$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/affbec3f-6134-4161-ad6d-183cd05926c0.roa File: affbec3f-6134-4161-ad6d-183cd05926c0.roa (raw, json) Hash identifier: IPuRvsauj7HChff1E3SP82bG/XIJ03z0YjWbtYY6414= Subject key identifier: F9:76:14:6E:DF:0F:63:C3:E8:F5:73:95:62:D6:D9:46:D6:3F:52:4F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1902E24083702B93542CA6D69FF0B27F81360548 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/affbec3f-6134-4161-ad6d-183cd05926c0.roa Signing time: Fri 31 Oct 2025 05:44:00 +0000 ROA not before: Fri 31 Oct 2025 05:44:00 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2cf8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:02:e2:40:83:70:2b:93:54:2c:a6:d6:9f:f0:b2:7f:81:36:05:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:44:00 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=2934be4e2d5993236a265b6f845bb144cdc6ccec982d5a112ea1e14c7552cd83, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:59:61:06:c1:d8:d5:22:1f:69:9c:23:4b: fc:78:87:ef:61:ab:85:93:be:b9:61:5c:55:08:b8: 88:5a:0f:2a:9c:7f:96:90:a8:91:54:d1:f8:67:a5: 31:4f:e9:43:84:4c:2c:48:50:3a:26:ee:90:ee:c0: 2f:5b:67:60:a5:e1:49:23:83:e6:85:fa:8a:f0:13: 02:b7:ea:69:1f:45:a2:f5:15:d7:6a:47:67:de:4e: e6:b3:29:e5:eb:bc:c6:15:ba:e7:08:37:4a:a9:66: 66:66:e7:71:7a:e2:0e:be:ee:a4:f2:10:b1:15:19: 20:68:9b:8e:da:9f:aa:da:6a:99:aa:22:58:3f:f3: 67:be:b9:7b:33:cc:3c:87:ca:7d:13:ac:12:db:95: f8:69:4f:2e:76:6e:25:9d:c0:92:29:79:fb:de:2e: 21:1c:50:fc:ef:e1:8d:ea:10:40:7f:17:d4:1d:fe: f7:92:d5:c3:64:eb:d6:01:86:41:f4:f1:bb:1d:8d: ae:14:73:3e:0e:7f:73:e8:b4:9a:cb:65:0d:e4:cc: ac:1b:24:39:9f:a3:e1:00:25:63:c9:ad:a8:88:dd: 96:0e:11:71:b3:5f:a4:d2:48:1c:2b:5e:dd:54:5b: 92:b8:9e:b8:eb:21:99:48:a3:6d:32:0a:a7:46:a9: ea:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:76:14:6E:DF:0F:63:C3:E8:F5:73:95:62:D6:D9:46:D6:3F:52:4F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/affbec3f-6134-4161-ad6d-183cd05926c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2cf8::/45 Signature Algorithm: sha256WithRSAEncryption a8:af:42:bf:77:4b:be:42:cd:43:d2:d0:b7:db:f3:c4:36:47: 27:de:82:cf:59:7b:d8:5c:06:14:88:de:cd:d9:fe:42:23:fa: b8:9d:0f:75:a7:ca:fd:ac:9e:fc:d7:ad:80:03:f9:2e:c1:8d: 45:b2:bd:97:45:d1:7f:25:f5:c6:1b:0d:c4:1d:0d:08:55:85: 33:77:5c:eb:c5:2e:44:25:f2:bb:89:b0:e6:c9:b2:e1:25:cc: e8:b7:1f:42:8e:21:c1:15:66:93:15:da:bc:39:bf:74:77:de: 37:52:ab:b3:27:07:95:b6:bf:c7:5f:e5:02:60:13:48:61:32: da:c4:32:4f:c3:94:5b:63:19:7b:64:ba:11:af:83:45:30:79: 5b:f0:3b:e2:f5:07:f9:0b:1f:61:f7:dc:38:b9:21:90:ee:bb: 3f:29:78:77:a5:89:52:ae:84:e2:fe:40:10:48:92:a1:d2:d9: 17:30:19:5e:1f:f7:f5:0a:2d:c5:3b:c8:68:39:48:6c:e3:f2: d4:43:c0:c2:fc:81:f9:39:49:28:5e:c1:25:0d:32:7a:cb:06: 38:c3:86:79:cc:24:5a:ac:12:d2:22:c9:4b:97:62:b5:e4:d2: 71:6c:4f:47:eb:cd:11:68:08:d8:70:35:01:fe:26:09:4c:45: b8:18:f2:59 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGQLiQINwK5NULKbWn/Cyf4E2BUgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU0NDAwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTM0YmU0ZTJkNTk5MzIzNmEyNjViNmY4NDViYjE0NGNk YzZjY2VjOTgyZDVhMTEyZWExZTE0Yzc1NTJjZDgzMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxgFlhBsHY1SIfaZwjS/x4h+9hq4WTvrlhXFUIuIhaDyqc f5aQqJFU0fhnpTFP6UOETCxIUDom7pDuwC9bZ2Cl4Ukjg+aF+orwEwK36mkfRaL1 FddqR2feTuazKeXrvMYVuucIN0qpZmZm53F64g6+7qTyELEVGSBom47an6raapmq Ilg/82e+uXszzDyHyn0TrBLblfhpTy52biWdwJIpefveLiEcUPzv4Y3qEEB/F9Qd /veS1cNk69YBhkH08bsdja4Ucz4Of3PotJrLZQ3kzKwbJDmfo+EAJWPJraiI3ZYO EXGzX6TSSBwrXt1UW5K4nrjrIZlIo20yCqdGqeplAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+XYUbt8PY8Po9XOVYtbZRtY/Uk8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2FmZmJlYzNmLTYxMzQtNDE2MS1hZDZkLTE4M2NkMDU5MjZjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALPgwDQYJKoZIhvcNAQELBQADggEBAKivQr93S75CzUPS0Lfb88Q2 Ryfegs9Ze9hcBhSI3s3Z/kIj+ridD3Wnyv2snvzXrYAD+S7BjUWyvZdF0X8l9cYb DcQdDQhVhTN3XOvFLkQl8ruJsObJsuElzOi3H0KOIcEVZpMV2rw5v3R33jdSq7Mn B5W2v8df5QJgE0hhMtrEMk/DlFtjGXtkuhGvg0UweVvwO+L1B/kLH2H33Di5IZDu uz8peHeliVKuhOL+QBBIkqHS2RcwGV4f9/UKLcU7yGg5SGzj8tRDwML8gfk5SShe wSUNMnrLBjjDhnnMJFqsEtIiyUuXYrXk0nFsT0frzRFoCNhwNQH+JglMRbgY8lk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:03 2025 by rpki-client