$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a989694-633b-46e1-bb38-adaf90464280.roa File: 4a989694-633b-46e1-bb38-adaf90464280.roa (raw, json) Hash identifier: az8JtHvEL0O1K3lFgNhbnmpGXxsyRSzQtuG7Q4+zcso= Subject key identifier: 49:00:87:34:BB:86:6B:9D:4D:89:91:88:4A:F6:12:79:F8:FD:C2:E6 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 69F2C6548A118E72B899666A563318B785C7251D Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a989694-633b-46e1-bb38-adaf90464280.roa Signing time: Fri 31 Oct 2025 03:13:16 +0000 ROA not before: Fri 31 Oct 2025 03:13:16 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1f24::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f2:c6:54:8a:11:8e:72:b8:99:66:6a:56:33:18:b7:85:c7:25:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:13:16 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e56fa6a9d8f2182826cb3f7b5d21a02179c3781779508720a39be6207a587310, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7c:ce:26:3a:41:fa:75:fc:7f:c8:c0:9f:db: 98:48:80:dd:2a:7d:40:5c:5b:ef:1d:91:13:1f:4b: 01:2e:87:5d:45:ea:3b:f9:17:31:4e:53:ee:64:d9: b6:c1:b6:77:ff:db:fc:24:99:82:66:28:44:6f:27: 99:49:a3:18:2c:c4:8b:e7:ea:8e:9c:a5:af:83:c7: f4:a4:5b:51:e5:3b:a8:c7:1d:93:65:21:1f:f5:f4: 7e:15:5b:36:c3:ab:c9:9a:f3:a5:e3:03:00:c6:68: 87:fb:50:39:09:55:d8:d1:c4:b7:24:7f:86:68:74: 46:67:9c:5f:2a:28:1c:e4:60:d7:4b:8d:56:25:85: d5:ec:d4:e8:a3:64:7a:e1:a3:02:6b:5d:be:33:6f: d2:e7:b3:12:41:d9:83:6b:4a:46:09:b0:82:a3:5a: a5:de:a2:d0:b1:44:26:fc:86:5d:64:7e:48:ed:38: 78:e3:b8:a8:6d:15:53:d2:ce:0d:b3:6d:59:db:a0: 92:7f:a8:8f:02:b6:24:4d:45:3b:d9:78:0b:04:8e: 41:75:8d:f5:f7:b3:ea:f1:c9:e6:e8:59:d4:f6:c0: 48:0b:25:5f:72:17:9d:7c:e0:0b:66:23:fe:13:23: 0e:24:c0:1b:82:80:7c:9b:50:3b:bd:8a:d6:36:0a: 08:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:00:87:34:BB:86:6B:9D:4D:89:91:88:4A:F6:12:79:F8:FD:C2:E6 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4a989694-633b-46e1-bb38-adaf90464280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1f24::/46 Signature Algorithm: sha256WithRSAEncryption 7f:7c:db:64:b7:82:96:e7:0b:13:96:c8:0a:be:fc:01:6d:20: 79:a1:01:a2:12:59:9f:f2:18:4e:d4:5d:8a:31:7f:cd:06:fd: 22:bd:e4:f5:48:75:99:75:9a:f2:77:06:55:b7:8b:e9:2b:1b: a6:57:23:fd:7a:e4:5f:13:57:f6:78:51:47:11:7f:58:16:fd: b8:fd:2b:56:dd:bc:5b:58:16:2a:d6:ac:63:ff:ef:d3:06:ec: e1:54:3f:bd:dd:1f:3f:e9:5a:bb:64:51:d5:90:18:fa:db:ea: 52:e6:32:6d:3b:71:b1:ca:11:c3:5e:2c:4b:c3:4e:37:09:0f: b5:94:77:da:09:99:43:37:d0:08:86:0d:f6:ca:d8:17:e3:11: 09:82:f2:ba:f9:25:8c:76:ec:58:08:21:8d:46:7d:f3:27:d5: 4e:60:74:63:af:0c:3d:b7:f2:3e:dd:26:d3:45:30:55:58:51: 98:8e:b4:04:f9:47:ca:05:e1:58:f7:6c:de:69:06:35:a1:4a: 98:93:ca:3c:46:46:0a:e4:3d:6c:ff:71:19:c0:18:fc:b9:c7: ef:e1:48:a9:ce:11:53:72:ff:9b:1b:50:38:8c:f8:28:52:b7: 3f:2e:89:4f:54:08:8b:ac:09:ee:18:d2:46:a3:98:e3:f8:2f: 65:b9:35:54 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUafLGVIoRjnK4mWZqVjMYt4XHJR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMxMzE2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTZmYTZhOWQ4ZjIxODI4MjZjYjNmN2I1ZDIxYTAyMTc5 YzM3ODE3Nzk1MDg3MjBhMzliZTYyMDdhNTg3MzEwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWfM4mOkH6dfx/yMCf25hIgN0qfUBcW+8dkRMfSwEuh11F 6jv5FzFOU+5k2bbBtnf/2/wkmYJmKERvJ5lJoxgsxIvn6o6cpa+Dx/SkW1HlO6jH HZNlIR/19H4VWzbDq8ma86XjAwDGaIf7UDkJVdjRxLckf4ZodEZnnF8qKBzkYNdL jVYlhdXs1OijZHrhowJrXb4zb9LnsxJB2YNrSkYJsIKjWqXeotCxRCb8hl1kfkjt OHjjuKhtFVPSzg2zbVnboJJ/qI8CtiRNRTvZeAsEjkF1jfX3s+rxyeboWdT2wEgL JV9yF5184AtmI/4TIw4kwBuCgHybUDu9itY2CghTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUSQCHNLuGa51NiZGISvYSefj9wuYwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzRhOTg5Njk0LTYzM2ItNDZlMS1iYjM4LWFkYWY5MDQ2NDI4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAHyQwDQYJKoZIhvcNAQELBQADggEBAH9822S3gpbnCxOWyAq+/AFt IHmhAaISWZ/yGE7UXYoxf80G/SK95PVIdZl1mvJ3BlW3i+krG6ZXI/165F8TV/Z4 UUcRf1gW/bj9K1bdvFtYFirWrGP/79MG7OFUP73dHz/pWrtkUdWQGPrb6lLmMm07 cbHKEcNeLEvDTjcJD7WUd9oJmUM30AiGDfbK2BfjEQmC8rr5JYx27FgIIY1GffMn 1U5gdGOvDD238j7dJtNFMFVYUZiOtAT5R8oF4Vj3bN5pBjWhSpiTyjxGRgrkPWz/ cRnAGPy5x+/hSKnOEVNy/5sbUDiM+ChStz8uiU9UCIusCe4Y0kajmOP4L2W5NVQ= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:48 2025 by rpki-client