$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e857c9c-5568-47d2-9500-e4e24891c32d.roa File: 5e857c9c-5568-47d2-9500-e4e24891c32d.roa (raw, json) Hash identifier: VhwrIXrHCh4ARZpUCf4h2Uv4gkvFGb61OfOnXYjN0ho= Subject key identifier: 6F:74:2C:37:B5:5D:91:11:6D:A7:62:6F:12:38:B7:83:DA:CD:2E:5E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4AAA44BB5A13B7F2199295D0D22D738443B6A278 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e857c9c-5568-47d2-9500-e4e24891c32d.roa Signing time: Fri 31 Oct 2025 05:28:53 +0000 ROA not before: Fri 31 Oct 2025 05:28:53 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1d88::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:aa:44:bb:5a:13:b7:f2:19:92:95:d0:d2:2d:73:84:43:b6:a2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:28:53 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=488d1a665ff879ffcdb8f1f49f9db2f3e3f487b986b4c3608eaf3132b6a2b2ff, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9d:4f:a2:a2:4f:84:0d:48:d3:0d:61:e7:dc: 2a:9c:18:60:b4:bc:9a:1b:de:cd:cc:05:96:2b:f8: b5:c1:6e:68:46:57:ee:0e:f6:2a:97:56:6e:45:2f: 76:8c:0c:5e:be:33:a8:8e:d2:c6:b7:f9:7f:37:e4: 64:2a:1a:5d:2d:3d:cb:86:21:9e:61:f8:c8:19:a8: 84:8a:79:6e:96:b7:28:9a:86:8e:d8:b5:73:83:b4: 6b:16:16:20:47:67:34:20:16:ef:1b:e1:20:bf:54: aa:6a:42:ed:94:5b:bf:39:aa:5d:83:7b:1d:62:51: 5d:94:0c:a0:ec:9e:72:e1:90:f0:1c:58:f4:84:d5: 77:7d:75:94:33:0a:f1:c7:63:41:0b:fe:b3:e6:3c: d7:ce:45:97:04:18:8d:2b:05:cb:13:eb:ec:9f:f9: 53:d6:4c:d7:b6:51:56:a6:1b:2c:5a:9a:9e:b4:4b: d6:55:38:f9:6c:f4:09:7f:1a:94:32:ec:20:d2:d4: bd:58:29:28:e1:74:b9:ab:fd:ac:f1:6a:bb:43:23: ea:32:86:c9:8a:c5:4f:f5:e8:94:79:ab:99:a8:37: 37:f7:c5:fd:37:ac:bd:f0:08:9d:92:3c:65:96:63: 16:68:03:95:c9:35:11:cf:46:6b:4a:cf:ac:b4:2d: 86:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:74:2C:37:B5:5D:91:11:6D:A7:62:6F:12:38:B7:83:DA:CD:2E:5E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e857c9c-5568-47d2-9500-e4e24891c32d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1d88::/45 Signature Algorithm: sha256WithRSAEncryption 64:ec:33:1e:22:f1:1b:f3:71:46:0a:12:8a:95:72:e1:24:4b: 7a:c7:9c:07:de:26:71:32:4f:10:4e:ee:46:c9:a6:b9:7d:4d: 5e:eb:5b:62:59:cc:a3:81:32:29:f8:32:dd:02:9a:76:36:e6: c5:c2:79:a4:c9:10:b8:76:19:90:4d:46:3e:50:74:3d:92:6c: e3:f5:38:74:80:10:de:71:0a:ac:e3:27:a6:ba:02:76:81:af: 59:28:3e:71:d0:04:1d:5e:1d:1b:03:19:85:44:82:90:08:55: 52:09:3b:fe:22:48:ad:07:e8:74:23:b8:49:60:92:f9:ec:e0: f0:16:23:8f:2d:d1:c3:a9:30:47:01:18:45:c7:f2:fb:5f:f0: 71:a5:02:5a:0a:1d:7d:1b:3f:ac:fb:33:f5:a3:cf:7d:71:c5: fb:db:b1:3c:62:74:f1:1f:c8:d2:c6:81:e7:c4:dc:5b:fc:12: 7d:db:a2:43:8c:77:69:25:2d:4f:7a:e2:e2:b9:ff:cd:30:f4: 84:08:8b:e3:ab:85:23:dd:31:b0:40:18:fb:48:a1:99:5d:74: a3:9f:fb:aa:85:e6:67:e4:72:96:64:da:95:d9:aa:23:e5:55: bb:3d:62:07:47:4b:f9:aa:e8:75:e1:54:96:54:f1:4f:21:29: 6f:4a:ac:f7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSqpEu1oTt/IZkpXQ0i1zhEO2ongwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyODUzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODhkMWE2NjVmZjg3OWZmY2RiOGYxZjQ5ZjlkYjJmM2Uz ZjQ4N2I5ODZiNGMzNjA4ZWFmMzEzMmI2YTJiMmZmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLnU+iok+EDUjTDWHn3CqcGGC0vJob3s3MBZYr+LXBbmhG V+4O9iqXVm5FL3aMDF6+M6iO0sa3+X835GQqGl0tPcuGIZ5h+MgZqISKeW6Wtyia ho7YtXODtGsWFiBHZzQgFu8b4SC/VKpqQu2UW785ql2Dex1iUV2UDKDsnnLhkPAc WPSE1Xd9dZQzCvHHY0EL/rPmPNfORZcEGI0rBcsT6+yf+VPWTNe2UVamGyxamp60 S9ZVOPls9Al/GpQy7CDS1L1YKSjhdLmr/azxartDI+oyhsmKxU/16JR5q5moNzf3 xf03rL3wCJ2SPGWWYxZoA5XJNRHPRmtKz6y0LYZzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUb3QsN7VdkRFtp2JvEji3g9rNLl4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzVlODU3YzljLTU1NjgtNDdkMi05NTAwLWU0ZTI0ODkxYzMyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAHYgwDQYJKoZIhvcNAQELBQADggEBAGTsMx4i8RvzcUYKEoqVcuEk S3rHnAfeJnEyTxBO7kbJprl9TV7rW2JZzKOBMin4Mt0CmnY25sXCeaTJELh2GZBN Rj5QdD2SbOP1OHSAEN5xCqzjJ6a6AnaBr1koPnHQBB1eHRsDGYVEgpAIVVIJO/4i SK0H6HQjuElgkvns4PAWI48t0cOpMEcBGEXH8vtf8HGlAloKHX0bP6z7M/Wjz31x xfvbsTxidPEfyNLGgefE3Fv8En3bokOMd2klLU964uK5/80w9IQIi+OrhSPdMbBA GPtIoZlddKOf+6qF5mfkcpZk2pXZqiPlVbs9YgdHS/mq6HXhVJZU8U8hKW9KrPc= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:54 2025 by rpki-client