$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f319fdf1-19da-4ebd-8965-83ff02a25486.roa File: f319fdf1-19da-4ebd-8965-83ff02a25486.roa (raw, json) Hash identifier: cdEDXMSvHuhIiNk3s6sBJG/RWBLxtHVtHIpQ9W5bcj4= Subject key identifier: 45:0D:54:E5:BE:50:EB:85:4E:05:99:83:B5:78:71:D9:D6:AD:52:5A Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2A025143EC1D68353767D26C65D90603A4D02FE3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f319fdf1-19da-4ebd-8965-83ff02a25486.roa Signing time: Fri 31 Oct 2025 07:22:06 +0000 ROA not before: Fri 31 Oct 2025 07:22:06 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2a20::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:02:51:43:ec:1d:68:35:37:67:d2:6c:65:d9:06:03:a4:d0:2f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:22:06 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=9506dd04a7c4c1a3129124fe9956baf7720574e257e1c8367989622da60f7be0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bd:f3:97:db:f6:ce:20:8d:49:1f:6e:86:f3: 2a:fb:64:05:48:dd:d4:cb:46:16:c1:cc:b4:1e:a6: 17:84:6d:5b:9d:a1:40:a1:35:0d:bf:07:27:1f:01: 5e:16:6b:91:6a:9f:80:c1:73:bb:bf:47:e2:94:48: 7c:e7:06:82:6e:ab:1d:ea:42:76:b4:ab:c3:57:c9: 15:3a:b8:1a:40:f6:44:cc:aa:17:58:6c:f3:d9:74: 46:88:62:9b:b0:b5:c5:6e:1d:7d:dc:b5:c2:05:2c: 4e:34:0c:bd:60:6a:3f:b3:fb:fc:a5:0d:2b:2b:72: 24:60:5d:f4:58:64:62:ca:34:9c:9b:c9:3f:8e:86: 7e:75:1c:d4:e8:cb:3f:b1:a5:af:a6:c5:12:1d:7a: 4f:00:a6:0a:46:a8:e4:51:f7:e9:83:b3:19:12:19: 9b:fa:42:15:1e:d2:50:94:b1:1e:49:8f:75:e8:20: 38:84:f8:aa:fe:fe:58:53:bb:5b:fc:84:b9:74:f1: c4:33:77:8b:89:13:23:fc:17:d1:0a:4d:5c:1c:7c: 65:91:1a:00:c3:cf:62:e2:1c:00:7d:b9:41:e1:34: 67:6f:fa:04:08:26:8a:2f:42:d4:57:87:08:cc:18: 47:33:93:4a:7e:f1:e0:56:cc:75:51:64:47:09:87: 1d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0D:54:E5:BE:50:EB:85:4E:05:99:83:B5:78:71:D9:D6:AD:52:5A X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f319fdf1-19da-4ebd-8965-83ff02a25486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2a20::/43 Signature Algorithm: sha256WithRSAEncryption 8f:f3:8f:d1:34:39:ec:b1:c2:ad:6a:51:37:70:2a:38:73:5e: 5f:91:82:9a:26:84:70:95:e9:46:03:97:d1:38:35:7e:72:af: 6d:58:6b:6b:f7:90:65:0e:02:fe:34:0e:c7:63:7d:a5:1e:f8: 33:34:19:3f:60:d4:74:d3:d6:02:74:e3:e7:94:da:7d:1f:d7: fc:a4:0c:a5:1f:2a:52:36:1d:97:55:d7:a0:eb:8c:6d:0a:5a: 80:c6:c5:f6:50:e9:78:e0:fd:7b:95:23:0a:89:29:20:2f:1d: 02:ed:a9:4b:c1:de:21:91:d6:68:e4:45:d2:80:38:bc:f9:65: 18:2e:39:85:6b:0d:17:8e:59:6e:21:49:fd:a6:56:1c:e6:3b: 5e:de:51:db:cd:be:74:b6:2b:df:c1:82:7b:28:b2:51:1a:12: 00:8e:8c:63:c3:ea:6a:42:be:fe:dd:1c:c9:7a:65:57:ac:cd: 60:07:3b:71:9d:81:c8:30:1b:a5:fe:f8:04:7b:ba:93:d6:5a: 58:33:00:df:28:ca:cf:ed:05:b3:10:34:66:db:0a:7b:6e:b4: aa:0d:b6:3b:d5:5e:b1:18:14:ba:b0:28:4f:f2:79:f4:c5:60: 83:08:19:fb:ad:45:6f:60:76:0c:71:46:0f:ed:6f:59:62:a3: a5:d1:12:cc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKgJRQ+wdaDU3Z9JsZdkGA6TQL+MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcyMjA2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTA2ZGQwNGE3YzRjMWEzMTI5MTI0ZmU5OTU2YmFmNzcy MDU3NGUyNTdlMWM4MzY3OTg5NjIyZGE2MGY3YmUwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcvfOX2/bOII1JH26G8yr7ZAVI3dTLRhbBzLQepheEbVud oUChNQ2/BycfAV4Wa5Fqn4DBc7u/R+KUSHznBoJuqx3qQna0q8NXyRU6uBpA9kTM qhdYbPPZdEaIYpuwtcVuHX3ctcIFLE40DL1gaj+z+/ylDSsrciRgXfRYZGLKNJyb yT+Ohn51HNToyz+xpa+mxRIdek8ApgpGqORR9+mDsxkSGZv6QhUe0lCUsR5Jj3Xo IDiE+Kr+/lhTu1v8hLl08cQzd4uJEyP8F9EKTVwcfGWRGgDDz2LiHAB9uUHhNGdv +gQIJoovQtRXhwjMGEczk0p+8eBWzHVRZEcJhx3RAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURQ1U5b5Q64VOBZmDtXhx2datUlowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2YzMTlmZGYxLTE5ZGEtNGViZC04OTY1LTgzZmYwMmEyNTQ4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAKiAwDQYJKoZIhvcNAQELBQADggEBAI/zj9E0Oeyxwq1qUTdwKjhz Xl+RgpomhHCV6UYDl9E4NX5yr21Ya2v3kGUOAv40DsdjfaUe+DM0GT9g1HTT1gJ0 4+eU2n0f1/ykDKUfKlI2HZdV16DrjG0KWoDGxfZQ6Xjg/XuVIwqJKSAvHQLtqUvB 3iGR1mjkRdKAOLz5ZRguOYVrDReOWW4hSf2mVhzmO17eUdvNvnS2K9/BgnsoslEa EgCOjGPD6mpCvv7dHMl6ZVeszWAHO3GdgcgwG6X++AR7upPWWlgzAN8oys/tBbMQ NGbbCntutKoNtjvVXrEYFLqwKE/yefTFYIMIGfutRW9gdgxxRg/tb1lio6XREsw= -----END CERTIFICATE-----Generated at Wed Nov 5 16:56:42 2025 by rpki-client