$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87afa03c-24c1-4ba0-bc9a-8031d0dd2f4c.roa File: 87afa03c-24c1-4ba0-bc9a-8031d0dd2f4c.roa (raw, json) Hash identifier: XANSAEPGDEW6liLKzM/vuiy4G2kQ5Y1hMestzjz76J8= Subject key identifier: D9:9E:BE:0A:5A:3E:0A:D1:B8:C1:59:EA:29:92:93:5C:FD:D0:B7:E4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 43BA1A7A4041507DEDAF483CD5F204925FF387 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87afa03c-24c1-4ba0-bc9a-8031d0dd2f4c.roa Signing time: Thu 30 Oct 2025 22:08:51 +0000 ROA not before: Thu 30 Oct 2025 22:08:51 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1b2a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ba:1a:7a:40:41:50:7d:ed:af:48:3c:d5:f2:04:92:5f:f3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:08:51 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=40ce963ed4e6dec87513b3f6cff0efd5065484e3ae806c55a81223727b7c3119, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:23:ff:35:39:91:1d:2e:a2:42:bd:c1:a3: 87:31:04:1c:26:2a:d0:2c:a9:b7:6e:c1:af:4e:45: 15:33:52:1d:67:e4:66:5a:1d:81:49:a7:05:18:11: b6:ae:69:63:cf:fa:2a:5b:3b:a7:68:36:bf:f2:cc: 31:53:93:bf:78:80:dd:23:f5:34:13:95:a1:2d:33: 81:7c:b3:c6:4e:69:72:d2:09:94:e0:ed:76:20:bb: d8:ed:63:f5:fa:d7:6b:d2:0e:48:69:f9:01:02:df: 4c:bc:db:6b:98:83:52:d4:b6:a7:98:81:c1:1f:9b: cc:97:3c:3c:4a:0b:0c:18:5d:05:0e:cb:3a:3e:c1: b5:db:c3:7b:d4:53:16:6e:79:69:d0:4b:05:bf:5a: 40:af:68:92:89:7e:01:6c:7b:40:92:1f:4e:48:2c: 73:dc:36:26:2a:8b:08:f0:f0:f9:43:48:9d:61:c8: fe:90:74:96:b0:7f:4c:a4:ee:01:ef:bc:c8:24:6e: 6a:f5:57:a3:00:14:64:7b:5d:f6:97:d9:1f:06:c0: b5:ec:75:23:8c:32:5d:7e:54:0f:80:5c:4d:0b:c4: 45:eb:1f:bd:92:41:72:4d:6b:a2:a5:20:f0:07:bd: 2a:8c:e4:4d:a3:b3:20:85:b0:3e:9f:5e:23:74:b0: a7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9E:BE:0A:5A:3E:0A:D1:B8:C1:59:EA:29:92:93:5C:FD:D0:B7:E4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87afa03c-24c1-4ba0-bc9a-8031d0dd2f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1b2a::/47 Signature Algorithm: sha256WithRSAEncryption 1b:c4:be:5c:cc:d3:25:1d:69:e9:fe:40:75:4d:2d:ee:e0:2a: b5:8b:4e:00:eb:2e:5b:00:1c:b0:2c:81:61:a4:7d:db:eb:fc: ed:27:f3:9d:66:6c:7c:6a:bf:1b:93:15:4e:3a:fb:fa:2f:73: d2:3e:62:88:d6:7c:f0:50:9f:f8:7f:f3:b8:f7:c4:6e:8f:11: d8:94:d2:ca:76:46:c5:03:83:5d:f7:09:71:28:a4:01:6f:ba: c4:bf:cf:14:d0:03:96:ff:4e:a1:9d:99:cd:a6:ae:d1:5b:ed: ef:02:02:cb:a3:ec:99:09:94:a7:18:06:58:d8:37:a1:b4:56: 23:f7:6e:1f:85:0d:a8:b4:87:44:d1:b7:ec:ee:bd:38:0d:f1: d3:f8:25:a2:92:ee:cb:f4:bc:cc:19:d7:5f:99:0c:cc:c1:19: 54:70:90:f9:c6:83:3a:51:95:aa:42:6d:c3:4b:f2:a6:c5:cc: 76:a4:65:c1:02:dc:a6:00:be:0c:96:8d:e0:65:97:06:5e:de: 7f:aa:53:13:72:92:ec:17:f6:da:4e:aa:19:0b:3e:2c:76:43: dd:2a:d3:30:b5:8d:7f:8a:b9:25:e5:28:09:32:cf:f2:1a:a3: cb:5e:cf:f1:c9:e1:23:f1:f0:4f:18:ca:c8:a0:83:a2:52:f6: 1a:f1:db:e9 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITQ7oaekBBUH3tr0g81fIEkl/zhzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTEwMzAyMjA4NTFaFw0yNTEyMDQyMzU5NTla MHoxSTBHBgNVBAUTQDQwY2U5NjNlZDRlNmRlYzg3NTEzYjNmNmNmZjBlZmQ1MDY1 NDg0ZTNhZTgwNmM1NWE4MTIyMzcyN2I3YzMxMTkxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ2gI/81OZEdLqJCvcGjhzEEHCYq0Cypt27Br05FFTNSHWfk ZlodgUmnBRgRtq5pY8/6Kls7p2g2v/LMMVOTv3iA3SP1NBOVoS0zgXyzxk5pctIJ lODtdiC72O1j9frXa9IOSGn5AQLfTLzba5iDUtS2p5iBwR+bzJc8PEoLDBhdBQ7L Oj7BtdvDe9RTFm55adBLBb9aQK9okol+AWx7QJIfTkgsc9w2JiqLCPDw+UNInWHI /pB0lrB/TKTuAe+8yCRuavVXowAUZHtd9pfZHwbAtex1I4wyXX5UD4BcTQvEResf vZJBck1roqUg8Ae9KozkTaOzIIWwPp9eI3SwpysCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBTZnr4KWj4K0bjBWeopkpNc/dC35DAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvODdhZmEwM2MtMjRjMS00YmEwLWJjOWEtODAzMWQwZGQyZjRjLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHASYAkAAbKjANBgkqhkiG9w0BAQsFAAOCAQEAG8S+XMzTJR1p6f5AdU0t7uAq tYtOAOsuWwAcsCyBYaR92+v87SfznWZsfGq/G5MVTjr7+i9z0j5iiNZ88FCf+H/z uPfEbo8R2JTSynZGxQODXfcJcSikAW+6xL/PFNADlv9OoZ2Zzaau0Vvt7wICy6Ps mQmUpxgGWNg3obRWI/duH4UNqLSHRNG37O69OA3x0/glopLuy/S8zBnXX5kMzMEZ VHCQ+caDOlGVqkJtw0vypsXMdqRlwQLcpgC+DJaN4GWXBl7ef6pTE3KS7Bf22k6q GQs+LHZD3SrTMLWNf4q5JeUoCTLP8hqjy17P8cnhI/HwTxjKyKCDolL2GvHb6Q== -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:27 2025 by rpki-client