$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0023b1fb-f423-482d-b9cf-fdccc31baea0.roa File: 0023b1fb-f423-482d-b9cf-fdccc31baea0.roa (raw, json) Hash identifier: PBrDuDgcU+RSS2hj+Ixih42zKT8GEv0BAiNUj1M0U00= Subject key identifier: CF:2E:96:27:B8:55:42:D4:B2:98:1F:EA:18:73:0C:17:20:F9:B5:CF Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2BE8A639108677395977F577A2780DC1EA07BADA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0023b1fb-f423-482d-b9cf-fdccc31baea0.roa Signing time: Fri 31 Oct 2025 04:51:45 +0000 ROA not before: Fri 31 Oct 2025 04:51:45 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3ce0::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e8:a6:39:10:86:77:39:59:77:f5:77:a2:78:0d:c1:ea:07:ba:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:51:45 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f1d3f5f0f8a6abc64093a927c8f7ad503662406dc8491b0cc5a65d363075d949, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:9c:0a:dd:07:3d:0d:90:bb:b4:08:b4:6a: 32:f7:13:47:71:89:41:40:bd:19:a9:55:56:72:08: 49:e4:45:b8:d9:68:5d:c8:8b:d1:f5:36:5e:34:0b: ec:43:6f:1d:dd:23:3f:09:f1:b7:5a:97:4d:79:24: 2e:99:42:5c:46:9a:1b:c7:0e:2f:88:7e:db:de:1d: 55:71:a7:af:1e:ac:05:75:a5:52:a1:4a:05:4f:88: c7:a0:49:c3:43:87:bb:e0:b3:d6:33:87:b8:c9:06: f0:dc:d3:d1:eb:4d:b2:dd:56:92:f0:f1:50:7c:43: 10:1b:a9:a1:37:fd:05:57:11:7f:85:78:ef:d4:b3: 96:56:cd:d2:9e:12:1d:2a:59:c3:70:76:92:08:3e: b3:f4:91:5e:ba:7f:02:fe:f3:a1:0d:45:6e:6f:c8: 12:b0:82:3a:47:d9:72:9a:57:7c:d2:22:be:5e:1b: ba:36:b7:49:1a:85:0c:4b:bd:6d:1c:da:36:e6:59: 46:6e:6c:f7:56:48:76:13:c5:dc:c9:d9:47:8b:8e: 98:dc:52:d6:ef:76:42:e0:39:22:f8:b7:26:d2:ed: 2e:56:50:b6:cc:0b:e8:e4:0a:50:9b:cb:5f:15:7d: c8:96:42:80:be:3b:40:ba:d9:6e:3a:46:01:5f:60: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2E:96:27:B8:55:42:D4:B2:98:1F:EA:18:73:0C:17:20:F9:B5:CF X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0023b1fb-f423-482d-b9cf-fdccc31baea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3ce0::/46 Signature Algorithm: sha256WithRSAEncryption 52:e7:c6:7a:9d:e3:0e:98:dc:7e:c1:eb:6c:46:37:a9:1d:6a: 7d:af:7e:99:6e:36:67:f4:9c:35:44:67:55:c3:19:8b:1a:fc: 8b:6a:da:18:91:f7:24:3e:81:c1:70:3f:ef:72:69:37:a2:15: de:0e:93:60:38:98:81:ed:1e:95:32:dd:c5:6e:bc:68:7b:cc: f6:24:35:1b:cc:72:ea:9c:52:ce:57:9b:f7:ff:85:26:0a:41: 9e:3f:fc:b5:a9:56:72:fc:8b:8f:58:0a:f0:13:6e:3b:a6:97: 67:f3:65:b4:e3:27:9d:9b:91:a8:62:65:68:07:84:72:66:d5: 05:1b:3d:4a:a2:7a:2d:43:b3:77:71:c1:14:95:ed:57:e1:f2: 8b:ce:e1:6c:b7:cb:e1:70:d1:88:3d:a9:41:26:aa:af:d5:f6: d6:8b:c4:5c:3c:9b:59:aa:87:d4:b6:5e:d5:76:8d:b9:be:32: 65:d7:1e:84:06:d4:c4:56:04:25:43:09:b2:53:c6:3b:55:92: 83:8c:8b:23:7d:7a:ff:0a:14:34:94:ae:87:b7:6f:68:14:5f: 85:af:a1:bd:4c:e7:a4:bc:a0:d1:e1:fc:1c:11:81:93:76:40: 18:f3:78:e2:7b:28:92:b5:52:04:c2:82:87:e8:0d:cd:1d:cf: cb:c5:c9:49 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUK+imORCGdzlZd/V3ongNweoHutowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQ1MTQ1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMWQzZjVmMGY4YTZhYmM2NDA5M2E5MjdjOGY3YWQ1MDM2 NjI0MDZkYzg0OTFiMGNjNWE2NWQzNjMwNzVkOTQ5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4lpwK3Qc9DZC7tAi0ajL3E0dxiUFAvRmpVVZyCEnkRbjZ aF3Ii9H1Nl40C+xDbx3dIz8J8bdal015JC6ZQlxGmhvHDi+IftveHVVxp68erAV1 pVKhSgVPiMegScNDh7vgs9Yzh7jJBvDc09HrTbLdVpLw8VB8QxAbqaE3/QVXEX+F eO/Us5ZWzdKeEh0qWcNwdpIIPrP0kV66fwL+86ENRW5vyBKwgjpH2XKaV3zSIr5e G7o2t0kahQxLvW0c2jbmWUZubPdWSHYTxdzJ2UeLjpjcUtbvdkLgOSL4tybS7S5W ULbMC+jkClCby18VfciWQoC+O0C62W46RgFfYE8lAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzy6WJ7hVQtSymB/qGHMMFyD5tc8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzAwMjNiMWZiLWY0MjMtNDgyZC1iOWNmLWZkY2NjMzFiYWVhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAPOAwDQYJKoZIhvcNAQELBQADggEBAFLnxnqd4w6Y3H7B62xGN6kd an2vfpluNmf0nDVEZ1XDGYsa/Itq2hiR9yQ+gcFwP+9yaTeiFd4Ok2A4mIHtHpUy 3cVuvGh7zPYkNRvMcuqcUs5Xm/f/hSYKQZ4//LWpVnL8i49YCvATbjuml2fzZbTj J52bkahiZWgHhHJm1QUbPUqiei1Ds3dxwRSV7Vfh8ovO4Wy3y+Fw0Yg9qUEmqq/V 9taLxFw8m1mqh9S2XtV2jbm+MmXXHoQG1MRWBCVDCbJTxjtVkoOMiyN9ev8KFDSU roe3b2gUX4Wvob1M56S8oNHh/BwRgZN2QBjzeOJ7KJK1UgTCgofoDc0dz8vFyUk= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:34 2025 by rpki-client