$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/458d6d60-c9c7-4c9e-8913-6c551ffce911.roa File: 458d6d60-c9c7-4c9e-8913-6c551ffce911.roa (raw, json) Hash identifier: xi7g+38ccPjEEkTg49sbyNTjXEfZvD4uavJm1CYgak0= Subject key identifier: 01:E2:AB:AC:21:99:36:AB:0D:3F:71:BA:FD:C9:C9:D5:52:02:5B:CE Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4E8C866820361879F93E2563DC79A9F2495B3A96 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/458d6d60-c9c7-4c9e-8913-6c551ffce911.roa Signing time: Fri 31 Oct 2025 07:23:54 +0000 ROA not before: Fri 31 Oct 2025 07:23:54 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:2b60::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8c:86:68:20:36:18:79:f9:3e:25:63:dc:79:a9:f2:49:5b:3a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:23:54 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=7ce647999a6815fce90d306aab143bcaae492b4ce9365e67df6ef8bf49dfed21, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:57:3a:f4:b8:f1:47:b1:e1:de:06:43:19:85: fa:25:e4:18:0f:6e:65:50:f7:69:7f:28:cc:eb:f3: 0f:4d:84:53:c4:c9:9e:89:85:e0:17:45:34:0d:46: 59:2f:3a:69:12:aa:85:fa:d5:0e:0c:65:0b:1b:90: 41:c2:65:ec:59:25:ab:28:98:bf:06:af:8b:e2:c8: d0:3e:ae:e8:14:70:df:1b:f5:c5:67:8b:b0:b7:fc: 15:fb:5a:e2:57:38:36:b6:8c:73:8d:43:16:a2:0a: 78:9d:1b:48:25:ff:7d:ce:c2:f8:5a:92:41:b3:60: 78:b8:48:a3:fa:c5:2b:b2:69:7d:87:e1:84:31:a6: 54:8b:21:bf:5a:8d:91:40:cf:e4:c7:d2:d2:43:f9: 2f:40:04:31:26:5e:8b:62:1d:0b:18:4a:48:64:76: e4:a9:66:b2:47:14:b6:d0:88:94:c6:21:7d:f5:24: 08:2a:59:7d:1b:73:9c:c6:f5:3c:5f:d6:bd:01:64: 07:29:30:e9:e0:e6:0a:7f:b0:dc:2b:3d:e4:78:31: e8:99:6b:e7:1c:55:1c:8d:cd:0c:56:58:7a:07:76: cd:b2:18:73:53:dd:7d:94:1b:01:8f:38:d1:60:fd: 3e:a3:ee:db:9a:ce:d5:92:c8:8c:d4:67:93:c3:6a: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E2:AB:AC:21:99:36:AB:0D:3F:71:BA:FD:C9:C9:D5:52:02:5B:CE X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/458d6d60-c9c7-4c9e-8913-6c551ffce911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:2b60::/43 Signature Algorithm: sha256WithRSAEncryption 2a:0b:39:10:eb:9f:38:39:2a:08:54:32:d7:b7:5a:d8:08:bb: c5:4d:7a:e6:d3:52:aa:1a:d0:c1:2f:0e:9c:99:87:84:c7:cf: 1f:91:b1:ff:42:3c:22:6d:8f:be:7c:42:49:71:05:c2:8d:54: 08:ed:10:8d:b0:02:54:2d:44:e2:4d:08:c7:8f:a6:a3:4e:2d: bb:9a:d0:28:9f:41:c8:f9:fc:dc:8d:60:8a:11:bf:9e:f3:94: 41:77:39:e1:31:b1:80:48:7c:14:04:bc:68:22:de:5e:6c:57: 12:3e:b4:8a:6f:4d:72:35:06:24:a2:50:37:73:ef:bd:17:e4: 38:c5:25:f4:97:48:f3:c0:e7:41:d0:16:b8:7e:d4:96:f8:12: fb:95:e0:f3:eb:9a:2a:50:aa:6b:79:d4:de:68:57:27:06:78: 96:08:7d:ee:5a:bb:be:17:7d:a8:6b:67:35:a7:74:fa:58:6c: 3a:6d:66:1b:71:13:8a:fb:71:dc:c8:60:30:56:71:8d:63:3e: 87:11:f9:76:13:be:78:d2:76:6f:4f:bb:9b:b1:b3:5f:1f:5e: fa:f0:ad:5d:20:2e:82:4b:98:76:7a:75:42:d4:8c:f9:70:1a: a0:b4:2f:47:40:73:2d:5f:dc:44:93:5e:ec:c8:bc:77:17:d3: bb:67:6e:0f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUToyGaCA2GHn5PiVj3Hmp8klbOpYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcyMzU0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2U2NDc5OTlhNjgxNWZjZTkwZDMwNmFhYjE0M2JjYWFl NDkyYjRjZTkzNjVlNjdkZjZlZjhiZjQ5ZGZlZDIxMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDVzr0uPFHseHeBkMZhfol5BgPbmVQ92l/KMzr8w9NhFPE yZ6JheAXRTQNRlkvOmkSqoX61Q4MZQsbkEHCZexZJasomL8Gr4viyNA+rugUcN8b 9cVni7C3/BX7WuJXODa2jHONQxaiCnidG0gl/33OwvhakkGzYHi4SKP6xSuyaX2H 4YQxplSLIb9ajZFAz+TH0tJD+S9ABDEmXotiHQsYSkhkduSpZrJHFLbQiJTGIX31 JAgqWX0bc5zG9Txf1r0BZAcpMOng5gp/sNwrPeR4MeiZa+ccVRyNzQxWWHoHds2y GHNT3X2UGwGPONFg/T6j7tuaztWSyIzUZ5PDao9NAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAeKrrCGZNqsNP3G6/cnJ1VICW84wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ1OGQ2ZDYwLWM5YzctNGM5ZS04OTEzLTZjNTUxZmZjZTkxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAK2AwDQYJKoZIhvcNAQELBQADggEBACoLORDrnzg5KghUMte3WtgI u8VNeubTUqoa0MEvDpyZh4THzx+Rsf9CPCJtj758QklxBcKNVAjtEI2wAlQtROJN CMePpqNOLbua0CifQcj5/NyNYIoRv57zlEF3OeExsYBIfBQEvGgi3l5sVxI+tIpv TXI1BiSiUDdz770X5DjFJfSXSPPA50HQFrh+1Jb4EvuV4PPrmipQqmt51N5oVycG eJYIfe5au74XfahrZzWndPpYbDptZhtxE4r7cdzIYDBWcY1jPocR+XYTvnjSdm9P u5uxs18fXvrwrV0gLoJLmHZ6dULUjPlwGqC0L0dAcy1f3ESTXuzIvHcX07tnbg8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:22 2025 by rpki-client