$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2252123a-7f1c-4a5c-b771-baf828026eb9.roa File: 2252123a-7f1c-4a5c-b771-baf828026eb9.roa (raw, json) Hash identifier: msx1lKY+3pcohFxh+/RauaEcCuhElHY9j4N/wCEETTA= Subject key identifier: BE:71:75:83:88:91:89:FF:70:85:CB:5A:40:AA:C9:33:41:29:D0:83 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 11C3DEC4A984970B1043694607EF15C3F2787F09 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2252123a-7f1c-4a5c-b771-baf828026eb9.roa Signing time: Fri 31 Oct 2025 05:12:24 +0000 ROA not before: Fri 31 Oct 2025 05:12:24 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1678::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c3:de:c4:a9:84:97:0b:10:43:69:46:07:ef:15:c3:f2:78:7f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:12:24 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=5cf969a3f42a1682e1e5b7d1509f79830c986af8432e55ebc4846d1404406a68, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:20:8c:f2:09:c7:77:1e:ba:5f:86:db:86:d9: d3:a4:bc:76:b8:88:fa:c0:8b:e7:d6:38:cd:31:72: d0:39:1e:66:d4:48:16:45:0a:fc:d7:36:d9:c5:5e: f3:2a:69:d0:77:8f:92:43:15:22:67:9c:c9:d0:cf: 6e:ad:fe:1f:17:67:7a:77:0d:1a:60:60:2f:e2:d5: f9:1b:8f:c5:e6:ef:e9:d0:46:1a:c0:d5:fe:e9:23: b3:b1:d2:cf:0a:d9:c0:aa:b4:bf:8a:41:c7:fe:c8: e4:fe:42:ec:89:8f:50:a3:d4:3b:27:7f:5c:51:de: be:ed:72:fa:64:b4:78:24:39:21:28:4b:21:84:f4: 09:00:33:99:64:ed:52:fe:10:5a:9a:94:52:62:7e: 29:c8:90:7e:80:17:40:a9:79:8b:ca:8f:39:9d:6e: 66:3a:1f:3c:c7:08:ba:07:35:4e:3a:ad:87:7c:83: 81:a3:9a:00:2a:4c:57:f6:2d:4f:bf:a1:19:56:c0: e0:fb:de:c1:b7:ba:87:c3:c0:f3:f0:29:77:58:65: 52:bc:64:4e:e1:27:62:38:a0:03:f9:4d:d5:38:3b: d3:c5:0d:f4:0e:3e:49:c2:8b:41:10:62:1a:cc:9a: bd:d5:bf:b2:ec:c7:a8:90:cf:4f:c1:ac:ec:f8:50: c3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:71:75:83:88:91:89:FF:70:85:CB:5A:40:AA:C9:33:41:29:D0:83 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2252123a-7f1c-4a5c-b771-baf828026eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1678::/45 Signature Algorithm: sha256WithRSAEncryption 0d:a2:f4:14:df:a3:c9:c0:3f:e5:77:13:52:5b:8c:e5:b0:fd: 01:5a:5b:e8:36:df:77:2d:58:e0:c3:0f:81:3d:07:6c:56:87: 80:db:40:a3:d5:c5:c2:aa:ff:3a:80:e8:48:46:1c:8f:d0:49: 8a:f1:77:df:27:92:be:6d:6c:46:21:b0:c3:bf:0e:82:4e:eb: 45:fb:24:e6:ed:81:e8:53:44:12:27:20:e2:5c:c7:2e:f7:95: 7f:a5:3f:96:c7:ab:a7:5f:58:a3:e6:13:e2:45:a9:43:28:db: 81:46:53:ee:c9:13:09:de:c7:37:13:06:04:7a:15:8e:50:89: 53:45:ba:2b:04:63:d0:6d:b8:57:86:5a:b6:50:d7:ae:15:8c: 77:77:99:9c:a0:ea:cd:35:18:9f:8c:18:d6:d8:40:b5:ac:2c: a4:fe:48:95:81:ac:e0:33:b7:a5:12:f8:7a:ce:ce:fc:28:3a: 5d:f0:66:4f:8b:4a:02:83:e3:37:9b:72:d9:60:0f:fe:10:3e: 3a:bf:85:bd:e0:67:a2:ef:72:d2:28:bb:3e:66:6a:56:f8:8c: 02:86:6c:7d:22:66:30:e7:c7:5e:e8:34:84:f9:ae:a1:d5:74: e8:4a:16:a0:22:fb:df:24:3d:e8:dc:1a:dd:a6:00:81:cc:6e: 74:08:8c:87 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEcPexKmElwsQQ2lGB+8Vw/J4fwkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUxMjI0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2Y5NjlhM2Y0MmExNjgyZTFlNWI3ZDE1MDlmNzk4MzBj OTg2YWY4NDMyZTU1ZWJjNDg0NmQxNDA0NDA2YTY4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRIIzyCcd3HrpfhtuG2dOkvHa4iPrAi+fWOM0xctA5HmbU SBZFCvzXNtnFXvMqadB3j5JDFSJnnMnQz26t/h8XZ3p3DRpgYC/i1fkbj8Xm7+nQ RhrA1f7pI7Ox0s8K2cCqtL+KQcf+yOT+QuyJj1Cj1Dsnf1xR3r7tcvpktHgkOSEo SyGE9AkAM5lk7VL+EFqalFJifinIkH6AF0CpeYvKjzmdbmY6HzzHCLoHNU46rYd8 g4GjmgAqTFf2LU+/oRlWwOD73sG3uofDwPPwKXdYZVK8ZE7hJ2I4oAP5TdU4O9PF DfQOPknCi0EQYhrMmr3Vv7Lsx6iQz0/BrOz4UMMZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvnF1g4iRif9whctaQKrJM0Ep0IMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzIyNTIxMjNhLTdmMWMtNGE1Yy1iNzcxLWJhZjgyODAyNmViOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAFngwDQYJKoZIhvcNAQELBQADggEBAA2i9BTfo8nAP+V3E1JbjOWw /QFaW+g233ctWODDD4E9B2xWh4DbQKPVxcKq/zqA6EhGHI/QSYrxd98nkr5tbEYh sMO/DoJO60X7JObtgehTRBInIOJcxy73lX+lP5bHq6dfWKPmE+JFqUMo24FGU+7J EwnexzcTBgR6FY5QiVNFuisEY9BtuFeGWrZQ164VjHd3mZyg6s01GJ+MGNbYQLWs LKT+SJWBrOAzt6US+HrOzvwoOl3wZk+LSgKD4zebctlgD/4QPjq/hb3gZ6LvctIo uz5malb4jAKGbH0iZjDnx17oNIT5rqHVdOhKFqAi+98kPejcGt2mAIHMbnQIjIc= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:49 2025 by rpki-client