$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef6ca02e-c736-4655-b788-ce11254548bb.roa File: ef6ca02e-c736-4655-b788-ce11254548bb.roa (raw, json) Hash identifier: ohQA+65aYkIJGcCOKVtL37bMRfH1PWYsD/cPzjCLQQc= Subject key identifier: B3:7D:43:FA:13:56:FB:B0:2E:06:04:D8:76:A5:27:DD:DF:42:12:B2 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4F1BC7296D9DC293D97F0776045884CEF4F31B5A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef6ca02e-c736-4655-b788-ce11254548bb.roa Signing time: Thu 30 Oct 2025 22:53:42 +0000 ROA not before: Thu 30 Oct 2025 22:53:42 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2990::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1b:c7:29:6d:9d:c2:93:d9:7f:07:76:04:58:84:ce:f4:f3:1b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:53:42 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=46df9abb80686d53ab1f1ff3635cd14d048958707d234d60ba0cbcb3c1925f72, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:34:a1:68:d1:74:b4:c8:de:37:2e:dc:66:77: c1:7b:ed:3c:43:10:c5:ba:f8:94:18:81:2d:6f:c2: c5:44:43:42:7d:74:e2:f2:b1:1d:42:ea:3d:4a:c8: 27:ce:81:0d:d4:6d:65:bd:3b:c3:4e:f4:d9:71:e6: 1e:90:b8:58:8d:bf:1e:c9:07:43:db:95:3f:0c:8d: 53:be:8b:4b:7c:e6:db:b6:a3:00:ce:47:e3:ea:a1: e0:dc:cb:99:34:6e:3a:ab:d1:c9:1f:2a:d7:16:5d: 91:8a:44:f7:f5:e6:67:a9:9f:9c:71:3c:c4:2a:f3: 02:36:5a:e3:ea:be:4d:30:7a:a3:f9:9c:18:d6:b7: 5c:19:92:97:b6:7e:2a:e7:50:92:5b:82:07:41:44: 52:59:96:3e:31:4d:5d:8f:3f:1e:35:24:5f:ae:4f: 8b:c4:d9:dc:23:24:8b:ad:af:c2:cb:4a:c4:25:61: 20:cb:ad:58:6c:90:0e:b3:85:88:3b:f8:28:62:73: d9:da:06:d6:94:61:f3:5b:57:64:62:a7:8d:ad:cb: 0a:8e:de:42:4a:92:f7:54:cd:2d:e9:71:77:b4:85: 4f:2c:df:7c:67:ec:c1:97:1e:64:f2:64:07:55:59: 00:8f:a7:d0:cc:82:a2:8a:38:f3:f6:ee:20:88:00: d1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7D:43:FA:13:56:FB:B0:2E:06:04:D8:76:A5:27:DD:DF:42:12:B2 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef6ca02e-c736-4655-b788-ce11254548bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2990::/47 Signature Algorithm: sha256WithRSAEncryption 84:46:f9:97:55:91:2f:c1:7b:a3:e8:0c:e1:d0:8d:70:c4:66: c3:05:01:52:c7:4f:45:52:29:dd:da:e9:d8:ab:cb:72:66:f2: b1:3e:b7:d0:c3:1b:08:ad:4b:7f:3c:47:68:f8:67:c8:d7:b9: d1:ea:62:1f:69:40:c2:ad:82:01:1f:5b:7d:4a:a1:db:fb:ed: 0b:ea:9c:ca:ea:71:85:f0:9b:2f:d7:8c:6b:2c:53:08:b1:6a: ef:43:d8:61:13:b2:1a:0c:11:3b:10:2c:40:73:8e:07:be:99: 55:e3:c4:a0:6f:8e:0b:f6:fc:11:a0:40:5f:ea:eb:18:47:38: 9f:42:ee:0e:0f:02:59:04:1b:4e:4f:7c:53:e0:42:09:5a:ce: a1:af:a5:e6:82:fd:96:7a:9f:4c:e0:b2:b2:ce:96:96:0d:78: 87:f5:bb:7b:9e:a0:d3:5b:6e:2b:2c:27:f2:ca:11:73:d7:92: cd:33:21:12:dc:35:52:ca:89:74:69:c1:c6:7a:6b:02:75:8e: 70:2d:ee:22:c4:d3:26:77:c2:cb:db:ce:85:4e:54:b3:00:e7: 1e:a0:68:7e:ab:13:1b:27:cc:39:53:c1:ba:3a:8e:a2:6c:b7: 46:76:49:d8:1a:6c:cc:12:90:12:b4:d6:98:01:7a:0e:d2:b8: 25:fd:6b:5c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTxvHKW2dwpPZfwd2BFiEzvTzG1owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI1MzQyWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmRmOWFiYjgwNjg2ZDUzYWIxZjFmZjM2MzVjZDE0ZDA0 ODk1ODcwN2QyMzRkNjBiYTBjYmNiM2MxOTI1ZjcyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLNKFo0XS0yN43Ltxmd8F77TxDEMW6+JQYgS1vwsVEQ0J9 dOLysR1C6j1KyCfOgQ3UbWW9O8NO9Nlx5h6QuFiNvx7JB0PblT8MjVO+i0t85tu2 owDOR+PqoeDcy5k0bjqr0ckfKtcWXZGKRPf15mepn5xxPMQq8wI2WuPqvk0weqP5 nBjWt1wZkpe2firnUJJbggdBRFJZlj4xTV2PPx41JF+uT4vE2dwjJIutr8LLSsQl YSDLrVhskA6zhYg7+Chic9naBtaUYfNbV2Rip42tywqO3kJKkvdUzS3pcXe0hU8s 33xn7MGXHmTyZAdVWQCPp9DMgqKKOPP27iCIANFFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUs31D+hNW+7AuBgTYdqUn3d9CErIwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2VmNmNhMDJlLWM3MzYtNDY1NS1iNzg4LWNlMTEyNTQ1NDhiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKZAwDQYJKoZIhvcNAQELBQADggEBAIRG+ZdVkS/Be6PoDOHQjXDE ZsMFAVLHT0VSKd3a6diry3Jm8rE+t9DDGwitS388R2j4Z8jXudHqYh9pQMKtggEf W31Kodv77QvqnMrqcYXwmy/XjGssUwixau9D2GETshoMETsQLEBzjge+mVXjxKBv jgv2/BGgQF/q6xhHOJ9C7g4PAlkEG05PfFPgQglazqGvpeaC/ZZ6n0zgsrLOlpYN eIf1u3ueoNNbbissJ/LKEXPXks0zIRLcNVLKiXRpwcZ6awJ1jnAt7iLE0yZ3wsvb zoVOVLMA5x6gaH6rExsnzDlTwbo6jqJst0Z2SdgabMwSkBK01pgBeg7SuCX9a1w= -----END CERTIFICATE-----Generated at Wed Nov 5 07:42:30 2025 by rpki-client