$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02e02af8-c217-4455-b9bd-097cba8addde.roa File: 02e02af8-c217-4455-b9bd-097cba8addde.roa (raw, json) Hash identifier: INQ7E4xdX/AAL9/M71BLJTnFH03kq20xpuqr7sk3TOQ= Subject key identifier: A7:0C:FA:F2:7B:49:3B:7C:E3:38:67:D7:17:59:0A:29:3A:46:0C:BE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5AA6E7F72C4D41D97B77A1E52019796DC776E02E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02e02af8-c217-4455-b9bd-097cba8addde.roa Signing time: Thu 30 Oct 2025 23:21:53 +0000 ROA not before: Thu 30 Oct 2025 23:21:53 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2c5a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a6:e7:f7:2c:4d:41:d9:7b:77:a1:e5:20:19:79:6d:c7:76:e0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:21:53 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=4f8f694cf34745747c20b0bd94d7e438be9b9f73e32465b782e364e1c2bc0a2e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f8:bf:a7:db:b5:3b:45:d7:cf:f7:9e:f3:7f: 5d:e6:5d:45:8c:ad:1b:c0:e5:02:04:c2:48:e0:1b: e5:bf:b6:ca:42:b2:94:be:30:05:9b:46:8c:b1:b9: 01:64:5a:92:67:49:d1:70:08:b7:0e:be:d9:80:fd: 6f:93:0d:14:1c:cc:a5:3c:57:e5:c2:9c:45:97:be: 33:e6:bd:cd:23:20:81:0f:c5:00:fb:3a:24:f6:9a: 67:af:60:37:5f:cf:7d:49:69:81:21:3c:2a:58:3d: 1e:b3:54:3e:e7:da:6f:68:29:47:de:3d:29:4a:9a: 99:73:eb:b7:81:84:65:92:9b:73:87:6b:46:13:d9: 5a:6b:01:21:05:d8:72:bb:32:b7:c4:e9:2f:a7:e7: fd:d4:d2:c4:7d:b0:7a:75:51:b7:43:a8:a7:df:10: b9:bf:2a:24:ff:f7:dc:3b:8f:c2:98:62:fc:3e:27: b9:b5:c8:29:c2:d7:5e:53:fa:06:fa:9f:7d:e7:a8: 94:d8:57:3e:96:5d:6e:e1:e9:85:f5:27:13:6b:93: 08:79:68:b9:d9:8e:45:b2:17:c9:39:34:1a:9b:ab: d1:97:97:f5:71:d6:6e:a8:a3:43:5d:92:f0:42:15: cd:3b:06:27:da:97:e8:71:bf:28:45:72:a6:0b:9a: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0C:FA:F2:7B:49:3B:7C:E3:38:67:D7:17:59:0A:29:3A:46:0C:BE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/02e02af8-c217-4455-b9bd-097cba8addde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2c5a::/47 Signature Algorithm: sha256WithRSAEncryption 31:a0:92:9f:81:52:0d:c3:3e:2e:28:c2:e8:7f:9c:b1:d7:85: 98:91:ab:08:fc:71:aa:3e:fc:37:98:9c:df:30:35:d2:3c:05: 5a:b3:ad:df:05:a1:ad:b1:f7:1a:b6:a8:e5:87:77:24:67:f0: 5f:04:54:51:8d:76:bc:3c:87:e1:f9:5e:37:aa:74:81:55:d5: 65:12:ea:d8:e5:78:bb:ac:52:37:0b:fe:dd:82:32:77:12:f3: 39:24:38:be:41:4a:a0:f2:08:b8:cc:20:66:73:41:f3:06:1f: 9a:ec:10:b8:d0:97:54:0a:17:ed:8a:73:71:a2:cd:eb:ed:2f: e8:ce:c4:22:50:dd:f4:32:93:df:27:94:03:35:e8:b5:d2:b0: c7:68:0c:9c:b9:b6:fd:83:93:ed:c1:ef:b3:d0:3d:d2:e8:bc: b3:e8:b6:51:33:0b:f5:27:63:64:c1:d7:0f:05:e9:a8:ff:e8: a1:e4:2d:4e:36:cc:db:e6:44:1c:91:a7:9f:b0:ad:19:4f:20: 27:dc:e4:90:29:83:3a:8e:37:6e:ad:4a:06:3a:87:3e:76:5a: b2:f8:2e:55:76:5a:ba:38:14:a8:a5:67:8c:6b:ca:d2:a6:77: 68:08:7b:1e:a3:fa:2d:9e:8f:ac:c0:22:6d:8f:61:cc:26:40: dc:cf:f3:17 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWqbn9yxNQdl7d6HlIBl5bcd24C4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMyMTUzWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjhmNjk0Y2YzNDc0NTc0N2MyMGIwYmQ5NGQ3ZTQzOGJl OWI5ZjczZTMyNDY1Yjc4MmUzNjRlMWMyYmMwYTJlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCT+L+n27U7RdfP957zf13mXUWMrRvA5QIEwkjgG+W/tspC spS+MAWbRoyxuQFkWpJnSdFwCLcOvtmA/W+TDRQczKU8V+XCnEWXvjPmvc0jIIEP xQD7OiT2mmevYDdfz31JaYEhPCpYPR6zVD7n2m9oKUfePSlKmplz67eBhGWSm3OH a0YT2VprASEF2HK7MrfE6S+n5/3U0sR9sHp1UbdDqKffELm/KiT/99w7j8KYYvw+ J7m1yCnC115T+gb6n33nqJTYVz6WXW7h6YX1JxNrkwh5aLnZjkWyF8k5NBqbq9GX l/Vx1m6oo0NdkvBCFc07Bifal+hxvyhFcqYLmlBtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpwz68ntJO3zjOGfXF1kKKTpGDL4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzAyZTAyYWY4LWMyMTctNDQ1NS1iOWJkLTA5N2NiYThhZGRkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALFowDQYJKoZIhvcNAQELBQADggEBADGgkp+BUg3DPi4owuh/nLHX hZiRqwj8cao+/DeYnN8wNdI8BVqzrd8Foa2x9xq2qOWHdyRn8F8EVFGNdrw8h+H5 XjeqdIFV1WUS6tjleLusUjcL/t2CMncS8zkkOL5BSqDyCLjMIGZzQfMGH5rsELjQ l1QKF+2Kc3GizevtL+jOxCJQ3fQyk98nlAM16LXSsMdoDJy5tv2Dk+3B77PQPdLo vLPotlEzC/UnY2TB1w8F6aj/6KHkLU42zNvmRByRp5+wrRlPICfc5JApgzqON26t SgY6hz52WrL4LlV2Wro4FKilZ4xrytKmd2gIex6j+i2ej6zAIm2PYcwmQNzP8xc= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:35 2025 by rpki-client