$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ac2f9eb-3f52-417e-b202-9c4750373f6f.roa File: 2ac2f9eb-3f52-417e-b202-9c4750373f6f.roa (raw, json) Hash identifier: YfoCBDgT3tEAcEsWJHBT4zrCPYYlHcZTinn2BjfZTr8= Subject key identifier: 22:00:9B:7E:40:99:44:01:0C:37:4E:B5:19:DA:22:87:AE:F8:06:FD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7FD0E2CDA3DEA7F3235B31C8D59A5BA9A903AB54 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ac2f9eb-3f52-417e-b202-9c4750373f6f.roa Signing time: Fri 31 Oct 2025 06:51:49 +0000 ROA not before: Fri 31 Oct 2025 06:51:49 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2b90::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d0:e2:cd:a3:de:a7:f3:23:5b:31:c8:d5:9a:5b:a9:a9:03:ab:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:51:49 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=3fbaab704ebd2ead2906e653f4d0de81c754c236d562c19d5072c2e03444ef77, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:45:8a:b7:36:a1:23:0a:fc:31:72:59:e0: 8c:1d:03:82:9d:3d:85:70:9e:88:df:bd:ba:82:f2: 7e:c3:38:c1:86:83:db:e5:9a:2d:d5:14:fd:75:69: cb:14:50:07:d7:ff:5b:8d:a8:d1:38:0a:9d:52:de: 1e:51:08:d1:74:a7:4c:fd:7d:f8:39:70:5d:27:52: e5:a7:5b:58:47:01:c7:96:fc:f4:47:0f:5d:5e:38: 3d:60:30:c3:de:84:4f:19:81:23:75:48:34:ae:15: 76:a7:7d:63:36:6e:51:c5:92:fd:3b:4a:36:e5:46: c4:dc:9f:99:89:cb:e1:54:44:64:f7:c9:bd:91:a4: 5d:94:0d:9a:62:c8:15:bf:fa:bd:35:e9:2b:15:70: 67:9b:53:5b:66:93:16:c5:80:d0:39:0c:c8:75:05: 61:72:6a:c6:d2:45:1e:91:59:5b:5f:29:bf:46:33: 34:f1:af:a4:a1:36:69:27:bd:87:85:03:29:34:e7: bf:43:94:c6:b6:0c:85:9c:a6:bd:a6:8d:87:2d:0e: bd:05:14:8c:3a:23:63:12:49:07:b7:48:6d:f5:0a: 2c:ca:54:54:e9:61:b8:e5:d3:af:a7:de:d8:88:4e: 5f:ae:32:a2:3a:0e:1a:df:d4:df:f5:09:c7:88:e8: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:00:9B:7E:40:99:44:01:0C:37:4E:B5:19:DA:22:87:AE:F8:06:FD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ac2f9eb-3f52-417e-b202-9c4750373f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2b90::/44 Signature Algorithm: sha256WithRSAEncryption 1d:ce:d9:ef:c1:0f:27:7a:d3:1f:d2:88:bd:4b:2c:67:0e:17: 20:8d:c6:cc:92:8c:02:cf:9d:ef:dd:65:56:16:1e:3a:6e:a6: 97:6b:cb:a9:74:8f:4c:24:94:34:84:3f:cd:4a:99:ea:7c:67: 4e:bd:5f:37:03:aa:4f:fb:93:3b:53:b2:18:9e:70:bd:36:77: c0:75:32:b4:b9:9e:82:0b:da:ba:04:83:3e:9c:b1:42:74:ca: 4f:f4:f4:a2:03:56:bc:11:f4:94:0f:16:88:1f:ad:07:96:72: d8:53:34:d6:65:fe:a3:e0:ad:66:f6:dc:6c:fe:f4:25:cf:62: 98:36:f5:24:cd:86:50:f2:0f:bd:d0:b6:99:a7:c0:a8:c2:90: df:36:db:98:45:90:30:6b:ad:4d:95:65:42:f5:4f:1e:b1:00: c6:a2:f6:70:42:55:2f:5e:45:16:8b:bd:cc:79:2d:11:35:f4: 35:55:e0:2e:02:64:98:4d:64:35:dd:19:43:ff:cc:b7:21:17: ac:63:d0:3c:48:07:83:70:91:d6:e5:a5:57:65:a0:97:42:3b: 00:9d:39:7a:86:98:24:31:f8:c9:44:b1:80:03:b3:59:60:ff: 2d:8d:2d:77:dd:f2:8a:d0:ee:59:43:6e:c7:e8:39:14:34:35: 5b:b5:8b:72 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUf9DizaPep/MjWzHI1ZpbqakDq1QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDY1MTQ5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmJhYWI3MDRlYmQyZWFkMjkwNmU2NTNmNGQwZGU4MWM3 NTRjMjM2ZDU2MmMxOWQ1MDcyYzJlMDM0NDRlZjc3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu/0WKtzahIwr8MXJZ4IwdA4KdPYVwnojfvbqC8n7DOMGG g9vlmi3VFP11acsUUAfX/1uNqNE4Cp1S3h5RCNF0p0z9ffg5cF0nUuWnW1hHAceW /PRHD11eOD1gMMPehE8ZgSN1SDSuFXanfWM2blHFkv07SjblRsTcn5mJy+FURGT3 yb2RpF2UDZpiyBW/+r016SsVcGebU1tmkxbFgNA5DMh1BWFyasbSRR6RWVtfKb9G MzTxr6ShNmknvYeFAyk0579DlMa2DIWcpr2mjYctDr0FFIw6I2MSSQe3SG31CizK VFTpYbjl06+n3tiITl+uMqI6Dhrf1N/1CceI6MhVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIgCbfkCZRAEMN061Gdoih674Bv0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJhYzJmOWViLTNmNTItNDE3ZS1iMjAyLTljNDc1MDM3M2Y2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAJAAK5AwDQYJKoZIhvcNAQELBQADggEBAB3O2e/BDyd60x/SiL1LLGcO FyCNxsySjALPne/dZVYWHjpuppdry6l0j0wklDSEP81Kmep8Z069XzcDqk/7kztT shiecL02d8B1MrS5noIL2roEgz6csUJ0yk/09KIDVrwR9JQPFogfrQeWcthTNNZl /qPgrWb23Gz+9CXPYpg29STNhlDyD73QtpmnwKjCkN8225hFkDBrrU2VZUL1Tx6x AMai9nBCVS9eRRaLvcx5LRE19DVV4C4CZJhNZDXdGUP/zLchF6xj0DxIB4Nwkdbl pVdloJdCOwCdOXqGmCQx+MlEsYADs1lg/y2NLXfd8orQ7llDbsfoORQ0NVu1i3I= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:01 2025 by rpki-client