$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba2fef29-9016-4615-8d9c-43c97ea260d7.roa File: ba2fef29-9016-4615-8d9c-43c97ea260d7.roa (raw, json) Hash identifier: Ds7rcW4rVZyjBaqmHDVOW/FzJi3SGzokEUi3bM9E/wk= Subject key identifier: BD:92:58:0E:35:91:F0:04:32:C5:84:14:1E:35:08:6C:1B:3B:19:22 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2E770B0991B344A23F159AB1088565E4CA17C4D1 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba2fef29-9016-4615-8d9c-43c97ea260d7.roa Signing time: Fri 31 Oct 2025 02:08:18 +0000 ROA not before: Fri 31 Oct 2025 02:08:18 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3fbc::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:77:0b:09:91:b3:44:a2:3f:15:9a:b1:08:85:65:e4:ca:17:c4:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:08:18 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=2ebb097ad0acd85c52c07b83117c2e4bde075b8b7d8f6c0c951067a5b144d0b1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:05:65:fb:1b:0d:bb:26:ed:69:48:14:d2:4a: fb:d7:42:74:d8:ca:df:f4:9e:20:4d:ac:46:f3:1f: b6:0e:c6:67:28:7c:65:6a:ab:b0:8e:5c:73:c6:76: a0:4d:db:22:4c:0a:f7:00:63:2a:65:e7:3c:9a:4a: 5b:a8:52:4f:17:72:0b:92:21:bf:80:bc:10:62:44: 21:9b:40:90:e7:e4:d5:45:7a:1a:39:26:e0:ee:33: cf:49:c8:d9:80:6e:74:d7:ae:0c:f6:b0:87:58:19: e1:ea:7e:30:cf:20:f3:9c:98:27:bd:73:86:d5:cc: 7b:69:d2:c2:24:73:7b:cf:c0:7a:3a:37:16:6f:a4: 3a:ff:51:d1:b3:b8:09:e4:f4:ba:41:92:8e:02:3b: 1a:0c:12:37:45:ae:2e:2a:5c:7e:e1:3c:78:ab:0b: 06:4a:91:9a:91:6a:7e:56:e8:a4:67:6a:18:9d:49: 72:35:02:4f:7e:5f:ed:36:9d:00:bf:a3:9f:0a:b9: e2:e4:b8:a9:c1:c3:0b:8b:45:8a:73:49:2f:99:2d: 18:50:7b:f0:8c:93:8b:22:b1:c8:8b:77:86:36:77: f8:04:da:44:49:93:29:36:90:6d:ed:a4:2e:f8:4f: 15:1a:56:bc:36:2d:12:5d:cd:84:5c:37:f0:89:ea: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:92:58:0E:35:91:F0:04:32:C5:84:14:1E:35:08:6C:1B:3B:19:22 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ba2fef29-9016-4615-8d9c-43c97ea260d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3fbc::/47 Signature Algorithm: sha256WithRSAEncryption aa:f6:c2:44:81:a8:66:0f:d0:34:88:9e:98:ac:da:61:c0:77: 4f:92:92:00:63:98:0f:13:23:d3:cf:2b:2c:52:19:df:37:57: 96:56:49:d1:ea:66:1f:4e:9d:62:58:75:3b:2e:a4:e3:48:1a: 75:12:a2:e8:89:18:9b:7e:82:81:a7:fb:09:17:4b:ad:4d:c0: 3c:ea:e8:a3:18:97:b5:2d:c5:05:cf:09:9e:c3:14:60:3c:6f: fc:a9:e5:24:5c:61:a3:07:b6:45:ff:b5:ab:f4:b2:95:58:21: e6:dd:af:1d:fb:5a:67:84:43:18:48:cb:4f:d4:4c:e2:50:5b: 06:53:57:2d:72:35:59:b0:14:a2:b4:ac:57:b1:ed:e9:aa:82: ba:32:b5:af:27:a4:37:e6:0c:a2:07:96:2b:23:fd:86:a0:4f: 4d:f9:1d:49:cc:bf:0a:10:7c:ef:32:5d:d2:b6:92:f5:c2:9f: bb:f0:3b:d3:91:62:15:0e:ad:f0:e2:d3:2d:c5:ef:e1:09:dc: b6:22:86:94:03:31:49:28:5b:54:7f:de:93:66:35:c9:18:fe: 8c:74:d6:6b:44:97:5b:c3:95:56:d1:75:a2:f5:92:71:ee:58: fb:f6:d4:35:58:32:59:71:13:f3:d8:c4:a2:d2:3c:8c:1b:50: 15:71:e6:b8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULncLCZGzRKI/FZqxCIVl5MoXxNEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDIwODE4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWJiMDk3YWQwYWNkODVjNTJjMDdiODMxMTdjMmU0YmRl MDc1YjhiN2Q4ZjZjMGM5NTEwNjdhNWIxNDRkMGIxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOBWX7Gw27Ju1pSBTSSvvXQnTYyt/0niBNrEbzH7YOxmco fGVqq7COXHPGdqBN2yJMCvcAYypl5zyaSluoUk8XcguSIb+AvBBiRCGbQJDn5NVF eho5JuDuM89JyNmAbnTXrgz2sIdYGeHqfjDPIPOcmCe9c4bVzHtp0sIkc3vPwHo6 NxZvpDr/UdGzuAnk9LpBko4COxoMEjdFri4qXH7hPHirCwZKkZqRan5W6KRnahid SXI1Ak9+X+02nQC/o58KueLkuKnBwwuLRYpzSS+ZLRhQe/CMk4sisciLd4Y2d/gE 2kRJkyk2kG3tpC74TxUaVrw2LRJdzYRcN/CJ6gprAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvZJYDjWR8AQyxYQUHjUIbBs7GSIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2JhMmZlZjI5LTkwMTYtNDYxNS04ZDljLTQzYzk3ZWEyNjBkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAP7wwDQYJKoZIhvcNAQELBQADggEBAKr2wkSBqGYP0DSInpis2mHA d0+SkgBjmA8TI9PPKyxSGd83V5ZWSdHqZh9OnWJYdTsupONIGnUSouiJGJt+goGn +wkXS61NwDzq6KMYl7UtxQXPCZ7DFGA8b/yp5SRcYaMHtkX/tav0spVYIebdrx37 WmeEQxhIy0/UTOJQWwZTVy1yNVmwFKK0rFex7emqgroyta8npDfmDKIHlisj/Yag T035HUnMvwoQfO8yXdK2kvXCn7vwO9ORYhUOrfDi0y3F7+EJ3LYihpQDMUkoW1R/ 3pNmNckY/ox01mtEl1vDlVbRdaL1knHuWPv21DVYMllxE/PYxKLSPIwbUBVx5rg= -----END CERTIFICATE-----Generated at Wed Nov 5 18:11:57 2025 by rpki-client