$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59301105-0fa7-4249-b133-0590f855f61f.roa File: 59301105-0fa7-4249-b133-0590f855f61f.roa (raw, json) Hash identifier: eGvPPzfQXvfEdHVJjdFGCA+QBt4EoCJVooTfejZdQD0= Subject key identifier: 21:79:63:F5:BE:E7:43:E5:EB:AE:BB:05:65:17:7A:89:AB:8E:C8:36 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 2762F44BC5E998F55B8E2A1328F61BF8807F3EBA Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59301105-0fa7-4249-b133-0590f855f61f.roa Signing time: Fri 31 Oct 2025 05:25:22 +0000 ROA not before: Fri 31 Oct 2025 05:25:22 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1b20::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:62:f4:4b:c5:e9:98:f5:5b:8e:2a:13:28:f6:1b:f8:80:7f:3e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:25:22 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e52030f321c6b0361be0f8b5bcd0f34952ab4cc8eeab27df2f984421bde892fa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ad:b6:79:cf:32:e4:29:dd:58:8a:53:b6:31: d7:15:8e:1e:db:2e:b4:cf:64:f2:8f:0d:4a:8f:e5: 67:62:6b:c4:b9:dc:59:bb:62:f6:87:d2:ba:07:69: a1:29:e9:0e:44:94:45:c9:35:eb:07:4f:da:5e:ce: 23:d3:d1:6f:b7:4c:56:53:4c:f5:4e:38:8e:cd:59: 7f:00:8d:cd:51:a5:db:22:c2:49:89:0f:af:ee:f0: 1e:2d:67:15:4f:fa:60:c5:bc:b0:55:44:1e:b8:94: be:62:21:96:b9:9b:5b:65:77:d0:25:24:85:b1:77: d0:59:38:e5:01:38:b4:e0:af:d1:c1:14:93:5b:22: a6:31:8a:a4:21:84:ed:21:22:4f:60:d7:29:a3:81: 74:8b:4d:52:1a:57:4b:77:a8:81:8c:1b:8f:3d:73: 34:89:68:2d:2c:18:dc:d0:40:a0:53:29:95:7e:62: ea:1c:c5:4a:ad:d2:bc:b1:05:6b:4d:56:00:00:80: 51:60:42:e3:ca:59:55:63:86:84:69:bf:46:c5:b7: e6:69:d5:ac:50:4d:12:e8:8e:3b:38:2d:6e:ee:a7: c2:3b:24:88:1a:21:9b:df:df:03:be:e7:99:92:ea: 0a:6d:72:5e:67:47:dd:6d:87:29:78:83:15:85:64: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:79:63:F5:BE:E7:43:E5:EB:AE:BB:05:65:17:7A:89:AB:8E:C8:36 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/59301105-0fa7-4249-b133-0590f855f61f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1b20::/45 Signature Algorithm: sha256WithRSAEncryption 21:63:f8:03:cf:9b:ef:37:a8:22:1d:9e:61:cd:3f:aa:85:f7: 5c:a6:9c:be:ea:d3:f7:3b:2e:90:80:05:32:6d:3c:d8:62:ed: 7c:97:93:22:34:5a:c6:d8:a8:d2:5a:6d:40:b9:fd:44:65:37: 4e:0e:eb:17:3c:e3:b2:35:9d:6d:db:4b:87:1b:6b:04:41:f5: a2:9c:94:3c:8d:ad:b3:71:66:f6:af:55:f5:cd:9d:01:91:9d: 61:59:67:23:92:1a:75:02:73:7c:6a:d9:b3:b0:e0:d9:6e:d8: c8:aa:ac:23:67:0e:a8:48:f2:07:f8:1d:04:6c:c7:f0:02:c3: 27:b1:43:13:8a:ef:91:cd:63:6d:06:f5:5c:f6:90:d4:fa:26: 2b:a5:15:c8:2a:e2:e4:fe:4b:11:3a:19:cf:24:90:f8:05:20: 89:8b:92:7f:d5:37:39:ce:c2:53:92:a9:de:18:19:aa:56:04: 3c:2a:6b:22:0d:de:b7:22:3a:b5:3b:ea:dc:97:d3:39:76:c6: f5:bf:5a:d6:35:92:62:1d:22:50:c5:94:3a:c7:c9:10:e6:fd: cf:d2:5d:5d:43:f2:af:7f:ae:c7:8f:6f:fc:5d:f7:5c:be:c8: ad:5d:e0:95:e0:f2:52:c1:cb:dc:44:2a:15:12:4b:0f:f0:6d: 96:13:95:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJ2L0S8XpmPVbjioTKPYb+IB/ProwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUyNTIyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTIwMzBmMzIxYzZiMDM2MWJlMGY4YjViY2QwZjM0OTUy YWI0Y2M4ZWVhYjI3ZGYyZjk4NDQyMWJkZTg5MmZhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2rbZ5zzLkKd1YilO2MdcVjh7bLrTPZPKPDUqP5Wdia8S5 3Fm7YvaH0roHaaEp6Q5ElEXJNesHT9peziPT0W+3TFZTTPVOOI7NWX8Ajc1Rpdsi wkmJD6/u8B4tZxVP+mDFvLBVRB64lL5iIZa5m1tld9AlJIWxd9BZOOUBOLTgr9HB FJNbIqYxiqQhhO0hIk9g1ymjgXSLTVIaV0t3qIGMG489czSJaC0sGNzQQKBTKZV+ YuocxUqt0ryxBWtNVgAAgFFgQuPKWVVjhoRpv0bFt+Zp1axQTRLojjs4LW7up8I7 JIgaIZvf3wO+55mS6gptcl5nR91thyl4gxWFZAG9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIXlj9b7nQ+XrrrsFZRd6iauOyDYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzU5MzAxMTA1LTBmYTctNDI0OS1iMTMzLTA1OTBmODU1ZjYxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAGyAwDQYJKoZIhvcNAQELBQADggEBACFj+APPm+83qCIdnmHNP6qF 91ymnL7q0/c7LpCABTJtPNhi7XyXkyI0WsbYqNJabUC5/URlN04O6xc847I1nW3b S4cbawRB9aKclDyNrbNxZvavVfXNnQGRnWFZZyOSGnUCc3xq2bOw4Nlu2MiqrCNn DqhI8gf4HQRsx/ACwyexQxOK75HNY20G9Vz2kNT6JiulFcgq4uT+SxE6Gc8kkPgF IImLkn/VNznOwlOSqd4YGapWBDwqayIN3rciOrU76tyX0zl2xvW/WtY1kmIdIlDF lDrHyRDm/c/SXV1D8q9/rsePb/xd91y+yK1d4JXg8lLBy9xEKhUSSw/wbZYTlS4= -----END CERTIFICATE-----Generated at Tue Nov 18 05:41:38 2025 by rpki-client