$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d895466-1b12-46d6-bed4-e336f4a0e1cc.roa File: 2d895466-1b12-46d6-bed4-e336f4a0e1cc.roa (raw, json) Hash identifier: Tb30x4hiQldmQ658FpsxFUjGD1o3w6kySqvhYvZxcTo= Subject key identifier: 44:47:F4:57:7C:FE:40:EA:B6:41:A4:7E:05:A0:1C:95:93:5D:97:4C Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7753172C6687EB677636222FC2E071D9FAC7C808 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d895466-1b12-46d6-bed4-e336f4a0e1cc.roa Signing time: Fri 31 Oct 2025 01:43:02 +0000 ROA not before: Fri 31 Oct 2025 01:43:02 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3dc2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:53:17:2c:66:87:eb:67:76:36:22:2f:c2:e0:71:d9:fa:c7:c8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:43:02 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=51388c3696d65acfa636592bbab13d5838b9b2ad54f320dd49c858d8fd581a9d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:a6:bd:80:0a:66:98:e1:41:02:16:44:66: 07:ae:78:e2:5a:c5:8b:d9:fa:1a:04:30:39:0c:17: 85:07:e8:c0:c0:f3:64:b0:6d:10:8f:58:2c:c7:2b: c1:41:30:bb:73:9b:44:48:87:fb:14:d4:d2:2b:cf: b3:d3:ec:d1:11:0b:d8:14:88:23:4c:c2:1c:55:a6: 35:5f:1b:12:d7:bc:69:c9:fc:36:93:6a:f0:a4:35: a7:4e:8c:20:0e:61:a8:74:be:b7:62:1a:8a:60:3c: 08:a5:d0:aa:4f:f1:51:56:13:b9:20:22:a8:6b:28: d4:0c:aa:82:e9:e5:b1:93:48:15:4d:ba:2f:59:97: 37:5c:e0:22:48:9d:10:8f:25:27:99:5e:d4:a9:34: 92:bc:9f:63:ae:7f:28:53:84:6c:de:bc:05:75:0b: 6d:84:fd:df:10:fb:7f:06:9d:26:19:df:64:67:14: bb:55:56:e8:f3:2e:cc:d0:66:0c:3a:dc:97:ef:f4: 4a:ad:96:07:c9:2b:8b:8c:f4:46:38:cb:80:a1:3c: bd:1a:00:37:7f:a0:a6:dc:54:46:89:09:a9:15:48: 4c:da:93:03:c0:9e:20:33:91:27:46:7c:23:16:9b: e1:b7:7b:c3:77:a4:94:0a:98:95:d9:c3:96:76:61: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:47:F4:57:7C:FE:40:EA:B6:41:A4:7E:05:A0:1C:95:93:5D:97:4C X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2d895466-1b12-46d6-bed4-e336f4a0e1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3dc2::/47 Signature Algorithm: sha256WithRSAEncryption 36:67:0f:ca:24:1a:87:b4:f8:bd:64:99:64:fb:58:c5:f3:15: 9f:98:2e:28:a7:57:b7:7b:92:6a:42:28:7b:4a:6a:f4:a0:7e: 57:33:f9:32:d4:c5:bb:a6:0a:0e:c3:cc:0c:62:15:ef:1e:06: 9f:5b:18:16:54:47:ad:ec:34:87:54:90:25:8b:de:2e:7c:04: 90:8d:57:53:0c:7c:14:4b:21:e8:9b:cb:45:b9:62:e7:16:22: 1c:a5:e7:b5:ef:b2:b1:84:f8:9b:13:62:7b:f2:da:f2:63:3f: 49:c1:f8:43:0b:32:11:31:9a:bd:5c:88:de:29:db:c7:d4:6d: 3a:70:8a:e5:1b:3d:d5:a6:e7:6a:b7:a8:0c:d9:ca:b3:d3:76: 0a:e9:4d:ba:07:b4:f3:b5:ec:e2:22:cf:df:7f:41:2b:e1:78: 4b:53:7b:51:e9:92:33:c2:8d:59:05:91:18:46:11:94:80:a3: 05:1b:44:79:c4:3f:e7:55:5d:19:1e:38:36:03:4b:00:12:cf: a3:2a:22:32:99:2f:53:f3:f6:f4:96:94:d1:ec:35:74:4a:36: c2:e1:d1:63:4a:cd:ad:34:bb:48:64:67:11:23:5f:65:86:f7: fa:f0:9d:8d:5e:37:1e:dd:af:02:89:23:73:43:80:96:58:68: b0:91:bb:b5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd1MXLGaH62d2NiIvwuBx2frHyAgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDE0MzAyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTM4OGMzNjk2ZDY1YWNmYTYzNjU5MmJiYWIxM2Q1ODM4 YjliMmFkNTRmMzIwZGQ0OWM4NThkOGZkNTgxYTlkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMi6a9gApmmOFBAhZEZgeueOJaxYvZ+hoEMDkMF4UH6MDA 82SwbRCPWCzHK8FBMLtzm0RIh/sU1NIrz7PT7NERC9gUiCNMwhxVpjVfGxLXvGnJ /DaTavCkNadOjCAOYah0vrdiGopgPAil0KpP8VFWE7kgIqhrKNQMqoLp5bGTSBVN ui9Zlzdc4CJInRCPJSeZXtSpNJK8n2OufyhThGzevAV1C22E/d8Q+38GnSYZ32Rn FLtVVujzLszQZgw63Jfv9EqtlgfJK4uM9EY4y4ChPL0aADd/oKbcVEaJCakVSEza kwPAniAzkSdGfCMWm+G3e8N3pJQKmJXZw5Z2Yd73AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUREf0V3z+QOq2QaR+BaAclZNdl0wwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJkODk1NDY2LTFiMTItNDZkNi1iZWQ0LWUzMzZmNGEwZTFjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPcIwDQYJKoZIhvcNAQELBQADggEBADZnD8okGoe0+L1kmWT7WMXz FZ+YLiinV7d7kmpCKHtKavSgflcz+TLUxbumCg7DzAxiFe8eBp9bGBZUR63sNIdU kCWL3i58BJCNV1MMfBRLIeiby0W5YucWIhyl57XvsrGE+JsTYnvy2vJjP0nB+EML MhExmr1ciN4p28fUbTpwiuUbPdWm52q3qAzZyrPTdgrpTboHtPO17OIiz99/QSvh eEtTe1HpkjPCjVkFkRhGEZSAowUbRHnEP+dVXRkeODYDSwASz6MqIjKZL1Pz9vSW lNHsNXRKNsLh0WNKza00u0hkZxEjX2WG9/rwnY1eNx7drwKJI3NDgJZYaLCRu7U= -----END CERTIFICATE-----Generated at Wed Nov 5 09:29:58 2025 by rpki-client