$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/584cb118-7aa1-43a8-ac8a-e112a198a482.roa File: 584cb118-7aa1-43a8-ac8a-e112a198a482.roa (raw, json) Hash identifier: Zj2id8XbLtouV4Vpbupn0EfMl2HEyNu4o9vRQonLzJw= Subject key identifier: BD:5D:CF:95:51:47:AF:1A:29:F3:BD:8A:E3:88:F3:69:69:8E:AD:1F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3E3ED3CDF6142832EF0E11211E7150148DC2363C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/584cb118-7aa1-43a8-ac8a-e112a198a482.roa Signing time: Fri 31 Oct 2025 02:40:13 +0000 ROA not before: Fri 31 Oct 2025 02:40:13 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1674::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:3e:d3:cd:f6:14:28:32:ef:0e:11:21:1e:71:50:14:8d:c2:36:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:40:13 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=789a3b6a61965e3e390984cf0529b02a0f5b7a7c83d0a5768bae0a6cab523511, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:1e:49:4d:b5:77:81:f0:dc:e0:ca:05:a8: 77:23:27:fc:58:4b:f7:17:8f:ef:cc:7a:9d:66:ff: 1d:92:e7:f9:a8:4b:9b:5d:5a:b8:61:89:04:72:85: cf:e4:0d:f3:d9:ac:fb:01:02:5f:fa:fa:64:e8:de: 6f:51:cc:d6:26:a7:72:99:8d:9b:e1:70:b5:07:a3: c4:76:2b:9c:93:79:bf:71:ae:a1:86:52:87:de:2d: 72:07:a9:da:b4:c7:9a:ea:3a:59:01:af:0e:7d:69: 7a:ba:da:92:3d:42:90:94:4b:3c:3f:89:10:01:8d: 4f:83:d3:51:67:3c:e7:2c:10:3a:eb:6c:cd:a9:0d: 07:6a:9a:fc:02:38:6a:b2:58:18:00:80:04:fc:4b: 41:02:db:f3:3c:58:81:31:76:8c:58:41:8a:64:77: d6:d2:35:a3:14:f3:9b:54:67:bd:92:00:08:49:5d: 41:aa:44:81:71:cb:42:0d:1c:42:1a:40:4a:28:a7: 54:d3:7b:bc:24:ae:80:a5:74:34:34:e3:28:c9:6e: 4c:9a:ac:a5:13:54:cf:49:c6:f4:aa:c9:a7:66:bf: 6b:f8:a3:5c:54:69:06:7a:ea:01:38:99:fa:48:d9: 10:71:ee:fd:d7:1d:d3:d3:38:50:19:b8:0c:20:ba: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5D:CF:95:51:47:AF:1A:29:F3:BD:8A:E3:88:F3:69:69:8E:AD:1F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/584cb118-7aa1-43a8-ac8a-e112a198a482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1674::/46 Signature Algorithm: sha256WithRSAEncryption af:4f:22:c6:84:52:20:c5:33:e7:b3:35:06:1b:f8:7d:aa:f6: f6:a8:a4:85:b0:78:0a:72:40:b4:0a:8a:ed:fa:cb:97:3d:18: 0e:2a:92:df:5a:23:66:cf:03:33:b6:19:18:7b:bb:16:d7:ad: 0e:81:95:10:8e:d9:5c:69:e0:b3:67:47:34:5b:d8:a1:d5:8d: e0:82:88:05:41:e6:2e:60:9c:36:a2:52:e5:9e:0c:41:ae:2b: 02:8d:ac:a4:68:b7:0a:b2:9b:ba:18:b3:68:67:4d:29:af:c4: 7e:08:3a:0c:6c:5e:0c:9b:3a:ca:ba:6d:46:9d:7d:65:4e:82: fe:71:4f:17:3d:bc:e1:52:92:7f:fa:02:c8:96:7a:73:c8:3a: 47:75:2b:c9:f5:5b:57:e8:c1:08:e9:d7:0e:0e:ce:49:6f:f3: 4c:a0:6a:96:88:d0:8b:d7:9b:57:f6:9e:ca:1d:71:b3:31:7d: c9:1f:81:d2:47:c1:79:30:3f:be:7c:00:45:a0:fc:10:22:be: 59:44:43:3b:da:a9:ae:a2:ad:4f:20:ae:c5:30:e7:2f:70:3c: 4c:8e:41:76:a4:dc:a0:be:0f:9e:ef:ee:18:b3:d8:27:d8:c3: e2:90:f5:9d:35:68:c4:16:7a:20:f3:8d:6a:a1:6e:05:25:10: a0:0d:0b:17 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPj7TzfYUKDLvDhEhHnFQFI3CNjwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDI0MDEzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODlhM2I2YTYxOTY1ZTNlMzkwOTg0Y2YwNTI5YjAyYTBm NWI3YTdjODNkMGE1NzY4YmFlMGE2Y2FiNTIzNTExMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0CR5JTbV3gfDc4MoFqHcjJ/xYS/cXj+/Mep1m/x2S5/mo S5tdWrhhiQRyhc/kDfPZrPsBAl/6+mTo3m9RzNYmp3KZjZvhcLUHo8R2K5yTeb9x rqGGUofeLXIHqdq0x5rqOlkBrw59aXq62pI9QpCUSzw/iRABjU+D01FnPOcsEDrr bM2pDQdqmvwCOGqyWBgAgAT8S0EC2/M8WIExdoxYQYpkd9bSNaMU85tUZ72SAAhJ XUGqRIFxy0INHEIaQEoop1TTe7wkroCldDQ04yjJbkyarKUTVM9JxvSqyadmv2v4 o1xUaQZ66gE4mfpI2RBx7v3XHdPTOFAZuAwgulSfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvV3PlVFHrxop872K44jzaWmOrR8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzU4NGNiMTE4LTdhYTEtNDNhOC1hYzhhLWUxMTJhMTk4YTQ4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAFnQwDQYJKoZIhvcNAQELBQADggEBAK9PIsaEUiDFM+ezNQYb+H2q 9vaopIWweApyQLQKiu36y5c9GA4qkt9aI2bPAzO2GRh7uxbXrQ6BlRCO2Vxp4LNn RzRb2KHVjeCCiAVB5i5gnDaiUuWeDEGuKwKNrKRotwqym7oYs2hnTSmvxH4IOgxs XgybOsq6bUadfWVOgv5xTxc9vOFSkn/6AsiWenPIOkd1K8n1W1fowQjp1w4Ozklv 80ygapaI0IvXm1f2nsodcbMxfckfgdJHwXkwP758AEWg/BAivllEQzvaqa6irU8g rsUw5y9wPEyOQXak3KC+D57v7hiz2CfYw+KQ9Z01aMQWeiDzjWqhbgUlEKANCxc= -----END CERTIFICATE-----Generated at Tue Nov 18 08:24:35 2025 by rpki-client