$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af7b272f-8712-4201-adff-bc9a0c7f832e.roa File: af7b272f-8712-4201-adff-bc9a0c7f832e.roa (raw, json) Hash identifier: tWsiFCuFmRr274lZYEba3PaL+OOVr8nO6+Ao1U2R+E4= Subject key identifier: E0:98:1A:67:41:B0:9E:FE:CA:6E:58:53:C4:52:8B:B5:1E:6E:C9:AC Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 7CBC07A9A33BE878FED9D1E49B219C314859B104 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af7b272f-8712-4201-adff-bc9a0c7f832e.roa Signing time: Fri 31 Oct 2025 00:08:35 +0000 ROA not before: Fri 31 Oct 2025 00:08:35 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3312::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bc:07:a9:a3:3b:e8:78:fe:d9:d1:e4:9b:21:9c:31:48:59:b1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:08:35 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=1ea6fe2562f943624cd6bd59de736c7672ca91cb6c52fda4195f7536d23065f0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:f2:d0:bf:6d:e8:4f:fa:ca:cb:81:df:0f: fc:9c:7f:24:f3:56:65:da:10:22:3d:02:fd:da:57: 36:00:18:e3:25:5e:08:1c:bd:38:9d:cc:31:d6:8d: 3d:91:1d:79:15:95:39:de:cf:3d:29:29:25:d3:13: dd:41:a8:5b:ff:d7:79:b5:51:3f:f8:f2:a3:5a:ac: 11:b9:4c:5f:32:35:14:80:f8:7a:db:11:6a:53:5f: 5f:55:fa:53:9c:c6:73:1b:7b:f6:cf:c9:71:f3:42: f5:1a:a2:ef:52:3d:2b:a8:43:d6:62:54:45:02:8c: 14:42:65:cc:6c:20:81:1e:8a:e5:0c:43:3e:9d:3f: c2:8f:03:46:e8:9b:03:c4:74:95:e0:b1:e5:4a:4b: 82:08:c6:3e:1f:d3:2b:77:fd:d7:e6:e6:3f:e9:df: 27:77:d7:eb:30:58:64:67:20:3f:4b:c1:4b:4f:fa: c9:1f:07:1b:ee:06:71:eb:62:ce:f3:37:fe:fc:a4: 3f:19:01:cf:31:fd:a3:43:97:23:4f:6b:49:29:96: 87:f8:90:04:c7:81:07:6e:3f:a5:c1:e6:bc:6e:4d: 91:86:d4:21:bd:97:bc:cd:18:86:d6:e3:18:67:94: 1b:1b:a7:03:49:19:92:1e:42:01:a8:4f:8a:85:c2: 98:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:98:1A:67:41:B0:9E:FE:CA:6E:58:53:C4:52:8B:B5:1E:6E:C9:AC X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/af7b272f-8712-4201-adff-bc9a0c7f832e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3312::/47 Signature Algorithm: sha256WithRSAEncryption 56:99:54:9b:21:d7:eb:bc:30:29:4d:2d:36:7e:12:86:d7:2a: a6:8a:15:78:83:cc:a3:3d:c4:7c:e5:5d:91:7b:a0:28:8d:2c: 5e:13:9e:ec:f7:7c:d5:cc:62:c5:a8:56:75:c1:53:dc:dc:fd: 02:55:bb:60:42:b5:f2:24:82:ef:d5:93:05:9b:62:3a:f5:32: 09:ee:36:87:f6:e5:43:ea:83:89:86:04:50:a9:a2:e1:47:5e: 65:1d:1a:a1:45:e8:65:db:67:e0:f2:90:25:55:6f:24:71:9b: 3f:bf:6b:77:d7:a7:ea:02:db:7a:ae:24:70:ae:66:20:c1:a2: fc:4e:e7:c8:58:18:3a:0e:c1:cb:7d:79:af:e8:1d:0e:30:35: 5b:8a:63:35:cf:97:15:a9:8f:13:fd:4b:2e:b2:28:db:62:03: 2d:f6:3d:80:a1:1b:ba:dc:53:79:8e:22:4f:a0:89:3b:81:bb: 96:c1:f8:2f:95:71:bb:e4:0e:a8:3f:49:af:ec:c8:7e:fe:bb: 47:22:f9:df:8b:62:14:e2:f2:1c:f6:5f:2d:eb:ff:b4:84:7d: da:9c:3b:a3:ea:5a:05:5a:1c:a3:fc:66:e5:31:c3:55:0c:6e: 56:be:81:9b:d0:2a:1e:24:f5:6b:be:66:a5:b3:8a:82:26:77: b0:43:7b:c1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfLwHqaM76Hj+2dHkmyGcMUhZsQQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDAwODM1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZWE2ZmUyNTYyZjk0MzYyNGNkNmJkNTlkZTczNmM3Njcy Y2E5MWNiNmM1MmZkYTQxOTVmNzUzNmQyMzA2NWYwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCS1fLQv23oT/rKy4HfD/ycfyTzVmXaECI9Av3aVzYAGOMl XggcvTidzDHWjT2RHXkVlTnezz0pKSXTE91BqFv/13m1UT/48qNarBG5TF8yNRSA +HrbEWpTX19V+lOcxnMbe/bPyXHzQvUaou9SPSuoQ9ZiVEUCjBRCZcxsIIEeiuUM Qz6dP8KPA0bomwPEdJXgseVKS4IIxj4f0yt3/dfm5j/p3yd31+swWGRnID9LwUtP +skfBxvuBnHrYs7zN/78pD8ZAc8x/aNDlyNPa0kplof4kATHgQduP6XB5rxuTZGG 1CG9l7zNGIbW4xhnlBsbpwNJGZIeQgGoT4qFwpjdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4JgaZ0Gwnv7KblhTxFKLtR5uyawwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FmN2IyNzJmLTg3MTItNDIwMS1hZGZmLWJjOWEwYzdmODMyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAMxIwDQYJKoZIhvcNAQELBQADggEBAFaZVJsh1+u8MClNLTZ+EobX KqaKFXiDzKM9xHzlXZF7oCiNLF4Tnuz3fNXMYsWoVnXBU9zc/QJVu2BCtfIkgu/V kwWbYjr1MgnuNof25UPqg4mGBFCpouFHXmUdGqFF6GXbZ+DykCVVbyRxmz+/a3fX p+oC23quJHCuZiDBovxO58hYGDoOwct9ea/oHQ4wNVuKYzXPlxWpjxP9Sy6yKNti Ay32PYChG7rcU3mOIk+giTuBu5bB+C+VcbvkDqg/Sa/syH7+u0ci+d+LYhTi8hz2 Xy3r/7SEfdqcO6PqWgVaHKP8ZuUxw1UMbla+gZvQKh4k9Wu+ZqWzioImd7BDe8E= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:48 2025 by rpki-client