$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1faee05-cfe3-402e-8e85-f1e94f6a612c.roa File: f1faee05-cfe3-402e-8e85-f1e94f6a612c.roa (raw, json) Hash identifier: +ElDLpqGjLtui8ytRTHlVqAySs28+CzHfSzghLhAitk= Subject key identifier: 2C:F7:88:51:73:19:45:37:37:0A:4A:2B:9C:CE:27:5E:11:09:10:73 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 254EC44E363ECD2FEDBF2EC4C75655247A9836BE Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1faee05-cfe3-402e-8e85-f1e94f6a612c.roa Signing time: Fri 31 Oct 2025 01:13:03 +0000 ROA not before: Fri 31 Oct 2025 01:13:03 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3a58::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4e:c4:4e:36:3e:cd:2f:ed:bf:2e:c4:c7:56:55:24:7a:98:36:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:13:03 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e2b3216a1c6536ba2e728ff1051b67f8b891eeea38b17b06c66d9be9ae8b771e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:5a:f6:85:ed:07:88:e3:e5:28:8f:68:1e: 18:e6:e3:da:1b:7f:ca:27:14:f7:46:4a:a4:6f:ef: 81:3d:3e:8d:3c:7f:44:84:df:3a:40:eb:c1:08:b1: 4c:63:35:fa:3e:d7:21:79:22:72:95:a4:c8:6e:9c: 2d:7d:cf:76:60:63:79:58:bc:bc:61:d2:b5:75:02: 2d:26:8a:1b:e3:77:0a:93:a9:3d:34:08:1f:3c:49: 47:e1:b2:59:e3:96:41:85:9d:95:f2:38:c0:0a:65: a9:d8:3c:25:58:78:92:6a:94:95:d8:93:0b:9d:45: a4:d5:b1:9d:6c:7e:ef:9a:fb:16:01:31:df:e9:4f: db:83:d6:3e:6e:9b:7c:53:3c:c5:98:d5:61:38:25: 27:d7:d6:70:ee:55:63:62:84:40:41:da:ef:e6:11: 3c:88:16:85:4b:0c:3a:22:48:24:e1:46:b1:96:0c: d9:7d:67:f4:d9:01:d6:33:e3:70:00:d7:8e:35:09: 9d:f5:3d:95:c5:52:cb:22:5c:ce:7e:6c:e5:84:39: 97:2e:08:5b:2b:20:50:47:18:04:df:62:05:1f:d7: 3f:b9:5d:d9:93:76:fb:47:bd:4e:34:9a:ce:f0:e9: 47:ea:13:cc:8a:80:8c:c8:af:06:44:87:75:b0:8c: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F7:88:51:73:19:45:37:37:0A:4A:2B:9C:CE:27:5E:11:09:10:73 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1faee05-cfe3-402e-8e85-f1e94f6a612c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3a58::/47 Signature Algorithm: sha256WithRSAEncryption 16:c8:6f:79:d0:18:e0:c6:8b:32:ab:40:61:54:d5:f2:15:38: 1a:60:86:25:9a:85:d9:62:1b:1b:77:ed:b1:68:6c:52:82:61: af:ed:49:bb:3d:50:22:e5:76:e4:f1:4e:f8:e6:a7:b7:2f:14: aa:ae:73:78:7e:2a:d0:83:b2:84:e7:98:c0:25:bb:29:39:8f: 36:9f:52:c1:af:16:72:ad:88:ab:03:f9:a1:57:6d:d1:fd:a0: 27:90:84:3f:12:a5:6f:d5:d5:38:61:b0:18:14:2a:12:87:8d: f9:25:63:46:48:22:1a:cd:5a:08:d7:03:ad:56:8b:a9:d3:37: ee:c1:68:ea:45:30:2f:b1:99:2c:27:d7:35:a8:ab:de:fc:a7: d9:13:b5:da:a9:f8:52:76:d8:2f:39:f1:f5:56:6f:d5:6c:0c: ad:c6:a4:58:55:e8:45:2e:34:fe:02:83:ee:29:52:c3:e4:87: 59:a6:e4:ac:7e:87:c5:f8:4e:d5:52:3b:4c:5f:f6:8f:b7:17: 13:61:b0:c6:7c:bb:9c:ab:55:79:d5:64:5f:c4:53:90:49:61: 3a:95:3e:aa:1e:48:ff:90:2f:89:39:72:3f:77:1a:53:a0:fe: 16:73:94:51:33:ff:3b:5c:1d:a2:21:b6:64:10:17:24:e6:6c: fd:2c:b3:00 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJU7ETjY+zS/tvy7Ex1ZVJHqYNr4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDExMzAzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmIzMjE2YTFjNjUzNmJhMmU3MjhmZjEwNTFiNjdmOGI4 OTFlZWVhMzhiMTdiMDZjNjZkOWJlOWFlOGI3NzFlMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFG1r2he0HiOPlKI9oHhjm49obf8onFPdGSqRv74E9Po08 f0SE3zpA68EIsUxjNfo+1yF5InKVpMhunC19z3ZgY3lYvLxh0rV1Ai0mihvjdwqT qT00CB88SUfhslnjlkGFnZXyOMAKZanYPCVYeJJqlJXYkwudRaTVsZ1sfu+a+xYB Md/pT9uD1j5um3xTPMWY1WE4JSfX1nDuVWNihEBB2u/mETyIFoVLDDoiSCThRrGW DNl9Z/TZAdYz43AA1441CZ31PZXFUssiXM5+bOWEOZcuCFsrIFBHGATfYgUf1z+5 XdmTdvtHvU40ms7w6UfqE8yKgIzIrwZEh3WwjJG/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULPeIUXMZRTc3CkornM4nXhEJEHMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2YxZmFlZTA1LWNmZTMtNDAyZS04ZTg1LWYxZTk0ZjZhNjEyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOlgwDQYJKoZIhvcNAQELBQADggEBABbIb3nQGODGizKrQGFU1fIV OBpghiWahdliGxt37bFobFKCYa/tSbs9UCLlduTxTvjmp7cvFKquc3h+KtCDsoTn mMAluyk5jzafUsGvFnKtiKsD+aFXbdH9oCeQhD8SpW/V1ThhsBgUKhKHjfklY0ZI IhrNWgjXA61Wi6nTN+7BaOpFMC+xmSwn1zWoq978p9kTtdqp+FJ22C858fVWb9Vs DK3GpFhV6EUuNP4Cg+4pUsPkh1mm5Kx+h8X4TtVSO0xf9o+3FxNhsMZ8u5yrVXnV ZF/EU5BJYTqVPqoeSP+QL4k5cj93GlOg/hZzlFEz/ztcHaIhtmQQFyTmbP0sswA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:15 2025 by rpki-client