$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98f74a51-bf79-4779-87d0-222979d1ee0f.roa File: 98f74a51-bf79-4779-87d0-222979d1ee0f.roa (raw, json) Hash identifier: op5IjiA05yAaH4/B9kDb/RYGT8oquN4M3sMSIqXPufc= Subject key identifier: A2:06:63:78:CC:0C:74:19:4A:68:B9:FB:1E:0F:7C:59:AA:38:92:7E Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 70EBC1580D48AA71ADE0D24D80F117CC674565CC Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98f74a51-bf79-4779-87d0-222979d1ee0f.roa Signing time: Thu 30 Oct 2025 22:53:50 +0000 ROA not before: Thu 30 Oct 2025 22:53:50 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:29ae::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:eb:c1:58:0d:48:aa:71:ad:e0:d2:4d:80:f1:17:cc:67:45:65:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:53:50 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=c747e23f1b978ea93d6bac9d89af3a2daf94d931a63146154c9714fb002e28ad, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e0:ac:36:59:13:ad:b7:23:07:d3:39:e6:51: 24:1b:e4:1a:64:b5:18:d9:eb:4b:ba:72:94:bb:ee: ca:f1:51:3f:c0:9d:3f:fb:4d:c3:ec:eb:95:2f:22: 8c:bb:d7:16:2a:53:ff:8a:ed:4f:80:a5:99:72:b1: 91:0a:01:56:9c:b3:a2:99:e9:d0:38:50:5b:c8:c4: 21:e5:2f:f0:36:5f:17:49:82:28:74:b6:49:aa:cc: 31:e8:77:27:6c:3c:cd:82:b7:38:af:40:04:a9:73: d1:6b:f3:73:4a:e6:c1:f8:d4:94:44:d6:3c:53:7d: 46:b8:b6:a9:2b:9c:ae:c3:49:7a:b7:7d:7f:57:9b: 05:6b:30:72:af:56:eb:cb:cf:d3:6f:87:6a:6d:50: 07:b6:66:3c:89:2e:b8:82:7c:62:1f:b8:b5:1c:cc: a8:53:ea:94:41:f9:dc:d0:79:ec:af:77:61:20:89: 7a:16:1b:11:58:02:43:17:93:fe:16:d9:88:e7:3b: 55:26:53:d4:65:82:8d:11:5b:c8:01:0a:40:5e:ae: 5e:a2:ee:dc:a7:fb:9e:ae:c3:33:c5:fb:62:4b:14: 4c:0e:5a:66:45:35:96:f8:25:2e:88:56:b1:07:4c: e2:ed:e8:2f:48:07:35:28:06:4d:c3:8f:27:e5:fd: d5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:06:63:78:CC:0C:74:19:4A:68:B9:FB:1E:0F:7C:59:AA:38:92:7E X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/98f74a51-bf79-4779-87d0-222979d1ee0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:29ae::/47 Signature Algorithm: sha256WithRSAEncryption 2b:52:82:fc:13:56:a3:be:a5:84:b5:2c:30:50:80:9c:df:59: ab:6f:98:31:ae:42:c9:a6:c0:f1:4f:ee:dc:ec:49:73:63:fe: 2f:76:6f:f7:ee:26:4c:69:e5:c7:cb:9a:57:84:5a:96:31:95: 70:7a:a7:1f:e0:f6:59:a2:a9:40:ab:3f:da:47:a8:d2:23:38: ac:36:aa:8c:33:e4:00:33:d1:54:1b:23:9d:63:b3:50:8b:e6: 47:e1:61:fa:f9:11:2a:06:64:9e:df:1e:72:5c:4d:3f:9f:51: e1:08:c4:d5:a5:e4:be:66:26:08:f1:7a:62:47:30:3d:b3:2a: 24:45:57:3c:5d:36:8e:be:25:c1:c8:e7:cf:17:19:69:87:da: 51:0b:29:1c:87:90:1c:2a:ae:b6:84:8b:5c:19:84:9a:f2:06: a5:7b:12:d9:f0:73:aa:4a:3c:1e:7c:67:d0:1c:f1:81:62:2e: 08:bc:2f:01:e3:ba:05:e5:16:70:9c:20:fc:c6:ea:d4:8e:51: 2d:1e:6d:95:f0:b9:5e:43:3b:f2:cf:5d:54:b4:92:56:96:a9: eb:32:c6:1c:fb:1e:5d:63:be:41:dd:ea:46:6a:3c:f4:aa:27: da:a9:ee:cd:7d:20:3a:9c:62:2e:b1:fd:34:ae:99:e5:cb:d0: c4:22:8a:c5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcOvBWA1IqnGt4NJNgPEXzGdFZcwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjI1MzUwWhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzQ3ZTIzZjFiOTc4ZWE5M2Q2YmFjOWQ4OWFmM2EyZGFm OTRkOTMxYTYzMTQ2MTU0Yzk3MTRmYjAwMmUyOGFkMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDY4Kw2WROttyMH0znmUSQb5BpktRjZ60u6cpS77srxUT/A nT/7TcPs65UvIoy71xYqU/+K7U+ApZlysZEKAVacs6KZ6dA4UFvIxCHlL/A2XxdJ gih0tkmqzDHodydsPM2CtzivQASpc9Fr83NK5sH41JRE1jxTfUa4tqkrnK7DSXq3 fX9XmwVrMHKvVuvLz9Nvh2ptUAe2ZjyJLriCfGIfuLUczKhT6pRB+dzQeeyvd2Eg iXoWGxFYAkMXk/4W2YjnO1UmU9Rlgo0RW8gBCkBerl6i7tyn+56uwzPF+2JLFEwO WmZFNZb4JS6IVrEHTOLt6C9IBzUoBk3Djyfl/dUzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUogZjeMwMdBlKaLn7Hg98Wao4kn4wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzk4Zjc0YTUxLWJmNzktNDc3OS04N2QwLTIyMjk3OWQxZWUwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAKa4wDQYJKoZIhvcNAQELBQADggEBACtSgvwTVqO+pYS1LDBQgJzf WatvmDGuQsmmwPFP7tzsSXNj/i92b/fuJkxp5cfLmleEWpYxlXB6px/g9lmiqUCr P9pHqNIjOKw2qowz5AAz0VQbI51js1CL5kfhYfr5ESoGZJ7fHnJcTT+fUeEIxNWl 5L5mJgjxemJHMD2zKiRFVzxdNo6+JcHI588XGWmH2lELKRyHkBwqrraEi1wZhJry BqV7Etnwc6pKPB58Z9Ac8YFiLgi8LwHjugXlFnCcIPzG6tSOUS0ebZXwuV5DO/LP XVS0klaWqesyxhz7Hl1jvkHd6kZqPPSqJ9qp7s19IDqcYi6x/TSumeXL0MQiisU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:05 2025 by rpki-client