$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2c40b206-89a0-4efc-9864-a40a559f2d44.roa File: 2c40b206-89a0-4efc-9864-a40a559f2d44.roa (raw, json) Hash identifier: 3CpTSZhvFgzsInema60m0Ji+1JwyQzBSbz64efktMZg= Subject key identifier: 60:FC:8A:3D:F6:12:76:A9:19:E3:38:08:2D:3C:B6:ED:D1:C0:CE:8F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 35D7CDB19D4B84F0239469762B57D4FA7549BFD2 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2c40b206-89a0-4efc-9864-a40a559f2d44.roa Signing time: Thu 30 Oct 2025 23:42:17 +0000 ROA not before: Thu 30 Oct 2025 23:42:17 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2ef8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d7:cd:b1:9d:4b:84:f0:23:94:69:76:2b:57:d4:fa:75:49:bf:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:42:17 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=5798fff28c8e1eb8fdc0adaf4883795d48fb83a7a51577bf91df2363dbca2ba3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:7b:91:a4:be:27:15:94:be:4a:fd:53:c2: 73:c4:d4:a0:5d:aa:1a:41:bf:80:53:b2:67:bd:47: 17:a2:4d:63:6f:d7:f5:19:05:c2:90:8a:1a:8a:db: 34:07:62:a6:73:21:23:b8:f9:91:34:ee:16:2b:95: 5a:b8:f4:98:e5:c9:0b:50:0b:15:03:6b:04:a4:32: d4:5b:98:98:0c:93:e4:4a:79:9b:01:da:ed:26:8f: 6a:13:ef:2f:fb:ae:6f:11:aa:59:a5:a6:81:7f:3d: 2a:c6:68:30:2b:71:30:6b:a9:dd:9b:9f:49:08:f3: 74:34:0d:e1:c5:08:f9:e3:a0:45:6c:a4:6e:f6:23: fb:34:82:b7:fe:0d:53:e2:6c:88:28:69:2c:87:1c: f6:03:be:47:9d:86:b9:1b:78:c7:fc:ca:40:b4:17: 3e:04:62:4d:cd:b4:01:19:8a:d5:b4:37:c3:73:11: 75:89:68:96:1b:35:aa:e2:28:83:ce:fe:32:3f:0c: 62:ab:5b:92:46:24:34:d7:29:42:f9:e6:87:38:e5: b7:18:bc:eb:4c:80:41:ad:c9:80:4d:60:d8:2c:ae: 3e:c7:8d:d8:a4:b6:b4:9c:9e:5c:06:76:11:27:af: 89:29:f0:4b:85:71:ec:e5:fb:f0:fa:3a:1e:ee:d7: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FC:8A:3D:F6:12:76:A9:19:E3:38:08:2D:3C:B6:ED:D1:C0:CE:8F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2c40b206-89a0-4efc-9864-a40a559f2d44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2ef8::/47 Signature Algorithm: sha256WithRSAEncryption 16:8b:31:2c:46:15:96:ba:bc:e0:70:c5:98:b8:ea:cf:26:75: 56:da:79:50:1b:f2:c1:a4:21:f8:4c:a0:be:22:2a:d1:f5:19: 94:f0:f0:9d:1f:50:8c:bd:0c:03:44:b2:02:de:c4:f5:d7:a1: 13:73:4c:3c:17:62:12:f9:50:26:f5:e3:4d:ba:8d:62:4c:80: 2b:76:25:e3:0f:00:76:d1:16:9c:41:f4:e4:de:b9:75:ff:9f: 65:fa:e1:82:e4:70:74:56:7d:e6:8c:f6:a5:da:72:9d:a9:35: 5d:70:9f:ba:72:e3:28:60:73:8f:d1:6f:4a:13:78:c8:c5:83: bc:02:70:a3:5c:5c:92:ac:03:56:77:45:fc:98:6e:f3:aa:15: 96:dd:68:b8:be:e7:1f:f3:7d:80:d8:f7:f9:b2:e2:a6:80:48: bd:17:f7:65:dc:f9:29:de:82:a3:2d:1d:ec:5e:c7:5d:fa:43: c3:ee:76:f2:82:48:57:9a:eb:93:da:29:93:fc:0d:c1:c4:9b: 3e:24:86:8e:10:a9:05:73:30:eb:58:c0:38:b1:9f:6c:6e:30: b5:01:74:6e:87:c0:66:0b:57:80:75:22:de:4e:8b:f6:ab:74: ba:be:fd:e7:fc:29:14:51:f1:dd:47:ca:fe:9f:26:ef:fd:18: 88:98:58:23 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNdfNsZ1LhPAjlGl2K1fU+nVJv9IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjM0MjE3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Nzk4ZmZmMjhjOGUxZWI4ZmRjMGFkYWY0ODgzNzk1ZDQ4 ZmI4M2E3YTUxNTc3YmY5MWRmMjM2M2RiY2EyYmEzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKInuRpL4nFZS+Sv1TwnPE1KBdqhpBv4BTsme9RxeiTWNv 1/UZBcKQihqK2zQHYqZzISO4+ZE07hYrlVq49JjlyQtQCxUDawSkMtRbmJgMk+RK eZsB2u0mj2oT7y/7rm8RqlmlpoF/PSrGaDArcTBrqd2bn0kI83Q0DeHFCPnjoEVs pG72I/s0grf+DVPibIgoaSyHHPYDvkedhrkbeMf8ykC0Fz4EYk3NtAEZitW0N8Nz EXWJaJYbNariKIPO/jI/DGKrW5JGJDTXKUL55oc45bcYvOtMgEGtyYBNYNgsrj7H jdiktrScnlwGdhEnr4kp8EuFcezl+/D6Oh7u1zzTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYPyKPfYSdqkZ4zgILTy27dHAzo8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJjNDBiMjA2LTg5YTAtNGVmYy05ODY0LWE0MGE1NTlmMmQ0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALvgwDQYJKoZIhvcNAQELBQADggEBABaLMSxGFZa6vOBwxZi46s8m dVbaeVAb8sGkIfhMoL4iKtH1GZTw8J0fUIy9DANEsgLexPXXoRNzTDwXYhL5UCb1 4026jWJMgCt2JeMPAHbRFpxB9OTeuXX/n2X64YLkcHRWfeaM9qXacp2pNV1wn7py 4yhgc4/Rb0oTeMjFg7wCcKNcXJKsA1Z3RfyYbvOqFZbdaLi+5x/zfYDY9/my4qaA SL0X92Xc+SnegqMtHexex136Q8PudvKCSFea65PaKZP8DcHEmz4kho4QqQVzMOtY wDixn2xuMLUBdG6HwGYLV4B1It5Oi/ardLq+/ef8KRRR8d1Hyv6fJu/9GIiYWCM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:52 2025 by rpki-client