$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/12fe8136-2b6d-4853-844d-44bf60bb1f96.roa File: 12fe8136-2b6d-4853-844d-44bf60bb1f96.roa (raw, json) Hash identifier: FNqRo/4n9q4sIZvmFhjFKkbcW7L01fr6m+jKys7JRjk= Subject key identifier: F4:69:9B:C4:A5:A9:5E:C7:08:D0:35:66:C9:99:51:DB:9B:79:A3:77 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 74C21E3C4EA25D6EF17162E7D9C68D19DBE4EF90 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/12fe8136-2b6d-4853-844d-44bf60bb1f96.roa Signing time: Thu 30 Oct 2025 23:13:48 +0000 ROA not before: Thu 30 Oct 2025 23:13:48 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2c1a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c2:1e:3c:4e:a2:5d:6e:f1:71:62:e7:d9:c6:8d:19:db:e4:ef:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:13:48 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=0e076ebb6bf651668ca811da96b62e1b5340cda2d4e25cdd35dac5de014767a6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:9e:2a:f0:b3:b3:d8:ac:86:7e:62:2d:12: 44:97:a2:9d:ea:d6:a9:24:aa:77:b1:03:f3:13:27: b5:e5:38:45:60:32:9d:bd:ba:be:de:0f:ab:37:53: 89:7b:51:b8:cc:da:5d:4e:a7:a1:78:90:98:23:ec: 2e:62:3b:3b:40:03:25:5c:ce:b7:af:1f:ce:8d:77: 61:8b:4e:6f:f1:2f:e7:96:10:37:b6:ed:48:40:44: 32:3f:e6:03:80:c9:83:fe:45:0c:f7:32:ba:f1:e6: 31:1c:40:ea:48:26:a1:17:bb:ba:0f:13:20:d6:71: ab:fe:89:07:3d:ec:73:06:3e:ba:fd:b7:14:d4:44: 99:eb:16:96:20:0c:bb:59:34:2d:f5:df:c5:5d:54: 52:79:f5:ce:f7:20:be:53:4e:81:91:18:ac:10:0d: 39:b2:f2:40:14:d2:45:18:b4:27:81:90:a2:b8:83: 34:7c:a8:48:5f:0d:e7:74:54:54:71:df:b8:d2:c3: 6a:9c:10:3d:96:4c:39:75:69:2a:8f:01:96:ee:d1: a1:2e:cd:ea:95:4b:cd:c4:9c:3e:10:cf:0b:a2:c9: eb:cd:4b:92:31:b3:16:24:f2:92:b2:e8:ef:2b:a4: eb:4c:f2:55:ca:aa:ab:1f:5c:7f:d5:dd:a1:0b:5f: 5b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:69:9B:C4:A5:A9:5E:C7:08:D0:35:66:C9:99:51:DB:9B:79:A3:77 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/12fe8136-2b6d-4853-844d-44bf60bb1f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2c1a::/47 Signature Algorithm: sha256WithRSAEncryption 00:30:8a:f6:88:a0:13:b4:a6:44:3b:81:97:bc:72:c1:46:34: b1:65:7f:7c:dc:eb:e1:6f:59:a2:97:8f:47:49:46:b4:00:0a: 0d:56:12:35:34:81:fe:a4:4a:08:3f:34:22:84:57:99:7f:4a: 5b:ca:0d:09:0c:58:a9:5d:3f:e1:08:d2:f0:4e:fc:67:c4:5b: 40:8c:c8:23:ec:7e:70:a8:a8:3b:47:8b:0a:bc:32:33:3b:06: 60:19:b1:ec:61:48:ea:fa:82:e0:15:92:54:6e:0d:57:34:47: d4:18:95:3b:39:72:11:b0:26:98:d7:23:ea:64:f9:48:34:80: a8:55:7a:fa:ea:40:c3:01:ba:3e:53:93:3a:28:dd:5a:c6:d8: ac:08:ef:18:bb:0b:eb:da:9d:c0:88:3c:b0:3d:f7:1c:34:5d: 7f:62:c8:c0:d8:fc:f7:d8:77:71:6d:25:d2:b2:de:30:0f:71: 50:9e:30:7e:0a:aa:54:76:3a:a3:80:61:b5:75:af:b5:e2:de: a0:11:04:11:13:ff:26:27:a5:a4:16:71:90:08:ce:dd:9e:74: a3:f1:2d:c3:ab:53:83:36:49:2c:09:39:51:37:1e:99:54:1c: e6:14:60:b6:6f:74:69:a8:cc:b5:11:1a:d3:3a:bb:54:76:5e: 25:63:7c:67 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdMIePE6iXW7xcWLn2caNGdvk75AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMxMzQ4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZTA3NmViYjZiZjY1MTY2OGNhODExZGE5NmI2MmUxYjUz NDBjZGEyZDRlMjVjZGQzNWRhYzVkZTAxNDc2N2E2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFGJ4q8LOz2KyGfmItEkSXop3q1qkkqnexA/MTJ7XlOEVg Mp29ur7eD6s3U4l7UbjM2l1Op6F4kJgj7C5iOztAAyVczrevH86Nd2GLTm/xL+eW EDe27UhARDI/5gOAyYP+RQz3Mrrx5jEcQOpIJqEXu7oPEyDWcav+iQc97HMGPrr9 txTURJnrFpYgDLtZNC3138VdVFJ59c73IL5TToGRGKwQDTmy8kAU0kUYtCeBkKK4 gzR8qEhfDed0VFRx37jSw2qcED2WTDl1aSqPAZbu0aEuzeqVS83EnD4QzwuiyevN S5IxsxYk8pKy6O8rpOtM8lXKqqsfXH/V3aELX1vHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9GmbxKWpXscI0DVmyZlR25t5o3cwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzEyZmU4MTM2LTJiNmQtNDg1My04NDRkLTQ0YmY2MGJiMWY5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALBowDQYJKoZIhvcNAQELBQADggEBAAAwivaIoBO0pkQ7gZe8csFG NLFlf3zc6+FvWaKXj0dJRrQACg1WEjU0gf6kSgg/NCKEV5l/SlvKDQkMWKldP+EI 0vBO/GfEW0CMyCPsfnCoqDtHiwq8MjM7BmAZsexhSOr6guAVklRuDVc0R9QYlTs5 chGwJpjXI+pk+Ug0gKhVevrqQMMBuj5Tkzoo3VrG2KwI7xi7C+vancCIPLA99xw0 XX9iyMDY/PfYd3FtJdKy3jAPcVCeMH4KqlR2OqOAYbV1r7Xi3qARBBET/yYnpaQW cZAIzt2edKPxLcOrU4M2SSwJOVE3HplUHOYUYLZvdGmozLURGtM6u1R2XiVjfGc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:54 2025 by rpki-client