$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24313a45-d412-407b-8e1b-bcf1600ef9cf.roa File: 24313a45-d412-407b-8e1b-bcf1600ef9cf.roa (raw, json) Hash identifier: E2AG3vvz7GAANmCDGybF/rxY2p4ncL4wHHaZLgNA9sE= Subject key identifier: 86:89:98:00:39:F2:31:03:21:02:65:7F:46:96:B8:76:F4:4C:4B:C1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 36DADC05D2D213C25A2BBFE1A67FCD01FB8D86 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24313a45-d412-407b-8e1b-bcf1600ef9cf.roa Signing time: Thu 30 Oct 2025 23:07:00 +0000 ROA not before: Thu 30 Oct 2025 23:07:00 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2aea::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:da:dc:05:d2:d2:13:c2:5a:2b:bf:e1:a6:7f:cd:01:fb:8d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 23:07:00 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=3aecc55d3d3df3c8a7b23f21c8ccfc9dee1495d0bf84c26e3978e8f90c35605e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:09:39:df:af:56:5f:bd:a0:3e:79:f4:c4: 1f:13:b1:66:24:d2:e5:fe:34:02:f4:c0:01:60:56: 1c:d6:4f:ce:92:af:d8:fd:a6:31:e3:6d:c1:50:82: 36:e6:49:45:2e:cf:6b:50:60:0e:9a:22:77:6f:ba: b3:ba:57:57:55:46:31:5e:59:83:53:06:16:37:5e: 10:0e:04:f1:86:e4:94:f8:0a:29:96:73:ca:fe:c1: 64:21:f1:ff:47:95:99:f4:3c:c3:d2:f6:42:87:1d: 85:be:6e:b5:5d:9f:d2:11:a9:c6:be:aa:98:66:fd: ae:35:77:27:f3:95:fc:c1:a1:6a:73:a5:8f:7c:b6: cd:ca:30:3b:5c:06:82:69:c1:39:0a:51:7e:ea:e7: 8f:a8:ae:8d:f1:cc:81:d0:50:9a:b5:3c:ff:54:f1: 68:79:90:28:97:b8:2d:72:c8:58:df:57:fb:43:13: e2:c2:96:51:69:41:4f:b5:d5:f1:d3:6d:54:7b:11: 3c:2f:9d:af:b1:ae:3a:38:b4:a9:41:1a:ab:23:a2: 22:b4:e0:bc:e0:70:ab:69:dd:cd:b3:f0:49:3b:4c: 38:db:6f:03:6b:8f:97:6d:75:3c:82:9f:fc:26:95: 78:91:8e:1f:c0:4f:c7:10:8a:52:e4:a6:74:e5:b7: 50:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:89:98:00:39:F2:31:03:21:02:65:7F:46:96:B8:76:F4:4C:4B:C1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/24313a45-d412-407b-8e1b-bcf1600ef9cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2aea::/47 Signature Algorithm: sha256WithRSAEncryption 78:d1:f7:d8:e9:4c:a9:c8:e7:94:16:2a:d8:5c:c8:47:f9:3a: 1c:de:38:bc:82:01:a9:4d:3a:5a:93:8d:95:48:e9:b8:db:67: 2e:2e:99:1f:32:5a:05:4b:94:66:a7:01:0a:33:b4:41:86:da: e6:47:0c:3d:f3:10:15:d5:52:70:42:0e:0b:d1:b8:5c:3e:c4: 6e:56:6a:a8:76:9d:54:8b:44:cc:94:74:65:b7:97:09:36:9e: 41:75:a1:cf:e9:5d:3d:e1:2e:96:f4:19:24:77:bf:17:b6:ef: 