$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/298f60c3-1983-4b1f-b306-0e531d6dec33.roa File: 298f60c3-1983-4b1f-b306-0e531d6dec33.roa (raw, json) Hash identifier: Ou/G8LkwPMeTAez98Lh5ExlWcD8q1L1Cm/kY8GavZPk= Subject key identifier: 41:E8:CC:D0:51:7F:46:C7:02:65:13:11:4F:DC:7D:5A:93:9D:4E:CC Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 65EEF5563BA73075039AD34D8662959679A4472D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/298f60c3-1983-4b1f-b306-0e531d6dec33.roa Signing time: Fri 31 Oct 2025 04:38:16 +0000 ROA not before: Fri 31 Oct 2025 04:38:16 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3aac::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ee:f5:56:3b:a7:30:75:03:9a:d3:4d:86:62:95:96:79:a4:47:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 04:38:16 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a1f8448195a3c6b61e3dea71d93caaf5b6a0c61ad4e6b7f2427f02e631ed5028, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:24:61:84:b8:55:f0:ee:92:1c:7f:83:48: 90:51:d7:98:15:c0:43:d2:1f:f8:95:c3:37:fd:7d: 00:df:d4:eb:2a:eb:6d:18:7f:a4:cc:c2:cd:50:a1: 49:58:12:1b:6c:cd:b5:c3:3d:49:96:97:63:db:f5: 28:52:62:13:29:8c:a2:e0:2c:f6:36:42:0a:dd:34: 97:89:08:65:0e:d5:9a:ea:24:81:ee:f3:13:9d:34: 37:96:44:65:c3:74:39:64:29:c7:fd:0d:49:53:2e: 10:67:35:aa:38:6e:b6:44:4e:51:a4:23:6b:aa:53: 9a:15:92:b6:26:10:d9:17:ec:bb:e9:9c:46:39:2a: 64:5a:80:6b:a4:0c:e6:d8:7d:ac:6e:87:a4:e6:92: 44:6e:40:a1:c3:03:09:61:75:2b:e0:38:1a:03:12: 35:50:d9:a8:23:40:fd:17:c7:92:7b:d3:6f:ae:b3: 90:56:33:c5:28:8a:13:6f:ed:90:9f:fc:b8:73:9d: 24:f2:52:b3:57:c7:17:37:3c:6f:c3:57:ef:17:5a: 09:58:ef:3f:96:24:c2:b0:4e:1c:3a:97:8b:65:c0: 0b:37:c2:85:92:0a:14:29:80:03:2e:0f:88:26:95: 6a:c5:56:97:e8:ec:9c:7c:7d:2b:7b:94:2c:8d:d3: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E8:CC:D0:51:7F:46:C7:02:65:13:11:4F:DC:7D:5A:93:9D:4E:CC X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/298f60c3-1983-4b1f-b306-0e531d6dec33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3aac::/46 Signature Algorithm: sha256WithRSAEncryption 4c:1e:a5:08:0a:a5:41:83:33:e2:22:d5:9b:0f:69:09:48:c2: aa:a9:5e:c9:ca:34:59:b6:42:e9:90:92:f3:16:1e:c8:c7:1f: 35:1d:37:ae:a7:a0:8e:30:f3:74:34:15:bd:9d:ae:84:47:b3: ec:ed:91:e7:f9:3c:b4:15:32:e0:58:8e:d8:6a:13:7b:ae:b7: 96:49:e5:e9:87:29:60:fb:c3:b4:22:2a:4d:da:2d:93:ef:5c: 88:ab:10:06:c0:df:32:fd:dd:64:21:30:e4:e8:03:17:73:63: b5:43:49:3f:19:31:9b:5a:db:1b:91:6e:3b:1f:2d:24:40:16: cc:66:03:4a:22:1b:00:4c:63:bb:8f:fb:d1:fd:a1:53:2d:46: 44:35:c0:f4:ca:38:dc:ee:c7:eb:fc:84:e3:02:a3:c3:66:56: 7e:c7:a5:b4:de:27:8a:ac:94:78:8f:e7:31:0c:23:f5:cc:a9: 24:50:13:9f:a4:a8:d7:31:f5:66:e8:e5:c5:e7:5d:32:f8:ab: d2:96:8e:ab:80:2c:21:38:d2:50:69:67:ce:ae:1b:9a:ae:a8: f6:6c:25:1c:b9:e0:ae:7f:94:95:f1:0a:2e:1d:08:5e:0c:cf: ed:13:88:05:69:c7:0f:77:f8:56:17:d9:f9:cc:84:25:85:2b: c4:ca:d0:4c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZe71VjunMHUDmtNNhmKVlnmkRy0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDQzODE2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWY4NDQ4MTk1YTNjNmI2MWUzZGVhNzFkOTNjYWFmNWI2 YTBjNjFhZDRlNmI3ZjI0MjdmMDJlNjMxZWQ1MDI4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHZCRhhLhV8O6SHH+DSJBR15gVwEPSH/iVwzf9fQDf1Osq 620Yf6TMws1QoUlYEhtszbXDPUmWl2Pb9ShSYhMpjKLgLPY2QgrdNJeJCGUO1Zrq JIHu8xOdNDeWRGXDdDlkKcf9DUlTLhBnNao4brZETlGkI2uqU5oVkrYmENkX7Lvp nEY5KmRagGukDObYfaxuh6TmkkRuQKHDAwlhdSvgOBoDEjVQ2agjQP0Xx5J702+u s5BWM8UoihNv7ZCf/LhznSTyUrNXxxc3PG/DV+8XWglY7z+WJMKwThw6l4tlwAs3 woWSChQpgAMuD4gmlWrFVpfo7Jx8fSt7lCyN02FFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQejM0FF/RscCZRMRT9x9WpOdTswwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzI5OGY2MGMzLTE5ODMtNGIxZi1iMzA2LTBlNTMxZDZkZWMzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAOqwwDQYJKoZIhvcNAQELBQADggEBAEwepQgKpUGDM+Ii1ZsPaQlI wqqpXsnKNFm2QumQkvMWHsjHHzUdN66noI4w83Q0Fb2droRHs+ztkef5PLQVMuBY jthqE3uut5ZJ5emHKWD7w7QiKk3aLZPvXIirEAbA3zL93WQhMOToAxdzY7VDST8Z MZta2xuRbjsfLSRAFsxmA0oiGwBMY7uP+9H9oVMtRkQ1wPTKONzux+v8hOMCo8Nm Vn7HpbTeJ4qslHiP5zEMI/XMqSRQE5+kqNcx9Wbo5cXnXTL4q9KWjquALCE40lBp Z86uG5quqPZsJRy54K5/lJXxCi4dCF4Mz+0TiAVpxw93+FYX2fnMhCWFK8TK0Ew= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:31 2025 by rpki-client