$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87fc4df2-523e-45d8-b29c-1d5b72902256.roa File: 87fc4df2-523e-45d8-b29c-1d5b72902256.roa (raw, json) Hash identifier: n/U17gs1EHu1QNW/oQaOWFuYDrX6alG6qa2Rr2gMXu4= Subject key identifier: F0:09:9B:30:69:44:AB:09:58:E6:0D:DC:4C:7F:35:0A:D9:DD:72:89 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 23232A829CF7A78B36C853548A195517BD6D075C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87fc4df2-523e-45d8-b29c-1d5b72902256.roa Signing time: Thu 30 Oct 2025 22:42:06 +0000 ROA not before: Thu 30 Oct 2025 22:42:06 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1fbc::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:23:2a:82:9c:f7:a7:8b:36:c8:53:54:8a:19:55:17:bd:6d:07:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:42:06 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=f26072898de03d38cdd057ee25978f77362e64a39c4788d974e6a2077bb26af7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b9:d3:8c:86:8d:a4:a5:ab:6e:98:ff:4e:b7: bd:1f:6d:f1:32:c3:86:31:29:60:33:a7:59:1f:89: 74:a1:45:9c:a1:64:c8:3f:6c:4b:3d:61:aa:0d:b7: 8a:c8:27:83:a5:9d:9a:d6:6a:93:b3:d5:31:51:dd: 53:31:7e:f3:96:a1:27:1f:9c:29:db:b0:a6:b0:79: be:87:b5:fd:3d:5a:7f:b4:8d:ce:99:fe:6e:f4:4a: b4:de:27:e4:97:3f:fb:3f:22:eb:08:53:ee:5c:bd: 8d:ee:67:91:2c:2e:6a:67:c2:06:5f:52:c8:63:33: 0b:9d:94:53:b7:41:5e:fa:36:2d:f4:ef:b2:0a:f8: d3:9b:1c:99:20:f9:4b:bc:26:66:ab:e0:39:47:a4: b6:87:61:47:46:13:98:9a:a1:36:ba:5f:6b:a5:93: ea:d9:14:95:71:4d:f4:a0:81:bf:21:f4:f3:51:a6: fa:20:4b:fe:e8:74:57:6e:d8:0a:1a:27:8d:10:62: 41:78:6c:fc:dd:5d:0e:d2:95:82:78:01:2b:d5:f7: df:2d:80:e8:4a:03:da:ff:f9:c4:18:73:66:7a:7a: cc:0b:9a:c4:c0:5c:fe:1f:cd:09:bf:7d:65:3b:93: 76:c4:1e:29:94:95:2e:71:a8:6a:a2:85:1e:dd:bb: b9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:09:9B:30:69:44:AB:09:58:E6:0D:DC:4C:7F:35:0A:D9:DD:72:89 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87fc4df2-523e-45d8-b29c-1d5b72902256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1fbc::/47 Signature Algorithm: sha256WithRSAEncryption 85:bf:17:ee:49:39:ff:83:d9:50:32:35:30:32:19:3f:41:9a: 81:3f:14:e8:a9:f4:8a:f1:b6:10:48:61:3b:e3:15:0f:8a:e9: fb:10:75:06:d5:bd:05:b3:41:0c:32:c6:ce:31:72:10:fc:0f: f9:c2:a6:f8:77:8d:91:f6:81:26:47:0f:99:f3:cb:d1:6e:db: 15:a7:5c:27:c9:25:0a:28:be:a5:f2:e2:d3:64:81:34:a7:65: a9:7e:7b:70:bf:d1:e4:38:c8:82:95:a4:3e:c0:f4:4c:75:16: 95:71:66:b7:b1:a7:c1:4b:17:79:4f:6e:c6:fa:5a:3e:6e:30: 41:63:5f:7e:47:8c:78:3e:bb:57:52:57:1e:dc:04:b0:3d:99: b6:30:da:75:b3:b8:01:b5:29:c2:0f:ea:1b:e6:5b:eb:f7:cb: 50:48:a7:ff:54:c4:93:d3:b0:98:b6:63:33:19:da:02:ab:f1: 62:01:00:1f:4e:11:45:62:22:81:53:a8:2b:35:96:ff:71:d3: 1b:52:e1:a9:e5:a6:be:50:83:90:8e:38:a3:b0:2e:75:38:cc: 8d:df:ba:17:4f:23:19:0f:4b:95:4d:b9:1d:a1:da:90:6a:7d: f0:75:2e:59:5f:bf:e5:fb:f6:df:18:e7:c2:f1:f0:f0:b5:7e: 7c:27:d4:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIyMqgpz3p4s2yFNUihlVF71tB1wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI0MjA2WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjYwNzI4OThkZTAzZDM4Y2RkMDU3ZWUyNTk3OGY3NzM2 MmU2NGEzOWM0Nzg4ZDk3NGU2YTIwNzdiYjI2YWY3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmudOMho2kpatumP9Ot70fbfEyw4YxKWAzp1kfiXShRZyh ZMg/bEs9YaoNt4rIJ4OlnZrWapOz1TFR3VMxfvOWoScfnCnbsKaweb6Htf09Wn+0 jc6Z/m70SrTeJ+SXP/s/IusIU+5cvY3uZ5EsLmpnwgZfUshjMwudlFO3QV76Ni30 77IK+NObHJkg+Uu8Jmar4DlHpLaHYUdGE5iaoTa6X2ulk+rZFJVxTfSggb8h9PNR pvogS/7odFdu2AoaJ40QYkF4bPzdXQ7SlYJ4ASvV998tgOhKA9r/+cQYc2Z6eswL msTAXP4fzQm/fWU7k3bEHimUlS5xqGqihR7du7n9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8AmbMGlEqwlY5g3cTH81CtndcokwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzg3ZmM0ZGYyLTUyM2UtNDVkOC1iMjljLTFkNWI3MjkwMjI1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAH7wwDQYJKoZIhvcNAQELBQADggEBAIW/F+5JOf+D2VAyNTAyGT9B moE/FOip9IrxthBIYTvjFQ+K6fsQdQbVvQWzQQwyxs4xchD8D/nCpvh3jZH2gSZH D5nzy9Fu2xWnXCfJJQoovqXy4tNkgTSnZal+e3C/0eQ4yIKVpD7A9Ex1FpVxZrex p8FLF3lPbsb6Wj5uMEFjX35HjHg+u1dSVx7cBLA9mbYw2nWzuAG1KcIP6hvmW+v3 y1BIp/9UxJPTsJi2YzMZ2gKr8WIBAB9OEUViIoFTqCs1lv9x0xtS4anlpr5Qg5CO OKOwLnU4zI3fuhdPIxkPS5VNuR2h2pBqffB1Lllfv+X79t8Y58Lx8PC1fnwn1OA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:18 2025 by rpki-client