$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d98700e-51ca-430b-9d55-90e4ce29fb64.roa File: 4d98700e-51ca-430b-9d55-90e4ce29fb64.roa (raw, json) Hash identifier: Mq3Bwx4ViJ1DY9Mq1uTOmJkJFGeFhMi36q+p9rUyiAI= Subject key identifier: 68:84:A2:D2:88:E9:5C:FA:87:54:7E:52:09:D0:DC:D1:DF:81:C7:11 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 241C19065087385333A8241A599637E0ED9E3847 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d98700e-51ca-430b-9d55-90e4ce29fb64.roa Signing time: Fri 31 Oct 2025 06:12:11 +0000 ROA not before: Fri 31 Oct 2025 06:12:11 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3b18::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1c:19:06:50:87:38:53:33:a8:24:1a:59:96:37:e0:ed:9e:38:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 06:12:11 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=2893c0953e8ccb79a7cd13b3176237d4a2698efcb62ce38296170589ca0fc8ef, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:c1:a2:6c:3e:f6:20:30:81:d9:2f:91:13: 82:92:68:13:46:51:09:d9:af:f7:70:08:5e:b9:3c: 12:37:e8:f3:ed:d8:8f:95:72:89:ff:e4:9d:a9:a8: fe:53:2e:09:96:4f:29:0f:e8:25:1b:c5:3c:29:56: fb:13:c3:cb:51:f6:6b:1d:4a:99:f7:c3:4e:63:60: f2:b5:01:b4:7c:f0:38:a6:d6:fd:99:66:f1:23:8e: 83:2c:7a:ab:c1:ba:c2:14:45:38:8c:92:9f:48:26: 5b:75:7f:86:8b:75:b9:7a:e7:b8:b9:1f:c4:36:76: 2b:42:1c:ae:22:cc:35:b5:85:1a:11:cb:82:23:3f: f0:d0:05:31:00:9a:47:62:15:a4:4f:0d:d1:7d:c0: d6:95:6f:d2:35:2b:a4:63:40:8d:c5:9d:37:9f:19: 36:6b:52:be:57:07:61:eb:ce:c4:42:99:ba:69:ec: f0:50:89:7f:b1:4c:13:44:aa:ab:8b:82:39:cc:e0: 1e:11:3f:54:b9:42:ab:9f:df:da:fa:34:90:c5:92: 00:06:ee:59:0d:9c:7f:76:c6:87:9c:db:81:85:05: 22:8c:69:c2:8a:8f:42:29:b8:3a:29:38:07:3b:25: 57:f6:c1:ae:06:7a:b1:01:56:3e:3e:10:85:96:de: 75:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:84:A2:D2:88:E9:5C:FA:87:54:7E:52:09:D0:DC:D1:DF:81:C7:11 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d98700e-51ca-430b-9d55-90e4ce29fb64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3b18::/45 Signature Algorithm: sha256WithRSAEncryption b5:bd:e0:ad:85:56:d0:c6:26:7e:b0:58:bc:b2:66:b0:c7:e9: ab:cc:55:e8:2f:17:79:90:ab:cb:28:be:7e:de:ac:22:98:26: 51:69:2e:3a:01:3b:c6:be:8d:04:f8:d3:ab:ac:c3:d4:a3:fa: 64:49:36:c1:56:f2:79:3e:ce:2d:a5:65:f9:51:d3:8b:e1:ca: 44:d5:b1:69:ca:19:3c:8f:02:33:8b:fa:82:6d:e6:51:d4:02: a7:7d:be:63:d4:03:47:35:dc:60:52:e4:17:bb:2a:eb:f5:ba: ec:9f:48:9b:0b:0b:ea:f7:3e:5e:08:3d:fe:78:13:0f:81:7d: 50:2b:8b:ba:e8:f7:0f:12:f1:7d:4b:35:50:07:87:66:0d:c1: bb:08:af:ea:25:e6:21:6c:3d:65:e2:a0:70:76:45:65:70:df: 50:1d:04:54:bd:fa:ea:f3:21:55:8f:72:95:5e:88:d0:18:05: f7:a9:54:b5:b3:02:53:1c:9f:dd:e4:bb:fc:53:23:fd:70:7c: 7a:a4:de:66:3f:b9:59:e7:b0:6a:b5:5b:27:db:83:b5:87:25: 67:e6:c5:6e:77:0f:97:57:b2:f7:6d:ae:37:ca:10:bf:f3:fb: d9:e5:ff:79:be:2d:45:7b:4d:63:a6:84:7f:9e:34:36:7c:b4: 84:a6:bb:c8 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJBwZBlCHOFMzqCQaWZY34O2eOEcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDYxMjExWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyODkzYzA5NTNlOGNjYjc5YTdjZDEzYjMxNzYyMzdkNGEy Njk4ZWZjYjYyY2UzODI5NjE3MDU4OWNhMGZjOGVmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2jsGibD72IDCB2S+RE4KSaBNGUQnZr/dwCF65PBI36PPt 2I+Vcon/5J2pqP5TLgmWTykP6CUbxTwpVvsTw8tR9msdSpn3w05jYPK1AbR88Dim 1v2ZZvEjjoMseqvBusIURTiMkp9IJlt1f4aLdbl657i5H8Q2ditCHK4izDW1hRoR y4IjP/DQBTEAmkdiFaRPDdF9wNaVb9I1K6RjQI3FnTefGTZrUr5XB2HrzsRCmbpp 7PBQiX+xTBNEqquLgjnM4B4RP1S5Qquf39r6NJDFkgAG7lkNnH92xoec24GFBSKM acKKj0IpuDopOAc7JVf2wa4GerEBVj4+EIWW3nVXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaISi0ojpXPqHVH5SCdDc0d+BxxEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRkOTg3MDBlLTUxY2EtNDMwYi05ZDU1LTkwZTRjZTI5ZmI2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAOxgwDQYJKoZIhvcNAQELBQADggEBALW94K2FVtDGJn6wWLyyZrDH 6avMVegvF3mQq8sovn7erCKYJlFpLjoBO8a+jQT406usw9Sj+mRJNsFW8nk+zi2l ZflR04vhykTVsWnKGTyPAjOL+oJt5lHUAqd9vmPUA0c13GBS5Be7Kuv1uuyfSJsL C+r3Pl4IPf54Ew+BfVAri7ro9w8S8X1LNVAHh2YNwbsIr+ol5iFsPWXioHB2RWVw 31AdBFS9+urzIVWPcpVeiNAYBfepVLWzAlMcn93ku/xTI/1wfHqk3mY/uVnnsGq1 Wyfbg7WHJWfmxW53D5dXsvdtrjfKEL/z+9nl/3m+LUV7TWOmhH+eNDZ8tISmu8g= -----END CERTIFICATE-----Generated at Tue Nov 18 05:41:36 2025 by rpki-client