$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e256e40-255a-4e67-97aa-acb9c0f235d1.roa File: 2e256e40-255a-4e67-97aa-acb9c0f235d1.roa (raw, json) Hash identifier: AqNVVh+rXHIdi23jfz5L6E1SW9O+oZllKJBqX1Cz0r4= Subject key identifier: 03:D7:D8:24:0B:80:A1:34:63:A1:04:D9:D4:C9:40:21:40:42:33:56 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 464B2FCF0E793C3E09038441C4530B3B3629337A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e256e40-255a-4e67-97aa-acb9c0f235d1.roa Signing time: Thu 30 Oct 2025 21:55:28 +0000 ROA not before: Thu 30 Oct 2025 21:55:28 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:19e0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:4b:2f:cf:0e:79:3c:3e:09:03:84:41:c4:53:0b:3b:36:29:33:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:55:28 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=11db6e05a45c830eb35f085dbc41e1ce0b136a601839e162abcf7a8d080b8cbe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ec:4d:04:40:23:10:6b:c4:13:30:fa:66:25: e6:7f:50:0e:56:c6:84:9c:39:20:26:f0:e5:18:6b: 25:c9:3c:f9:68:67:7f:07:ba:9f:c5:08:12:9a:41: 4d:b8:87:87:a0:94:17:27:ce:28:dc:a6:ec:12:ca: 81:5c:1e:3c:c7:a9:ad:53:96:5a:4f:c9:ff:e7:5c: e1:ab:89:e8:b7:e8:93:c7:f6:38:4a:6d:d6:95:6f: 2d:e3:d2:62:51:da:8c:90:62:74:ec:9e:71:b5:45: 8d:e5:23:5a:49:74:e2:16:fc:59:47:b9:96:e8:88: 5b:5b:05:20:b5:28:f1:4a:ec:27:12:c8:a7:13:71: 18:ae:38:ab:2e:08:5a:85:5d:b6:4a:a1:44:3c:a2: 26:5f:a1:ed:bf:d6:8e:83:67:ac:29:81:90:d5:fd: 88:16:95:44:78:d9:db:0b:47:7b:78:80:05:e6:07: b4:7f:11:52:0c:08:79:b2:4f:68:3b:3a:dc:da:d0: e2:19:c7:8b:c8:c3:23:99:2d:4f:55:d5:c3:23:37: 61:1c:4a:c8:a1:27:8c:6d:88:84:15:6f:08:91:55: 7e:b0:e5:39:bf:e8:53:b2:45:1e:a0:27:8c:b7:12: 6b:fe:c8:d6:44:6e:6e:dd:a9:6d:b6:27:22:44:15: 14:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D7:D8:24:0B:80:A1:34:63:A1:04:D9:D4:C9:40:21:40:42:33:56 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e256e40-255a-4e67-97aa-acb9c0f235d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:19e0::/47 Signature Algorithm: sha256WithRSAEncryption 74:4f:d4:d1:c1:05:05:86:de:69:29:e5:55:1e:e4:51:97:4b: e5:af:7d:f4:bd:f1:15:b1:ae:87:e6:f6:7c:96:41:d1:95:8a: 95:18:f5:b5:a8:42:7e:97:b1:77:7e:a6:1d:ec:ee:49:64:84: 8a:6d:46:c4:f4:ea:ef:a3:ed:7c:8a:a4:b2:c4:1d:ef:c0:31: 29:11:5c:5b:d1:0f:29:02:46:80:07:db:ea:ad:4b:79:db:1b: 00:7a:ad:10:8c:4e:8e:dd:29:53:f9:1f:2f:1f:8d:4e:60:db: 7d:65:5f:8d:98:55:a0:52:c1:ae:ec:2d:8b:ac:6b:67:dd:c9: 4b:18:fa:de:ee:44:70:2d:24:4f:e0:ce:55:92:69:ab:a2:9d: cd:90:2b:fb:00:1c:40:3a:20:f7:14:6a:d5:e1:05:5d:35:bb: 8f:00:47:49:ac:09:5e:b3:95:81:26:7d:2e:f5:c6:81:9d:22: 1f:cd:b5:d1:6d:c0:11:e9:54:c3:d6:fd:4f:2d:4f:da:93:2e: a6:ff:4a:36:66:3a:2d:3f:dc:c6:24:8f:ca:9e:f9:38:75:f8: a0:3c:e5:31:53:a1:a0:cf:11:91:06:75:9b:ba:c9:13:b6:22: 6e:50:5f:9e:34:f7:16:10:5a:4c:1b:58:c0:b1:31:05:a0:53: e1:81:16:c1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURksvzw55PD4JA4RBxFMLOzYpM3owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE1NTI4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMWRiNmUwNWE0NWM4MzBlYjM1ZjA4NWRiYzQxZTFjZTBi MTM2YTYwMTgzOWUxNjJhYmNmN2E4ZDA4MGI4Y2JlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDd7E0EQCMQa8QTMPpmJeZ/UA5WxoScOSAm8OUYayXJPPlo Z38Hup/FCBKaQU24h4eglBcnzijcpuwSyoFcHjzHqa1TllpPyf/nXOGriei36JPH 9jhKbdaVby3j0mJR2oyQYnTsnnG1RY3lI1pJdOIW/FlHuZboiFtbBSC1KPFK7CcS yKcTcRiuOKsuCFqFXbZKoUQ8oiZfoe2/1o6DZ6wpgZDV/YgWlUR42dsLR3t4gAXm B7R/EVIMCHmyT2g7Otza0OIZx4vIwyOZLU9V1cMjN2EcSsihJ4xtiIQVbwiRVX6w 5Tm/6FOyRR6gJ4y3Emv+yNZEbm7dqW22JyJEFRQRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUA9fYJAuAoTRjoQTZ1MlAIUBCM1YwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJlMjU2ZTQwLTI1NWEtNGU2Ny05N2FhLWFjYjljMGYyMzVkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGeAwDQYJKoZIhvcNAQELBQADggEBAHRP1NHBBQWG3mkp5VUe5FGX S+WvffS98RWxrofm9nyWQdGVipUY9bWoQn6XsXd+ph3s7klkhIptRsT06u+j7XyK pLLEHe/AMSkRXFvRDykCRoAH2+qtS3nbGwB6rRCMTo7dKVP5Hy8fjU5g231lX42Y VaBSwa7sLYusa2fdyUsY+t7uRHAtJE/gzlWSaauinc2QK/sAHEA6IPcUatXhBV01 u48AR0msCV6zlYEmfS71xoGdIh/NtdFtwBHpVMPW/U8tT9qTLqb/SjZmOi0/3MYk j8qe+Th1+KA85TFToaDPEZEGdZu6yRO2Im5QX5409xYQWkwbWMCxMQWgU+GBFsE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:42 2025 by rpki-client