$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca292690-7c31-447f-ab0e-b03263a3b0e6.roa File: ca292690-7c31-447f-ab0e-b03263a3b0e6.roa (raw, json) Hash identifier: HoCSp1srDojFvG0MWxGDcgw829aPlQS/n3pxNFlV1Ak= Subject key identifier: 52:71:EB:DE:2B:51:23:1F:F2:30:89:8B:45:81:1A:40:49:0A:8F:D2 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 285A0856D745A1DA36666D5AFE313C780DAA710D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca292690-7c31-447f-ab0e-b03263a3b0e6.roa Signing time: Thu 30 Oct 2025 23:08:43 +0000 ROA not before: Thu 30 Oct 2025 23:08:43 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2b3a::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:5a:08:56:d7:45:a1:da:36:66:6d:5a:fe:31:3c:78:0d:aa:71:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:08:43 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=1e894d0a4508c93bd0e86d95f2212d8b40652ddc0c2c142dea3bd8cce033230e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:12:cc:5f:48:ce:85:d6:b5:64:19:0f:60: ea:d7:5c:73:9f:3f:01:3a:d1:f7:55:23:c4:fb:5e: 44:76:fa:fb:6e:66:21:c1:5a:c5:ab:7f:47:8e:08: 20:2c:3c:c6:ef:c2:90:70:8a:8e:75:79:bc:8e:5f: f6:da:28:d2:5f:7b:10:10:80:42:02:a7:c3:4e:9f: cb:a7:f8:24:41:be:db:39:36:71:7d:75:b9:7c:57: 3b:9a:0a:ec:5a:65:26:83:56:fb:9f:33:b3:e7:f2: 63:06:81:1c:02:90:f7:8d:a7:4f:34:7b:f4:08:de: 74:d9:09:92:5c:09:60:00:67:73:c3:d8:96:5f:e9: ce:ad:1b:66:04:10:d8:ca:b5:6c:9e:9e:9e:ec:af: 48:a9:cf:3d:67:f3:60:de:3b:24:78:b1:59:63:19: 53:ea:9a:77:16:1d:e4:18:93:00:a3:cf:65:8e:f8: 31:13:2f:0b:14:fe:78:4a:d7:e0:c9:de:bc:45:7a: 82:85:41:4d:e2:92:3d:0d:62:a8:15:34:79:a1:fb: 19:07:45:3e:d9:9b:c4:7f:09:bc:dd:0a:78:40:6c: 2b:dc:b2:43:27:58:de:ac:12:9e:47:78:51:53:f8: 7f:6c:56:ef:52:20:ed:3e:ce:15:73:94:b1:75:c2: e6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:71:EB:DE:2B:51:23:1F:F2:30:89:8B:45:81:1A:40:49:0A:8F:D2 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ca292690-7c31-447f-ab0e-b03263a3b0e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2b3a::/47 Signature Algorithm: sha256WithRSAEncryption 41:b8:9d:ca:1e:e4:31:ba:d0:06:74:29:02:6f:0a:45:13:a0: b0:ae:e3:e5:47:c2:b5:39:a2:38:bb:c2:f0:c6:64:5d:90:af: ce:98:48:bd:11:eb:07:65:b3:72:c8:41:b3:53:8d:46:17:70: 85:d8:f6:a4:e8:d8:63:49:74:c3:a7:31:8d:1a:07:e2:3e:eb: ed:b6:14:db:d3:62:ce:46:89:ee:bf:ca:74:e5:f4:8a:6d:20: 1d:59:12:ce:ff:a2:d0:37:4d:9b:fc:bd:fc:3d:85:3d:85:b3: d2:6a:27:9f:dd:df:83:13:2c:8f:58:a2:75:f1:24:3c:a8:af: 75:7a:32:6f:37:80:67:e5:ca:e3:bd:30:ac:01:6a:d7:a9:16: c3:4a:4c:ed:0d:9e:92:89:c7:d4:75:e6:79:f2:ed:03:b6:d8: a5:bf:be:e5:6e:43:e1:98:ff:eb:5a:ce:65:2b:61:66:34:c6: c8:6c:7b:2f:20:e7:75:ef:ba:df:01:4e:e2:c2:e0:83:db:8b: 47:2c:26:11:b3:34:40:18:bc:dd:e2:88:64:62:c7:12:2c:83: 2d:86:dc:a9:7f:af:a3:63:27:f7:71:05:92:85:7d:30:69:41: f2:86:6f:e1:dc:34:75:4b:2b:35:9e:d2:e3:68:77:ea:de:80: 93:ef:ef:23 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKFoIVtdFodo2Zm1a/jE8eA2qcQ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMwODQzWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTg5NGQwYTQ1MDhjOTNiZDBlODZkOTVmMjIxMmQ4YjQw NjUyZGRjMGMyYzE0MmRlYTNiZDhjY2UwMzMyMzBlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTLhLMX0jOhda1ZBkPYOrXXHOfPwE60fdVI8T7XkR2+vtu ZiHBWsWrf0eOCCAsPMbvwpBwio51ebyOX/baKNJfexAQgEICp8NOn8un+CRBvts5 NnF9dbl8VzuaCuxaZSaDVvufM7Pn8mMGgRwCkPeNp080e/QI3nTZCZJcCWAAZ3PD 2JZf6c6tG2YEENjKtWyenp7sr0ipzz1n82DeOyR4sVljGVPqmncWHeQYkwCjz2WO +DETLwsU/nhK1+DJ3rxFeoKFQU3ikj0NYqgVNHmh+xkHRT7Zm8R/CbzdCnhAbCvc skMnWN6sEp5HeFFT+H9sVu9SIO0+zhVzlLF1wuZXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUnHr3itRIx/yMImLRYEaQEkKj9IwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NhMjkyNjkwLTdjMzEtNDQ3Zi1hYjBlLWIwMzI2M2EzYjBlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKzowDQYJKoZIhvcNAQELBQADggEBAEG4ncoe5DG60AZ0KQJvCkUT oLCu4+VHwrU5oji7wvDGZF2Qr86YSL0R6wdls3LIQbNTjUYXcIXY9qTo2GNJdMOn MY0aB+I+6+22FNvTYs5Gie6/ynTl9IptIB1ZEs7/otA3TZv8vfw9hT2Fs9JqJ5/d 34MTLI9YonXxJDyor3V6Mm83gGflyuO9MKwBatepFsNKTO0NnpKJx9R15nny7QO2 2KW/vuVuQ+GY/+tazmUrYWY0xshsey8g53Xvut8BTuLC4IPbi0csJhGzNEAYvN3i iGRixxIsgy2G3Kl/r6NjJ/dxBZKFfTBpQfKGb+HcNHVLKzWe0uNod+regJPv7yM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:27 2025 by rpki-client