$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4669bfd8-ed61-478a-bab1-289591621c12.roa File: 4669bfd8-ed61-478a-bab1-289591621c12.roa (raw, json) Hash identifier: Lpp/zh7fhQopXIyAILlVj6W3AAzEE2KUtyQ/uZcreLc= Subject key identifier: 79:21:CD:A4:2C:92:55:EA:FB:BD:69:A7:B2:1B:DF:90:76:A7:AB:F1 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 59AB4DCA74B82567445940D129CE23B15C42D140 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4669bfd8-ed61-478a-bab1-289591621c12.roa Signing time: Fri 31 Oct 2025 00:43:02 +0000 ROA not before: Fri 31 Oct 2025 00:43:02 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3750::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ab:4d:ca:74:b8:25:67:44:59:40:d1:29:ce:23:b1:5c:42:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 00:43:02 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c65c08e391ba32cf4e199eae65c6d0de7ce77d1b719c1d7a49afc8bc3f02dcff, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:f1:51:e5:bd:0e:92:39:69:e8:02:7c:a6: d1:c5:8b:cd:3f:de:f5:9d:4e:90:6e:52:ca:00:01: f1:19:96:14:a6:62:a5:09:66:bf:b1:ac:10:78:07: fc:b3:be:bc:d3:e2:37:58:23:30:ad:06:09:06:37: 7e:5e:45:5c:d9:05:08:81:f0:1a:27:90:ad:1b:98: 5b:be:b5:03:2e:bd:d4:1f:99:44:9f:68:2c:a8:73: 37:da:28:d7:11:cf:87:f5:bd:f3:6c:17:2b:f7:94: 88:ca:fc:28:8b:ed:d9:b8:2e:6e:69:b1:f8:aa:d9: 70:42:fd:bc:68:68:12:07:0d:1d:07:58:5a:3f:72: 88:f2:5d:54:24:48:e9:c9:32:77:04:bb:9b:b0:1a: f2:a2:93:54:73:2f:f2:2e:ad:0e:bb:ff:dc:93:11: 68:b5:c9:81:31:89:af:63:a0:d2:f9:1d:52:27:64: d2:bc:cb:54:74:dd:31:00:e2:98:3d:3f:70:53:89: 51:bd:7e:07:fe:0e:0e:d7:37:c5:d7:e9:3b:0d:92: aa:43:73:06:8b:f5:50:cd:43:5e:7c:e7:50:53:aa: 6d:6d:f6:03:2e:f0:9a:b6:8c:a3:7b:8b:52:87:12: ab:77:1a:22:bb:29:29:5e:66:b4:6f:5c:1f:01:a1: 8e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:21:CD:A4:2C:92:55:EA:FB:BD:69:A7:B2:1B:DF:90:76:A7:AB:F1 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4669bfd8-ed61-478a-bab1-289591621c12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3750::/47 Signature Algorithm: sha256WithRSAEncryption ae:4c:1f:31:e8:98:9f:4a:1d:a4:b8:a1:94:a4:93:a9:d4:6f: a7:90:c1:61:7f:86:43:57:55:69:4b:fd:48:c3:5a:24:bf:2d: 95:56:a6:e2:53:8e:da:2f:c4:8f:ae:91:99:06:d3:bc:92:1f: 45:b2:49:9a:7d:3d:f8:b5:2c:7a:a3:90:51:be:55:2d:af:50: 96:85:03:33:66:d1:1b:2f:a7:f4:b2:83:c2:6a:e9:3e:6a:45: bc:7d:b1:dd:88:62:ca:d5:ab:f3:f6:2d:c1:d7:17:3f:82:49: b9:49:27:ab:5b:a7:aa:c3:8c:89:6e:58:69:b4:35:31:b3:6f: 7e:95:8f:a4:7b:6f:99:d6:50:06:90:85:43:22:bc:c2:35:07: 13:20:56:6f:c7:52:b9:e9:98:a1:8a:38:08:64:6c:e0:8e:46: 60:38:3b:af:b6:c6:09:b2:56:33:32:e2:3f:cf:fd:85:ea:c8: 20:56:28:d3:fa:53:f2:94:ee:e3:bc:02:40:12:7a:b4:27:5f: cd:8b:e3:4e:60:6e:e5:c3:4b:36:d9:75:38:46:11:ee:2f:19: 45:2d:b0:d8:fc:89:f2:24:8b:9e:c9:06:cb:8f:c0:81:41:79: e3:e7:cc:ec:08:6c:f8:f5:23:90:64:05:58:88:92:26:af:17: 04:75:95:80 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWatNynS4JWdEWUDRKc4jsVxC0UAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDA0MzAyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjVjMDhlMzkxYmEzMmNmNGUxOTllYWU2NWM2ZDBkZTdj ZTc3ZDFiNzE5YzFkN2E0OWFmYzhiYzNmMDJkY2ZmMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDkPFR5b0Okjlp6AJ8ptHFi80/3vWdTpBuUsoAAfEZlhSm YqUJZr+xrBB4B/yzvrzT4jdYIzCtBgkGN35eRVzZBQiB8BonkK0bmFu+tQMuvdQf mUSfaCyoczfaKNcRz4f1vfNsFyv3lIjK/CiL7dm4Lm5psfiq2XBC/bxoaBIHDR0H WFo/cojyXVQkSOnJMncEu5uwGvKik1RzL/IurQ67/9yTEWi1yYExia9joNL5HVIn ZNK8y1R03TEA4pg9P3BTiVG9fgf+Dg7XN8XX6TsNkqpDcwaL9VDNQ15851BTqm1t 9gMu8Jq2jKN7i1KHEqt3GiK7KSleZrRvXB8BoY5NAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUeSHNpCySVer7vWmnshvfkHanq/EwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzQ2NjliZmQ4LWVkNjEtNDc4YS1iYWIxLTI4OTU5MTYyMWMxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAN1AwDQYJKoZIhvcNAQELBQADggEBAK5MHzHomJ9KHaS4oZSkk6nU b6eQwWF/hkNXVWlL/UjDWiS/LZVWpuJTjtovxI+ukZkG07ySH0WySZp9Pfi1LHqj kFG+VS2vUJaFAzNm0Rsvp/Syg8Jq6T5qRbx9sd2IYsrVq/P2LcHXFz+CSblJJ6tb p6rDjIluWGm0NTGzb36Vj6R7b5nWUAaQhUMivMI1BxMgVm/HUrnpmKGKOAhkbOCO RmA4O6+2xgmyVjMy4j/P/YXqyCBWKNP6U/KU7uO8AkASerQnX82L405gbuXDSzbZ dThGEe4vGUUtsNj8ifIki57JBsuPwIFBeePnzOwIbPj1I5BkBViIkiavFwR1lYA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:30 2025 by rpki-client