$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2be8af02-afe1-460e-acdb-e2154526694e.roa File: 2be8af02-afe1-460e-acdb-e2154526694e.roa (raw, json) Hash identifier: AM60Y+uXOB9kfv6y52tZGko4I7/2U8B0wFxbMCcDEtg= Subject key identifier: 5B:AF:70:95:4C:66:12:25:D9:68:BC:69:8B:48:CB:36:FA:76:68:1D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 418A74C5A6748E15288B558CF90354326ED8FC93 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2be8af02-afe1-460e-acdb-e2154526694e.roa Signing time: Fri 31 Oct 2025 00:41:39 +0000 ROA not before: Fri 31 Oct 2025 00:41:39 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3720::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8a:74:c5:a6:74:8e:15:28:8b:55:8c:f9:03:54:32:6e:d8:fc:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:41:39 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=5521e382583c611752cfff457fe80d8b6784331a62e495a027ef38290a8af571, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:4e:5c:05:91:93:02:01:4c:92:cd:a2:f1: 09:39:b1:c5:06:62:14:50:22:89:9e:17:35:ba:8b: cf:a6:82:08:9d:27:a7:af:a4:f1:8b:7a:d5:bd:52: fe:0c:a8:6a:92:44:a3:7f:b5:53:bc:26:a4:b6:71: 11:19:b1:fb:cf:b0:5a:fd:33:08:0e:be:81:ee:a5: 20:bd:42:82:2a:df:a7:c6:16:38:06:2b:4e:45:8c: ee:13:99:85:28:47:41:9c:60:2a:2e:7a:0b:68:3e: 3c:a9:0d:2c:aa:e6:b0:db:93:45:89:08:39:96:5f: ac:dc:cb:8f:b7:87:5b:ea:5b:80:51:d6:4e:0d:a1: 6d:a3:a6:b0:0b:6a:41:02:6b:7c:eb:0a:b0:a0:ea: 23:8a:bd:17:d5:d4:a3:b9:f1:f9:e0:58:0c:43:f1: 2b:ca:10:d7:1f:e9:da:29:7d:f6:8f:e3:73:f4:2e: d9:de:31:6a:97:c8:2c:2f:9d:59:66:25:ab:bc:4c: 6e:b1:3d:ab:66:8d:64:ec:34:99:fd:a6:ab:53:8f: 1e:8d:53:95:b0:0c:e0:3b:53:d6:1e:c9:bc:88:f7: b7:c1:77:01:20:c3:cd:6c:a7:07:23:28:28:b5:60: 6b:71:3c:d2:51:ec:de:73:d2:ed:c0:08:b9:d8:40: 08:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AF:70:95:4C:66:12:25:D9:68:BC:69:8B:48:CB:36:FA:76:68:1D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2be8af02-afe1-460e-acdb-e2154526694e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3720::/47 Signature Algorithm: sha256WithRSAEncryption 70:a4:a1:87:42:d8:8a:35:df:7e:a4:73:39:26:ad:6a:25:98: 7f:8e:f5:06:4b:4a:44:d4:0d:2d:e3:06:44:5b:77:55:47:fa: 3f:56:c3:dd:01:07:b4:3f:0d:56:57:78:6e:11:d1:5e:7f:db: 1a:5c:c9:a1:27:80:ae:6b:44:d1:26:72:74:b1:74:f4:7d:51: 70:08:71:d0:2c:64:db:c8:a6:29:29:d1:49:25:a2:11:02:b6: d6:86:71:ac:93:54:04:7b:cd:97:ff:6f:6b:c7:25:f2:3d:05: bb:0c:45:d0:8e:e2:04:69:b7:28:55:e3:bf:c7:0d:df:03:a2: 0e:2d:83:79:a9:c2:76:f9:a0:87:b6:a4:85:ef:0c:16:83:43: 3c:ac:4f:80:f8:fb:17:77:e2:77:da:90:15:37:ef:aa:1e:c9: 7f:11:37:03:15:9e:2f:66:18:f8:a4:49:c0:9b:97:f4:ac:11: 5e:d2:39:18:9f:f2:09:67:f4:75:2b:5c:51:fa:f3:fd:13:ab: bd:8d:3f:79:68:91:85:40:63:21:57:f2:1d:f3:95:a9:aa:7c: 81:84:6b:1d:ff:88:dd:6d:d2:c2:6a:0c:48:e5:e0:b9:f6:c7: e6:9a:51:f9:26:22:2c:e0:29:34:ea:25:c8:0c:22:8c:37:21: 83:4d:9f:94 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQYp0xaZ0jhUoi1WM+QNUMm7Y/JMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA0MTM5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTIxZTM4MjU4M2M2MTE3NTJjZmZmNDU3ZmU4MGQ4YjY3 ODQzMzFhNjJlNDk1YTAyN2VmMzgyOTBhOGFmNTcxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsUE5cBZGTAgFMks2i8Qk5scUGYhRQIomeFzW6i8+mggid J6evpPGLetW9Uv4MqGqSRKN/tVO8JqS2cREZsfvPsFr9MwgOvoHupSC9QoIq36fG FjgGK05FjO4TmYUoR0GcYCouegtoPjypDSyq5rDbk0WJCDmWX6zcy4+3h1vqW4BR 1k4NoW2jprALakECa3zrCrCg6iOKvRfV1KO58fngWAxD8SvKENcf6dopffaP43P0 LtneMWqXyCwvnVlmJau8TG6xPatmjWTsNJn9pqtTjx6NU5WwDOA7U9YeybyI97fB dwEgw81spwcjKCi1YGtxPNJR7N5z0u3ACLnYQAgjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUW69wlUxmEiXZaLxpi0jLNvp2aB0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJiZThhZjAyLWFmZTEtNDYwZS1hY2RiLWUyMTU0NTI2Njk0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAANyAwDQYJKoZIhvcNAQELBQADggEBAHCkoYdC2Io1336kczkmrWol mH+O9QZLSkTUDS3jBkRbd1VH+j9Ww90BB7Q/DVZXeG4R0V5/2xpcyaEngK5rRNEm cnSxdPR9UXAIcdAsZNvIpikp0UklohECttaGcayTVAR7zZf/b2vHJfI9BbsMRdCO 4gRptyhV47/HDd8Dog4tg3mpwnb5oIe2pIXvDBaDQzysT4D4+xd34nfakBU376oe yX8RNwMVni9mGPikScCbl/SsEV7SORif8gln9HUrXFH68/0Tq72NP3lokYVAYyFX 8h3zlamqfIGEax3/iN1t0sJqDEjl4Ln2x+aaUfkmIizgKTTqJcgMIow3IYNNn5Q= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:06 2025 by rpki-client