$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f0bb0a6-4e0b-42a6-be8b-06e649c3774b.roa File: 2f0bb0a6-4e0b-42a6-be8b-06e649c3774b.roa (raw, json) Hash identifier: TjVJstj8lq9ZMkRWO4dJIMmFX1EJ6JPrtzOEZW4Enw4= Subject key identifier: D2:5F:89:CF:E0:74:7A:08:08:DF:9B:49:74:8D:6D:D9:1F:2D:9B:87 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7A937137CE023699635920A9956B43F0FB553894 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f0bb0a6-4e0b-42a6-be8b-06e649c3774b.roa Signing time: Fri 31 Oct 2025 07:57:38 +0000 ROA not before: Fri 31 Oct 2025 07:57:38 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:71:37:ce:02:36:99:63:59:20:a9:95:6b:43:f0:fb:55:38:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:57:38 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=b2deaf04b535caa2f54bd60709402a7a3d2225164b6d4d520e40e55190f32857, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f1:f8:f9:e5:34:cd:32:71:f2:82:49:89:61: 84:fe:3f:46:43:98:b5:66:4e:e6:f7:5f:74:30:99: e4:64:1d:ed:34:e0:a0:be:08:e3:b2:3f:b2:ec:45: a1:db:81:50:6b:6d:5a:32:b1:21:59:4e:ae:8b:12: 5a:29:d3:79:45:47:f1:27:ea:78:09:55:cd:64:f7: 54:2f:91:7e:ca:8c:6a:57:41:3b:93:db:39:74:7f: d9:af:4a:12:18:d1:53:a0:9a:b2:bf:6d:fc:3d:48: e4:4c:b8:d1:7a:3e:94:01:1f:46:49:b2:39:5d:dc: d4:f3:49:27:9f:cf:0e:33:41:8f:ae:fd:14:32:53: ab:44:a6:1c:00:d6:7f:82:bc:e1:ba:ff:82:75:14: a6:a6:cb:af:07:da:7c:04:6e:0f:ed:d0:37:68:72: 22:4d:0a:df:0a:39:a9:7e:2f:88:73:85:d0:14:92: f6:99:cd:1f:f7:42:89:f8:9d:fe:e8:38:20:6b:5b: c1:9a:7e:4e:ee:80:39:c2:2f:06:28:a1:7e:b1:d4: fc:4d:18:86:ab:fe:b5:ce:84:5e:7b:5b:5f:69:18: a2:8a:25:04:e9:49:bb:9a:e4:aa:96:1d:52:27:57: f8:aa:41:37:27:eb:5b:38:f4:79:d0:a2:4d:31:50: e3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5F:89:CF:E0:74:7A:08:08:DF:9B:49:74:8D:6D:D9:1F:2D:9B:87 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f0bb0a6-4e0b-42a6-be8b-06e649c3774b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2000::/37 Signature Algorithm: sha256WithRSAEncryption 8d:bc:3c:fb:66:ab:c5:88:e9:42:3c:4f:83:84:98:62:69:d1: 8c:3a:a8:71:7b:83:cd:5c:5a:ec:1d:13:c4:ef:5d:b0:d9:a3: 3a:e5:f1:21:5d:16:f4:af:57:74:f0:9a:23:f6:06:82:3f:70: c5:78:18:cf:fe:85:70:d3:17:e9:6a:b1:f9:1d:75:8b:25:32: cb:d7:a3:cd:ad:52:87:68:e5:63:62:16:50:a4:6f:ec:e8:12: 75:25:49:05:de:c8:f1:68:1c:f3:40:7f:53:b3:f3:2c:be:01: 0b:1c:44:b6:76:a8:8e:16:bd:74:1c:00:d8:13:8e:73:dc:d9: f7:58:8e:13:99:e2:61:49:ec:78:fa:26:bf:89:8d:2f:1b:d3: cd:8e:f5:d5:71:df:e8:12:95:6c:a6:a4:7e:89:ab:a6:70:8c: 4b:73:36:21:1d:8f:a4:1d:66:b7:96:ea:fd:f8:f1:d2:7f:36: 39:12:14:28:35:78:de:bf:23:61:fb:99:3a:76:38:19:3b:c9: b6:fc:4c:6d:b4:55:c8:ad:2a:f2:65:cc:cd:24:91:7a:6e:4b: 81:56:28:2f:de:fe:d4:f4:7c:ec:60:3b:e6:59:57:40:6d:4c: b0:d7:6f:6c:4e:e1:a9:0a:84:42:ea:5b:21:a6:52:bb:c1:46: da:4c:26:ba -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUepNxN84CNpljWSCplWtD8PtVOJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc1NzM4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmRlYWYwNGI1MzVjYWEyZjU0YmQ2MDcwOTQwMmE3YTNk MjIyNTE2NGI2ZDRkNTIwZTQwZTU1MTkwZjMyODU3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe8fj55TTNMnHygkmJYYT+P0ZDmLVmTub3X3QwmeRkHe00 4KC+COOyP7LsRaHbgVBrbVoysSFZTq6LElop03lFR/En6ngJVc1k91QvkX7KjGpX QTuT2zl0f9mvShIY0VOgmrK/bfw9SORMuNF6PpQBH0ZJsjld3NTzSSefzw4zQY+u /RQyU6tEphwA1n+CvOG6/4J1FKamy68H2nwEbg/t0DdociJNCt8KOal+L4hzhdAU kvaZzR/3Qon4nf7oOCBrW8Gafk7ugDnCLwYooX6x1PxNGIar/rXOhF57W19pGKKK JQTpSbua5KqWHVInV/iqQTcn61s49HnQok0xUOOjAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU0l+Jz+B0eggI35tJdI1t2R8tm4cwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJmMGJiMGE2LTRlMGItNDJhNi1iZThiLTA2ZTY0OWMzNzc0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgMmAJAAIDANBgkqhkiG9w0BAQsFAAOCAQEAjbw8+2arxYjpQjxPg4SYYmnR jDqocXuDzVxa7B0TxO9dsNmjOuXxIV0W9K9XdPCaI/YGgj9wxXgYz/6FcNMX6Wqx +R11iyUyy9ejza1Sh2jlY2IWUKRv7OgSdSVJBd7I8Wgc80B/U7PzLL4BCxxEtnao jha9dBwA2BOOc9zZ91iOE5niYUnsePomv4mNLxvTzY711XHf6BKVbKakfomrpnCM S3M2IR2PpB1mt5bq/fjx0n82ORIUKDV43r8jYfuZOnY4GTvJtvxMbbRVyK0q8mXM zSSRem5LgVYoL97+1PR87GA75llXQG1MsNdvbE7hqQqEQupbIaZSu8FG2kwmug== -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:57 2025 by rpki-client