$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98cd3cb4-acc5-432e-926b-5c05298e7235.roa File: 98cd3cb4-acc5-432e-926b-5c05298e7235.roa (raw, json) Hash identifier: 6sB2qubpdv4WEly8ktI7TqGgTZ5cwez6TtblC3ohMM4= Subject key identifier: 29:A9:E0:EF:C5:97:EA:BF:4B:52:BB:39:32:71:F2:2E:3C:55:E0:AD Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 10689FD6F07C8EC9B0089E34E813FEB020E8EE6F Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98cd3cb4-acc5-432e-926b-5c05298e7235.roa Signing time: Fri 31 Oct 2025 05:07:11 +0000 ROA not before: Fri 31 Oct 2025 05:07:11 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1320::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:68:9f:d6:f0:7c:8e:c9:b0:08:9e:34:e8:13:fe:b0:20:e8:ee:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 05:07:11 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=b3e8f36e56173a5ba1e2f20dcf1d3c34a7dae8b097efa727f4ea38bc3ce83e59, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:18:a6:d7:cd:44:42:bc:67:67:44:5f:d6: 5e:43:75:c8:8d:00:51:40:3e:33:f7:f7:b3:ff:92: 64:aa:c8:1b:90:d2:cb:b0:34:57:32:80:cd:93:77: 1e:31:f2:67:aa:f5:d4:6a:f9:69:88:7b:81:e4:bd: 29:51:66:43:e4:d9:fc:44:24:61:74:e5:39:fe:9c: d4:b4:f7:76:e1:f5:57:3f:f7:4f:3a:cf:b0:8c:5b: 62:11:c9:24:2c:b8:6d:b1:67:13:b3:0f:fb:9e:13: 95:24:47:b9:90:31:da:37:9d:37:60:58:c2:83:1b: 8e:70:4b:22:26:9c:f0:ef:9f:d5:77:0f:99:22:83: 49:99:cb:69:af:86:5a:c8:f2:31:59:79:8b:90:5e: b3:00:62:4f:40:97:98:04:c1:05:ce:47:fd:f3:19: 99:e7:cb:95:73:ad:97:22:ea:2d:fe:71:f1:66:47: 67:90:ec:c3:cc:98:b7:67:d0:ea:83:4d:62:7c:c9: 40:55:11:12:a6:ff:89:67:0b:ea:41:13:d6:e9:d2: 10:40:35:ba:7c:10:51:13:0e:98:64:c0:d4:11:32: a9:68:0c:26:83:87:48:e4:1c:cd:d9:11:ac:b5:f1: 6c:19:ec:db:70:55:08:c3:50:81:8e:c2:81:80:ef: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A9:E0:EF:C5:97:EA:BF:4B:52:BB:39:32:71:F2:2E:3C:55:E0:AD X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98cd3cb4-acc5-432e-926b-5c05298e7235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1320::/45 Signature Algorithm: sha256WithRSAEncryption 72:db:9a:75:af:41:52:9c:2e:e4:47:9b:94:e1:b9:61:03:fd: 78:8e:22:4b:e1:35:de:29:3e:af:d7:2f:90:93:86:ea:0f:49: 79:c4:66:34:13:48:95:99:57:13:47:10:d4:2e:60:2d:21:f0: 9e:b2:81:3b:78:89:2d:1c:81:29:4c:2a:60:05:7f:67:34:82: 14:65:9d:72:66:87:51:34:83:04:d1:ff:96:a7:97:fb:bb:eb: 4e:d3:8c:ab:7f:4e:fe:b2:b3:79:47:f4:ca:8a:05:39:54:d4: ac:d4:d6:04:cc:de:48:9f:9b:b4:44:63:29:c8:c5:53:01:60: 07:22:1e:9a:6f:6e:75:1e:5a:a8:02:5e:e7:66:9c:fa:7e:a4: c3:54:8f:48:e9:47:6c:6c:b0:a1:b9:ac:c2:57:9e:97:d5:ba: e2:34:37:b1:f3:ba:06:5d:56:7d:9f:83:d8:79:69:ff:3b:b4: 75:9e:d6:b8:c3:28:37:ad:7f:b4:05:35:16:d9:78:1c:b5:f2: eb:85:64:69:1e:78:63:94:3e:d2:55:c7:0a:a7:2b:6e:99:52: d7:5e:fe:af:4b:61:53:b5:2c:ec:88:40:04:02:74:14:17:35: 71:3d:95:66:56:ff:df:ad:00:27:45:a4:93:05:44:2c:a5:36: e1:00:73:d1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEGif1vB8jsmwCJ406BP+sCDo7m8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDUwNzExWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2U4ZjM2ZTU2MTczYTViYTFlMmYyMGRjZjFkM2MzNGE3 ZGFlOGIwOTdlZmE3MjdmNGVhMzhiYzNjZTgzZTU5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp8xim181EQrxnZ0Rf1l5DdciNAFFAPjP397P/kmSqyBuQ 0suwNFcygM2Tdx4x8meq9dRq+WmIe4HkvSlRZkPk2fxEJGF05Tn+nNS093bh9Vc/ 9086z7CMW2IRySQsuG2xZxOzD/ueE5UkR7mQMdo3nTdgWMKDG45wSyImnPDvn9V3 D5kig0mZy2mvhlrI8jFZeYuQXrMAYk9Al5gEwQXOR/3zGZnny5VzrZci6i3+cfFm R2eQ7MPMmLdn0OqDTWJ8yUBVERKm/4lnC+pBE9bp0hBANbp8EFETDphkwNQRMqlo DCaDh0jkHM3ZEay18WwZ7NtwVQjDUIGOwoGA7z9LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKang78WX6r9LUrs5MnHyLjxV4K0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk4Y2QzY2I0LWFjYzUtNDMyZS05MjZiLTVjMDUyOThlNzIzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmAJAAEyAwDQYJKoZIhvcNAQELBQADggEBAHLbmnWvQVKcLuRHm5ThuWED /XiOIkvhNd4pPq/XL5CThuoPSXnEZjQTSJWZVxNHENQuYC0h8J6ygTt4iS0cgSlM KmAFf2c0ghRlnXJmh1E0gwTR/5anl/u7607TjKt/Tv6ys3lH9MqKBTlU1KzU1gTM 3kifm7REYynIxVMBYAciHppvbnUeWqgCXudmnPp+pMNUj0jpR2xssKG5rMJXnpfV uuI0N7HzugZdVn2fg9h5af87tHWe1rjDKDetf7QFNRbZeBy18uuFZGkeeGOUPtJV xwqnK26ZUtde/q9LYVO1LOyIQAQCdBQXNXE9lWZW/9+tACdFpJMFRCylNuEAc9E= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:04 2025 by rpki-client