$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1a223431-6ebd-4b72-93b1-8e03e8f5531c.roa File: 1a223431-6ebd-4b72-93b1-8e03e8f5531c.roa (raw, json) Hash identifier: dxkFCMU6mrqjkZ+Fn7EYQP3I4b46+ut/PlRwCOmRtMc= Subject key identifier: 86:7A:D1:34:FA:72:F0:C5:EF:4C:43:5D:E4:59:21:1D:45:3B:CE:44 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 632BC298DC963161749452EB81718C81EEF5F2F6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1a223431-6ebd-4b72-93b1-8e03e8f5531c.roa Signing time: Thu 30 Oct 2025 23:57:12 +0000 ROA not before: Thu 30 Oct 2025 23:57:12 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:322e::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2b:c2:98:dc:96:31:61:74:94:52:eb:81:71:8c:81:ee:f5:f2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:57:12 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=a278eb7eb5d3e8e0c3a6a5afa7f722acf8ceb4f5f6ea7ab9bbf369fa74028dba, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:9e:26:f5:77:4c:0c:6c:8f:e6:c7:a6:3c: 57:0a:16:6c:12:dd:22:72:f2:9a:b0:ef:9e:1d:3d: d0:56:6f:9c:a3:4e:38:f3:27:99:46:19:d5:52:4c: 9c:b2:59:05:63:4b:5e:eb:e2:e3:b1:10:7e:e0:15: 0e:80:0f:fd:49:90:81:da:2f:37:26:81:a3:da:2b: 38:33:96:45:8f:a6:24:dd:8e:1d:bb:4d:fa:97:63: c3:e8:30:96:73:42:88:77:62:4e:bc:50:45:de:c7: af:bb:3f:00:44:b8:bc:61:25:c3:0e:2a:96:29:8e: 45:d4:a3:81:93:f5:19:a6:10:67:bf:ca:2c:de:ec: 9b:37:fa:2d:82:92:c7:0d:11:ca:13:5c:31:7d:5a: 0e:6f:7e:6a:39:7b:5f:b9:cc:45:d6:27:b7:6d:80: b2:ab:9a:5c:88:e3:1c:85:76:7a:98:92:d1:59:55: 5b:4e:0e:d2:9a:6e:7a:2d:d5:d9:6d:d1:02:70:97: f6:b9:d0:cf:ad:bb:e9:a5:b1:e0:95:61:46:d7:69: 79:4a:b5:7a:8a:02:f6:7e:70:da:34:fa:b3:67:55: bd:3f:e0:e9:7e:b2:c3:96:25:09:83:b9:10:75:52: 6b:e6:78:b2:aa:0a:03:80:ce:78:18:f1:d0:b0:80: 6b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7A:D1:34:FA:72:F0:C5:EF:4C:43:5D:E4:59:21:1D:45:3B:CE:44 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1a223431-6ebd-4b72-93b1-8e03e8f5531c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:322e::/47 Signature Algorithm: sha256WithRSAEncryption 1f:11:cd:a4:49:53:50:07:83:ad:7f:d7:f0:6a:76:3c:14:f6: 6d:32:7f:6b:26:75:80:b3:7b:7f:a0:b5:23:29:57:20:df:3a: e3:8c:a4:41:f1:47:20:a1:be:ba:38:22:32:6e:91:51:46:7d: a0:92:09:ef:9d:58:63:b7:67:ce:e4:4b:46:28:e7:7b:52:4a: a2:c8:0b:aa:ac:2a:c5:6d:e2:e6:ad:cb:3e:06:50:11:93:1c: 49:c0:63:b8:53:53:4c:3a:7d:bf:61:d0:87:4b:cd:a0:0d:fe: d1:3b:28:82:bc:ab:cb:35:ff:bf:58:b9:2e:7f:b8:63:e2:3c: d0:69:41:80:ea:d4:4e:08:5e:36:74:ee:00:b7:11:85:2f:90: 42:42:fa:07:59:01:31:59:06:fd:c2:d0:33:fc:d9:a3:90:d7: 48:b1:24:ea:1c:7d:fa:55:17:53:4e:7a:40:7c:85:b9:e6:20: 84:f3:f8:50:a2:07:6a:82:14:9b:cd:c2:52:ca:27:4e:e9:fb: b4:9f:b2:10:98:1e:c5:a8:6e:61:07:bd:e8:b5:fa:62:67:9f: 1f:b7:7f:dd:93:13:ce:fa:2f:9c:21:40:e9:31:98:2d:2e:73: 87:54:db:e7:b2:a1:b5:b8:3a:0a:f1:3f:10:16:99:42:bc:3b: cc:0c:22:72 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYyvCmNyWMWF0lFLrgXGMge718vYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjM1NzEyWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjc4ZWI3ZWI1ZDNlOGUwYzNhNmE1YWZhN2Y3MjJhY2Y4 Y2ViNGY1ZjZlYTdhYjliYmYzNjlmYTc0MDI4ZGJhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYAZ4m9XdMDGyP5semPFcKFmwS3SJy8pqw754dPdBWb5yj TjjzJ5lGGdVSTJyyWQVjS17r4uOxEH7gFQ6AD/1JkIHaLzcmgaPaKzgzlkWPpiTd jh27TfqXY8PoMJZzQoh3Yk68UEXex6+7PwBEuLxhJcMOKpYpjkXUo4GT9RmmEGe/ yize7Js3+i2CkscNEcoTXDF9Wg5vfmo5e1+5zEXWJ7dtgLKrmlyI4xyFdnqYktFZ VVtODtKabnot1dlt0QJwl/a50M+tu+mlseCVYUbXaXlKtXqKAvZ+cNo0+rNnVb0/ 4Ol+ssOWJQmDuRB1UmvmeLKqCgOAzngY8dCwgGvpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhnrRNPpy8MXvTENd5FkhHUU7zkQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzFhMjIzNDMxLTZlYmQtNGI3Mi05M2IxLThlMDNlOGY1NTMxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAMi4wDQYJKoZIhvcNAQELBQADggEBAB8RzaRJU1AHg61/1/BqdjwU 9m0yf2smdYCze3+gtSMpVyDfOuOMpEHxRyChvro4IjJukVFGfaCSCe+dWGO3Z87k S0Yo53tSSqLIC6qsKsVt4uatyz4GUBGTHEnAY7hTU0w6fb9h0IdLzaAN/tE7KIK8 q8s1/79YuS5/uGPiPNBpQYDq1E4IXjZ07gC3EYUvkEJC+gdZATFZBv3C0DP82aOQ 10ixJOocffpVF1NOekB8hbnmIITz+FCiB2qCFJvNwlLKJ07p+7SfshCYHsWobmEH vei1+mJnnx+3f92TE876L5whQOkxmC0uc4dU2+eyobW4OgrxPxAWmUK8O8wMInI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:37 2025 by rpki-client