$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bcf86515-8294-4d84-9734-74d605755d0f.roa File: bcf86515-8294-4d84-9734-74d605755d0f.roa (raw, json) Hash identifier: YIL4SGXZc6+tQbnpNq2ssi4d9jvXilqFXbT50zUGi10= Subject key identifier: 28:0E:A7:A5:A2:57:F9:6A:31:CE:64:8A:31:26:D8:FD:62:53:4C:71 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6D6AB6FD283FB482E4824C60B46672BD0655D8FA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bcf86515-8294-4d84-9734-74d605755d0f.roa Signing time: Fri 31 Oct 2025 06:40:31 +0000 ROA not before: Fri 31 Oct 2025 06:40:31 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1de0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6a:b6:fd:28:3f:b4:82:e4:82:4c:60:b4:66:72:bd:06:55:d8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:40:31 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=221f78e4cd6ab95eee803b142ab09fa895c8030512f6b139cb83bd1f67cc56d0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:79:25:f4:57:c2:0c:1e:2c:c3:eb:5b:aa: 44:6c:72:96:78:0d:bc:44:a0:7f:f7:6b:83:2a:42: 0a:08:25:b9:14:ec:8b:88:a1:22:5d:d3:1c:64:8a: fe:27:35:18:5e:99:45:7e:ed:95:aa:9e:dc:b7:7a: 7e:8c:01:27:60:50:a1:66:49:07:67:a5:71:5f:0b: 68:c7:df:18:df:a3:83:0b:f6:c5:3e:67:ed:e1:94: ff:cf:2d:83:33:d8:bc:33:0f:b9:ef:20:00:d8:26: a0:22:25:a6:e2:3f:4d:ad:5c:24:a9:57:57:81:7b: 18:85:66:0b:d7:a8:af:3d:81:90:cd:e3:7f:39:96: d6:b7:a2:ca:b0:5a:d9:e3:60:90:c9:ce:50:a3:60: 20:b3:70:98:0c:0a:7f:a7:12:8f:8b:8f:71:c7:e1: e7:20:3d:b9:f5:4a:e7:c5:33:fa:a4:bd:04:d4:3a: 12:b1:d1:da:dd:82:3b:a6:dd:7c:5e:63:27:41:01: 80:88:ed:a7:a1:3a:a9:f6:32:d9:58:14:9c:34:82: 4c:cb:ed:a8:c0:ad:ec:8a:25:c2:a4:bc:7c:3b:aa: a9:11:e0:cc:37:0c:63:d5:ab:15:c5:b1:5c:6a:d2: 9b:28:e9:3d:3b:95:e3:b6:8b:ad:7d:ed:a3:78:f6: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0E:A7:A5:A2:57:F9:6A:31:CE:64:8A:31:26:D8:FD:62:53:4C:71 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/bcf86515-8294-4d84-9734-74d605755d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1de0::/44 Signature Algorithm: sha256WithRSAEncryption 89:c4:95:f3:fa:aa:7b:5d:56:46:ec:1c:79:02:4e:e9:0a:25: de:77:c0:0f:b3:c2:0d:d9:79:b0:a7:9e:25:8e:85:66:79:18: f1:2e:99:14:38:0f:cc:2e:13:80:0c:1d:7f:f1:f1:c8:63:45: cd:07:09:79:a7:95:18:c0:47:63:b6:50:65:70:ad:20:7e:dd: 6c:fa:f5:fd:d9:9a:9f:a8:a5:08:68:14:91:35:a8:30:db:56: 52:35:0d:ac:01:92:b0:e7:f3:58:c4:09:fc:18:e7:5c:80:f0: 5e:76:43:e8:33:0e:85:6f:3e:78:e2:b0:9f:eb:08:1f:8b:7e: 07:e8:5c:3f:04:92:39:e0:c6:7c:ed:bc:17:1c:ef:51:80:16: 6e:8b:3d:26:a6:d0:f2:e3:79:4d:d4:82:ba:82:8a:d4:1e:25: b1:5d:8e:90:f3:89:65:a8:24:3d:84:70:0f:29:b6:49:bd:f9: 1d:44:64:38:98:98:c4:4c:47:10:20:4b:1e:84:52:c3:41:75: 2c:39:c6:79:07:61:75:1a:bf:86:ac:36:a1:e5:6b:14:94:8d: 3c:9b:6e:a2:d4:e2:d4:db:12:73:dd:c5:7a:c0:2d:53:0d:5e: 86:c6:18:c1:d6:be:6e:92:bf:2b:79:7f:b9:52:a9:f8:1e:67: 8e:17:5d:4a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbWq2/Sg/tILkgkxgtGZyvQZV2PowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY0MDMxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjFmNzhlNGNkNmFiOTVlZWU4MDNiMTQyYWIwOWZhODk1 YzgwMzA1MTJmNmIxMzljYjgzYmQxZjY3Y2M1NmQwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFDXkl9FfCDB4sw+tbqkRscpZ4DbxEoH/3a4MqQgoIJbkU 7IuIoSJd0xxkiv4nNRhemUV+7ZWqnty3en6MASdgUKFmSQdnpXFfC2jH3xjfo4ML 9sU+Z+3hlP/PLYMz2LwzD7nvIADYJqAiJabiP02tXCSpV1eBexiFZgvXqK89gZDN 4385lta3osqwWtnjYJDJzlCjYCCzcJgMCn+nEo+Lj3HH4ecgPbn1SufFM/qkvQTU OhKx0drdgjum3XxeYydBAYCI7aehOqn2MtlYFJw0gkzL7ajAreyKJcKkvHw7qqkR 4Mw3DGPVqxXFsVxq0pso6T07leO2i6197aN49kRdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKA6npaJX+WoxzmSKMSbY/WJTTHEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JjZjg2NTE1LTgyOTQtNGQ4NC05NzM0LTc0ZDYwNTc1NWQwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAHeAwDQYJKoZIhvcNAQELBQADggEBAInElfP6qntdVkbsHHkCTukK Jd53wA+zwg3ZebCnniWOhWZ5GPEumRQ4D8wuE4AMHX/x8chjRc0HCXmnlRjAR2O2 UGVwrSB+3Wz69f3Zmp+opQhoFJE1qDDbVlI1DawBkrDn81jECfwY51yA8F52Q+gz DoVvPnjisJ/rCB+LfgfoXD8EkjngxnztvBcc71GAFm6LPSam0PLjeU3UgrqCitQe JbFdjpDziWWoJD2EcA8ptkm9+R1EZDiYmMRMRxAgSx6EUsNBdSw5xnkHYXUav4as NqHlaxSUjTybbqLU4tTbEnPdxXrALVMNXobGGMHWvm6Svyt5f7lSqfgeZ44XXUo= -----END CERTIFICATE-----Generated at Tue Nov 18 05:41:45 2025 by rpki-client