$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02a8a400-8a91-49de-949e-412118a3b42f.roa File: 02a8a400-8a91-49de-949e-412118a3b42f.roa (raw, json) Hash identifier: vqKqUSA8L+uhI9eGiUs1NVD0uCIICBpMVEMvbjXd/mE= Subject key identifier: 65:97:2C:99:59:35:B7:2E:AD:E5:A8:67:BE:04:4D:CA:07:01:E0:3E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 42D89110D0DC612C4BCD97A0C0BD869B43C543EA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02a8a400-8a91-49de-949e-412118a3b42f.roa Signing time: Fri 31 Oct 2025 03:28:17 +0000 ROA not before: Fri 31 Oct 2025 03:28:17 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2b04::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d8:91:10:d0:dc:61:2c:4b:cd:97:a0:c0:bd:86:9b:43:c5:43:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:28:17 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=22036c3a8c3e5358b1faa050fd688c68ffa489638f740bfb83f166359c33dc4d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d8:fc:80:9a:e7:09:e5:a8:57:cb:4d:d5:f7: 9a:94:c5:11:6e:29:d0:d1:3d:13:8a:39:52:b4:9e: 78:95:ec:cd:18:1e:d3:97:dd:d2:78:b8:dc:4e:25: f3:9d:42:c1:69:60:2c:29:32:0d:f5:13:3f:85:04: f4:c4:d1:a8:70:bf:3d:f5:41:ae:2f:23:11:3f:97: 67:d1:2a:b5:a6:b9:ec:a7:af:d6:7b:29:2c:2e:1e: 12:4c:9d:d2:50:89:95:07:4f:c0:20:26:68:51:cc: 7c:68:3d:2f:de:3b:1a:d5:ee:24:b7:18:dd:f9:e7: d7:bd:8c:b0:a2:a6:6a:5d:da:ec:da:f7:c4:8b:12: 6d:c5:c6:62:c2:84:8b:ed:19:c6:5f:18:58:92:c8: 0e:a3:88:b3:17:99:df:61:bc:1b:10:8b:fd:ce:48: 28:44:01:57:f6:e3:88:04:90:fd:33:58:98:12:92: 0d:68:2b:f9:e4:d0:e6:ca:d5:23:bd:d7:44:ec:5b: 5a:b5:d7:98:43:17:0a:65:dd:ae:2e:e3:5b:b9:e2: 8d:a7:75:24:63:7f:64:8a:bf:4b:86:b7:f8:55:f5: 7c:f2:50:a2:3f:e3:de:e0:61:d7:00:04:c0:79:eb: 3c:6a:29:7d:8a:f7:58:73:c9:69:ba:28:63:a1:6b: 9e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:97:2C:99:59:35:B7:2E:AD:E5:A8:67:BE:04:4D:CA:07:01:E0:3E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02a8a400-8a91-49de-949e-412118a3b42f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2b04::/46 Signature Algorithm: sha256WithRSAEncryption b4:81:0a:65:fd:7c:78:46:5d:7b:d8:8d:ff:b2:b3:9b:f5:34: 84:fd:97:f1:79:02:91:d7:27:a1:db:fd:c7:08:ed:c4:64:09: 8b:fb:f5:7d:b1:d0:16:22:95:cd:3b:98:50:ca:14:9e:98:3b: 15:df:ba:57:3b:dc:57:dd:03:0f:c8:cb:b7:dc:36:1e:f7:05: cf:1b:c4:59:f7:96:0a:a9:33:4a:2c:13:61:b7:8e:1f:fa:c3: 2f:bc:63:9c:b4:3e:53:a5:76:9f:24:89:e4:6d:f4:ee:94:71: ce:cd:9b:cd:32:c2:ae:8c:cd:d6:eb:5c:5a:0b:ce:ad:57:81: 47:18:41:1e:1d:d6:4e:7d:32:b4:09:fe:87:d3:03:ea:fe:d1: 2b:26:4c:b6:19:46:f0:1c:36:27:00:08:0f:a9:a7:f1:e0:22: 98:c8:5e:14:48:48:67:62:6e:f3:da:55:ee:3d:1c:6f:07:5d: 02:e9:3d:24:77:ca:09:99:c6:8c:6d:56:31:31:d8:9e:12:ee: 05:6c:44:18:c7:3d:9a:b6:cb:98:33:bc:b5:c8:56:a2:c4:e8: 90:54:98:eb:5c:26:f5:39:bd:7a:9e:45:e2:75:e7:f5:69:a1: 03:00:4a:7f:26:bd:b5:64:9c:3b:f9:4f:48:30:a3:86:52:02: 87:4a:06:51 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQtiRENDcYSxLzZegwL2Gm0PFQ+owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMyODE3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjAzNmMzYThjM2U1MzU4YjFmYWEwNTBmZDY4OGM2OGZm YTQ4OTYzOGY3NDBiZmI4M2YxNjYzNTljMzNkYzRkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCH2PyAmucJ5ahXy03V95qUxRFuKdDRPROKOVK0nniV7M0Y HtOX3dJ4uNxOJfOdQsFpYCwpMg31Ez+FBPTE0ahwvz31Qa4vIxE/l2fRKrWmueyn r9Z7KSwuHhJMndJQiZUHT8AgJmhRzHxoPS/eOxrV7iS3GN3559e9jLCipmpd2uza 98SLEm3FxmLChIvtGcZfGFiSyA6jiLMXmd9hvBsQi/3OSChEAVf244gEkP0zWJgS kg1oK/nk0ObK1SO910TsW1q115hDFwpl3a4u41u54o2ndSRjf2SKv0uGt/hV9Xzy UKI/497gYdcABMB56zxqKX2K91hzyWm6KGOha54pAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZZcsmVk1ty6t5ahnvgRNygcB4D4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzAyYThhNDAwLThhOTEtNDlkZS05NDllLTQxMjExOGEzYjQyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAKwQwDQYJKoZIhvcNAQELBQADggEBALSBCmX9fHhGXXvYjf+ys5v1 NIT9l/F5ApHXJ6Hb/ccI7cRkCYv79X2x0BYilc07mFDKFJ6YOxXfulc73FfdAw/I y7fcNh73Bc8bxFn3lgqpM0osE2G3jh/6wy+8Y5y0PlOldp8kieRt9O6Ucc7Nm80y wq6MzdbrXFoLzq1XgUcYQR4d1k59MrQJ/ofTA+r+0SsmTLYZRvAcNicACA+pp/Hg IpjIXhRISGdibvPaVe49HG8HXQLpPSR3ygmZxoxtVjEx2J4S7gVsRBjHPZq2y5gz vLXIVqLE6JBUmOtcJvU5vXqeReJ15/VpoQMASn8mvbVknDv5T0gwo4ZSAodKBlE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:26:49 2025 by rpki-client