$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9de8c4b6-1ac6-47b4-991c-6bd78e5a345c.roa File: 9de8c4b6-1ac6-47b4-991c-6bd78e5a345c.roa (raw, json) Hash identifier: lRYhM9XSJ4WKQuvi/nK0JAiWA0ixBfVfDj5qTae0h1w= Subject key identifier: 2E:D0:40:FF:EF:4A:71:68:18:DD:BA:60:89:D3:36:7E:DE:54:E7:9A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 25A4069206BAFEB189E2527C73A54750BF3BDFE6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9de8c4b6-1ac6-47b4-991c-6bd78e5a345c.roa Signing time: Thu 30 Oct 2025 23:52:08 +0000 ROA not before: Thu 30 Oct 2025 23:52:08 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2fa6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a4:06:92:06:ba:fe:b1:89:e2:52:7c:73:a5:47:50:bf:3b:df:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:52:08 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=8aa8397ac2bc382ddf44b1765983ec3729393195e2c81d536f4711ff816c4e21, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:a8:70:9c:69:5e:a4:bb:07:de:75:e6:ef: a7:31:6e:a8:69:47:43:e4:5d:8f:ed:0d:9e:d5:a9: 40:d6:a2:59:0d:a4:34:88:96:13:5f:ec:dc:08:1a: d8:89:b9:43:3c:9c:23:06:be:31:ee:c7:34:32:13: ae:2a:c9:74:92:79:96:67:4c:72:84:54:0f:5d:b3: e6:ba:f7:3d:bd:75:0d:a2:63:8a:f0:15:b2:dc:b7: 96:24:bc:02:0a:9f:0a:31:5c:12:65:bb:c1:14:3b: 76:42:7a:6c:5a:00:5d:e0:e8:e3:44:f4:74:0b:66: 60:7e:ee:c5:96:54:31:0a:8b:05:9c:15:c3:2d:3a: 96:86:f0:b5:e0:11:9c:86:3a:2b:80:7c:60:4a:5a: b7:be:84:77:22:ee:27:21:ca:5d:6c:4a:11:de:e8: 50:ea:77:84:89:c9:8c:ee:37:bc:55:58:76:76:55: 63:90:22:a9:4b:6e:04:bf:3a:54:53:71:d1:48:5d: 18:09:be:0c:9a:99:18:ea:ea:30:f0:d9:a1:03:64: 05:24:30:9b:19:68:db:2d:9a:25:c3:91:82:ad:4e: 5e:6e:cf:9a:ec:2d:76:15:65:bb:52:59:0a:87:9c: 93:7a:5b:e8:65:83:15:5e:b6:be:9f:bc:34:67:2c: e6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D0:40:FF:EF:4A:71:68:18:DD:BA:60:89:D3:36:7E:DE:54:E7:9A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9de8c4b6-1ac6-47b4-991c-6bd78e5a345c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2fa6::/47 Signature Algorithm: sha256WithRSAEncryption 16:4d:06:25:8c:bb:5f:b6:8c:15:64:ad:57:07:d7:f9:e0:81: 95:77:d2:c8:3b:0c:d1:17:97:9b:58:ad:0b:97:10:3c:61:d1: e0:98:d6:58:03:56:c8:14:19:b1:ca:af:c8:d9:92:e4:df:27: 51:15:d4:c0:c3:87:99:91:1d:b7:eb:21:47:3c:9d:5c:09:04: a0:b7:55:59:06:a6:3f:a3:cf:36:12:04:0b:45:a4:2d:53:4b: 7e:44:07:08:47:7c:32:ac:f4:97:9a:3b:1d:bf:2a:e8:30:ea: ef:a1:50:6b:a1:63:63:0b:77:68:2c:09:04:40:8d:45:0c:0a: c0:77:1c:1b:47:7d:c6:5b:63:41:68:db:9a:e7:98:6e:de:9f: fb:91:8a:b5:4a:d9:97:b7:21:58:13:d5:17:6a:bf:8f:79:af: c1:32:06:65:a1:15:43:cb:8c:87:69:a2:2e:7c:57:8f:d3:c2: 40:37:24:91:16:10:e9:18:3f:c0:80:1a:26:17:b7:dc:f5:b8: dd:6c:e2:42:7b:fe:8b:51:ef:1c:af:de:b5:08:6a:5b:56:4c: be:c9:cf:66:ed:4e:59:cd:51:9e:72:ba:a2:1e:36:71:08:03: 99:f1:af:c9:82:4b:a1:a0:7b:52:fc:81:aa:31:14:28:8c:dd: 94:25:80:f7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJaQGkga6/rGJ4lJ8c6VHUL873+YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjM1MjA4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWE4Mzk3YWMyYmMzODJkZGY0NGIxNzY1OTgzZWMzNzI5 MzkzMTk1ZTJjODFkNTM2ZjQ3MTFmZjgxNmM0ZTIxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkAqhwnGlepLsH3nXm76cxbqhpR0PkXY/tDZ7VqUDWolkN pDSIlhNf7NwIGtiJuUM8nCMGvjHuxzQyE64qyXSSeZZnTHKEVA9ds+a69z29dQ2i Y4rwFbLct5YkvAIKnwoxXBJlu8EUO3ZCemxaAF3g6ONE9HQLZmB+7sWWVDEKiwWc FcMtOpaG8LXgEZyGOiuAfGBKWre+hHci7ichyl1sShHe6FDqd4SJyYzuN7xVWHZ2 VWOQIqlLbgS/OlRTcdFIXRgJvgyamRjq6jDw2aEDZAUkMJsZaNstmiXDkYKtTl5u z5rsLXYVZbtSWQqHnJN6W+hlgxVetr6fvDRnLObLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULtBA/+9KcWgY3bpgidM2ft5U55owHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzlkZThjNGI2LTFhYzYtNDdiNC05OTFjLTZiZDc4ZTVhMzQ1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAL6YwDQYJKoZIhvcNAQELBQADggEBABZNBiWMu1+2jBVkrVcH1/ng gZV30sg7DNEXl5tYrQuXEDxh0eCY1lgDVsgUGbHKr8jZkuTfJ1EV1MDDh5mRHbfr IUc8nVwJBKC3VVkGpj+jzzYSBAtFpC1TS35EBwhHfDKs9JeaOx2/Kugw6u+hUGuh Y2MLd2gsCQRAjUUMCsB3HBtHfcZbY0Fo25rnmG7en/uRirVK2Ze3IVgT1Rdqv495 r8EyBmWhFUPLjIdpoi58V4/TwkA3JJEWEOkYP8CAGiYXt9z1uN1s4kJ7/otR7xyv 3rUIaltWTL7Jz2btTlnNUZ5yuqIeNnEIA5nxr8mCS6Gge1L8gaoxFCiM3ZQlgPc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:42:23 2025 by rpki-client