$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cef12302-0b94-420e-a421-b0dc25d35aa4.roa File: cef12302-0b94-420e-a421-b0dc25d35aa4.roa (raw, json) Hash identifier: rRKJEju2YhQcoCFvqutODM7zeFxC+aDnAZ+mq2j4dkI= Subject key identifier: 12:9F:77:7B:49:FA:3C:04:15:C9:E9:06:A8:61:7A:EB:A3:B1:94:C0 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 58299020A009A22B6E74FC30B93178B36D9C596C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cef12302-0b94-420e-a421-b0dc25d35aa4.roa Signing time: Thu 30 Oct 2025 21:59:05 +0000 ROA not before: Thu 30 Oct 2025 21:59:05 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1aa2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:29:90:20:a0:09:a2:2b:6e:74:fc:30:b9:31:78:b3:6d:9c:59:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:59:05 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=1a9f9df815f99f6d79b7420f190b20dcbf22e5ad2e176ae6efe782aa5b70d3c6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:86:1e:d6:92:38:bf:0a:a5:bf:f5:de:24:2a: 02:fd:0c:5d:ea:4e:d9:e6:d4:4c:58:d1:b3:b7:e3: 3b:23:62:73:12:9f:2b:67:64:60:d7:e2:df:51:20: 09:71:13:b6:fc:85:1e:f0:e8:6c:cb:00:05:a7:d8: f2:d7:fd:b3:52:2f:63:3b:52:c0:77:16:ac:96:e4: 52:05:c3:31:e5:e8:2a:fb:92:34:71:7b:29:b5:d6: f3:f5:80:e4:e1:5e:79:cb:47:18:18:44:3a:26:6b: e1:c2:c3:58:99:cf:d2:40:73:7a:31:48:0c:43:1e: 60:c5:44:5c:06:78:fe:77:d6:ca:fb:07:b7:60:26: 2d:df:41:cc:32:69:ff:78:d2:21:08:ac:cc:da:41: 94:8c:57:2b:c8:88:6b:c7:69:4c:f1:07:e6:4a:95: 83:0e:0b:03:61:b2:bb:f2:78:1b:b7:19:0e:d8:0e: 20:83:c9:0f:53:80:78:5c:d5:48:ee:96:a3:15:3c: dd:fb:d1:54:83:75:d4:9e:2d:a7:e9:b4:6d:ba:fc: 1d:00:d5:cc:4d:94:22:13:d4:e3:0f:e9:b7:21:3d: db:6f:a9:23:91:e1:4b:cd:e3:a5:eb:de:19:f8:a8: bb:22:c8:36:0d:57:36:54:7b:15:5e:fb:19:03:11: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9F:77:7B:49:FA:3C:04:15:C9:E9:06:A8:61:7A:EB:A3:B1:94:C0 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cef12302-0b94-420e-a421-b0dc25d35aa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1aa2::/47 Signature Algorithm: sha256WithRSAEncryption a3:82:15:ba:a4:40:b9:cd:61:2b:6a:81:4e:92:5c:2e:22:f4: 95:cc:90:b3:85:ba:19:9b:62:e8:28:2e:7e:ba:05:b5:af:21: 88:6e:9d:65:ad:09:17:4c:58:de:ec:1f:ce:df:7e:a6:6a:5a: ca:60:0c:97:40:86:a5:ef:93:21:0e:20:c3:bc:0f:9d:24:f0: 0a:2e:d2:15:e8:24:ea:62:b5:ca:5d:4c:7a:65:28:8d:48:9d: b4:a3:05:a6:26:89:67:56:91:4f:01:24:95:2a:fd:af:dc:d9: b5:45:99:f8:d8:b3:2e:0f:61:49:61:80:e8:56:4f:e6:3f:74: 5c:65:dc:bc:ce:7d:2f:0f:4c:aa:d7:ec:c6:e6:64:c4:26:5b: c9:4a:f5:a0:5b:dc:03:2f:a2:c5:f0:67:cb:66:0c:eb:2f:dc: 43:6f:b2:c3:b1:12:da:4a:2b:f6:8f:72:a1:9b:8e:60:6a:2c: e4:92:1a:72:a6:c9:90:b8:e5:7d:c2:4b:6e:19:d7:e6:b6:82: 96:da:e2:bb:6d:20:ae:ae:5c:17:3f:f6:cb:d2:a5:48:69:57: 01:fd:d9:26:90:1b:92:f9:86:74:c1:82:c0:fd:8e:ec:67:67: 9a:1f:af:e9:63:f5:13:74:c8:58:21:20:9f:1d:f6:06:b6:de: c1:fb:26:e2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWCmQIKAJoitudPwwuTF4s22cWWwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE1OTA1WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTlmOWRmODE1Zjk5ZjZkNzliNzQyMGYxOTBiMjBkY2Jm MjJlNWFkMmUxNzZhZTZlZmU3ODJhYTViNzBkM2M2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlhh7Wkji/CqW/9d4kKgL9DF3qTtnm1ExY0bO34zsjYnMS nytnZGDX4t9RIAlxE7b8hR7w6GzLAAWn2PLX/bNSL2M7UsB3FqyW5FIFwzHl6Cr7 kjRxeym11vP1gOThXnnLRxgYRDoma+HCw1iZz9JAc3oxSAxDHmDFRFwGeP531sr7 B7dgJi3fQcwyaf940iEIrMzaQZSMVyvIiGvHaUzxB+ZKlYMOCwNhsrvyeBu3GQ7Y DiCDyQ9TgHhc1UjulqMVPN370VSDddSeLafptG26/B0A1cxNlCIT1OMP6bchPdtv qSOR4UvN46Xr3hn4qLsiyDYNVzZUexVe+xkDEUcLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEp93e0n6PAQVyekGqGF666OxlMAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NlZjEyMzAyLTBiOTQtNDIwZS1hNDIxLWIwZGMyNWQzNWFhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGqIwDQYJKoZIhvcNAQELBQADggEBAKOCFbqkQLnNYStqgU6SXC4i 9JXMkLOFuhmbYugoLn66BbWvIYhunWWtCRdMWN7sH87ffqZqWspgDJdAhqXvkyEO IMO8D50k8Aou0hXoJOpitcpdTHplKI1InbSjBaYmiWdWkU8BJJUq/a/c2bVFmfjY sy4PYUlhgOhWT+Y/dFxl3LzOfS8PTKrX7MbmZMQmW8lK9aBb3AMvosXwZ8tmDOsv 3ENvssOxEtpKK/aPcqGbjmBqLOSSGnKmyZC45X3CS24Z1+a2gpba4rttIK6uXBc/ 9svSpUhpVwH92SaQG5L5hnTBgsD9juxnZ5ofr+lj9RN0yFghIJ8d9ga23sH7JuI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:59 2025 by rpki-client