$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fa041da4-08d6-45f6-bf77-535f1b0a9e28.roa File: fa041da4-08d6-45f6-bf77-535f1b0a9e28.roa (raw, json) Hash identifier: LsliCyuY1uptj1SjCbY1m/8rwfwfPrsO+MtXS1mOFik= Subject key identifier: C2:DA:F9:02:34:2C:D8:9B:C3:42:C3:EC:B6:4A:A7:A4:33:D8:B6:24 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 043480105911ADBB86E0841F8955DC63385842BD Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fa041da4-08d6-45f6-bf77-535f1b0a9e28.roa Signing time: Thu 30 Oct 2025 23:42:15 +0000 ROA not before: Thu 30 Oct 2025 23:42:15 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2ef2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:34:80:10:59:11:ad:bb:86:e0:84:1f:89:55:dc:63:38:58:42:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:42:15 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=369a01ee703f558acbb03222f5d5346d3b1e70da5f766dcefbfb08cc4bbd75d8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c6:50:ee:36:1e:2b:0f:a1:9f:48:b1:be:a4: ee:6d:17:5d:49:5f:11:d6:8d:f8:d3:c4:fd:b7:54: 48:96:82:22:dc:89:c8:fa:ac:0e:76:40:bf:af:f7: 5a:88:fc:fc:3f:c5:45:27:6f:c6:9b:a9:43:40:47: 4d:9e:ed:af:31:ac:f1:31:01:2a:a2:b1:c8:22:1f: 6d:f5:19:c8:0a:c0:a6:ad:33:2b:2b:fb:67:a6:93: 09:11:0a:74:f6:46:68:27:f7:6a:0f:bc:41:2b:df: 09:1b:28:7d:b1:17:ca:ac:46:8c:d6:3e:7c:94:59: 5d:ee:e2:fc:49:81:df:65:50:82:dc:0a:e8:db:74: 8e:3c:0f:35:42:c4:1a:75:74:87:e9:d3:77:4a:c6: 6f:cd:c6:1a:79:12:2e:9d:ff:64:7f:34:a6:47:b2: 8a:33:38:7d:e6:fb:8d:df:1e:c4:f0:10:e8:c2:97: bf:e5:76:3c:bd:ee:0b:6b:78:ae:93:d4:bb:26:70: a5:b6:d4:fd:ca:e4:5f:3b:6f:00:88:27:39:0b:f2: 9d:38:47:88:ce:29:60:e8:be:eb:9e:1e:b0:f0:ab: 27:8d:c5:4f:c6:22:02:81:05:d8:16:b4:17:1e:ab: fe:63:46:dc:82:53:b1:a1:49:9c:be:54:89:5c:df: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DA:F9:02:34:2C:D8:9B:C3:42:C3:EC:B6:4A:A7:A4:33:D8:B6:24 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fa041da4-08d6-45f6-bf77-535f1b0a9e28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2ef2::/47 Signature Algorithm: sha256WithRSAEncryption 4f:8c:23:b9:4d:07:b5:5e:12:e2:61:35:b3:60:9e:d8:49:82: 8f:1a:5d:28:be:4e:b3:51:eb:e7:be:d8:d4:3e:cd:3c:e2:da: d6:f5:5f:d3:cb:40:79:22:9a:d2:18:83:87:16:05:5c:84:7d: bf:3c:ce:91:65:4e:48:16:fd:fb:e7:3e:24:43:7b:36:51:4a: 6e:9e:c1:ce:27:14:98:f8:a9:56:9d:bb:f0:71:2e:f8:33:45: 4a:76:a0:55:26:fd:90:0d:50:6a:55:1f:8d:13:f9:db:1c:a2: f3:4f:4b:ac:7a:d3:85:d1:86:aa:8b:f1:a6:66:3c:14:cf:c1: c7:3a:af:bc:4b:7e:be:9a:67:88:79:8c:0e:28:4a:37:0a:f3: af:30:95:2d:6f:6e:e6:20:df:c9:82:bc:7d:a5:4a:f7:01:07: 03:f3:22:e9:4a:6c:aa:3e:2f:ce:02:f8:a3:bb:9d:8f:ad:b9: d0:d2:32:f8:49:dd:7c:01:9a:54:29:f6:ef:e1:07:18:47:54: cc:a8:b5:43:bd:21:17:45:49:8b:8a:66:82:5f:29:90:ce:75: 15:42:a7:b0:b2:e7:9a:39:61:c0:29:36:f2:5d:8a:af:a1:50: 0d:ea:e5:f5:e9:a5:b7:84:57:c5:e0:dd:81:0f:0b:35:b4:7f: d6:3c:96:b1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBDSAEFkRrbuG4IQfiVXcYzhYQr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjM0MjE1WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjlhMDFlZTcwM2Y1NThhY2JiMDMyMjJmNWQ1MzQ2ZDNi MWU3MGRhNWY3NjZkY2VmYmZiMDhjYzRiYmQ3NWQ4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaxlDuNh4rD6GfSLG+pO5tF11JXxHWjfjTxP23VEiWgiLc icj6rA52QL+v91qI/Pw/xUUnb8abqUNAR02e7a8xrPExASqiscgiH231GcgKwKat Mysr+2emkwkRCnT2Rmgn92oPvEEr3wkbKH2xF8qsRozWPnyUWV3u4vxJgd9lUILc CujbdI48DzVCxBp1dIfp03dKxm/Nxhp5Ei6d/2R/NKZHsoozOH3m+43fHsTwEOjC l7/ldjy97gtreK6T1LsmcKW21P3K5F87bwCIJzkL8p04R4jOKWDovuueHrDwqyeN xU/GIgKBBdgWtBceq/5jRtyCU7GhSZy+VIlc3zizAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwtr5AjQs2JvDQsPstkqnpDPYtiQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2ZhMDQxZGE0LTA4ZDYtNDVmNi1iZjc3LTUzNWYxYjBhOWUyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALvIwDQYJKoZIhvcNAQELBQADggEBAE+MI7lNB7VeEuJhNbNgnthJ go8aXSi+TrNR6+e+2NQ+zTzi2tb1X9PLQHkimtIYg4cWBVyEfb88zpFlTkgW/fvn PiRDezZRSm6ewc4nFJj4qVadu/BxLvgzRUp2oFUm/ZANUGpVH40T+dscovNPS6x6 04XRhqqL8aZmPBTPwcc6r7xLfr6aZ4h5jA4oSjcK868wlS1vbuYg38mCvH2lSvcB BwPzIulKbKo+L84C+KO7nY+tudDSMvhJ3XwBmlQp9u/hBxhHVMyotUO9IRdFSYuK ZoJfKZDOdRVCp7Cy55o5YcApNvJdiq+hUA3q5fXppbeEV8Xg3YEPCzW0f9Y8lrE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:28:16 2025 by rpki-client