$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58997eda-621a-4df0-a0d9-7bea66cd8b60.roa File: 58997eda-621a-4df0-a0d9-7bea66cd8b60.roa (raw, json) Hash identifier: gUSJF8jqeZrXp1X1EStALCJ2m1soLmzvT0BTiQxKRDw= Subject key identifier: 24:CF:CF:A4:9C:18:E5:9D:62:BD:85:0F:A5:37:1B:7B:CE:46:18:D4 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 4FA7E979BFE45E0F6EF917B0F118A30172DF7EA8 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58997eda-621a-4df0-a0d9-7bea66cd8b60.roa Signing time: Fri 31 Oct 2025 07:10:08 +0000 ROA not before: Fri 31 Oct 2025 07:10:08 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1420::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a7:e9:79:bf:e4:5e:0f:6e:f9:17:b0:f1:18:a3:01:72:df:7e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:10:08 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=bb1099b975062b7c5a2c73a484fbc08da7591fdbc34406726193c400e2c5e49e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:1a:09:ca:0a:91:c8:77:96:68:4c:d4:c1: d5:53:f4:3a:ba:3c:53:ee:68:eb:e8:91:33:3b:9a: aa:d0:5e:c1:a5:d7:46:26:5b:f2:56:5c:b0:a8:82: f7:7f:19:3e:52:35:0a:41:01:3f:d2:d3:90:fd:21: 2c:7e:a5:8d:7c:27:bb:d6:89:cf:e2:c8:cf:90:73: 00:c5:2d:33:52:96:7f:4b:39:3a:70:f2:a8:4e:51: eb:16:1c:83:6d:65:bf:6f:20:4a:68:ae:5b:40:ed: c2:c2:47:77:46:cb:a2:42:dc:f9:23:4a:a9:73:0a: d9:45:20:eb:f2:f3:1c:94:c2:d5:26:f3:5b:ce:4c: 4c:f6:2c:c7:69:ce:fa:f7:4d:ec:36:56:1f:42:3d: da:80:b3:95:51:d8:66:84:c8:a5:28:90:4d:84:87: 3d:17:39:28:3d:97:73:bd:6c:d6:70:de:33:6c:7f: 66:dd:0b:6e:25:2b:ec:94:13:6e:92:74:39:a5:dd: f7:02:e3:71:50:a5:1f:38:a6:9f:d8:f2:00:88:61: bc:70:af:78:40:24:1d:bc:c8:22:6b:af:fa:00:d5: fb:d3:6b:96:da:b5:b5:c2:3c:4b:26:c9:09:12:c8: ed:62:5e:bb:3d:bf:3d:1b:dc:62:d0:bc:84:92:18: 26:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CF:CF:A4:9C:18:E5:9D:62:BD:85:0F:A5:37:1B:7B:CE:46:18:D4 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58997eda-621a-4df0-a0d9-7bea66cd8b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1420::/43 Signature Algorithm: sha256WithRSAEncryption 88:ac:3b:24:08:d2:e0:e3:55:46:c9:29:89:8b:33:1e:55:2a: 75:c1:0a:73:79:74:15:de:e2:2c:da:32:c0:a6:fe:7d:2e:9b: 79:b1:91:33:cb:82:41:47:43:9f:20:54:2e:27:1f:0d:e9:9e: 8e:18:c3:5f:cc:3c:ac:cc:fd:27:57:d9:82:f7:52:9d:00:e2: 87:8c:1c:50:e0:f4:3a:d7:ca:de:68:7e:b1:37:2e:40:de:07: ca:72:cc:f3:5f:cd:f7:bf:11:7a:55:c1:38:38:2f:75:c1:4b: f7:fb:51:25:f5:dc:08:18:fd:3b:83:8e:0b:c6:48:3e:b7:a0: 77:9b:37:cd:5d:50:fc:b8:e5:c2:09:37:3d:05:94:00:76:ce: 12:1f:dc:20:2a:a8:50:c2:33:66:77:7d:06:bf:39:7e:15:78: cc:a4:b5:e9:8b:af:f0:e7:93:e5:fe:9d:2d:28:ec:91:a0:bf: 86:ee:4c:22:d8:95:33:a3:f7:72:ab:c4:1e:a6:dd:4b:ac:49: a6:16:c2:e4:ea:93:f2:cf:02:f2:06:ec:14:9c:41:82:44:73: cc:bc:a4:e3:8f:1a:db:2e:b9:56:83:16:5e:06:b9:c2:27:29: 2b:4c:1a:31:9c:13:9f:23:0a:01:91:eb:bd:16:cc:e0:b3:75: 99:8f:49:2d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT6fpeb/kXg9u+Rew8RijAXLffqgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcxMDA4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjEwOTliOTc1MDYyYjdjNWEyYzczYTQ4NGZiYzA4ZGE3 NTkxZmRiYzM0NDA2NzI2MTkzYzQwMGUyYzVlNDllMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf3xoJygqRyHeWaEzUwdVT9Dq6PFPuaOvokTM7mqrQXsGl 10YmW/JWXLCogvd/GT5SNQpBAT/S05D9ISx+pY18J7vWic/iyM+QcwDFLTNSln9L OTpw8qhOUesWHINtZb9vIEporltA7cLCR3dGy6JC3PkjSqlzCtlFIOvy8xyUwtUm 81vOTEz2LMdpzvr3Tew2Vh9CPdqAs5VR2GaEyKUokE2Ehz0XOSg9l3O9bNZw3jNs f2bdC24lK+yUE26SdDml3fcC43FQpR84pp/Y8gCIYbxwr3hAJB28yCJrr/oA1fvT a5batbXCPEsmyQkSyO1iXrs9vz0b3GLQvISSGCZnAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJM/PpJwY5Z1ivYUPpTcbe85GGNQwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzU4OTk3ZWRhLTYyMWEtNGRmMC1hMGQ5LTdiZWE2NmNkOGI2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAFCAwDQYJKoZIhvcNAQELBQADggEBAIisOyQI0uDjVUbJKYmLMx5V KnXBCnN5dBXe4izaMsCm/n0um3mxkTPLgkFHQ58gVC4nHw3pno4Yw1/MPKzM/SdX 2YL3Up0A4oeMHFDg9DrXyt5ofrE3LkDeB8pyzPNfzfe/EXpVwTg4L3XBS/f7USX1 3AgY/TuDjgvGSD63oHebN81dUPy45cIJNz0FlAB2zhIf3CAqqFDCM2Z3fQa/OX4V eMyktemLr/Dnk+X+nS0o7JGgv4buTCLYlTOj93KrxB6m3UusSaYWwuTqk/LPAvIG 7BScQYJEc8y8pOOPGtsuuVaDFl4GucInKStMGjGcE58jCgGR670WzOCzdZmPSS0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:27:34 2025 by rpki-client