$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afba9de2-8102-440b-9cff-2d3e9fa80553.roa File: afba9de2-8102-440b-9cff-2d3e9fa80553.roa (raw, json) Hash identifier: BiBd+Clu1nl+6BdvTImmbrmVwxckuPNd2riVoB/Zagk= Subject key identifier: 94:03:1F:D1:83:7F:E0:F3:0F:DA:7C:B4:57:F5:55:F7:CA:D1:22:F5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 788B3BBEA1E02FC384E787C70A53ED8830C47D50 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afba9de2-8102-440b-9cff-2d3e9fa80553.roa Signing time: Fri 31 Oct 2025 07:55:43 +0000 ROA not before: Fri 31 Oct 2025 07:55:43 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8b:3b:be:a1:e0:2f:c3:84:e7:87:c7:0a:53:ed:88:30:c4:7d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:55:43 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=221ba716b33ad596d50fd4cd1b34602cd14d432067fcd50292a9fd835e675e46, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:7a:4f:45:5e:66:f3:40:ad:9c:41:4f:e1: 26:d3:1e:45:5f:bd:30:39:0f:4a:cc:2d:1d:09:cc: bd:12:3e:65:f5:81:df:83:6e:be:ee:13:59:a0:a3: a9:85:10:c0:a9:65:9c:32:08:d4:a8:4f:50:19:9e: 5b:4b:8d:fd:4a:0e:fc:11:12:6e:6d:4d:8c:52:e1: 69:33:5a:d9:04:32:a9:ee:5d:d5:d7:3d:29:78:45: 10:31:fe:0c:f1:5e:db:a7:25:ab:b8:b7:e2:57:d3: 06:f1:c8:56:5e:f9:4b:13:07:25:2e:d9:dd:4c:f8: 4d:ac:45:6a:37:18:59:b0:0d:e9:bc:2c:e4:84:19: e6:19:01:e0:9c:23:6e:ae:68:1c:a7:04:b4:72:75: 8c:b0:11:87:45:b4:d4:c9:59:de:0b:bd:cb:1c:f9: 9e:48:14:2a:3f:7b:19:f2:40:cd:58:59:2f:c5:e6: 43:20:96:59:83:1d:5c:56:44:9f:e2:cb:28:21:49: e6:29:34:d9:01:f7:eb:f1:af:12:6a:a0:eb:77:54: 74:ed:ce:06:18:66:d4:e6:ac:4c:7c:d4:bf:81:e4: ce:6d:14:fa:8c:fc:b0:37:6c:06:ea:48:7a:f4:6b: 43:48:72:b3:bc:04:8b:dc:b8:be:d5:80:4f:c8:59: 95:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:03:1F:D1:83:7F:E0:F3:0F:DA:7C:B4:57:F5:55:F7:CA:D1:22:F5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/afba9de2-8102-440b-9cff-2d3e9fa80553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2c00::/38 Signature Algorithm: sha256WithRSAEncryption 9d:73:20:01:6b:95:1e:11:66:bc:47:22:af:40:a8:6b:fb:3d: 6f:18:cb:6e:61:68:47:41:ee:52:b9:be:5e:8d:f3:38:91:2f: 5a:52:f5:a6:20:99:af:24:d9:95:55:f7:16:53:0c:2b:a1:0e: 97:ce:df:ec:1a:7f:a2:5f:72:0c:0e:92:0e:d3:8d:fc:bc:21: 70:69:f9:e0:f2:68:72:4a:8a:10:3b:de:ce:62:62:0d:dc:37: 09:ad:68:f8:54:d2:bb:0b:04:10:89:fb:f0:90:04:19:64:88: e9:6d:13:27:50:57:1c:a2:47:6d:c9:fc:57:c4:a3:b0:7e:1d: 83:8c:dc:11:2a:95:d2:cb:b2:75:eb:2d:1e:1b:32:8e:74:71: e0:93:ac:43:a6:50:e1:c8:2d:58:2f:d4:9b:61:3f:07:4c:41: a2:05:e8:25:72:84:1f:47:cb:46:21:79:15:53:dc:97:cb:c3: 81:0f:c4:a3:dc:90:3d:f0:d3:de:73:06:04:95:89:46:23:56: 20:df:f7:62:ed:7c:9b:a6:c2:f8:1f:68:83:1e:ec:e3:9e:54: 9f:c6:68:b4:c6:a2:9b:c2:97:8f:82:1a:e9:ab:73:b8:5f:26: 2a:01:3e:57:10:6f:28:a7:b0:11:e8:72:97:19:3c:1c:ba:1d: ee:02:ea:a4 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUeIs7vqHgL8OE54fHClPtiDDEfVAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDc1NTQzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjFiYTcxNmIzM2FkNTk2ZDUwZmQ0Y2QxYjM0NjAyY2Qx NGQ0MzIwNjdmY2Q1MDI5MmE5ZmQ4MzVlNjc1ZTQ2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/j3pPRV5m80CtnEFP4SbTHkVfvTA5D0rMLR0JzL0SPmX1 gd+Dbr7uE1mgo6mFEMCpZZwyCNSoT1AZnltLjf1KDvwREm5tTYxS4WkzWtkEMqnu XdXXPSl4RRAx/gzxXtunJau4t+JX0wbxyFZe+UsTByUu2d1M+E2sRWo3GFmwDem8 LOSEGeYZAeCcI26uaBynBLRydYywEYdFtNTJWd4Lvcsc+Z5IFCo/exnyQM1YWS/F 5kMgllmDHVxWRJ/iyyghSeYpNNkB9+vxrxJqoOt3VHTtzgYYZtTmrEx81L+B5M5t FPqM/LA3bAbqSHr0a0NIcrO8BIvcuL7VgE/IWZWrAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUlAMf0YN/4PMP2ny0V/VV98rRIvUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FmYmE5ZGUyLTgxMDItNDQwYi05Y2ZmLTJkM2U5ZmE4MDU1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgImAJAALDANBgkqhkiG9w0BAQsFAAOCAQEAnXMgAWuVHhFmvEcir0Coa/s9 bxjLbmFoR0HuUrm+Xo3zOJEvWlL1piCZryTZlVX3FlMMK6EOl87f7Bp/ol9yDA6S DtON/LwhcGn54PJockqKEDvezmJiDdw3Ca1o+FTSuwsEEIn78JAEGWSI6W0TJ1BX HKJHbcn8V8SjsH4dg4zcESqV0suydestHhsyjnRx4JOsQ6ZQ4cgtWC/Um2E/B0xB ogXoJXKEH0fLRiF5FVPcl8vDgQ/Eo9yQPfDT3nMGBJWJRiNWIN/3Yu18m6bC+B9o gx7s455Un8ZotMaim8KXj4Ia6atzuF8mKgE+VxBvKKewEehylxk8HLod7gLqpA== -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:36 2025 by rpki-client