$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/677b6aa4-892a-495c-899c-82eace32dd03.roa File: 677b6aa4-892a-495c-899c-82eace32dd03.roa (raw, json) Hash identifier: wouaHwj9dsM3LP2WB1BS2aQbGyK+GcKVVrIvNWLwZqQ= Subject key identifier: 1A:00:D0:53:81:FE:70:9C:67:F1:79:83:F4:26:A0:D4:A9:B2:B3:C8 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 07E758A0BBFD307C888FCE09D36749AE51946DF4 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/677b6aa4-892a-495c-899c-82eace32dd03.roa Signing time: Thu 30 Oct 2025 20:56:09 +0000 ROA not before: Thu 30 Oct 2025 20:56:09 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:13f8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e7:58:a0:bb:fd:30:7c:88:8f:ce:09:d3:67:49:ae:51:94:6d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:56:09 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=0ffcea1100ebc16344522ef0ea181b6786fc5f538252220451af16e0620aa95c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:2b:26:62:4b:a0:ad:76:0e:87:c9:43:83: 6d:ef:72:ef:06:1a:39:bd:c5:75:3e:cc:2c:30:56: e4:4d:43:6f:64:ff:86:ce:a6:c9:d9:49:1d:f0:89: 80:1f:94:be:6a:0a:a3:66:17:8f:0a:17:cd:18:4f: bb:44:07:fe:00:b5:31:86:f4:51:3c:ad:7c:5b:c7: 78:b7:e3:ff:c5:d3:b6:05:f1:4b:11:85:f7:3d:83: 29:d4:fa:4e:26:ee:be:14:e9:0d:5b:de:6e:81:12: 11:5c:68:e1:15:bb:ab:47:a9:e5:3b:b9:37:4a:ba: 69:b3:8e:2d:32:5e:7d:77:16:ef:32:75:1c:e1:74: 39:b7:b5:b5:ef:9b:ad:f1:e7:d5:42:d9:51:a5:aa: 8b:e5:3d:69:c2:93:fe:e7:9d:c0:24:38:66:9c:9c: 5c:59:45:79:e3:f7:0e:29:af:8c:81:d0:63:16:c9: 60:d7:93:9e:9c:9a:50:7d:e7:69:7b:e0:9a:63:75: dd:49:05:48:71:4d:da:e6:d2:9b:97:c4:8b:c5:2e: ca:4f:0c:04:d4:81:9d:4d:fd:2e:96:fe:bd:15:38: 14:a2:a8:82:ca:29:dd:7f:61:22:65:ff:91:02:5c: 57:1b:0b:a1:90:4c:e4:56:f0:25:d0:65:56:82:17: 52:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:00:D0:53:81:FE:70:9C:67:F1:79:83:F4:26:A0:D4:A9:B2:B3:C8 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/677b6aa4-892a-495c-899c-82eace32dd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:13f8::/47 Signature Algorithm: sha256WithRSAEncryption 85:5d:51:7c:d1:8d:53:35:7a:4b:4e:2f:ff:43:9a:38:36:68: 60:e8:1a:3a:e5:ca:02:fb:20:9b:4c:a7:da:cb:dd:2e:2c:e7: 56:0c:b9:9d:bc:ad:d6:38:c7:8f:fb:a8:00:95:36:ef:03:5c: f6:06:65:7c:89:84:f6:9d:49:c3:ed:15:cf:ef:bc:2a:04:9a: 4f:8f:2b:be:f9:24:2a:9e:c5:2d:d0:2d:35:b4:05:73:fd:58: 73:cc:08:bb:c8:d9:99:ff:42:ed:74:f3:19:b3:e8:b9:3d:b0: 89:6f:95:7f:db:3e:38:0e:c6:94:ac:9a:25:58:ac:4d:0b:da: 10:d7:2b:ee:8f:b7:ea:bb:49:33:4d:17:b4:26:96:57:2c:77: f9:13:2b:47:a0:47:52:36:33:55:a5:6d:e3:2d:e3:58:b3:1b: 10:0f:f0:fa:db:71:a6:d9:24:00:11:e3:4a:cd:58:15:a7:ed: 32:a2:64:61:3f:47:88:3c:39:ed:fa:49:ae:14:3b:8d:67:86: 40:bb:bf:e5:8c:e7:9b:48:36:ab:06:42:ec:6e:ec:4c:81:7d: fa:13:ce:d3:ed:99:cc:ba:25:90:14:eb:f0:c6:d2:c1:35:d4: c7:51:9d:3a:75:4c:1c:93:4f:b2:d5:08:8d:9d:d7:56:f9:15: e5:b0:b2:4c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB+dYoLv9MHyIj84J02dJrlGUbfQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjA1NjA5WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmZjZWExMTAwZWJjMTYzNDQ1MjJlZjBlYTE4MWI2Nzg2 ZmM1ZjUzODI1MjIyMDQ1MWFmMTZlMDYyMGFhOTVjMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE7CsmYkugrXYOh8lDg23vcu8GGjm9xXU+zCwwVuRNQ29k /4bOpsnZSR3wiYAflL5qCqNmF48KF80YT7tEB/4AtTGG9FE8rXxbx3i34//F07YF 8UsRhfc9gynU+k4m7r4U6Q1b3m6BEhFcaOEVu6tHqeU7uTdKummzji0yXn13Fu8y dRzhdDm3tbXvm63x59VC2VGlqovlPWnCk/7nncAkOGacnFxZRXnj9w4pr4yB0GMW yWDXk56cmlB952l74Jpjdd1JBUhxTdrm0puXxIvFLspPDATUgZ1N/S6W/r0VOBSi qILKKd1/YSJl/5ECXFcbC6GQTORW8CXQZVaCF1JFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGgDQU4H+cJxn8XmD9Cag1Kmys8gwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzY3N2I2YWE0LTg5MmEtNDk1Yy04OTljLTgyZWFjZTMyZGQwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAE/gwDQYJKoZIhvcNAQELBQADggEBAIVdUXzRjVM1ektOL/9Dmjg2 aGDoGjrlygL7IJtMp9rL3S4s51YMuZ28rdY4x4/7qACVNu8DXPYGZXyJhPadScPt Fc/vvCoEmk+PK775JCqexS3QLTW0BXP9WHPMCLvI2Zn/Qu108xmz6Lk9sIlvlX/b PjgOxpSsmiVYrE0L2hDXK+6Pt+q7STNNF7Qmllcsd/kTK0egR1I2M1WlbeMt41iz GxAP8PrbcabZJAAR40rNWBWn7TKiZGE/R4g8Oe36Sa4UO41nhkC7v+WM55tINqsG Quxu7EyBffoTztPtmcy6JZAU6/DG0sE11MdRnTp1TByTT7LVCI2d11b5FeWwskw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:02 2025 by rpki-client