$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/597e34a1-63be-4959-b6b0-d2f9bd3f85ab.roa File: 597e34a1-63be-4959-b6b0-d2f9bd3f85ab.roa (raw, json) Hash identifier: 2cXJQyqpQpXEj6v0SAZ59ODfcvUoSodnViSL6mOJCtw= Subject key identifier: 45:00:AA:FE:28:1C:8C:12:CB:75:54:0B:07:4B:4A:6D:2E:51:AA:9B Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 58FF4E51282949F719BE642D1D4C83A62CE8E98B Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/597e34a1-63be-4959-b6b0-d2f9bd3f85ab.roa Signing time: Fri 31 Oct 2025 07:29:16 +0000 ROA not before: Fri 31 Oct 2025 07:29:16 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3f40::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ff:4e:51:28:29:49:f7:19:be:64:2d:1d:4c:83:a6:2c:e8:e9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 07:29:16 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0d87fc3d4c5e46624eecab7d568eb3c6d205e5882e4e3378555ca05a822269b7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:ae:d1:f2:72:36:5b:b7:62:a7:1a:e0:88: 3c:1b:a9:66:60:9c:ec:db:17:93:7a:56:14:fa:07: 67:ec:a9:e9:b3:e7:3e:08:66:f1:65:fa:18:bd:f2: 67:93:b9:b3:e4:f5:d1:6c:bc:ba:75:40:e7:71:41: 4d:ad:2d:e7:4a:50:8d:69:cf:3e:a7:9c:6c:ea:ee: 0c:7d:27:40:ca:5d:da:ce:49:21:c9:3f:3f:4c:e0: 68:56:b8:0e:39:ab:01:5e:84:20:1a:1b:76:10:15: 5e:29:72:60:f9:4e:33:92:aa:e7:a4:a8:92:5a:1d: 7f:1c:da:26:c5:e0:41:bd:f4:fa:e4:71:ed:cd:18: 35:dd:38:dc:9b:cf:78:1f:f5:2d:41:e0:eb:1e:29: 9d:c4:13:68:ce:4f:fa:e9:7a:5e:34:64:36:56:6a: ec:43:61:2a:51:89:57:86:9d:5a:57:27:a0:eb:28: 28:20:90:2b:cb:59:84:eb:1e:c8:bd:6a:a2:84:c7: b3:df:f6:ce:7d:ec:e5:c4:02:2e:e3:9e:dd:a1:4d: 0f:47:b9:52:f0:52:bd:34:9a:de:54:7c:66:8a:10: 00:18:67:8b:1e:49:c0:8e:09:3c:14:e3:65:b0:cc: 81:4b:d8:af:55:cd:ab:64:50:b0:2a:0f:b6:0d:0d: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:00:AA:FE:28:1C:8C:12:CB:75:54:0B:07:4B:4A:6D:2E:51:AA:9B X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/597e34a1-63be-4959-b6b0-d2f9bd3f85ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3f40::/43 Signature Algorithm: sha256WithRSAEncryption 32:a6:f7:04:1d:64:db:0f:99:7e:c4:87:2e:5c:52:73:c0:d1: 5c:b4:5e:99:4a:9b:44:84:5e:c9:c2:4c:f0:d6:dc:69:8e:83: 6f:92:a1:e0:da:ed:e1:15:87:da:91:12:9d:ed:88:fa:2d:11: a5:99:29:65:7d:55:50:94:20:ee:8c:2e:08:94:b9:fa:65:c3: 5c:8e:f8:b7:17:a7:0d:d1:4b:1a:74:39:29:1c:27:fb:85:a6: 74:ff:2e:05:87:40:82:f9:d4:7e:40:ad:5f:88:ed:be:1d:aa: 84:87:4e:17:7f:d0:0c:f2:42:57:4b:bd:76:82:a0:e2:90:84: 40:51:3a:23:c0:b6:66:60:01:42:a3:76:ee:c2:7c:89:6e:9f: a0:a6:0e:bf:d5:87:4a:1c:c5:c1:51:a7:c4:52:fe:de:d8:9b: 70:8f:5e:99:de:65:79:20:e9:55:85:c4:63:4f:2f:08:4b:a0: 6a:c7:0b:72:1f:0a:97:8e:cd:98:da:7b:0c:98:64:89:b2:93: 81:57:df:30:38:cb:f4:b5:28:be:b8:95:0d:db:5c:dd:b3:a1: f4:56:dd:f1:69:af:3e:78:be:90:9f:27:9f:97:ba:f6:90:e9: a1:f4:1d:42:ea:26:fa:a8:b5:a6:20:50:b2:70:c3:f0:2d:0d: fd:77:96:97 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWP9OUSgpSfcZvmQtHUyDpizo6YswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDcyOTE2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDg3ZmMzZDRjNWU0NjYyNGVlY2FiN2Q1NjhlYjNjNmQy MDVlNTg4MmU0ZTMzNzg1NTVjYTA1YTgyMjI2OWI3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7Xa7R8nI2W7dipxrgiDwbqWZgnOzbF5N6VhT6B2fsqemz 5z4IZvFl+hi98meTubPk9dFsvLp1QOdxQU2tLedKUI1pzz6nnGzq7gx9J0DKXdrO SSHJPz9M4GhWuA45qwFehCAaG3YQFV4pcmD5TjOSquekqJJaHX8c2ibF4EG99Prk ce3NGDXdONybz3gf9S1B4OseKZ3EE2jOT/rpel40ZDZWauxDYSpRiVeGnVpXJ6Dr KCggkCvLWYTrHsi9aqKEx7Pf9s597OXEAi7jnt2hTQ9HuVLwUr00mt5UfGaKEAAY Z4seScCOCTwU42WwzIFL2K9VzatkULAqD7YNDecBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURQCq/igcjBLLdVQLB0tKbS5RqpswHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzU5N2UzNGExLTYzYmUtNDk1OS1iNmIwLWQyZjliZDNmODVhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmAJAAP0AwDQYJKoZIhvcNAQELBQADggEBADKm9wQdZNsPmX7Ehy5cUnPA 0Vy0XplKm0SEXsnCTPDW3GmOg2+SoeDa7eEVh9qREp3tiPotEaWZKWV9VVCUIO6M LgiUufplw1yO+LcXpw3RSxp0OSkcJ/uFpnT/LgWHQIL51H5ArV+I7b4dqoSHThd/ 0AzyQldLvXaCoOKQhEBROiPAtmZgAUKjdu7CfIlun6CmDr/Vh0ocxcFRp8RS/t7Y m3CPXpneZXkg6VWFxGNPLwhLoGrHC3IfCpeOzZjaewyYZImyk4FX3zA4y/S1KL64 lQ3bXN2zofRW3fFprz54vpCfJ5+XuvaQ6aH0HULqJvqotaYgULJww/AtDf13lpc= -----END CERTIFICATE-----Generated at Wed Nov 5 10:56:12 2025 by rpki-client