$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f60c0c60-6b6d-46a1-8053-1e03a42d02da.roa File: f60c0c60-6b6d-46a1-8053-1e03a42d02da.roa (raw, json) Hash identifier: KXBGpSCZLgZES4Db2YFxRBiSOxBMRYQIunn0xJsM5fA= Subject key identifier: A2:F7:B1:19:49:F1:9C:81:9D:D2:94:46:82:47:39:3D:A0:57:48:44 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 0C81118365003AE2105B52BB1E7ABB03D247DC2A Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f60c0c60-6b6d-46a1-8053-1e03a42d02da.roa Signing time: Fri 31 Oct 2025 21:53:23 +0000 ROA not before: Fri 31 Oct 2025 21:53:23 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:a104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:81:11:83:65:00:3a:e2:10:5b:52:bb:1e:7a:bb:03:d2:47:dc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 21:53:23 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=d72843791e40f556ea2cf39fc6f1f82667d147034c716b44f635967fdfecc482, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1a:fc:d8:86:82:db:19:ba:bd:d1:c6:04:57: 07:b7:45:dd:72:ea:54:ba:3d:75:86:dc:7d:ab:6d: 86:62:d0:41:93:d2:9f:0e:c0:73:3e:44:28:0d:ed: f1:99:dc:08:ba:d8:d5:a2:f7:64:ff:dd:9c:c9:58: 46:7a:d7:bb:39:08:51:b5:1a:03:c5:f3:29:24:e1: 14:a6:88:e0:ad:83:7f:2a:83:05:f1:27:88:bd:72: c1:85:12:03:2a:6b:3f:cb:bf:8d:6b:15:8f:dd:8e: e9:0b:2a:71:02:40:9a:fa:85:fb:05:24:e0:43:81: 4b:ea:6f:84:86:fb:96:62:33:ae:27:a9:05:e3:c1: c6:c7:70:47:5e:69:b8:40:fc:20:0d:ed:b9:2e:59: df:a4:74:53:5e:28:bd:e3:a0:32:b9:80:41:b6:01: 88:69:d3:27:ee:fa:82:d2:46:ed:a7:15:db:3e:50: dc:63:bd:12:1c:b4:00:2b:7c:09:77:67:28:07:a8: de:f5:9b:1d:83:42:10:27:1b:90:ba:36:88:93:69: da:be:aa:cd:76:49:89:31:b3:87:50:36:5c:1a:ae: 67:f7:9e:a0:6d:f7:34:17:8f:62:ce:01:d0:4c:ae: d1:0d:21:f0:7e:a1:1e:5b:61:8f:07:1c:82:7c:16: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F7:B1:19:49:F1:9C:81:9D:D2:94:46:82:47:39:3D:A0:57:48:44 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f60c0c60-6b6d-46a1-8053-1e03a42d02da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:a104::/48 Signature Algorithm: sha256WithRSAEncryption ad:bf:96:ee:cd:94:3d:a4:57:41:a6:93:6e:7c:c9:db:04:90: 79:6b:31:65:f1:3c:f8:96:9d:44:6d:87:e6:5a:77:fa:fa:89: 6b:eb:ac:6b:ac:1f:47:ac:82:b2:8c:cf:8e:02:34:1f:ee:a4: 0b:95:ca:19:6b:62:fc:36:11:b4:fe:0c:48:a5:5c:a1:a4:86: a5:c0:71:eb:ab:5b:d3:17:c5:55:a6:eb:f7:00:33:4e:27:f1: 41:64:a1:fd:02:67:38:89:86:1c:05:f1:0a:a2:47:26:88:97: 69:2f:2b:4b:28:db:fc:a6:56:26:3e:c7:eb:91:83:60:9b:15: f4:e5:e2:99:e0:eb:0c:17:74:b3:cb:84:cb:95:f6:ad:70:ba: 5c:ac:91:2c:d0:27:85:4e:4c:bb:15:a2:7c:c1:cf:f9:f0:2c: d3:cb:1f:95:d5:de:43:23:7c:80:dc:40:fc:05:df:cf:95:5a: 20:02:56:5f:2f:f1:55:e5:23:01:8e:80:45:dd:63:cb:a4:ab: bd:55:6b:ae:aa:df:5c:23:ea:92:48:a6:9c:ba:79:8d:13:00: db:68:d3:68:02:a2:a2:94:c7:78:43:13:0c:07:02:62:24:2f: b3:78:16:d1:67:3b:7f:ee:df:9b:84:12:a9:73:53:dd:8a:73: 97:b4:87:c3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDIERg2UAOuIQW1K7Hnq7A9JH3CowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMjE1MzIzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNzI4NDM3OTFlNDBmNTU2ZWEyY2YzOWZjNmYxZjgyNjY3 ZDE0NzAzNGM3MTZiNDRmNjM1OTY3ZmRmZWNjNDgyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRGvzYhoLbGbq90cYEVwe3Rd1y6lS6PXWG3H2rbYZi0EGT 0p8OwHM+RCgN7fGZ3Ai62NWi92T/3ZzJWEZ617s5CFG1GgPF8ykk4RSmiOCtg38q gwXxJ4i9csGFEgMqaz/Lv41rFY/djukLKnECQJr6hfsFJOBDgUvqb4SG+5ZiM64n qQXjwcbHcEdeabhA/CAN7bkuWd+kdFNeKL3joDK5gEG2AYhp0yfu+oLSRu2nFds+ UNxjvRIctAArfAl3ZygHqN71mx2DQhAnG5C6NoiTadq+qs12SYkxs4dQNlwarmf3 nqBt9zQXj2LOAdBMrtENIfB+oR5bYY8HHIJ8FvsZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUovexGUnxnIGd0pRGgkc5PaBXSEQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2Y2MGMwYzYwLTZiNmQtNDZhMS04MDUzLTFlMDNhNDJkMDJkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAJAAoQQwDQYJKoZIhvcNAQELBQADggEBAK2/lu7NlD2kV0Gmk258ydsE kHlrMWXxPPiWnURth+Zad/r6iWvrrGusH0esgrKMz44CNB/upAuVyhlrYvw2EbT+ DEilXKGkhqXAceurW9MXxVWm6/cAM04n8UFkof0CZziJhhwF8QqiRyaIl2kvK0so 2/ymViY+x+uRg2CbFfTl4png6wwXdLPLhMuV9q1wulyskSzQJ4VOTLsVonzBz/nw LNPLH5XV3kMjfIDcQPwF38+VWiACVl8v8VXlIwGOgEXdY8ukq71Va66q31wj6pJI ppy6eY0TANto02gCoqKUx3hDEwwHAmIkL7N4FtFnO3/u35uEEqlzU92Kc5e0h8M= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:33 2025 by rpki-client