$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/498e9f94-6f00-48fe-93da-d3fca37091e2.roa File: 498e9f94-6f00-48fe-93da-d3fca37091e2.roa (raw, json) Hash identifier: XERWthc4LZORJRVCCnjIinxQsrpwiX8xbhtyyAv+w5o= Subject key identifier: DE:F6:47:FC:DA:15:40:2D:90:5C:02:35:38:8D:F3:EB:6B:D0:19:8D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 685C0731C3DEB9372E92895371E949B083C0F895 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/498e9f94-6f00-48fe-93da-d3fca37091e2.roa Signing time: Fri 31 Oct 2025 05:53:38 +0000 ROA not before: Fri 31 Oct 2025 05:53:38 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2f20::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5c:07:31:c3:de:b9:37:2e:92:89:53:71:e9:49:b0:83:c0:f8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:53:38 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=7f8e2516f591af1e87ce6605252e9cac9773232448bac50ba8cc29aca635b75b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:35:94:12:97:b8:64:cf:5b:27:5c:b9:27:0b: ac:88:6d:6e:7a:af:32:8e:ba:d5:56:b6:3b:9b:28: 00:bb:c6:87:68:29:7b:6e:62:9d:e0:cf:d4:63:ac: d2:d1:73:9e:d8:cc:20:1f:1e:14:6b:e7:e6:47:84: 78:e7:e2:0c:88:17:e0:4a:5e:7d:2f:df:48:7b:b4: c6:c8:10:5a:10:64:1a:ee:50:46:fc:34:25:91:a9: 23:9f:85:5c:45:63:2a:3d:ca:43:6c:e9:26:7c:81: a5:43:39:00:b6:3c:99:ce:5b:6a:c2:40:15:94:50: 01:94:79:a1:50:25:13:72:01:e4:bd:97:0e:9b:4b: 19:ad:82:e2:9a:6c:4f:59:ab:f2:8b:f4:72:d1:57: bc:dd:26:e1:7f:9d:77:19:c5:0d:ad:e6:20:a9:8e: 72:a5:24:eb:fd:7b:3b:03:01:60:ec:0a:d6:6e:c3: 8e:20:34:14:44:d8:91:03:b5:dc:7f:09:03:65:fd: 97:e4:dc:5c:74:44:8e:3a:7f:7e:69:25:9d:5f:c4: 59:c7:3b:dc:5c:d4:01:8a:f9:a9:d1:54:10:65:7a: dc:d7:7c:69:fb:83:74:04:23:da:14:33:6c:8f:a6: 98:d9:95:dd:b7:38:0a:07:3a:9c:0a:80:72:60:68: 72:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F6:47:FC:DA:15:40:2D:90:5C:02:35:38:8D:F3:EB:6B:D0:19:8D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/498e9f94-6f00-48fe-93da-d3fca37091e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2f20::/45 Signature Algorithm: sha256WithRSAEncryption ab:7f:b7:ec:00:06:a6:32:d2:86:ea:bb:b2:9b:92:97:9e:d2: e4:66:d4:53:a5:50:0b:4b:f5:f5:a0:a0:f4:41:eb:3a:54:f4: 41:04:7b:71:c3:ba:71:49:6f:1b:2e:98:42:bf:57:7a:dc:22: c4:76:12:63:2a:3d:19:2c:58:19:2a:c8:94:e6:6a:ed:cc:df: 68:30:7b:79:db:50:2e:ad:18:4a:18:13:06:90:a9:92:c0:73: 0a:c8:2f:a5:71:71:82:9c:2c:90:c0:00:17:d3:e8:cd:9a:d1: a8:96:4a:1b:bd:f4:db:4b:10:5f:79:8c:0b:3d:47:5f:5f:91: 87:2e:81:68:fe:6f:c6:a1:a5:85:1c:9c:a9:e7:5f:7e:05:b9: 1a:1c:2d:24:b9:09:5e:2c:1b:ec:a7:02:cc:70:3b:fc:13:dc: 7e:d7:ad:7f:1e:cd:46:8c:85:41:72:49:b5:ca:b9:cd:b5:db: fc:34:fa:56:73:7f:11:c5:d5:6b:6c:1c:cc:96:00:2e:fc:a4: d1:d7:62:08:64:93:6a:f5:ef:88:59:bb:77:dc:22:f9:ac:87: c0:06:da:94:33:14:29:9d:f7:f8:52:7d:83:95:a3:2c:9c:eb: da:6b:6c:88:d7:3f:ab:16:a1:87:7a:2b:a2:1b:b0:ae:a7:0d: 83:7a:05:88 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaFwHMcPeuTcukolTcelJsIPA+JUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDU1MzM4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjhlMjUxNmY1OTFhZjFlODdjZTY2MDUyNTJlOWNhYzk3 NzMyMzI0NDhiYWM1MGJhOGNjMjlhY2E2MzViNzViMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaNZQSl7hkz1snXLknC6yIbW56rzKOutVWtjubKAC7xodo KXtuYp3gz9RjrNLRc57YzCAfHhRr5+ZHhHjn4gyIF+BKXn0v30h7tMbIEFoQZBru UEb8NCWRqSOfhVxFYyo9ykNs6SZ8gaVDOQC2PJnOW2rCQBWUUAGUeaFQJRNyAeS9 lw6bSxmtguKabE9Zq/KL9HLRV7zdJuF/nXcZxQ2t5iCpjnKlJOv9ezsDAWDsCtZu w44gNBRE2JEDtdx/CQNl/Zfk3Fx0RI46f35pJZ1fxFnHO9xc1AGK+anRVBBletzX fGn7g3QEI9oUM2yPppjZld23OAoHOpwKgHJgaHIJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3vZH/NoVQC2QXAI1OI3z62vQGY0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ5OGU5Zjk0LTZmMDAtNDhmZS05M2RhLWQzZmNhMzcwOTFlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAALyAwDQYJKoZIhvcNAQELBQADggEBAKt/t+wABqYy0obqu7Kbkpee 0uRm1FOlUAtL9fWgoPRB6zpU9EEEe3HDunFJbxsumEK/V3rcIsR2EmMqPRksWBkq yJTmau3M32gwe3nbUC6tGEoYEwaQqZLAcwrIL6VxcYKcLJDAABfT6M2a0aiWShu9 9NtLEF95jAs9R19fkYcugWj+b8ahpYUcnKnnX34FuRocLSS5CV4sG+ynAsxwO/wT 3H7XrX8ezUaMhUFySbXKuc212/w0+lZzfxHF1WtsHMyWAC78pNHXYghkk2r174hZ u3fcIvmsh8AG2pQzFCmd9/hSfYOVoyyc69prbIjXP6sWoYd6K6IbsK6nDYN6BYg= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:40 2025 by rpki-client