$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2b67241e-a491-4189-984a-310fd912fcb0.roa File: 2b67241e-a491-4189-984a-310fd912fcb0.roa (raw, json) Hash identifier: IPbm95lL11epXR9tAJrMcACsWUCJaGp+Mg82pU/5zO0= Subject key identifier: E5:AE:B3:34:21:2A:99:66:AE:E2:4F:EC:4A:D5:1E:44:9C:9C:99:50 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 620AC668C2BDF5CAE9F9CF91FB100E2193A641FC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2b67241e-a491-4189-984a-310fd912fcb0.roa Signing time: Fri 31 Oct 2025 07:25:50 +0000 ROA not before: Fri 31 Oct 2025 07:25:50 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3500::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0a:c6:68:c2:bd:f5:ca:e9:f9:cf:91:fb:10:0e:21:93:a6:41:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:25:50 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=6ad11551f64cf48db3b19a9e12b1937c5688e8c6e175276b52cf9bda065d9567, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:4b:37:4b:bb:ee:4d:dd:89:c1:38:b5:44: 60:27:d6:d4:02:5f:78:01:fd:27:c6:74:81:26:a0: 1a:0c:ea:41:c8:7a:64:2b:4a:99:96:90:e8:3f:be: 3e:64:ae:07:e6:31:6a:0b:38:b8:58:a9:89:0c:da: 7d:83:11:01:15:00:08:26:10:c4:21:1b:c9:73:db: 07:64:f4:4d:69:6e:8c:f2:b6:0c:47:5c:b4:88:fa: e7:fc:c9:67:da:43:30:c6:8c:ae:25:6d:3c:7e:67: f8:b8:d6:4e:92:20:f8:af:48:2a:98:13:0e:f9:3b: fe:89:82:db:b6:c7:ee:96:ad:35:c1:e5:78:f3:32: 0d:0f:a1:2f:6c:53:a4:57:26:7f:a1:ed:38:e1:a0: ab:20:4e:0b:d4:90:91:84:ab:1b:0b:f2:f7:3d:6b: 8d:62:1f:1b:70:b3:1e:3a:31:32:e1:26:07:f3:92: b8:c3:2f:b5:94:78:25:9e:d7:99:9b:e0:5f:3e:cc: 82:63:e1:d1:c8:d0:82:fc:4c:cb:42:43:7f:3a:99: 2b:99:f2:d6:ab:78:83:9d:86:5c:e4:94:e2:30:a7: 9c:3c:51:00:96:04:e8:76:16:0c:46:21:1b:0f:cb: fc:5a:e8:8e:a0:8e:d3:96:04:9f:00:02:ff:fa:85: 2a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AE:B3:34:21:2A:99:66:AE:E2:4F:EC:4A:D5:1E:44:9C:9C:99:50 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2b67241e-a491-4189-984a-310fd912fcb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3500::/43 Signature Algorithm: sha256WithRSAEncryption 27:ca:02:50:38:00:81:35:77:a4:cb:66:3d:14:07:9a:0d:b5: a8:02:6d:14:5e:4b:1c:32:61:5f:e0:d6:40:78:ed:ec:dd:cc: 2d:80:77:5e:74:31:25:b7:55:d9:f1:08:f0:5a:5c:ab:17:a9: 22:d6:b6:24:ca:9b:b0:e4:cc:11:50:15:55:64:e2:6b:69:a4: 8c:32:6b:08:c9:4f:c6:ab:cf:12:c2:d2:1f:4c:17:f9:13:3f: 73:6e:c6:a7:2f:42:56:83:3e:8b:ef:f1:c1:2d:2d:fc:51:53: 91:44:08:01:dd:ae:0d:c7:3f:2b:df:c1:27:c1:10:c3:b5:82: f6:f9:4c:d7:df:3a:5a:36:aa:29:5e:71:ac:9d:56:bc:af:96: b4:c7:63:ab:a1:c9:c6:83:f7:5c:41:be:8a:d4:62:8f:64:07: bd:bf:5d:bd:a0:e3:af:5e:85:06:93:d2:69:c9:51:6e:24:28: af:fe:c6:db:ab:af:77:53:8c:2e:a8:1a:32:a6:cd:0a:2b:a1: 7d:05:be:99:20:bf:b3:55:0f:0c:b4:d3:85:f4:45:d5:af:fb: 12:92:e5:cc:19:d6:9c:8a:28:41:b6:ca:83:a1:8a:62:e3:15: be:f7:f5:4d:45:fe:58:b5:73:61:65:50:18:82:9a:23:35:5a: 7b:10:74:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYgrGaMK99crp+c+R+xAOIZOmQfwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcyNTUwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YWQxMTU1MWY2NGNmNDhkYjNiMTlhOWUxMmIxOTM3YzU2 ODhlOGM2ZTE3NTI3NmI1MmNmOWJkYTA2NWQ5NTY3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnJEs3S7vuTd2JwTi1RGAn1tQCX3gB/SfGdIEmoBoM6kHI emQrSpmWkOg/vj5krgfmMWoLOLhYqYkM2n2DEQEVAAgmEMQhG8lz2wdk9E1pbozy tgxHXLSI+uf8yWfaQzDGjK4lbTx+Z/i41k6SIPivSCqYEw75O/6Jgtu2x+6WrTXB 5XjzMg0PoS9sU6RXJn+h7TjhoKsgTgvUkJGEqxsL8vc9a41iHxtwsx46MTLhJgfz krjDL7WUeCWe15mb4F8+zIJj4dHI0IL8TMtCQ386mSuZ8tareIOdhlzklOIwp5w8 UQCWBOh2FgxGIRsPy/xa6I6gjtOWBJ8AAv/6hSpTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5a6zNCEqmWau4k/sStUeRJycmVAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJiNjcyNDFlLWE0OTEtNDE4OS05ODRhLTMxMGZkOTEyZmNiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAANQAwDQYJKoZIhvcNAQELBQADggEBACfKAlA4AIE1d6TLZj0UB5oN tagCbRReSxwyYV/g1kB47ezdzC2Ad150MSW3VdnxCPBaXKsXqSLWtiTKm7DkzBFQ FVVk4mtppIwyawjJT8arzxLC0h9MF/kTP3NuxqcvQlaDPovv8cEtLfxRU5FECAHd rg3HPyvfwSfBEMO1gvb5TNffOlo2qilecaydVryvlrTHY6uhycaD91xBvorUYo9k B72/Xb2g469ehQaT0mnJUW4kKK/+xturr3dTjC6oGjKmzQoroX0Fvpkgv7NVDwy0 04X0RdWv+xKS5cwZ1pyKKEG2yoOhimLjFb739U1F/li1c2FlUBiCmiM1WnsQdD8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:25 2025 by rpki-client