$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04fa22c4-898a-4a29-a49a-b13002ec4ad0.roa File: 04fa22c4-898a-4a29-a49a-b13002ec4ad0.roa (raw, json) Hash identifier: hOoNf0NEJYBMavZ4wwPaeqNrM1vTEfH25UuD1Ww+9nI= Subject key identifier: 2B:42:FE:25:04:C5:5B:34:13:A7:5F:3A:C4:0E:DC:1C:74:3F:76:2B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1FE1F41326B20ACF43708B369C6C1F42B9EABB9B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04fa22c4-898a-4a29-a49a-b13002ec4ad0.roa Signing time: Fri 31 Oct 2025 07:23:55 +0000 ROA not before: Fri 31 Oct 2025 07:23:55 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2ba0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e1:f4:13:26:b2:0a:cf:43:70:8b:36:9c:6c:1f:42:b9:ea:bb:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:23:55 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=3c667c8ac06a05bdf6d69a01817ca450ecef54fe18958f1b24f3f365a5f3879c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:82:53:a7:16:1d:c6:7d:b8:77:09:5d:6d: fe:9a:97:61:7b:95:00:1a:01:99:86:23:af:a9:51: f4:6f:5b:08:d2:f7:ce:d1:a1:21:1a:1d:3d:69:bf: ba:03:60:68:b3:3c:82:e6:49:a0:1e:c8:ae:c1:f7: 90:9f:13:c2:88:75:ed:a4:54:24:d4:f8:36:77:42: 96:89:0a:5a:4c:52:40:34:54:1e:53:b0:ea:af:8f: 21:46:5c:5f:49:30:d0:b2:a3:b3:aa:48:01:66:68: d2:35:68:21:35:58:43:e6:00:91:a7:c2:31:11:25: ea:5a:cc:ca:bb:d9:c0:a4:f6:c5:ae:42:68:e3:0b: eb:16:76:25:78:be:41:5a:a0:c7:3a:fd:9a:5c:bd: 26:21:9c:4d:64:6d:54:33:08:f6:d4:a8:7e:38:39: 09:9e:29:38:54:fa:1f:16:b5:94:a6:34:97:2d:88: 8b:60:c0:a5:68:51:5a:4a:b3:3e:8b:61:33:11:8d: 4f:b1:bd:4e:f5:a4:e3:f6:d1:f1:b3:fc:64:b3:99: 19:16:29:92:04:41:d0:65:72:ca:b5:22:f2:1a:52: 4f:06:76:f3:ac:4c:a3:bf:48:39:d3:bb:bc:5c:86: f1:24:37:97:ea:6d:ec:72:75:1f:2f:a3:8f:85:21: 46:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:42:FE:25:04:C5:5B:34:13:A7:5F:3A:C4:0E:DC:1C:74:3F:76:2B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04fa22c4-898a-4a29-a49a-b13002ec4ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2ba0::/43 Signature Algorithm: sha256WithRSAEncryption a4:f7:48:2d:a0:70:e3:f6:cc:6b:8d:20:42:9c:68:e0:1a:37: 86:f7:1f:bb:c9:f7:f8:8f:ff:66:3d:e2:7a:66:59:f5:d0:94: 15:0c:56:80:39:13:76:51:1f:3c:53:31:fb:38:1f:94:ae:9d: db:ad:74:1e:5d:24:b0:19:00:d7:05:43:bb:3b:73:4d:02:8f: e1:39:4c:da:93:83:24:44:65:3d:5e:4b:59:5f:4d:03:cf:50: 72:cc:86:d8:9e:63:7a:90:eb:bd:88:57:11:30:78:a6:08:a7: b7:20:87:a0:fe:cf:7a:b1:f9:00:bd:33:24:0e:b7:0c:e4:e3: ef:05:52:94:ac:ad:20:bb:b1:2f:84:2e:40:54:5a:67:a2:76: f1:36:e8:7d:4a:dc:8a:1b:35:ab:a9:b8:59:b1:49:c8:c6:14: f2:01:de:ec:5a:c7:2c:dd:d9:ed:13:d3:50:bb:dd:a5:7c:47: 52:95:e9:3f:68:16:3d:0c:04:90:bd:bc:88:5b:19:2e:85:08: a2:15:61:ab:16:b5:3c:b7:f3:30:e2:0c:c7:82:87:74:3b:59: ec:18:de:a9:70:6f:a3:db:8d:b6:2a:59:97:ad:75:b9:00:94: 84:cd:67:ae:ae:9d:5f:64:97:a6:1a:15:fc:b0:59:5c:8e:0d: 4a:3c:fd:6b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUH+H0EyayCs9DcIs2nGwfQrnqu5swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcyMzU1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzY2N2M4YWMwNmEwNWJkZjZkNjlhMDE4MTdjYTQ1MGVj ZWY1NGZlMTg5NThmMWIyNGYzZjM2NWE1ZjM4NzljMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAJoJTpxYdxn24dwldbf6al2F7lQAaAZmGI6+pUfRvWwjS 987RoSEaHT1pv7oDYGizPILmSaAeyK7B95CfE8KIde2kVCTU+DZ3QpaJClpMUkA0 VB5TsOqvjyFGXF9JMNCyo7OqSAFmaNI1aCE1WEPmAJGnwjERJepazMq72cCk9sWu QmjjC+sWdiV4vkFaoMc6/ZpcvSYhnE1kbVQzCPbUqH44OQmeKThU+h8WtZSmNJct iItgwKVoUVpKsz6LYTMRjU+xvU71pOP20fGz/GSzmRkWKZIEQdBlcsq1IvIaUk8G dvOsTKO/SDnTu7xchvEkN5fqbexydR8vo4+FIUZlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUK0L+JQTFWzQTp186xA7cHHQ/diswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzA0ZmEyMmM0LTg5OGEtNGEyOS1hNDlhLWIxMzAwMmVjNGFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAK6AwDQYJKoZIhvcNAQELBQADggEBAKT3SC2gcOP2zGuNIEKcaOAa N4b3H7vJ9/iP/2Y94npmWfXQlBUMVoA5E3ZRHzxTMfs4H5SundutdB5dJLAZANcF Q7s7c00Cj+E5TNqTgyREZT1eS1lfTQPPUHLMhtieY3qQ672IVxEweKYIp7cgh6D+ z3qx+QC9MyQOtwzk4+8FUpSsrSC7sS+ELkBUWmeidvE26H1K3IobNaupuFmxScjG FPIB3uxaxyzd2e0T01C73aV8R1KV6T9oFj0MBJC9vIhbGS6FCKIVYasWtTy38zDi DMeCh3Q7WewY3qlwb6PbjbYqWZetdbkAlITNZ66unV9kl6YaFfywWVyODUo8/Ws= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:54 2025 by rpki-client