$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd698163-d21a-4034-bf6d-c807f47451b4.roa File: dd698163-d21a-4034-bf6d-c807f47451b4.roa (raw, json) Hash identifier: HhfDmCpM/hYDLDRL2Y2p6P+AGleeSH+DuwC4gtS0vDQ= Subject key identifier: 62:D9:86:B4:D2:4F:84:06:3B:51:B4:FB:02:62:E3:2A:DB:2D:EF:23 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6A844E2223F413254FF7D7D19463FB18EBBD015C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd698163-d21a-4034-bf6d-c807f47451b4.roa Signing time: Thu 30 Oct 2025 22:40:21 +0000 ROA not before: Thu 30 Oct 2025 22:40:21 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1f5c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:84:4e:22:23:f4:13:25:4f:f7:d7:d1:94:63:fb:18:eb:bd:01:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:40:21 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=b5ac8431e090d5ab69077c5a5b5b41afb1be2d30365c669fa0d884e9f9442486, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:ef:cc:d8:50:ba:b1:01:a9:6b:86:40:3f: c1:4e:ae:d4:0d:e5:26:f6:5b:33:b2:65:64:b1:66: 16:f7:27:93:6d:40:b5:da:01:81:f1:7f:45:59:c9: 35:3e:21:e4:dc:aa:a3:a4:86:1b:b7:19:17:5a:e6: 1b:e1:5b:94:50:c5:5e:06:84:23:60:2e:62:64:ad: ae:ce:11:ff:5c:40:b3:26:33:dc:9e:db:d9:64:e6: 1f:80:c5:53:f0:6d:1d:58:ce:a3:40:39:65:a1:c9: 9e:a9:d7:be:04:4e:aa:4f:bd:83:f4:67:57:62:e6: 23:ce:47:82:d7:b4:d2:87:70:46:60:62:b4:e4:3d: 88:d7:af:e6:51:e5:c2:15:03:1f:c3:b3:15:fd:0c: 0c:3c:96:bf:e2:3f:c3:65:e9:dc:77:23:f6:49:68: 9b:7c:98:7a:17:ae:a1:a6:17:8c:1a:ed:c2:c0:5b: 7a:7c:5e:1a:e2:d3:78:1d:09:3a:fb:0d:fd:bb:90: 7b:7d:c1:05:f6:9a:44:5b:95:a8:4d:9a:72:a7:99: bf:b6:f4:b8:70:1b:42:44:61:ea:b7:d2:cf:d9:26: c4:6d:e5:64:c8:fd:b0:c4:72:6f:54:4e:b1:1e:77: 4e:17:a4:fe:5f:68:fb:3e:23:3a:4e:56:4c:7e:21: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D9:86:B4:D2:4F:84:06:3B:51:B4:FB:02:62:E3:2A:DB:2D:EF:23 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/dd698163-d21a-4034-bf6d-c807f47451b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1f5c::/47 Signature Algorithm: sha256WithRSAEncryption 6e:8e:6d:5f:dd:5d:32:8c:83:64:a5:57:03:de:7e:67:e3:09: 86:f7:a2:84:8c:be:26:73:7a:05:16:89:f2:44:83:fe:0a:62: 34:92:fb:02:e4:8c:bc:25:cb:01:85:68:41:fe:26:6e:c3:8e: 34:17:1d:1a:11:cc:32:74:a6:d5:a7:f6:47:ed:af:2a:24:fd: 21:9d:6a:5b:d3:4c:48:5b:41:8f:c3:12:34:e3:46:ae:bc:bb: 31:2b:bc:33:e0:dc:82:1e:fc:9c:eb:4c:e8:b9:02:58:b3:b1: 85:f2:e7:0c:7e:ee:9e:6c:8b:47:ad:17:92:9e:63:b7:41:e0: 92:25:c1:b3:7d:91:71:4f:7a:1b:83:95:e0:ae:72:1c:19:da: 1d:59:7f:bb:63:df:c4:38:76:26:6b:34:b7:df:89:55:d5:14: 48:3d:3f:a4:73:26:8c:82:6f:e3:54:d0:c1:f5:98:9a:59:36: 5f:8e:7d:eb:3d:df:a7:f3:1c:71:7e:b1:52:e3:c1:e8:c5:73: 2f:12:55:30:7d:7c:cd:17:3d:8b:6c:fa:fc:97:31:39:8e:89: 9e:77:90:86:f3:9e:98:7a:98:5a:6c:76:c2:12:72:e2:32:89: f4:0f:c0:a6:6e:92:08:d8:98:cc:35:51:55:7a:1c:37:04:27: fc:ba:86:1a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaoROIiP0EyVP99fRlGP7GOu9AVwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI0MDIxWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNWFjODQzMWUwOTBkNWFiNjkwNzdjNWE1YjViNDFhZmIx YmUyZDMwMzY1YzY2OWZhMGQ4ODRlOWY5NDQyNDg2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy1e/M2FC6sQGpa4ZAP8FOrtQN5Sb2WzOyZWSxZhb3J5Nt QLXaAYHxf0VZyTU+IeTcqqOkhhu3GRda5hvhW5RQxV4GhCNgLmJkra7OEf9cQLMm M9ye29lk5h+AxVPwbR1YzqNAOWWhyZ6p174ETqpPvYP0Z1di5iPOR4LXtNKHcEZg YrTkPYjXr+ZR5cIVAx/DsxX9DAw8lr/iP8Nl6dx3I/ZJaJt8mHoXrqGmF4wa7cLA W3p8Xhri03gdCTr7Df27kHt9wQX2mkRblahNmnKnmb+29LhwG0JEYeq30s/ZJsRt 5WTI/bDEcm9UTrEed04XpP5faPs+IzpOVkx+IeWnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYtmGtNJPhAY7UbT7AmLjKtst7yMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2RkNjk4MTYzLWQyMWEtNDAzNC1iZjZkLWM4MDdmNDc0NTFiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAH1wwDQYJKoZIhvcNAQELBQADggEBAG6ObV/dXTKMg2SlVwPefmfj CYb3ooSMviZzegUWifJEg/4KYjSS+wLkjLwlywGFaEH+Jm7DjjQXHRoRzDJ0ptWn 9kftryok/SGdalvTTEhbQY/DEjTjRq68uzErvDPg3IIe/JzrTOi5AlizsYXy5wx+ 7p5si0etF5KeY7dB4JIlwbN9kXFPehuDleCuchwZ2h1Zf7tj38Q4diZrNLffiVXV FEg9P6RzJoyCb+NU0MH1mJpZNl+Ofes936fzHHF+sVLjwejFcy8SVTB9fM0XPYts +vyXMTmOiZ53kIbznph6mFpsdsIScuIyifQPwKZukgjYmMw1UVV6HDcEJ/y6hho= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:12 2025 by rpki-client