$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/68b61ac2-0439-416d-81a1-808e14f4e337.roa File: 68b61ac2-0439-416d-81a1-808e14f4e337.roa (raw, json) Hash identifier: TtiPW5oDVTTvxMy2YwyLIpMd8F3iy3b7DH5cFkghK9s= Subject key identifier: B9:17:FC:67:7D:D1:E1:93:85:81:6E:35:5C:69:ED:C7:2F:E6:6C:3F Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 08BCB0842C455352612162F4E4D1CC9BDA669D0E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/68b61ac2-0439-416d-81a1-808e14f4e337.roa Signing time: Fri 31 Oct 2025 03:25:12 +0000 ROA not before: Fri 31 Oct 2025 03:25:12 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:29dc::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bc:b0:84:2c:45:53:52:61:21:62:f4:e4:d1:cc:9b:da:66:9d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 03:25:12 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=8da87b02f08b1f38babba16b25a7e7179bb45c75cd0d3ae1daecb223e25d1cb7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:25:e7:6c:66:d6:12:98:21:fe:6a:27:bf: 89:4c:88:53:43:3a:5d:94:25:20:01:b7:98:83:68: 80:c6:94:91:be:6c:14:77:b4:34:64:51:d7:43:1e: 0e:5d:71:2e:a7:40:2c:20:09:27:97:c6:47:3d:43: a5:1a:6a:c4:7b:7c:7d:0b:1b:0c:86:2d:ab:74:23: 95:1d:d6:67:a2:21:59:3a:05:12:d9:43:c9:52:ea: 28:e2:38:60:4d:cb:a6:5b:b0:ec:11:db:26:d7:65: eb:27:b1:77:5b:d7:fc:e5:59:72:61:3d:f9:5c:ab: 90:63:b8:33:db:2f:8e:0e:4c:dd:c4:70:d9:99:26: 09:03:55:cf:6a:99:88:97:d0:ff:fb:22:0e:28:17: 1c:67:12:ce:d4:6a:74:78:95:1d:94:ac:59:a7:7c: b8:44:ea:15:d3:0c:f4:37:b7:9f:62:df:cb:86:43: 26:cf:8d:50:be:fa:5a:c8:d2:ee:b0:b9:73:a5:c7: 32:ca:91:64:4a:ae:f7:bb:84:fc:19:fd:40:9e:79: 7c:c4:ad:02:df:35:66:8f:34:7a:14:03:d2:82:ac: 57:ff:27:f2:7b:04:31:b0:ec:f0:13:d1:93:34:ee: 73:46:c4:47:83:8a:42:1f:f2:dd:9b:7a:ad:0e:70: 89:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:17:FC:67:7D:D1:E1:93:85:81:6E:35:5C:69:ED:C7:2F:E6:6C:3F X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/68b61ac2-0439-416d-81a1-808e14f4e337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:29dc::/46 Signature Algorithm: sha256WithRSAEncryption 46:02:db:c8:9b:80:dc:21:28:91:2f:ad:30:d7:5f:d6:58:db: bd:d0:cb:0a:b7:6c:7c:3e:07:65:7b:a5:1c:a2:8a:ce:cc:1e: fd:50:e5:aa:7a:d8:0e:6a:0a:db:de:ff:cd:73:fd:71:af:19: fa:9e:2b:dc:d2:a0:37:2c:e3:cc:07:4e:1a:5f:38:2f:b2:28: 8f:55:74:aa:87:cb:a7:6c:4a:ee:40:79:6e:3d:96:bb:64:5b: 29:64:de:3c:19:c3:14:c3:f1:39:bb:50:f5:fc:52:c6:50:b0: c0:0f:95:9c:6d:56:ef:66:54:f6:30:3d:d4:b0:f0:a5:ed:27: aa:99:0d:54:f7:a7:79:f3:5f:94:86:d4:f6:59:fa:15:52:6a: 82:97:77:1b:53:ea:47:eb:e5:4d:8d:51:14:ad:91:23:d1:06: f9:09:06:84:af:42:07:49:59:b6:37:8b:bd:fc:4d:c2:82:19: cc:8d:3d:19:0a:e5:e0:4e:95:5b:65:50:bf:e5:53:ee:a5:5b: 69:d6:44:31:c4:8e:83:fc:47:b8:0e:90:d5:d6:7b:28:b4:a6: 9f:49:45:cf:b0:77:b6:a0:d5:9e:24:68:7d:b1:43:22:19:c1: c2:53:59:4b:58:cc:d4:f7:8c:4c:4e:49:0f:0c:07:6f:e4:95: b6:af:c9:5b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCLywhCxFU1JhIWL05NHMm9pmnQ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDMyNTEyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGE4N2IwMmYwOGIxZjM4YmFiYmExNmIyNWE3ZTcxNzli YjQ1Yzc1Y2QwZDNhZTFkYWVjYjIyM2UyNWQxY2I3MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrKiXnbGbWEpgh/monv4lMiFNDOl2UJSABt5iDaIDGlJG+ bBR3tDRkUddDHg5dcS6nQCwgCSeXxkc9Q6UaasR7fH0LGwyGLat0I5Ud1meiIVk6 BRLZQ8lS6ijiOGBNy6ZbsOwR2ybXZesnsXdb1/zlWXJhPflcq5BjuDPbL44OTN3E cNmZJgkDVc9qmYiX0P/7Ig4oFxxnEs7UanR4lR2UrFmnfLhE6hXTDPQ3t59i38uG QybPjVC++lrI0u6wuXOlxzLKkWRKrve7hPwZ/UCeeXzErQLfNWaPNHoUA9KCrFf/ J/J7BDGw7PAT0ZM07nNGxEeDikIf8t2beq0OcImHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuRf8Z33R4ZOFgW41XGntxy/mbD8wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzY4YjYxYWMyLTA0MzktNDE2ZC04MWExLTgwOGUxNGY0ZTMzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAJAAKdwwDQYJKoZIhvcNAQELBQADggEBAEYC28ibgNwhKJEvrTDXX9ZY 273Qywq3bHw+B2V7pRyiis7MHv1Q5ap62A5qCtve/81z/XGvGfqeK9zSoDcs48wH ThpfOC+yKI9VdKqHy6dsSu5AeW49lrtkWylk3jwZwxTD8Tm7UPX8UsZQsMAPlZxt Vu9mVPYwPdSw8KXtJ6qZDVT3p3nzX5SG1PZZ+hVSaoKXdxtT6kfr5U2NURStkSPR BvkJBoSvQgdJWbY3i738TcKCGcyNPRkK5eBOlVtlUL/lU+6lW2nWRDHEjoP8R7gO kNXWeyi0pp9JRc+wd7ag1Z4kaH2xQyIZwcJTWUtYzNT3jExOSQ8MB2/klbavyVs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:19 2025 by rpki-client