$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fa7caa84-db0c-44c7-826d-4637173a04a0.roa File: fa7caa84-db0c-44c7-826d-4637173a04a0.roa (raw, json) Hash identifier: xe5VRLjDDIhs0ZA23/h/FvelqybNIvaYTpTU6QPTgtw= Subject key identifier: 03:42:E6:FE:71:01:61:23:E2:50:76:BD:E6:FC:4D:1F:EA:3A:BA:B5 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5A2E8F0BD70233CA225E2981D4964821D220E3AA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fa7caa84-db0c-44c7-826d-4637173a04a0.roa Signing time: Thu 30 Oct 2025 23:28:49 +0000 ROA not before: Thu 30 Oct 2025 23:28:49 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2d94::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2e:8f:0b:d7:02:33:ca:22:5e:29:81:d4:96:48:21:d2:20:e3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:28:49 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=14213d363eb7540c9d4cc7e17913c5e9f5a4a19f4a9db5c01a09b62313e6d0a1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:1f:33:ee:1c:23:c2:af:e9:35:ae:18:64: e9:f2:a9:a9:00:36:8d:c6:5a:be:25:bf:ff:8d:ce: ca:e1:79:12:42:6c:8f:e6:1b:fa:e0:36:db:55:25: 23:29:69:c4:75:80:42:87:a2:7d:c2:3e:b2:9a:54: 33:7d:6c:10:b6:4a:50:ea:0d:e1:bc:32:fd:61:51: 74:c5:01:09:27:3c:5f:35:91:c9:59:c4:8e:34:b3: 66:b4:27:b8:93:16:46:80:a3:cd:6b:cc:fc:5e:d4: c4:fa:64:69:ef:28:82:d0:57:b9:09:97:56:f1:56: cf:aa:df:27:9d:42:b1:c2:d1:ce:48:b8:61:65:7e: ce:cd:40:4f:71:58:38:74:63:61:d4:cd:3a:a8:db: 7b:26:2a:9e:fa:e9:bb:7a:0e:a6:53:bf:50:4c:e1: 53:ab:ff:71:4d:aa:0f:5c:3a:e8:dc:4f:bb:42:41: 9a:1b:6f:5e:7b:6b:af:75:1a:5e:0b:ab:ff:76:a1: 56:f7:8a:72:26:5a:ce:a4:7f:8c:01:17:6a:6f:d2: 65:ab:d3:27:4c:5e:3e:5c:75:0a:14:b7:24:29:6d: 0b:58:cc:6e:7d:31:ee:87:f2:1a:f0:cc:ba:32:49: 08:55:e2:57:39:f3:ba:df:cb:d1:0a:05:42:44:2c: 17:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:42:E6:FE:71:01:61:23:E2:50:76:BD:E6:FC:4D:1F:EA:3A:BA:B5 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fa7caa84-db0c-44c7-826d-4637173a04a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2d94::/47 Signature Algorithm: sha256WithRSAEncryption a5:f5:93:08:e3:84:a2:d7:54:dc:55:33:19:7e:ac:af:29:2d: 0f:83:11:d2:b7:5f:06:c5:99:b1:dd:4f:81:96:33:c5:c3:73: 8c:22:e5:07:86:2c:26:57:86:8e:12:f3:1b:37:79:b5:a1:33: 5f:d4:5a:5e:68:fe:c9:06:1a:15:6f:ae:ca:00:00:e6:06:93: 6b:b0:ed:e0:06:7a:1b:9c:58:48:cd:b5:b3:ff:08:56:16:16: 93:c4:38:97:0b:f1:d7:76:5e:ca:a6:73:e3:a8:e3:3f:36:fb: 0a:12:fe:30:18:c0:4f:49:93:d6:de:bc:6d:fc:09:8b:ee:09: e5:31:14:99:5e:2e:5a:1b:30:ee:56:f4:b5:7a:e3:0f:53:19: 9c:4f:96:e8:ba:6f:5a:c8:8d:fe:cf:0f:6e:03:11:33:dd:ca: 13:58:19:46:4b:11:6d:40:74:3c:e6:19:ce:f4:b1:41:0a:7b: f4:e5:44:58:ac:ef:db:77:b6:7d:69:0a:48:c0:06:af:02:3e: d6:88:bb:e8:bc:73:19:f3:84:46:40:a3:4b:df:f2:a6:f2:63: cf:59:21:3c:10:aa:27:9d:48:dc:e3:25:85:67:f2:c7:d4:f7: 51:18:fc:41:f0:ea:d3:b6:f0:d4:7a:81:31:dd:a3:d0:26:53: 72:a6:01:ae -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWi6PC9cCM8oiXimB1JZIIdIg46owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjMyODQ5WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDIxM2QzNjNlYjc1NDBjOWQ0Y2M3ZTE3OTEzYzVlOWY1 YTRhMTlmNGE5ZGI1YzAxYTA5YjYyMzEzZTZkMGExMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFtR8z7hwjwq/pNa4YZOnyqakANo3GWr4lv/+NzsrheRJC bI/mG/rgNttVJSMpacR1gEKHon3CPrKaVDN9bBC2SlDqDeG8Mv1hUXTFAQknPF81 kclZxI40s2a0J7iTFkaAo81rzPxe1MT6ZGnvKILQV7kJl1bxVs+q3yedQrHC0c5I uGFlfs7NQE9xWDh0Y2HUzTqo23smKp766bt6DqZTv1BM4VOr/3FNqg9cOujcT7tC QZobb157a691Gl4Lq/92oVb3inImWs6kf4wBF2pv0mWr0ydMXj5cdQoUtyQpbQtY zG59Me6H8hrwzLoySQhV4lc587rfy9EKBUJELBezAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUA0Lm/nEBYSPiUHa95vxNH+o6urUwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2ZhN2NhYTg0LWRiMGMtNDRjNy04MjZkLTQ2MzcxNzNhMDRhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAALZQwDQYJKoZIhvcNAQELBQADggEBAKX1kwjjhKLXVNxVMxl+rK8p LQ+DEdK3XwbFmbHdT4GWM8XDc4wi5QeGLCZXho4S8xs3ebWhM1/UWl5o/skGGhVv rsoAAOYGk2uw7eAGehucWEjNtbP/CFYWFpPEOJcL8dd2Xsqmc+Oo4z82+woS/jAY wE9Jk9bevG38CYvuCeUxFJleLlobMO5W9LV64w9TGZxPlui6b1rIjf7PD24DETPd yhNYGUZLEW1AdDzmGc70sUEKe/TlRFis79t3tn1pCkjABq8CPtaIu+i8cxnzhEZA o0vf8qbyY89ZITwQqiedSNzjJYVn8sfU91EY/EHw6tO28NR6gTHdo9AmU3KmAa4= -----END CERTIFICATE-----Generated at Wed Nov 5 10:43:39 2025 by rpki-client