$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/557f22e0-fa9d-4092-bbce-909c96f70440.roa File: 557f22e0-fa9d-4092-bbce-909c96f70440.roa (raw, json) Hash identifier: FAC28h8TmQ1ofHD4inMXDaOSzq5IkB2Rb3A5N2V5taU= Subject key identifier: E8:22:32:E7:72:9D:0D:7C:D2:46:D9:79:9E:44:18:4B:28:42:8A:03 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 192C9D835C96929833F589641A7A7EFDC1B348F5 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/557f22e0-fa9d-4092-bbce-909c96f70440.roa Signing time: Thu 30 Oct 2025 22:40:19 +0000 ROA not before: Thu 30 Oct 2025 22:40:19 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1f54::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2c:9d:83:5c:96:92:98:33:f5:89:64:1a:7a:7e:fd:c1:b3:48:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:40:19 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=bbfa9cb82cc0cf11efb34a88514154c30243cf734146a68a070ce5ddd39ce788, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:18:01:44:df:1d:ad:7c:b9:fd:d0:05:37: a1:4b:17:8f:60:e8:4d:99:ff:7f:f8:70:7e:cb:c0: 1d:42:55:d4:ea:50:2a:1a:21:1b:36:02:dd:16:ba: 88:c5:57:58:06:b3:3f:34:fa:4c:85:1b:94:34:e8: 62:c4:34:00:79:71:2e:df:9e:fa:f7:b4:cf:79:24: 1b:c3:c9:63:da:43:03:32:54:08:a6:6d:30:bd:b7: 1a:58:15:8e:93:f7:54:c4:45:8a:71:c3:ee:61:d6: 34:ce:45:3c:73:54:d7:4e:08:f2:ec:3b:79:00:43: af:0f:d1:59:c7:36:37:49:4d:8e:56:35:2f:1e:3c: 63:91:f0:7a:07:49:76:0c:fd:bf:f2:7e:19:32:ae: e9:98:22:21:e5:1c:f8:1a:4a:80:c7:33:83:c3:46: 0c:d1:8c:78:43:b6:e9:57:5f:54:fb:12:59:9e:26: b4:2a:2e:1d:49:2a:1c:c0:bc:29:3e:71:05:29:aa: 32:dd:69:59:ab:3a:7b:de:f3:03:a3:fc:ef:34:ec: 8e:3d:f4:68:34:f1:25:06:a0:73:3b:d0:fd:04:f3: a7:10:81:c4:5a:5d:40:ac:9b:db:6c:a5:9b:85:ce: 90:52:ae:3e:6b:11:93:e4:97:1d:ba:4a:c9:63:c0: 2a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:22:32:E7:72:9D:0D:7C:D2:46:D9:79:9E:44:18:4B:28:42:8A:03 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/557f22e0-fa9d-4092-bbce-909c96f70440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1f54::/47 Signature Algorithm: sha256WithRSAEncryption a7:d7:4d:cb:ba:7e:35:98:6b:bf:4c:3f:57:72:a6:ce:29:ca: 72:c3:1a:ca:bf:f7:cc:e6:52:53:73:d3:1e:33:f5:10:66:8a: 02:92:f8:32:bd:48:8e:85:b1:e6:6e:d1:5d:8b:e3:c2:3b:e8: 7c:90:60:ed:fe:25:f3:7a:67:12:00:3a:86:57:f3:42:78:63: 14:ba:a1:d3:98:e9:f6:a0:b5:63:36:a5:ed:5a:75:bb:d0:6d: e5:52:3c:57:9e:41:b5:6e:3f:ef:45:7c:d4:64:40:72:94:b5: 87:55:1a:47:aa:ae:bb:78:dc:80:93:b0:ed:b4:8d:05:09:38: 9f:06:34:79:7d:f4:f1:72:31:e8:ab:c3:d0:0f:a2:88:d5:ef: f6:8b:c6:e9:aa:05:54:ed:10:4c:b6:cc:17:2b:00:0a:f2:82: 44:a6:5c:96:89:1a:ef:21:57:6b:48:ca:03:b4:75:0c:dd:78: 35:2c:bb:f2:3c:54:65:e2:1f:44:d6:29:f6:b5:87:73:b8:fa: bf:6d:84:d2:5f:91:a7:f3:46:e0:e3:9c:72:e7:23:64:5f:26: 6a:cf:d6:cb:07:a3:57:9c:17:be:0c:27:e1:61:5c:58:55:86: ff:fb:57:bb:ec:de:51:19:70:c8:83:53:76:d7:4a:8d:a3:fe: ba:0f:67:bf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGSydg1yWkpgz9YlkGnp+/cGzSPUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI0MDE5WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmZhOWNiODJjYzBjZjExZWZiMzRhODg1MTQxNTRjMzAy NDNjZjczNDE0NmE2OGEwNzBjZTVkZGQzOWNlNzg4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsHRgBRN8drXy5/dAFN6FLF49g6E2Z/3/4cH7LwB1CVdTq UCoaIRs2At0WuojFV1gGsz80+kyFG5Q06GLENAB5cS7fnvr3tM95JBvDyWPaQwMy VAimbTC9txpYFY6T91TERYpxw+5h1jTORTxzVNdOCPLsO3kAQ68P0VnHNjdJTY5W NS8ePGOR8HoHSXYM/b/yfhkyrumYIiHlHPgaSoDHM4PDRgzRjHhDtulXX1T7Elme JrQqLh1JKhzAvCk+cQUpqjLdaVmrOnve8wOj/O807I499Gg08SUGoHM70P0E86cQ gcRaXUCsm9tspZuFzpBSrj5rEZPklx26SsljwCo9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6CIy53KdDXzSRtl5nkQYSyhCigMwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzU1N2YyMmUwLWZhOWQtNDA5Mi1iYmNlLTkwOWM5NmY3MDQ0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAH1QwDQYJKoZIhvcNAQELBQADggEBAKfXTcu6fjWYa79MP1dyps4p ynLDGsq/98zmUlNz0x4z9RBmigKS+DK9SI6FseZu0V2L48I76HyQYO3+JfN6ZxIA OoZX80J4YxS6odOY6fagtWM2pe1adbvQbeVSPFeeQbVuP+9FfNRkQHKUtYdVGkeq rrt43ICTsO20jQUJOJ8GNHl99PFyMeirw9APoojV7/aLxumqBVTtEEy2zBcrAAry gkSmXJaJGu8hV2tIygO0dQzdeDUsu/I8VGXiH0TWKfa1h3O4+r9thNJfkafzRuDj nHLnI2RfJmrP1ssHo1ecF74MJ+FhXFhVhv/7V7vs3lEZcMiDU3bXSo2j/roPZ78= -----END CERTIFICATE-----Generated at Tue Nov 18 05:41:43 2025 by rpki-client