$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1f659f0f-8fe0-40d9-b570-a873abcfd454.roa File: 1f659f0f-8fe0-40d9-b570-a873abcfd454.roa (raw, json) Hash identifier: J+tzBocIW7t46fDKmziKHYs6y+Eobva1PvPIh6v12xQ= Subject key identifier: 60:B0:93:0C:FC:22:EC:9B:92:BF:45:5B:DA:E7:0C:5B:DA:82:14:50 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 1229853870F5115C7CAF5DE01A18A757334D409C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1f659f0f-8fe0-40d9-b570-a873abcfd454.roa Signing time: Fri 31 Oct 2025 01:51:46 +0000 ROA not before: Fri 31 Oct 2025 01:51:46 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3dc4::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:29:85:38:70:f5:11:5c:7c:af:5d:e0:1a:18:a7:57:33:4d:40:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:51:46 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=d43da3829ca943d710d82cb5c4b8b676361ee26424b9fa869afbf4db780e28e7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:1d:4d:99:e3:43:d7:51:fd:0e:d6:4f:06: a2:78:4d:a4:b6:15:ae:6b:09:10:40:44:c6:70:b0: ca:88:12:24:4b:66:f8:70:84:fa:d4:3a:09:d6:8b: a3:0c:2c:c1:92:33:e4:e8:8f:25:38:6d:e2:87:98: f5:32:e7:01:36:63:09:db:b0:61:3e:bc:fc:5a:18: 9e:fe:58:9d:07:47:82:8a:bb:f2:6f:5c:ea:7f:82: 5b:bb:00:86:b9:76:79:00:d5:28:d3:e9:45:e4:95: 53:3d:0a:cb:1e:92:67:d9:b4:75:31:e3:8e:fe:86: 00:0f:20:06:18:5d:52:cd:7b:88:e6:ae:f6:51:7a: 5e:f8:9d:14:03:05:1c:e4:a1:43:41:f6:4d:2a:4f: fa:17:8f:dc:58:56:fb:09:36:74:ee:0c:2e:49:d8: 86:49:37:1d:28:e4:60:9e:32:53:25:03:5e:4a:16: fd:85:ce:ff:70:ba:82:4d:29:ed:b1:7c:7e:8f:5f: 6e:75:d8:2b:a0:37:14:bb:97:32:37:3e:ce:c3:55: 11:95:2f:b0:c5:d5:1a:3e:23:6e:94:bb:f9:16:e6: c8:c7:98:af:62:04:56:54:08:7a:bb:55:88:40:b6: 76:aa:3b:10:5c:ea:80:96:af:38:70:1d:22:08:49: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B0:93:0C:FC:22:EC:9B:92:BF:45:5B:DA:E7:0C:5B:DA:82:14:50 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1f659f0f-8fe0-40d9-b570-a873abcfd454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3dc4::/47 Signature Algorithm: sha256WithRSAEncryption 2d:75:ba:d8:e3:cf:28:68:d3:0a:3b:70:7f:09:e9:70:dd:c8: 65:5d:63:56:03:17:8e:4e:5e:e7:9c:57:36:4f:2e:e7:26:f1: 5f:bc:be:5e:08:07:26:71:59:75:8b:c2:cb:7e:06:de:e6:2c: 4d:ea:9c:0e:26:42:98:c7:b5:75:1a:62:17:2f:1e:67:24:27: f6:6d:91:ac:e3:dd:65:d4:74:4f:7c:fc:97:86:dd:ae:4b:f7: 55:c4:50:cd:79:da:fc:6a:50:8e:40:22:7a:45:b1:63:d0:5a: 53:f1:7b:50:ce:cd:96:0a:c7:d8:a8:64:b6:9c:2a:9b:52:82: c0:52:8a:35:41:c7:40:22:84:8c:2e:e0:a8:6c:67:03:dd:67: 39:51:95:0f:21:e7:bc:c4:de:51:d5:bc:74:85:4e:fd:31:04: 5b:94:0c:4f:99:d8:2b:66:d2:6b:39:e9:dc:47:a2:da:9c:d5: f2:6c:28:d5:c7:88:01:d1:f5:9d:2c:72:54:3b:5a:6a:89:6a: c8:1f:9f:54:ed:69:26:a8:e1:cc:1b:56:c6:23:fb:db:29:8b: 8c:5e:09:4c:9d:9c:6d:f5:3a:ca:37:1f:40:66:84:d9:82:a5: 9c:ba:c3:01:18:bb:ce:6f:50:b1:f0:0f:db:ba:f3:d0:7e:fc: d2:4a:c1:94 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEimFOHD1EVx8r13gGhinVzNNQJwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDE1MTQ2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDNkYTM4MjljYTk0M2Q3MTBkODJjYjVjNGI4YjY3NjM2 MWVlMjY0MjRiOWZhODY5YWZiZjRkYjc4MGUyOGU3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZdh1NmeND11H9DtZPBqJ4TaS2Fa5rCRBARMZwsMqIEiRL ZvhwhPrUOgnWi6MMLMGSM+TojyU4beKHmPUy5wE2YwnbsGE+vPxaGJ7+WJ0HR4KK u/JvXOp/glu7AIa5dnkA1SjT6UXklVM9CssekmfZtHUx447+hgAPIAYYXVLNe4jm rvZRel74nRQDBRzkoUNB9k0qT/oXj9xYVvsJNnTuDC5J2IZJNx0o5GCeMlMlA15K Fv2Fzv9wuoJNKe2xfH6PX2512CugNxS7lzI3Ps7DVRGVL7DF1Ro+I26Uu/kW5sjH mK9iBFZUCHq7VYhAtnaqOxBc6oCWrzhwHSIISVTrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYLCTDPwi7JuSv0Vb2ucMW9qCFFAwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzFmNjU5ZjBmLThmZTAtNDBkOS1iNTcwLWE4NzNhYmNmZDQ1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAPcQwDQYJKoZIhvcNAQELBQADggEBAC11utjjzyho0wo7cH8J6XDd yGVdY1YDF45OXuecVzZPLucm8V+8vl4IByZxWXWLwst+Bt7mLE3qnA4mQpjHtXUa YhcvHmckJ/Ztkazj3WXUdE98/JeG3a5L91XEUM152vxqUI5AInpFsWPQWlPxe1DO zZYKx9ioZLacKptSgsBSijVBx0AihIwu4KhsZwPdZzlRlQ8h57zE3lHVvHSFTv0x BFuUDE+Z2Ctm0ms56dxHotqc1fJsKNXHiAHR9Z0sclQ7WmqJasgfn1TtaSao4cwb VsYj+9spi4xeCUydnG31Oso3H0BmhNmCpZy6wwEYu85vULHwD9u689B+/NJKwZQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:46:36 2025 by rpki-client