$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ecb20a7-679d-462d-91cc-475a10f5b0f0.roa File: 2ecb20a7-679d-462d-91cc-475a10f5b0f0.roa (raw, json) Hash identifier: gZEDIKtV+j/XqWe2Dwg+eElb7gjr13UHOJgoNvuDhag= Subject key identifier: 81:37:0C:4E:0C:AC:BD:46:CB:A5:CA:38:0D:98:F9:EE:99:0E:FC:12 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 14BE5E6C131B648C370DE7E081769DBD85EBB383 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ecb20a7-679d-462d-91cc-475a10f5b0f0.roa Signing time: Thu 30 Oct 2025 23:51:56 +0000 ROA not before: Thu 30 Oct 2025 23:51:56 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2f76::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:be:5e:6c:13:1b:64:8c:37:0d:e7:e0:81:76:9d:bd:85:eb:b3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:51:56 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=4c7cb3b6d9b351e1940299535bacad918def7d29062d079e420c3b32d1ab0234, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:a5:dd:12:64:13:7d:03:16:0e:25:f2:cb: 70:ae:ac:a5:43:63:42:ad:7e:42:6f:c5:0f:f3:47: 24:2b:32:9c:16:54:c2:c7:9e:40:78:21:77:d8:7f: 9a:0d:91:e1:e6:29:8c:10:27:cd:31:f5:ad:f1:89: ea:07:06:0a:21:70:39:cc:e8:3d:1d:db:8f:45:37: 16:b5:da:c8:f3:b1:43:2c:b3:d9:ae:39:1f:77:1c: af:08:09:1f:91:82:a8:f5:ea:7f:80:b4:29:61:a9: 69:d5:c3:bb:c9:db:42:47:4a:37:a1:1f:8c:16:5a: b5:dd:53:92:6f:bd:5f:52:a7:05:9e:22:c5:6f:b5: ad:e0:13:be:27:c1:da:b4:71:9a:a5:03:f1:f8:12: 0b:39:8f:e8:07:a3:87:51:90:10:2d:d0:e0:5c:ac: c0:a1:15:a3:1d:cd:f1:75:32:80:91:90:c1:ec:89: 0f:37:33:6d:ff:f4:4c:27:bd:20:41:c6:94:27:1e: 09:c3:fd:c1:03:b4:b2:bf:63:25:5a:19:7b:1d:9b: e3:00:85:c6:ee:b2:07:15:91:96:bd:b5:dc:08:ed: 5f:c7:62:51:4b:eb:ae:6b:ff:17:7f:5b:1b:f9:80: 99:c7:b4:8b:fe:d2:ac:44:7e:36:36:2f:f1:91:3e: cf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:37:0C:4E:0C:AC:BD:46:CB:A5:CA:38:0D:98:F9:EE:99:0E:FC:12 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ecb20a7-679d-462d-91cc-475a10f5b0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2f76::/47 Signature Algorithm: sha256WithRSAEncryption 2e:8b:38:f7:cb:01:e5:a3:6c:fe:a9:f9:03:6b:17:eb:78:0b: ff:fb:d1:ed:98:db:88:2d:8a:b3:1a:52:e1:5e:8c:09:4b:8a: be:d1:6c:2c:39:f9:00:78:69:8d:cf:f3:f1:1d:4a:e0:22:68: f8:76:92:9a:b6:06:69:3c:ae:28:3c:d0:cc:ad:2f:05:b6:c3: 0c:22:2a:20:34:ec:97:4a:26:25:d9:31:7e:1f:2b:a4:c5:38: c7:c7:7f:4a:b7:13:94:55:9e:50:a6:cb:5e:0c:2d:72:9d:fc: bb:e6:d9:0c:22:c1:81:4b:e0:a7:96:8e:80:d0:01:10:4f:c2: 00:51:6b:6f:32:5a:2f:84:ce:b0:98:62:40:00:9f:e1:f8:2f: e1:8f:e6:d5:f9:21:d3:58:ee:ef:43:52:73:62:21:1c:39:20: ac:53:45:74:b7:35:b1:ca:83:4e:d8:bf:5a:38:bd:5f:36:63: bc:14:89:a2:5e:a7:5d:b6:c9:5d:f7:34:bc:9f:67:68:be:35: 73:f9:a9:7f:c2:88:86:31:80:e1:ec:fd:dd:6c:4a:cb:54:c1: 28:91:34:97:d4:79:e3:72:4d:da:65:16:e9:33:51:f9:df:e1: 6f:e2:a7:c8:53:f8:f9:c8:75:73:32:7d:38:07:c2:1f:03:e0: bb:c2:9b:2d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFL5ebBMbZIw3DefggXadvYXrs4MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjM1MTU2WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzdjYjNiNmQ5YjM1MWUxOTQwMjk5NTM1YmFjYWQ5MThk ZWY3ZDI5MDYyZDA3OWU0MjBjM2IzMmQxYWIwMjM0MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRgqXdEmQTfQMWDiXyy3CurKVDY0KtfkJvxQ/zRyQrMpwW VMLHnkB4IXfYf5oNkeHmKYwQJ80x9a3xieoHBgohcDnM6D0d249FNxa12sjzsUMs s9muOR93HK8ICR+Rgqj16n+AtClhqWnVw7vJ20JHSjehH4wWWrXdU5JvvV9SpwWe IsVvta3gE74nwdq0cZqlA/H4Egs5j+gHo4dRkBAt0OBcrMChFaMdzfF1MoCRkMHs iQ83M23/9EwnvSBBxpQnHgnD/cEDtLK/YyVaGXsdm+MAhcbusgcVkZa9tdwI7V/H YlFL665r/xd/Wxv5gJnHtIv+0qxEfjY2L/GRPs+9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgTcMTgysvUbLpco4DZj57pkO/BIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJlY2IyMGE3LTY3OWQtNDYyZC05MWNjLTQ3NWExMGY1YjBmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAL3YwDQYJKoZIhvcNAQELBQADggEBAC6LOPfLAeWjbP6p+QNrF+t4 C//70e2Y24gtirMaUuFejAlLir7RbCw5+QB4aY3P8/EdSuAiaPh2kpq2Bmk8rig8 0MytLwW2wwwiKiA07JdKJiXZMX4fK6TFOMfHf0q3E5RVnlCmy14MLXKd/Lvm2Qwi wYFL4KeWjoDQARBPwgBRa28yWi+EzrCYYkAAn+H4L+GP5tX5IdNY7u9DUnNiIRw5 IKxTRXS3NbHKg07Yv1o4vV82Y7wUiaJep122yV33NLyfZ2i+NXP5qX/CiIYxgOHs /d1sSstUwSiRNJfUeeNyTdplFukzUfnf4W/ip8hT+PnIdXMyfTgHwh8D4LvCmy0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:24 2025 by rpki-client