$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e792525-219f-4aed-998b-0e78444da1e5.roa File: 2e792525-219f-4aed-998b-0e78444da1e5.roa (raw, json) Hash identifier: QRZ67DJtt2//b5CyBs0prMjejHsV5SCkO38ZRCqU3Qk= Subject key identifier: E2:FD:F1:EB:91:2B:D6:B1:DB:41:B4:95:1F:97:EF:CD:89:5B:09:E3 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3A725AAE597C8CB4C03F8EC6267A708957D43417 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e792525-219f-4aed-998b-0e78444da1e5.roa Signing time: Fri 31 Oct 2025 03:23:31 +0000 ROA not before: Fri 31 Oct 2025 03:23:31 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2670::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:72:5a:ae:59:7c:8c:b4:c0:3f:8e:c6:26:7a:70:89:57:d4:34:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:23:31 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0714503c3f4bad86cc8bb881e8867a81ecb10bb3e6dcb846fe08e2ac3c28c4cb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:ea:aa:52:d5:d7:fb:8e:6f:a6:ea:53:7c: 5e:bf:49:e6:83:1d:c8:96:a9:85:0d:75:32:af:6b: 67:7a:9c:7a:60:17:43:00:e0:31:48:b9:82:e9:1e: 5b:fc:19:5d:db:5d:89:33:6f:90:c7:77:ad:61:b1: bb:f3:f4:38:83:27:cc:27:a9:62:69:2b:56:4f:b2: 4e:7f:fa:c4:b0:ad:44:6b:48:e3:37:70:bb:a2:33: 58:e2:4d:d7:39:7a:0a:09:4e:6b:7b:54:4c:c5:99: 35:5d:9c:23:76:de:df:d6:d6:6a:a9:9f:04:f1:a8: 3e:24:fe:0e:f6:28:bc:82:8d:58:08:be:08:ae:29: d9:a7:b7:4e:e4:76:c8:2b:99:95:95:2a:0f:5d:d8: bb:6a:c9:7a:40:b6:48:62:ba:26:b7:85:38:ce:f0: 07:ae:1e:1a:10:09:d2:58:9d:34:28:97:0e:f6:54: 50:67:b4:3b:67:0a:20:56:82:01:5c:08:99:70:9a: 44:13:c7:a0:1a:00:ad:5a:62:34:6d:e2:34:52:c7: 81:27:b2:09:b8:de:6c:62:33:5f:20:7e:3c:ec:ed: c9:ce:1b:b8:f9:e4:dd:84:d2:23:3e:f8:5a:5d:78: ea:46:0f:5d:ee:02:59:f1:bd:43:c9:61:be:f3:81: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FD:F1:EB:91:2B:D6:B1:DB:41:B4:95:1F:97:EF:CD:89:5B:09:E3 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2e792525-219f-4aed-998b-0e78444da1e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2670::/46 Signature Algorithm: sha256WithRSAEncryption 83:02:b3:1a:58:95:de:b0:b5:87:76:d1:ef:25:f4:ba:38:4b: 66:a3:38:65:f2:f5:e8:3f:b6:36:4f:f0:5f:05:f3:c3:cb:46: f6:7b:2f:d2:96:f2:4b:07:e0:fd:ad:3b:aa:e8:67:ae:2e:88: 4d:85:17:49:33:06:b6:88:68:43:5d:30:d8:bb:56:a0:a7:89: 8b:1c:b2:0a:9a:0c:2b:d0:31:b9:c3:f5:16:bb:cc:bb:aa:bc: 87:a3:2c:27:47:9e:a1:92:e1:8e:14:d0:87:a3:e4:c6:8e:08: c6:9e:d0:f6:e0:b8:9b:bc:70:9c:c1:c1:de:4f:1f:ad:68:27: a1:d5:ce:e9:e7:95:0a:bf:82:ee:19:83:bb:cd:21:c5:92:91: 1e:d7:59:08:92:92:c9:bf:27:70:60:b0:eb:ed:e7:66:9a:92: 99:c2:72:06:fb:10:90:a6:f3:b7:ca:21:29:de:0b:b8:a5:dd: f1:b4:ec:34:34:89:f0:6b:75:ed:a9:7c:a8:4c:c3:e7:fb:7e: a5:f3:b7:e6:9b:30:45:70:d7:12:6b:fe:20:f0:de:25:e9:74: ea:15:d1:68:cb:c1:a0:0d:31:1d:d8:16:3a:61:e0:98:50:7a: 82:4a:a5:06:9f:6c:36:43:3b:43:c3:54:53:99:84:42:62:30: e6:11:3c:9a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOnJarll8jLTAP47GJnpwiVfUNBcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMyMzMxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzE0NTAzYzNmNGJhZDg2Y2M4YmI4ODFlODg2N2E4MWVj YjEwYmIzZTZkY2I4NDZmZTA4ZTJhYzNjMjhjNGNiMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBAuqqUtXX+45vpupTfF6/SeaDHciWqYUNdTKva2d6nHpg F0MA4DFIuYLpHlv8GV3bXYkzb5DHd61hsbvz9DiDJ8wnqWJpK1ZPsk5/+sSwrURr SOM3cLuiM1jiTdc5egoJTmt7VEzFmTVdnCN23t/W1mqpnwTxqD4k/g72KLyCjVgI vgiuKdmnt07kdsgrmZWVKg9d2LtqyXpAtkhiuia3hTjO8AeuHhoQCdJYnTQolw72 VFBntDtnCiBWggFcCJlwmkQTx6AaAK1aYjRt4jRSx4Ensgm43mxiM18gfjzs7cnO G7j55N2E0iM++FpdeOpGD13uAlnxvUPJYb7zgRWRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4v3x65Er1rHbQbSVH5fvzYlbCeMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzJlNzkyNTI1LTIxOWYtNGFlZC05OThiLTBlNzg0NDRkYTFlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAJnAwDQYJKoZIhvcNAQELBQADggEBAIMCsxpYld6wtYd20e8l9Lo4 S2ajOGXy9eg/tjZP8F8F88PLRvZ7L9KW8ksH4P2tO6roZ64uiE2FF0kzBraIaENd MNi7VqCniYscsgqaDCvQMbnD9Ra7zLuqvIejLCdHnqGS4Y4U0Iej5MaOCMae0Pbg uJu8cJzBwd5PH61oJ6HVzunnlQq/gu4Zg7vNIcWSkR7XWQiSksm/J3BgsOvt52aa kpnCcgb7EJCm87fKISneC7il3fG07DQ0ifBrde2pfKhMw+f7fqXzt+abMEVw1xJr /iDw3iXpdOoV0WjLwaANMR3YFjph4JhQeoJKpQafbDZDO0PDVFOZhEJiMOYRPJo= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:14 2025 by rpki-client