$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/efa682e3-3456-4530-b9e8-d557795f5b19.roa File: efa682e3-3456-4530-b9e8-d557795f5b19.roa (raw, json) Hash identifier: nqWCMjY6igOJ9Dqh1gCzpGsDA+MWa4z7a07e/SNStuA= Subject key identifier: 27:23:E2:BD:64:40:B6:5B:D0:A8:8A:20:26:DE:98:BB:A7:FD:29:E0 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4D235C2990D3AEBC448EC18AC3627F579271A1D3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/efa682e3-3456-4530-b9e8-d557795f5b19.roa Signing time: Fri 31 Oct 2025 07:13:07 +0000 ROA not before: Fri 31 Oct 2025 07:13:07 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1d60::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:23:5c:29:90:d3:ae:bc:44:8e:c1:8a:c3:62:7f:57:92:71:a1:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:13:07 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f01f175a652138d40aa7313685721fba2842cb9d63c18e01bbe6024302bf2786, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:da:c1:36:39:d5:02:00:78:e4:38:f5:ce: 90:33:e8:d2:ec:d6:89:4f:76:ba:04:68:ea:d6:92: 4d:25:96:45:a4:cd:2a:f5:95:a5:3a:70:78:1b:b6: 61:26:c4:e6:38:74:30:39:c5:7c:07:87:e7:94:8d: d7:84:d6:0c:cf:02:dd:44:0d:ad:fc:2b:55:2e:90: 47:dd:05:9f:9b:ca:12:8a:6f:6b:3d:bb:d8:6f:97: 7b:89:44:6f:d8:bc:4a:86:76:50:f7:64:fc:97:ce: 40:e2:f6:15:a9:02:9d:12:eb:f3:e3:13:dc:6a:7f: f3:61:5e:7c:cd:87:44:66:4f:6f:14:bd:51:ec:82: 74:1a:61:77:7e:68:b7:cb:87:42:2d:0c:24:c6:af: d7:a5:ad:e6:a4:2c:f5:b1:53:81:e1:56:39:c8:a9: f0:f5:e4:fe:09:18:0e:f5:57:82:9e:1f:0b:7c:35: 17:2a:c4:02:9d:b7:82:24:5b:39:c1:71:e5:77:8a: 33:c0:d6:3b:b0:71:8a:8e:68:b3:7f:5c:36:bb:0a: 2a:81:4a:24:51:67:b9:8d:be:75:f6:af:cf:c5:3e: 19:b3:eb:48:dd:86:5a:a6:45:d1:91:ef:c0:c8:08: a9:b7:8c:2e:89:f0:f6:b5:ca:19:f0:4f:e0:62:8d: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:23:E2:BD:64:40:B6:5B:D0:A8:8A:20:26:DE:98:BB:A7:FD:29:E0 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/efa682e3-3456-4530-b9e8-d557795f5b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1d60::/43 Signature Algorithm: sha256WithRSAEncryption c0:08:11:8f:91:a7:d6:ad:8b:31:04:22:b5:f9:f3:6a:1b:3f: 8e:ec:de:60:68:d1:39:1d:74:0e:b0:43:ba:15:c8:c3:98:0d: 7c:dd:21:cc:88:e8:9b:35:6b:e2:59:78:95:5d:fc:8c:12:ae: 9f:82:25:4e:3b:44:af:ba:ed:94:a4:62:2d:88:ab:a5:7c:ae: 03:00:62:a4:59:79:4e:41:74:ab:87:a5:5b:fc:8d:0a:4f:9c: 3b:ea:0f:49:03:bd:0e:6f:5b:5a:7f:f5:8b:f9:bf:fe:dd:c8: a4:ce:54:1d:38:55:7f:21:cc:e8:c0:b4:f8:c3:de:03:54:8a: 7e:65:b7:a4:3e:30:48:11:c0:4a:55:19:1c:6f:fb:12:0d:7c: 3a:f9:c7:a8:19:dd:98:a4:0d:47:b9:6a:e1:97:af:c4:8f:be: d8:23:1b:b7:b3:ab:6b:6e:c8:fe:4e:b7:34:5a:14:67:0e:56: 0b:db:6f:ac:cb:cc:bb:ed:f4:4f:c5:68:dc:f1:9b:2a:81:99: 33:d6:a5:09:33:49:c6:04:2c:43:30:5a:bb:7d:a1:99:c1:8c: 5f:5a:bd:b3:dc:ea:da:19:b9:d9:a6:70:6b:b5:0d:ab:3d:22: 63:73:59:9a:b3:f9:bc:72:97:94:80:7b:6a:0f:e6:8b:df:98: 5c:c9:7d:be -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTSNcKZDTrrxEjsGKw2J/V5JxodMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcxMzA3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDFmMTc1YTY1MjEzOGQ0MGFhNzMxMzY4NTcyMWZiYTI4 NDJjYjlkNjNjMThlMDFiYmU2MDI0MzAyYmYyNzg2MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSUNrBNjnVAgB45Dj1zpAz6NLs1olPdroEaOrWkk0llkWk zSr1laU6cHgbtmEmxOY4dDA5xXwHh+eUjdeE1gzPAt1EDa38K1UukEfdBZ+byhKK b2s9u9hvl3uJRG/YvEqGdlD3ZPyXzkDi9hWpAp0S6/PjE9xqf/NhXnzNh0RmT28U vVHsgnQaYXd+aLfLh0ItDCTGr9elreakLPWxU4HhVjnIqfD15P4JGA71V4KeHwt8 NRcqxAKdt4IkWznBceV3ijPA1juwcYqOaLN/XDa7CiqBSiRRZ7mNvnX2r8/FPhmz 60jdhlqmRdGR78DICKm3jC6J8Pa1yhnwT+Bijdy3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJyPivWRAtlvQqIogJt6Yu6f9KeAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2VmYTY4MmUzLTM0NTYtNDUzMC1iOWU4LWQ1NTc3OTVmNWIxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAHWAwDQYJKoZIhvcNAQELBQADggEBAMAIEY+Rp9atizEEIrX582ob P47s3mBo0TkddA6wQ7oVyMOYDXzdIcyI6Js1a+JZeJVd/IwSrp+CJU47RK+67ZSk Yi2Iq6V8rgMAYqRZeU5BdKuHpVv8jQpPnDvqD0kDvQ5vW1p/9Yv5v/7dyKTOVB04 VX8hzOjAtPjD3gNUin5lt6Q+MEgRwEpVGRxv+xINfDr5x6gZ3ZikDUe5auGXr8SP vtgjG7ezq2tuyP5OtzRaFGcOVgvbb6zLzLvt9E/FaNzxmyqBmTPWpQkzScYELEMw Wrt9oZnBjF9avbPc6toZudmmcGu1Das9ImNzWZqz+bxyl5SAe2oP5ovfmFzJfb4= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:07 2025 by rpki-client