQTuhkBDOufMBpvDgCU36BEWj/KoE4 s+0QTfYi2XsCyfEN3M5ZPUBW3DBI3vkunfQXcH5R6Nk9U64Udj/qbNVDVNxYtGPw UZb64ZEcHeArvKVm/ZaFd800YYfwbf7SAuHKbx4fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU67ylTqP0DX9Z4fuHoZyyRuD2CgYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Q5MjgzOTgxLTE5ZjItNGNlOS1iZTM3LTUxOTRjYTczODQ2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFUYwDQYJKoZIhvcNAQELBQADggEBAF4R+3S9qOK2vbc+sy1xESYv 1SNHmObhpI7cnjopF+/7D6b0zDzZ8VDuGyp3Y/T1F7zAk+pWD9/ts3ZBGA/zs0ti 5/GuHfXEqdrFhGcn1OQCiiPidlsUR4Ck5M6eOqInPcAhTk9m1SkLDn8tFDmjhwAW WERW1Egv0ugla4U+ClA5gND1YQAUcGte1HU1S7OnyEnSOjHm5RycO9jmQ+g42wQ9 riGr4KQ6qx7sfKAS631BiDgVjOuEcFzRMeIxQB3XJq0sTJKRyIv0ul2Mqjz5FVPM 2mE4BolkrQfyjLpE4rrGan9DohwRuO0Va2wdJf0CySH11a2V0EMa9NPLK/aW/OI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:32 2025 by rpki-client