$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f58f8243-6b8d-461d-b4a3-3d2d95db2ac9.roa File: f58f8243-6b8d-461d-b4a3-3d2d95db2ac9.roa (raw, json) Hash identifier: P6piUHbuItdFTH+BIwBPOORSxGCa74fyKRk2vFRDdCA= Subject key identifier: F1:13:10:55:F3:67:18:A4:A3:4E:46:2E:86:02:1F:10:BB:17:33:B3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 552E494F07408482E9F9E70DCCFA573E2A6D3E84 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f58f8243-6b8d-461d-b4a3-3d2d95db2ac9.roa Signing time: Thu 30 Oct 2025 22:36:45 +0000 ROA not before: Thu 30 Oct 2025 22:36:45 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1dce::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2e:49:4f:07:40:84:82:e9:f9:e7:0d:cc:fa:57:3e:2a:6d:3e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:36:45 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=d862e1edac869c823eef14a4dabac8c0c036f9cf0c15abd28594f9abee054700, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:09:63:48:52:87:be:f4:74:17:aa:ff:a4:85: fb:32:67:87:29:bf:f1:38:91:26:6a:e6:19:ec:1b: b5:01:be:d9:ac:72:70:8d:ca:91:f2:5c:2c:25:bd: 5a:4e:37:e5:3b:13:ab:49:20:38:e3:dc:95:b6:ce: 74:1a:b9:8b:3f:05:a4:43:1a:0b:19:72:9d:a3:a7: 41:ad:fd:cf:8b:5e:50:5b:94:b2:26:a8:38:9e:e4: 2b:58:7a:fd:90:a5:4b:e0:7f:36:7e:83:64:b6:2b: 2a:9d:42:7c:0f:61:18:83:50:46:7d:3b:49:f8:2c: 67:dc:66:0b:3d:24:c7:d1:96:9e:a4:a9:86:3f:4c: 84:33:bb:9a:62:4d:5a:d9:b9:16:4f:65:e4:8b:b5: e2:be:d9:b5:5c:0e:79:3b:db:77:75:b9:25:af:c1: 5f:14:e9:e4:c3:09:3e:35:9a:7b:fa:5a:75:6b:7f: 9f:cf:76:4c:a6:8e:fb:ac:c5:7d:fe:58:51:78:f2: 47:65:45:30:f0:31:1a:46:55:d5:78:fb:1c:4b:2a: a4:03:e2:d4:d9:38:5e:66:62:e8:61:fc:f6:ce:2d: 67:7a:ea:d4:e4:02:ad:e6:01:21:57:a8:ae:46:61: 31:77:41:ff:a4:f9:07:4a:b5:09:f1:21:77:e4:ea: 5a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:13:10:55:F3:67:18:A4:A3:4E:46:2E:86:02:1F:10:BB:17:33:B3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f58f8243-6b8d-461d-b4a3-3d2d95db2ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1dce::/47 Signature Algorithm: sha256WithRSAEncryption 56:df:7c:ee:72:59:10:be:98:70:fc:dd:3c:01:87:85:83:70: b3:c8:4d:7b:aa:5a:51:e3:db:55:73:82:45:52:13:91:a0:8e: 2c:7c:e1:f1:ba:eb:95:a3:4e:10:85:76:33:d8:8c:51:0c:1e: 6e:0e:9c:d2:c5:d9:29:ac:33:a1:5b:0e:a2:45:f1:73:c9:0f: d8:e9:ae:ee:12:2f:14:7c:26:ad:bd:29:83:55:bc:90:82:05: 4c:d2:46:af:61:48:15:27:7a:20:f4:a5:32:37:05:af:91:bb: 68:d7:f4:ca:35:20:7b:02:31:cc:de:24:77:9f:79:21:5d:8b: d3:fa:54:90:65:8c:f7:c9:8a:a0:37:99:04:fb:9c:fa:18:e9: a2:b0:6d:c3:48:1a:f0:60:c7:df:d9:25:60:45:71:29:86:61: 82:e8:80:ad:e5:58:55:c3:da:23:8b:61:a9:87:07:bc:0c:b0: 6a:c7:35:8e:7e:1e:a6:e0:70:ca:79:e0:e0:a2:56:e1:58:c4: ff:e7:cd:e8:46:f1:e6:9b:61:71:15:df:cc:b0:67:6d:0e:69: 3b:f0:74:3d:ec:72:3f:9d:7e:b4:9b:f4:c3:46:f6:ec:3a:dc: a6:28:d0:ad:02:4b:a2:96:a9:9d:ce:2a:91:6f:2f:63:ed:cc: b4:63:4c:73 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVS5JTwdAhILp+ecNzPpXPiptPoQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIzNjQ1WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODYyZTFlZGFjODY5YzgyM2VlZjE0YTRkYWJhYzhjMGMw MzZmOWNmMGMxNWFiZDI4NTk0ZjlhYmVlMDU0NzAwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbCWNIUoe+9HQXqv+khfsyZ4cpv/E4kSZq5hnsG7UBvtms cnCNypHyXCwlvVpON+U7E6tJIDjj3JW2znQauYs/BaRDGgsZcp2jp0Gt/c+LXlBb lLImqDie5CtYev2QpUvgfzZ+g2S2KyqdQnwPYRiDUEZ9O0n4LGfcZgs9JMfRlp6k qYY/TIQzu5piTVrZuRZPZeSLteK+2bVcDnk723d1uSWvwV8U6eTDCT41mnv6WnVr f5/PdkymjvusxX3+WFF48kdlRTDwMRpGVdV4+xxLKqQD4tTZOF5mYuhh/PbOLWd6 6tTkAq3mASFXqK5GYTF3Qf+k+QdKtQnxIXfk6lozAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8RMQVfNnGKSjTkYuhgIfELsXM7MwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Y1OGY4MjQzLTZiOGQtNDYxZC1iNGEzLTNkMmQ5NWRiMmFjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAHc4wDQYJKoZIhvcNAQELBQADggEBAFbffO5yWRC+mHD83TwBh4WD cLPITXuqWlHj21VzgkVSE5Ggjix84fG665WjThCFdjPYjFEMHm4OnNLF2SmsM6Fb DqJF8XPJD9jpru4SLxR8Jq29KYNVvJCCBUzSRq9hSBUneiD0pTI3Ba+Ru2jX9Mo1 IHsCMczeJHefeSFdi9P6VJBljPfJiqA3mQT7nPoY6aKwbcNIGvBgx9/ZJWBFcSmG YYLogK3lWFXD2iOLYamHB7wMsGrHNY5+HqbgcMp54OCiVuFYxP/nzehG8eabYXEV 38ywZ20OaTvwdD3scj+dfrSb9MNG9uw63KYo0K0CS6KWqZ3OKpFvL2PtzLRjTHM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:51 2025 by rpki-client