$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1829f7b2-4c89-486d-a38d-976a654e5c1b.roa File: 1829f7b2-4c89-486d-a38d-976a654e5c1b.roa (raw, json) Hash identifier: G+TZLjf2So1Sx6/vLMOQbGloL09YedIlcKxVHjeRdwI= Subject key identifier: 28:E9:C8:C7:8A:B1:B5:D5:E2:28:9B:AA:37:82:DF:03:22:0E:E7:0B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 6B8DA8DE370C982AA2C2781B5777F339E3E4D7F7 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1829f7b2-4c89-486d-a38d-976a654e5c1b.roa Signing time: Thu 30 Oct 2025 23:08:42 +0000 ROA not before: Thu 30 Oct 2025 23:08:42 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2b32::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8d:a8:de:37:0c:98:2a:a2:c2:78:1b:57:77:f3:39:e3:e4:d7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:08:42 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=14bed8838371b24dcf948cfa92140d11019dcd00fbc32aba65b95095e0cf12fa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:20:0d:3c:8f:e0:a2:eb:03:94:8b:3e:22: ee:21:20:b5:91:ca:bb:4b:1a:62:93:5d:c4:b3:35: 99:be:61:f5:5e:b2:d4:2f:2c:74:28:78:b5:54:62: 1d:8b:0c:e6:40:76:11:eb:0f:7d:8f:86:9b:35:9b: 71:cf:8c:ef:bf:e2:09:16:b6:45:89:0a:ef:f6:9b: 2e:7d:46:a3:28:39:39:9c:fa:2b:12:02:7f:2b:10: cb:84:ce:f1:a7:b7:c8:9b:87:46:af:cc:fd:fe:85: 68:a5:a1:f3:f7:96:63:9a:28:72:d1:ef:48:2f:44: 04:c2:ce:25:64:0a:e4:7f:69:8e:e3:ff:1f:87:81: b0:f9:a5:e3:8d:f7:f3:ad:94:d7:14:a3:3c:ff:2f: c7:91:b1:1b:48:3b:5c:a3:85:23:ab:5c:04:40:7c: 00:9a:ce:3f:5b:4a:a8:aa:88:df:aa:05:4a:36:79: 3c:6e:69:ea:2d:7c:83:e0:b9:02:60:84:c0:f2:3f: 44:2c:2e:0b:86:4e:af:ac:c4:5b:ab:c8:93:ac:f2: 67:52:3d:db:0e:bc:72:05:62:00:9b:c3:47:e3:1c: 57:0f:30:0a:6f:7c:f8:e5:31:06:d9:c4:97:a9:4e: 86:e8:19:eb:1a:bd:ed:68:2a:63:f8:0e:c5:57:33: 9f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E9:C8:C7:8A:B1:B5:D5:E2:28:9B:AA:37:82:DF:03:22:0E:E7:0B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1829f7b2-4c89-486d-a38d-976a654e5c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2b32::/47 Signature Algorithm: sha256WithRSAEncryption 1f:04:0e:c5:13:65:b3:17:79:c2:d7:0b:98:83:2e:24:4f:35: fe:48:aa:09:96:2a:e9:4f:ac:bd:a7:93:f7:8e:ce:0d:89:ec: 92:e2:3c:44:f7:a2:01:52:36:ca:c1:fe:0c:fc:9a:24:6d:79: a4:1b:7b:3c:83:de:30:0c:86:ff:4b:0f:ce:0c:92:98:0b:9d: 9a:aa:93:68:33:c0:0b:c2:98:17:68:90:b3:b1:48:38:53:90: ce:3d:07:d8:ce:03:d7:18:dd:b3:59:d6:76:62:19:8a:aa:a5: 48:66:0a:9a:5f:56:0b:6e:09:a0:4b:1b:8a:98:3b:f0:29:6f: 2c:5a:10:24:55:90:9e:10:22:fa:d5:a2:6d:04:91:38:7d:c1: 2b:2a:6f:34:60:d9:41:72:22:2e:6e:ed:5e:50:16:ab:57:32: ff:2e:45:7f:f7:22:14:b1:67:68:5a:1e:6a:1b:89:63:f6:6c: 57:59:5c:7d:73:95:44:35:a5:25:c0:77:40:37:08:1f:4d:f9: 70:cb:6a:79:7c:e9:d7:1d:bd:74:50:25:f6:c3:0a:81:d2:57: f2:5b:aa:9e:b3:ab:ef:a9:64:8b:56:42:33:7a:08:ff:40:db: 36:c1:6b:d3:4c:d2:12:cb:9d:29:f5:58:f7:e5:21:fe:45:cb: dd:5f:d8:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUa42o3jcMmCqiwngbV3fzOePk1/cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMwODQyWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNGJlZDg4MzgzNzFiMjRkY2Y5NDhjZmE5MjE0MGQxMTAx OWRjZDAwZmJjMzJhYmE2NWI5NTA5NWUwY2YxMmZhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvtCANPI/gousDlIs+Iu4hILWRyrtLGmKTXcSzNZm+YfVe stQvLHQoeLVUYh2LDOZAdhHrD32Phps1m3HPjO+/4gkWtkWJCu/2my59RqMoOTmc +isSAn8rEMuEzvGnt8ibh0avzP3+hWilofP3lmOaKHLR70gvRATCziVkCuR/aY7j /x+HgbD5peON9/OtlNcUozz/L8eRsRtIO1yjhSOrXARAfACazj9bSqiqiN+qBUo2 eTxuaeotfIPguQJghMDyP0QsLguGTq+sxFuryJOs8mdSPdsOvHIFYgCbw0fjHFcP MApvfPjlMQbZxJepToboGesave1oKmP4DsVXM5/VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKOnIx4qxtdXiKJuqN4LfAyIO5wswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzE4MjlmN2IyLTRjODktNDg2ZC1hMzhkLTk3NmE2NTRlNWMxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKzIwDQYJKoZIhvcNAQELBQADggEBAB8EDsUTZbMXecLXC5iDLiRP Nf5IqgmWKulPrL2nk/eOzg2J7JLiPET3ogFSNsrB/gz8miRteaQbezyD3jAMhv9L D84MkpgLnZqqk2gzwAvCmBdokLOxSDhTkM49B9jOA9cY3bNZ1nZiGYqqpUhmCppf VgtuCaBLG4qYO/ApbyxaECRVkJ4QIvrVom0EkTh9wSsqbzRg2UFyIi5u7V5QFqtX Mv8uRX/3IhSxZ2haHmobiWP2bFdZXH1zlUQ1pSXAd0A3CB9N+XDLanl86dcdvXRQ JfbDCoHSV/Jbqp6zq++pZItWQjN6CP9A2zbBa9NM0hLLnSn1WPflIf5Fy91f2LU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:33 2025 by rpki-client