$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/faccc60f-afad-40b2-9dcc-4f292bee9519.roa File: faccc60f-afad-40b2-9dcc-4f292bee9519.roa (raw, json) Hash identifier: q8GuOI4VOLmh6fYtk9kQ59b0Zu647VflrTazYyFUpmQ= Subject key identifier: 50:AD:0E:61:D3:FB:28:73:7B:15:21:45:6D:E4:4C:F5:C7:F9:41:56 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5F621F67BBAF10AD2F8DE4A72E849C83F54768C6 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/faccc60f-afad-40b2-9dcc-4f292bee9519.roa Signing time: Thu 30 Oct 2025 22:53:57 +0000 ROA not before: Thu 30 Oct 2025 22:53:57 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:29cc::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:62:1f:67:bb:af:10:ad:2f:8d:e4:a7:2e:84:9c:83:f5:47:68:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:53:57 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=0a6b480f9554766191d9a0bde2784c5f74b9e147a468b7941e681694d9adf151, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:fa:8b:ba:40:71:18:34:b9:b7:ec:80:18: eb:c9:11:89:a8:00:e9:ac:63:c8:a2:35:f1:b0:1d: ef:20:76:0e:6e:21:fb:4a:e1:46:e3:e9:13:d9:dc: 77:53:40:b1:19:7a:50:74:e5:f7:89:11:02:9e:23: 25:ec:e9:b6:f8:85:08:ee:64:8a:45:83:cf:97:47: d8:7e:fc:f7:19:f8:42:36:85:2c:84:47:99:79:b9: 59:81:0d:11:1b:13:15:a3:ff:90:be:fd:d8:04:ed: 1d:59:89:a4:c3:d9:6a:cc:a9:3a:f0:54:2d:6b:c9: d5:97:aa:35:09:d0:c5:52:61:6f:4e:4e:60:84:86: 7f:b4:2c:03:4c:f4:8c:08:b5:f3:39:6d:9e:9c:03: db:6c:58:39:4f:7e:1d:a9:a1:6b:e9:79:a9:7d:73: af:67:44:9a:a2:fd:56:98:7e:17:2f:40:46:d1:8f: 5a:3e:5d:c0:c0:8c:84:3b:69:64:da:66:05:e7:b2: 73:fc:25:56:c2:07:86:a5:88:9a:1c:f6:a2:97:1c: 3a:76:9f:22:9e:28:38:63:e8:c9:36:36:b1:ec:b6: b2:de:bb:c6:13:5b:ce:92:29:f4:e8:4a:00:94:46: 75:21:82:bf:45:61:51:ec:e6:e8:82:eb:b3:77:69: 77:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AD:0E:61:D3:FB:28:73:7B:15:21:45:6D:E4:4C:F5:C7:F9:41:56 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/faccc60f-afad-40b2-9dcc-4f292bee9519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:29cc::/47 Signature Algorithm: sha256WithRSAEncryption 26:a3:9a:ef:4f:30:2f:b7:de:1f:f3:67:3e:09:25:09:c8:e4: 52:ec:fb:b8:4f:fe:0e:22:f1:c0:29:ec:d1:ec:91:3c:41:d6: 87:71:a3:98:6d:54:73:fb:c4:20:37:87:d9:eb:35:a4:d7:d1: 6b:de:92:8e:32:fb:2b:b2:4d:4e:94:a9:6d:fe:e2:cb:2f:08: 69:26:b4:56:77:d1:a4:31:58:15:41:4f:68:f0:b4:fb:85:8c: a8:84:d3:ff:3a:50:ac:4b:9a:a3:71:37:86:89:a4:59:6b:2f: 5d:6f:ab:d9:45:5c:97:bc:e4:b9:0b:6f:b2:cc:8d:c7:7f:34: 20:45:9b:0d:aa:cb:ba:45:00:f8:7e:8b:59:5f:2c:08:34:c2: 8b:5e:4f:b1:fc:e3:76:11:5a:63:6b:17:1a:71:9b:1a:65:b6: 95:6b:f0:84:a3:39:8b:5e:ac:79:8c:db:3f:07:76:af:94:19: 10:b8:68:6a:87:42:f3:0f:1f:b3:fe:be:1d:a4:54:23:c0:43: 8e:0c:9e:e7:37:cc:70:d1:f4:ea:db:67:1d:5e:0e:e2:7b:ab: ab:cf:4f:00:c0:d1:d2:e8:2d:21:91:94:9c:00:d5:ef:a0:51: a0:33:1c:7e:a1:15:ee:38:36:4a:62:3d:ba:aa:ee:64:fd:3b: 3a:7b:d2:f8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUX2IfZ7uvEK0vjeSnLoScg/VHaMYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI1MzU3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTZiNDgwZjk1NTQ3NjYxOTFkOWEwYmRlMjc4NGM1Zjc0 YjllMTQ3YTQ2OGI3OTQxZTY4MTY5NGQ5YWRmMTUxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWU/qLukBxGDS5t+yAGOvJEYmoAOmsY8iiNfGwHe8gdg5u IftK4Ubj6RPZ3HdTQLEZelB05feJEQKeIyXs6bb4hQjuZIpFg8+XR9h+/PcZ+EI2 hSyER5l5uVmBDREbExWj/5C+/dgE7R1ZiaTD2WrMqTrwVC1rydWXqjUJ0MVSYW9O TmCEhn+0LANM9IwItfM5bZ6cA9tsWDlPfh2poWvpeal9c69nRJqi/VaYfhcvQEbR j1o+XcDAjIQ7aWTaZgXnsnP8JVbCB4aliJoc9qKXHDp2nyKeKDhj6Mk2NrHstrLe u8YTW86SKfToSgCURnUhgr9FYVHs5uiC67N3aXfdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUK0OYdP7KHN7FSFFbeRM9cf5QVYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2ZhY2NjNjBmLWFmYWQtNDBiMi05ZGNjLTRmMjkyYmVlOTUxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKcwwDQYJKoZIhvcNAQELBQADggEBACajmu9PMC+33h/zZz4JJQnI 5FLs+7hP/g4i8cAp7NHskTxB1odxo5htVHP7xCA3h9nrNaTX0Wveko4y+yuyTU6U qW3+4ssvCGkmtFZ30aQxWBVBT2jwtPuFjKiE0/86UKxLmqNxN4aJpFlrL11vq9lF XJe85LkLb7LMjcd/NCBFmw2qy7pFAPh+i1lfLAg0woteT7H843YRWmNrFxpxmxpl tpVr8ISjOYterHmM2z8Hdq+UGRC4aGqHQvMPH7P+vh2kVCPAQ44Mnuc3zHDR9Orb Zx1eDuJ7q6vPTwDA0dLoLSGRlJwA1e+gUaAzHH6hFe44NkpiPbqq7mT9Ozp70vg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:58 2025 by rpki-client