$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e75526f1-c8e5-45f8-9a22-10f484c1340d.roa File: e75526f1-c8e5-45f8-9a22-10f484c1340d.roa (raw, json) Hash identifier: BRrD2n8YasOqKXiGlVEsOgnAC2q9oyqvKhiTKtfVxCI= Subject key identifier: 3A:9F:C5:AB:73:10:45:78:89:56:AB:1E:79:AA:6D:EA:34:76:13:4B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 30B1770E0A79B013D2952701B86032DCA292917F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e75526f1-c8e5-45f8-9a22-10f484c1340d.roa Signing time: Thu 30 Oct 2025 20:27:19 +0000 ROA not before: Thu 30 Oct 2025 20:27:19 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2672::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b1:77:0e:0a:79:b0:13:d2:95:27:01:b8:60:32:dc:a2:92:91:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:27:19 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=44f3a8dbe8b256cf402279be5433a9aa0c3d5cb12794c14e83900501c2ee8bdf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:02:22:ff:ca:7d:c5:9f:46:48:8c:f1:fa: f6:62:fe:0a:d3:17:11:b3:1a:0d:91:cc:30:90:b4: 36:52:4d:67:d6:94:56:0a:58:48:0e:08:f6:c0:8d: 96:08:f4:9d:ca:e1:f4:2e:67:42:e5:40:b7:12:cf: 2c:b9:47:60:f6:bf:43:9c:2e:95:d7:f9:af:f0:7b: 50:91:2f:14:d8:ec:2a:27:b9:91:39:b0:a0:90:9c: 06:e5:ef:9a:98:24:f7:93:2c:07:e5:f3:70:50:7a: f1:b2:97:df:5f:b9:8f:9f:8f:16:71:5d:53:f0:78: 4b:97:b6:f3:6b:1d:b6:0b:24:e4:19:b5:87:1f:e0: dd:2e:5d:ec:ab:49:2f:4b:b6:62:2a:e7:25:50:fb: 4f:5d:3f:61:7e:c9:34:bf:1d:6b:2a:b6:c7:d9:09: 7e:48:74:4d:f8:7e:97:b9:1f:a5:77:5c:91:65:db: 81:5e:59:9c:2a:70:97:65:08:ca:86:01:ad:fc:41: e7:91:1e:45:02:b9:fe:01:18:01:a2:b6:75:7c:09: 12:e1:5a:49:a7:e5:40:7c:55:a5:96:02:b4:25:23: 81:b5:12:77:ed:6d:bf:d0:72:75:82:d6:f3:e7:ae: a3:e0:8c:94:fd:61:e4:1b:82:ec:fc:86:20:b1:a5: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9F:C5:AB:73:10:45:78:89:56:AB:1E:79:AA:6D:EA:34:76:13:4B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e75526f1-c8e5-45f8-9a22-10f484c1340d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2672::/48 Signature Algorithm: sha256WithRSAEncryption 9a:3f:ea:b8:2e:c5:c3:f5:ee:95:b2:9c:2a:0d:5d:fa:ae:76: 86:d6:16:a3:88:0d:be:bf:1f:10:5a:46:ae:08:7e:b8:1b:68: 8e:ec:a2:07:c6:8b:68:00:b3:fc:a1:74:80:33:cf:96:d6:66: 4a:35:3d:84:bb:85:98:59:41:4f:d6:25:81:5b:eb:af:80:8c: 29:ef:84:6f:01:0c:2d:b2:ba:bf:b9:64:41:e8:33:c4:25:1e: 45:22:21:61:c9:49:bb:8b:ba:2e:c4:75:e4:ff:75:a0:c1:74: 45:5f:67:5d:53:f6:9c:a7:ec:8a:04:e4:3a:dd:74:17:8a:48: d4:d6:d4:95:1b:d3:9f:6d:53:12:59:7e:11:8d:cb:5a:cf:ab: 04:b1:0f:0e:e7:63:d5:05:d3:db:2b:58:b8:fb:1e:c4:5b:21: cf:ca:f0:fe:55:51:e9:ac:7f:87:d5:29:1e:ce:25:4f:92:5c: ca:df:e3:c0:df:5d:08:3c:6f:b7:72:2f:8c:aa:0d:bc:de:47: 3c:c0:1d:83:e4:d6:02:e8:46:20:62:28:5a:79:cc:94:aa:c5: fe:67:1c:0c:5e:24:e0:73:85:71:cc:b9:2b:f8:0e:94:d7:92: ae:da:f9:6a:84:84:bc:25:6b:47:0d:cd:37:2f:85:80:b8:35: 49:95:1d:3d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMLF3Dgp5sBPSlScBuGAy3KKSkX8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjAyNzE5WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NGYzYThkYmU4YjI1NmNmNDAyMjc5YmU1NDMzYTlhYTBj M2Q1Y2IxMjc5NGMxNGU4MzkwMDUwMWMyZWU4YmRmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9/AIi/8p9xZ9GSIzx+vZi/grTFxGzGg2RzDCQtDZSTWfW lFYKWEgOCPbAjZYI9J3K4fQuZ0LlQLcSzyy5R2D2v0OcLpXX+a/we1CRLxTY7Con uZE5sKCQnAbl75qYJPeTLAfl83BQevGyl99fuY+fjxZxXVPweEuXtvNrHbYLJOQZ tYcf4N0uXeyrSS9LtmIq5yVQ+09dP2F+yTS/HWsqtsfZCX5IdE34fpe5H6V3XJFl 24FeWZwqcJdlCMqGAa38QeeRHkUCuf4BGAGitnV8CRLhWkmn5UB8VaWWArQlI4G1 Enftbb/QcnWC1vPnrqPgjJT9YeQbguz8hiCxpS4PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOp/Fq3MQRXiJVqseeapt6jR2E0swHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2U3NTUyNmYxLWM4ZTUtNDVmOC05YTIyLTEwZjQ4NGMxMzQwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAJnIwDQYJKoZIhvcNAQELBQADggEBAJo/6rguxcP17pWynCoNXfqu dobWFqOIDb6/HxBaRq4IfrgbaI7sogfGi2gAs/yhdIAzz5bWZko1PYS7hZhZQU/W JYFb66+AjCnvhG8BDC2yur+5ZEHoM8QlHkUiIWHJSbuLui7EdeT/daDBdEVfZ11T 9pyn7IoE5DrddBeKSNTW1JUb059tUxJZfhGNy1rPqwSxDw7nY9UF09srWLj7HsRb Ic/K8P5VUemsf4fVKR7OJU+SXMrf48DfXQg8b7dyL4yqDbzeRzzAHYPk1gLoRiBi KFp5zJSqxf5nHAxeJOBzhXHMuSv4DpTXkq7a+WqEhLwla0cNzTcvhYC4NUmVHT0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:41 2025 by rpki-client