$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0f32ff5-3ad9-4748-ab47-792b63264d0e.roa File: f0f32ff5-3ad9-4748-ab47-792b63264d0e.roa (raw, json) Hash identifier: zLjKzZ514HkzR5ZmVeouSZbsp57+3zmuZ7u06F/M2cQ= Subject key identifier: CC:BD:B6:58:98:AB:3C:33:56:5B:92:07:12:07:15:85:3C:26:C7:51 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 63ABE1757C2250A20793CD4C76FB662EB9D86084 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0f32ff5-3ad9-4748-ab47-792b63264d0e.roa Signing time: Thu 30 Oct 2025 20:41:53 +0000 ROA not before: Thu 30 Oct 2025 20:41:53 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:12f0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ab:e1:75:7c:22:50:a2:07:93:cd:4c:76:fb:66:2e:b9:d8:60:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:41:53 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=fa8eb37c139678907423cbedea7af71276d29cc9bc40e390f5a5d4eab1f23d4f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:ef:1b:41:22:29:f1:fe:5d:3b:81:f5:4e: 4e:e5:26:b3:bf:4e:bc:5e:7d:02:55:51:60:5e:d0: f6:5d:93:c3:5c:b2:92:0f:70:3e:06:19:86:4a:45: 36:88:aa:1f:29:8f:f5:75:e8:ef:07:e2:a2:fe:d2: a1:1b:b0:9b:55:26:9d:b9:5b:8c:02:ef:b9:99:a3: 0d:7c:26:a8:5e:80:9f:d0:e4:bc:4f:b1:fc:10:b3: 81:cf:23:4b:d1:02:88:74:db:88:91:98:aa:7a:49: 06:ea:f6:69:db:6a:3a:08:1b:d2:70:87:98:7b:bc: 30:f4:62:e4:28:c7:2c:58:df:b2:59:02:89:17:b4: 57:89:2a:b2:e3:1c:20:98:e2:5f:e2:e8:56:8b:ce: 04:01:cd:7c:08:53:03:0b:5e:4f:9a:0e:7d:ec:f1: 4a:73:80:55:32:eb:6e:f1:17:34:95:d6:78:2e:b6: 59:7e:39:23:55:83:0a:92:b6:22:4b:98:90:a5:61: ba:c3:2b:5c:52:87:e4:b8:55:92:94:d1:87:cd:a8: a1:27:87:3c:96:69:49:aa:b2:d1:c3:0c:5a:e7:95: 19:89:a5:b5:a3:89:6e:81:78:ed:9d:15:65:a3:11: c2:38:e1:a4:98:f8:c1:ea:1d:f7:9b:d4:c0:be:c4: d5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BD:B6:58:98:AB:3C:33:56:5B:92:07:12:07:15:85:3C:26:C7:51 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f0f32ff5-3ad9-4748-ab47-792b63264d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:12f0::/47 Signature Algorithm: sha256WithRSAEncryption 42:09:9a:4f:01:81:9c:2c:ca:e0:18:82:51:6c:e0:eb:1b:96: c7:13:df:a1:fc:97:91:2c:4c:13:80:09:33:c8:b2:2b:f5:d0: 2a:23:f9:c1:44:1d:12:14:b5:6e:c4:16:4e:a1:bc:68:14:41: f8:cd:ad:74:22:b1:70:61:95:6f:a8:5b:39:f7:15:0a:d3:38: 73:7c:58:f0:05:92:be:ea:08:09:28:61:b0:e3:93:1e:fb:37: 1a:2e:b5:71:11:ee:2c:02:b9:11:84:fd:4b:5d:04:b6:3a:3e: d7:43:07:55:39:b1:4a:e4:4c:bb:2e:9c:45:97:06:c9:6e:24: 9c:ec:ea:e3:74:5b:f6:b3:24:42:15:80:70:5d:0a:64:16:d0: 88:19:d9:00:24:b3:07:bc:46:3f:b4:6b:05:bf:1b:73:f1:ba: 13:ec:24:de:ab:62:cd:6c:39:c5:81:4c:8f:89:bb:27:6c:a7: b0:c5:d1:9f:c8:2a:4f:c9:42:c4:fe:48:07:e3:20:35:73:e6: e3:f7:03:96:5f:67:95:38:47:48:d3:bd:3b:74:09:ac:f9:40: 4d:03:e4:8f:ad:9b:86:59:88:42:61:e9:7a:f5:1c:b0:89:f4: d4:da:aa:26:d4:f9:d0:c6:98:09:f1:ff:98:70:30:2e:bc:79: 93:ce:80:11 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY6vhdXwiUKIHk81MdvtmLrnYYIQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjA0MTUzWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYThlYjM3YzEzOTY3ODkwNzQyM2NiZWRlYTdhZjcxMjc2 ZDI5Y2M5YmM0MGUzOTBmNWE1ZDRlYWIxZjIzZDRmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG6O8bQSIp8f5dO4H1Tk7lJrO/TrxefQJVUWBe0PZdk8Nc spIPcD4GGYZKRTaIqh8pj/V16O8H4qL+0qEbsJtVJp25W4wC77mZow18JqhegJ/Q 5LxPsfwQs4HPI0vRAoh024iRmKp6SQbq9mnbajoIG9Jwh5h7vDD0YuQoxyxY37JZ AokXtFeJKrLjHCCY4l/i6FaLzgQBzXwIUwMLXk+aDn3s8UpzgFUy627xFzSV1ngu tll+OSNVgwqStiJLmJClYbrDK1xSh+S4VZKU0YfNqKEnhzyWaUmqstHDDFrnlRmJ pbWjiW6BeO2dFWWjEcI44aSY+MHqHfeb1MC+xNUnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzL22WJirPDNWW5IHEgcVhTwmx1EwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2YwZjMyZmY1LTNhZDktNDc0OC1hYjQ3LTc5MmI2MzI2NGQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAEvAwDQYJKoZIhvcNAQELBQADggEBAEIJmk8BgZwsyuAYglFs4Osb lscT36H8l5EsTBOACTPIsiv10Coj+cFEHRIUtW7EFk6hvGgUQfjNrXQisXBhlW+o Wzn3FQrTOHN8WPAFkr7qCAkoYbDjkx77NxoutXER7iwCuRGE/UtdBLY6PtdDB1U5 sUrkTLsunEWXBsluJJzs6uN0W/azJEIVgHBdCmQW0IgZ2QAkswe8Rj+0awW/G3Px uhPsJN6rYs1sOcWBTI+Juydsp7DF0Z/IKk/JQsT+SAfjIDVz5uP3A5ZfZ5U4R0jT vTt0Caz5QE0D5I+tm4ZZiEJh6Xr1HLCJ9NTaqibU+dDGmAnx/5hwMC68eZPOgBE= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:24 2025 by rpki-client