$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f67ad16-3deb-433f-81c4-2cad51b2bf06.roa File: 2f67ad16-3deb-433f-81c4-2cad51b2bf06.roa (raw, json) Hash identifier: bKWGNOP74oF7lMBefM4LIL1Kde5y9vRA0EoZVWWFJMo= Subject key identifier: 03:87:0F:D9:8C:A1:B0:D0:E5:D1:18:7F:CE:CB:49:E7:50:1F:85:F3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 06090FAAB479458C2934904B21E1E274A30FEDDC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f67ad16-3deb-433f-81c4-2cad51b2bf06.roa Signing time: Fri 31 Oct 2025 04:26:45 +0000 ROA not before: Fri 31 Oct 2025 04:26:45 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:38ec::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:09:0f:aa:b4:79:45:8c:29:34:90:4b:21:e1:e2:74:a3:0f:ed:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:26:45 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=29f05fb93f0c9ff482b83b27cf3cfcb7531c175bb85eb4be031664052910f48a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:c8:b7:b4:60:91:3b:f6:86:49:55:41:d4: fc:29:1d:bd:a6:aa:35:fb:09:3b:6c:f4:a5:7f:19: e3:d5:77:af:51:44:24:0c:7f:c6:82:9d:89:8e:67: 66:b1:c4:2b:53:20:25:5f:25:e7:a7:19:bb:11:67: 5b:90:96:0e:1c:87:d1:f9:6a:d4:16:1a:74:a5:cd: 72:78:97:05:1d:47:49:70:78:37:8d:fb:ed:ed:3c: 9e:24:4c:87:34:ac:f4:50:aa:b6:de:ed:94:0e:ec: f3:7e:2d:67:60:44:7e:5e:ad:b8:48:b5:71:aa:52: 6c:43:16:f1:6b:5b:11:a9:0d:61:37:4b:e8:90:50: 32:df:84:b3:0d:c6:6c:57:90:17:da:4a:7b:8b:f8: e9:5d:3a:9d:ec:67:67:05:97:0c:6e:9d:31:ac:ad: 37:eb:4d:a2:75:b2:37:d4:3c:9e:33:5f:96:53:67: 3c:25:93:ad:92:23:36:7a:23:be:00:da:01:e0:38: fd:bc:87:ad:93:28:ad:0e:6f:94:63:19:f0:41:57: 81:8d:54:9f:a8:d2:ae:e2:f1:bb:aa:db:c7:81:78: e8:60:44:f0:90:03:51:f4:5b:08:b9:18:43:34:e0: 48:e7:8a:42:27:9e:b2:f8:8a:f0:86:04:66:33:10: cf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:87:0F:D9:8C:A1:B0:D0:E5:D1:18:7F:CE:CB:49:E7:50:1F:85:F3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2f67ad16-3deb-433f-81c4-2cad51b2bf06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:38ec::/46 Signature Algorithm: sha256WithRSAEncryption 62:ef:b9:02:3d:b1:b8:2b:e7:3c:19:7c:23:72:87:11:04:2a: 3f:76:2d:24:cd:df:98:18:b2:cd:9a:92:d7:9c:af:11:56:28: 0f:35:3a:ab:c9:9a:ca:a4:3b:99:63:56:f0:ee:cd:66:1b:57: a5:cf:7c:1e:13:aa:53:79:6b:da:25:8e:d5:6c:40:4f:0e:92: 2a:d8:46:ac:b0:e6:f0:02:5f:8e:7a:3d:7f:dd:71:5d:6c:48: 89:ba:4f:ee:19:4c:a1:e0:a5:31:86:1d:b4:1a:67:50:c6:94: 89:68:4a:b7:96:2b:20:90:0b:91:07:c4:54:7a:44:fc:2f:c6: 1c:0c:6b:e3:27:47:4e:62:f1:a6:a4:4b:37:ad:4c:11:fa:99: 33:f9:18:6c:e3:a5:06:c4:ff:0a:e0:37:9b:ff:5e:61:a3:b9: 12:f7:d1:ef:1f:ea:15:b0:0f:52:e1:ac:d1:d6:d9:0b:c8:ff: b4:ad:ff:29:8b:95:0c:1a:d7:d2:bd:43:14:85:5d:0e:79:1b: 33:21:b4:6d:35:ed:45:f4:a5:bb:6f:ab:ef:a7:7d:72:d1:ab: 4f:3b:c7:31:ff:fc:17:24:1a:32:a9:71:55:c6:d5:c8:b2:37: 3c:86:92:42:46:06:6c:5f:83:c6:66:de:4c:da:bf:70:ef:60: a7:47:a6:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBgkPqrR5RYwpNJBLIeHidKMP7dwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQyNjQ1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWYwNWZiOTNmMGM5ZmY0ODJiODNiMjdjZjNjZmNiNzUz MWMxNzViYjg1ZWI0YmUwMzE2NjQwNTI5MTBmNDhhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxNsi3tGCRO/aGSVVB1PwpHb2mqjX7CTts9KV/GePVd69R RCQMf8aCnYmOZ2axxCtTICVfJeenGbsRZ1uQlg4ch9H5atQWGnSlzXJ4lwUdR0lw eDeN++3tPJ4kTIc0rPRQqrbe7ZQO7PN+LWdgRH5erbhItXGqUmxDFvFrWxGpDWE3 S+iQUDLfhLMNxmxXkBfaSnuL+OldOp3sZ2cFlwxunTGsrTfrTaJ1sjfUPJ4zX5ZT Zzwlk62SIzZ6I74A2gHgOP28h62TKK0Ob5RjGfBBV4GNVJ+o0q7i8buq28eBeOhg RPCQA1H0Wwi5GEM04EjnikInnrL4ivCGBGYzEM+vAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUA4cP2YyhsNDl0Rh/zstJ51AfhfMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJmNjdhZDE2LTNkZWItNDMzZi04MWM0LTJjYWQ1MWIyYmYwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAOOwwDQYJKoZIhvcNAQELBQADggEBAGLvuQI9sbgr5zwZfCNyhxEE Kj92LSTN35gYss2aktecrxFWKA81OqvJmsqkO5ljVvDuzWYbV6XPfB4TqlN5a9ol jtVsQE8OkirYRqyw5vACX456PX/dcV1sSIm6T+4ZTKHgpTGGHbQaZ1DGlIloSreW KyCQC5EHxFR6RPwvxhwMa+MnR05i8aakSzetTBH6mTP5GGzjpQbE/wrgN5v/XmGj uRL30e8f6hWwD1LhrNHW2QvI/7St/ymLlQwa19K9QxSFXQ55GzMhtG017UX0pbtv q++nfXLRq087xzH//BckGjKpcVXG1ciyNzyGkkJGBmxfg8Zm3kzav3DvYKdHptI= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:00 2025 by rpki-client