41:1f:6e:91:3c:07:79:a8:83:db:65:b0:cf:56:78:1a:47:9c: 0a:9e:42:c3:86:14:bc:36:f4:09:e3:ce:08:3e:35:6d:c1:04: 27:2f:17:20:2f:ea:b5:16:1b:14:78:fd:19:1c:86:81:d6:af: a9:42:1f:88:a3:09:45:43:8c:72:24:c2:ac:40:00:87:c2:57: 93:ce:12:3c:44:0e:1c:19:52:1d:eb:5f:a9:33:4b:f5:27:ab: 0e:83:45:89:8c:23:59:0c:5e:21:dd:ab:71:42:fc:ed:93:ef: 6e:83:4b:b1:44:b7:75:62:c6:8e:3f:5a:a4:5b:3b:0f:b0:9e: 88:d4:f7:7e:ac:47:a2:f6:ce:d0:d2:cb:d0:20:f3:98:37:b5: f3:0a:ac:12 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITNtrcBdLSE8JaK7/hpn/NAfuNhjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI1NTEyMDkwMjdmNWU3YWQ1NGUwNGYwNDJlNGFjMGU5ZTY1 YzU2ZTU1Yzc3NDc4ZDJjZTAeFw0yNTEwMzAyMzA3MDBaFw0yNTEyMDQyMzU5NTla MHoxSTBHBgNVBAUTQDNhZWNjNTVkM2QzZGYzYzhhN2IyM2YyMWM4Y2NmYzlkZWUx NDk1ZDBiZjg0YzI2ZTM5NzhlOGY5MGMzNTYwNWUxLTArBgNVBAMTJDlmMjMwZmE5 LWFhMmYtNDAyMC1hZTJhLTFhNjAzNzQwODRiODCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALVZCTnfr1ZfvaA+efTEHxOxZiTS5f40AvTAAWBWHNZPzpKv 2P2mMeNtwVCCNuZJRS7Pa1BgDpoid2+6s7pXV1VGMV5Zg1MGFjdeEA4E8YbklPgK KZZzyv7BZCHx/0eVmfQ8w9L2Qocdhb5utV2f0hGpxr6qmGb9rjV3J/OV/MGhanOl j3y2zcowO1wGgmnBOQpRfurnj6iujfHMgdBQmrU8/1TxaHmQKJe4LXLIWN9X+0MT 4sKWUWlBT7XV8dNtVHsRPC+dr7GuOji0qUEaqyOiIrTgvOBwq2ndzbPwSTtMONtv A2uPl211PIKf/CaVeJGOH8BPxxCKUuSmdOW3UHkCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBSGiZgAOfIxAyECZX9Glrh29ExLwTAfBgNVHSMEGDAWgBTo88Ug4g7yXTq3 oha7FAQxajc48TAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv ZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk5ZjhmZWQyLTI5 MmItNDcyMi1iOTI4LWZlZTdiZjBhNTkxMC81NTEyMDkwMjdmNWU3YWQ1NGUwNGYw NDJlNGFjMGU5ZTY1YzU2ZTU1Yzc3NDc4ZDJjZS5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9lNzUxOGFmNS1hMzQzLTQyOGQtYmY3OC1mOTgy YjZlNjA1MDUvMjQzMTNhNDUtZDQxMi00MDdiLThlMWItYmNmMTYwMGVmOWNmLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgt Zjk4MmI2ZTYwNTA1L1huclZUZ1R3UXVTc0RwNWx4VzVWeDNSNDBzNC5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHASYAkAAq6jANBgkqhkiG9w0BAQsFAAOCAQEAeNH32OlMqcjnlBYq2FzIR/k6 HN44vIIBqU06WpONlUjpuNtnLi6ZHzJaBUuUZqcBCjO0QYba5kcMPfMQFdVScEIO C9G4XD7EblZqqHadVItEzJR0ZbeXCTaeQXWhz+ldPeEulvQZJHe/F7bvQR9ukTwH eaiD22Wwz1Z4GkecCp5Cw4YUvDb0CePOCD41bcEEJy8XIC/qtRYbFHj9GRyGgdav qUIfiKMJRUOMciTCrEAAh8JXk84SPEQOHBlSHetfqTNL9SerDoNFiYwjWQxeId2r cUL87ZPvboNLsUS3dWLGjj9apFs7D7CeiNT3fqxHovbO0NLL0CDzmDe18wqsEg== -----END CERTIFICATE-----Generated at Tue Nov 18 05:41:40 2025 by rpki-client