$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2d7f713-b501-4e1e-9ae4-33be53878c23.roa File: a2d7f713-b501-4e1e-9ae4-33be53878c23.roa (raw, json) Hash identifier: r1jG4FIzwBDEnO393flsGdJT/9+Xyh0SIHSnko1l3i0= Subject key identifier: DB:E8:4E:3F:57:2A:91:27:4C:01:CA:F6:90:42:6A:BF:03:0A:C2:D4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7AD5CBB7C9FAECD4CA3E65530BF40C358228209E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2d7f713-b501-4e1e-9ae4-33be53878c23.roa Signing time: Thu 30 Oct 2025 21:37:10 +0000 ROA not before: Thu 30 Oct 2025 21:37:10 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:17c4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d5:cb:b7:c9:fa:ec:d4:ca:3e:65:53:0b:f4:0c:35:82:28:20:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:37:10 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=da84a8a90b39d054864faf2d689530d0f8889d4e47f494ad638477792aa3fee7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:76:8a:39:03:b6:6f:b1:b8:e0:a8:dc:c6:37: 9e:fd:7b:70:15:f3:6e:16:d8:49:e6:a9:cf:2b:28: 8b:63:b7:05:c4:a3:fe:a8:97:5e:73:97:db:6d:dc: 3d:a7:e6:57:5a:f4:84:cf:f4:3b:5d:a6:27:b4:d1: d5:de:87:fb:ff:e8:d7:3f:57:70:31:2e:51:54:fc: ab:19:83:4d:13:d9:af:df:8b:a4:57:64:c2:71:b9: 35:1f:63:7e:22:b4:0f:4f:f9:d5:a3:fb:b4:f6:a3: 75:65:99:de:f3:a4:56:09:d5:5b:cb:bb:3d:b8:7b: b3:ee:c5:ad:00:96:2a:aa:08:14:a5:1e:98:f4:1c: e9:8b:91:d2:54:c0:6e:fe:a7:49:99:51:3c:21:2e: 1c:b9:b9:98:c3:6a:a1:47:08:c5:75:99:e7:5f:07: a4:25:1a:d4:07:f7:11:59:60:09:69:6f:70:a1:12: 97:40:72:c8:93:e3:49:c6:49:ae:c6:26:53:67:b9: 80:8b:e5:4d:53:0a:c2:e5:1a:81:e5:20:77:da:fd: e5:1c:f1:b5:15:cc:c7:0a:39:32:e9:b0:de:5a:d3: 52:8e:02:b4:7c:25:da:1e:ee:b7:9b:bd:6f:5a:03: aa:63:11:73:39:d4:9c:f4:be:ef:a7:6a:10:39:83: 21:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E8:4E:3F:57:2A:91:27:4C:01:CA:F6:90:42:6A:BF:03:0A:C2:D4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2d7f713-b501-4e1e-9ae4-33be53878c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:17c4::/47 Signature Algorithm: sha256WithRSAEncryption 86:e0:e2:7a:86:d0:73:69:86:e4:59:c1:ce:cd:22:b3:ea:8c: 89:52:8d:ae:ac:ee:a9:98:78:cf:74:a6:7a:9c:11:16:f0:9c: fa:86:9b:ba:26:4f:83:6c:25:56:cc:fe:21:af:8b:88:71:bb: e5:68:fd:46:c5:d8:fc:37:a1:4a:02:bb:9b:75:bd:38:d9:fb: e3:3e:8c:31:32:d7:50:7b:da:4a:10:a6:a8:b5:03:f1:4b:10: e4:92:0c:e5:cd:bf:5b:72:9d:49:85:5c:c0:d2:79:b9:87:8b: a1:9a:82:31:e3:6c:a0:b5:6c:88:d9:52:3f:ec:b9:e6:ea:31: 74:2b:1a:a4:b7:76:e1:cd:92:4f:0b:e0:22:a9:f8:ef:90:00: 84:af:fa:0b:0e:c9:4b:9f:25:89:76:97:7d:22:38:93:75:24: cd:f5:66:ca:da:76:b2:48:68:35:4c:f5:ea:c2:34:15:68:79: c7:96:43:66:43:96:66:fe:59:bd:dc:a6:b7:e4:e1:bd:a5:89: 62:07:79:de:10:f5:ff:22:ad:e5:de:77:22:b2:85:35:ad:ba: b6:9c:57:ee:fb:47:b8:8a:d5:a8:2e:16:4a:e6:22:10:f2:ec: 33:6e:42:69:7c:d6:9c:be:ed:63:53:20:ae:a4:69:49:4d:f5: 80:be:d7:31 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUetXLt8n67NTKPmVTC/QMNYIoIJ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEzNzEwWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTg0YThhOTBiMzlkMDU0ODY0ZmFmMmQ2ODk1MzBkMGY4 ODg5ZDRlNDdmNDk0YWQ2Mzg0Nzc3OTJhYTNmZWU3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7doo5A7ZvsbjgqNzGN579e3AV824W2Enmqc8rKItjtwXE o/6ol15zl9tt3D2n5lda9ITP9Dtdpie00dXeh/v/6Nc/V3AxLlFU/KsZg00T2a/f i6RXZMJxuTUfY34itA9P+dWj+7T2o3Vlmd7zpFYJ1VvLuz24e7Puxa0AliqqCBSl Hpj0HOmLkdJUwG7+p0mZUTwhLhy5uZjDaqFHCMV1medfB6QlGtQH9xFZYAlpb3Ch EpdAcsiT40nGSa7GJlNnuYCL5U1TCsLlGoHlIHfa/eUc8bUVzMcKOTLpsN5a01KO ArR8Jdoe7rebvW9aA6pjEXM51Jz0vu+nahA5gyGbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2+hOP1cqkSdMAcr2kEJqvwMKwtQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2EyZDdmNzEzLWI1MDEtNGUxZS05YWU0LTMzYmU1Mzg3OGMyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAF8QwDQYJKoZIhvcNAQELBQADggEBAIbg4nqG0HNphuRZwc7NIrPq jIlSja6s7qmYeM90pnqcERbwnPqGm7omT4NsJVbM/iGvi4hxu+Vo/UbF2Pw3oUoC u5t1vTjZ++M+jDEy11B72koQpqi1A/FLEOSSDOXNv1tynUmFXMDSebmHi6GagjHj bKC1bIjZUj/suebqMXQrGqS3duHNkk8L4CKp+O+QAISv+gsOyUufJYl2l30iOJN1 JM31ZsradrJIaDVM9erCNBVoeceWQ2ZDlmb+Wb3cprfk4b2liWIHed4Q9f8ireXe dyKyhTWturacV+77R7iK1aguFkrmIhDy7DNuQml81py+7WNTIK6kaUlN9YC+1zE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:34:54 2025 by rpki-client