$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b59fb2da-e647-40e2-afc2-6224ee4a4d38.roa File: b59fb2da-e647-40e2-afc2-6224ee4a4d38.roa (raw, json) Hash identifier: /NxF6Ajf02qJ0CBKrRVTuH4nxn+gzkpbYRIRxpOOgyk= Subject key identifier: 68:65:E6:D9:8D:44:B5:F2:7D:9D:CD:F1:DC:71:9F:0C:F8:19:7D:98 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 684F205830E9FCBA824A1333F05458D455B3B28C Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b59fb2da-e647-40e2-afc2-6224ee4a4d38.roa Signing time: Fri 31 Oct 2025 02:06:56 +0000 ROA not before: Fri 31 Oct 2025 02:06:56 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:3fa2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4f:20:58:30:e9:fc:ba:82:4a:13:33:f0:54:58:d4:55:b3:b2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 02:06:56 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=7d38a978abe846fceef01679bb3f3eeaca0eb1ec5e8b54ca8233e5795ce44a80, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7b:28:d7:50:b2:06:e5:40:19:98:b3:27:93: 54:b3:f1:21:a2:17:8d:d7:3e:c5:6f:58:95:9e:55: 5f:5e:d4:db:6f:de:a4:8b:d8:30:85:f0:c8:25:a5: 0f:09:08:d8:59:62:0a:9e:b8:1c:2c:e4:f6:33:92: 99:b0:0f:d0:0e:7f:3a:d6:bf:a5:cd:62:d8:64:33: 2a:4e:f6:cc:af:aa:84:81:2d:f5:b6:f0:5e:24:60: 64:eb:62:a0:9f:6d:43:f0:0a:16:bf:44:b3:9e:fd: 77:9e:9f:39:f7:f1:2a:2e:32:3c:84:5c:7b:7c:2b: 4a:a2:9b:4d:80:91:56:f7:69:0f:94:a6:3c:89:bd: a4:57:04:85:03:10:bc:7e:92:d4:42:d9:59:bd:3f: 19:f5:ef:b7:bf:c3:0e:a2:9e:8a:81:e0:e3:d7:b9: 04:6b:46:aa:11:c6:c6:46:aa:98:68:f0:d6:ae:44: f8:4f:f2:d2:76:c4:cd:f9:91:4f:49:41:25:3e:c7: 7c:40:dc:09:09:78:f2:83:44:93:ba:da:68:0f:4a: 3d:06:55:04:65:04:59:59:13:94:86:f0:06:93:d5: 6f:43:91:9a:4c:42:d3:48:70:fa:f9:1f:74:86:74: 96:ce:69:29:dd:11:71:e4:c6:8b:2d:63:64:f1:19: a5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:65:E6:D9:8D:44:B5:F2:7D:9D:CD:F1:DC:71:9F:0C:F8:19:7D:98 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b59fb2da-e647-40e2-afc2-6224ee4a4d38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:3fa2::/47 Signature Algorithm: sha256WithRSAEncryption 1a:39:9d:92:7e:da:da:ec:9b:68:0a:4b:f6:07:dc:4f:cd:5e: 26:59:fb:a9:8a:93:e4:a2:79:7d:f6:da:67:f3:2a:0c:eb:97: fe:ff:5c:f6:64:08:55:fc:09:0c:7e:ef:31:d4:43:77:9a:d4: 34:c8:27:0c:24:b8:89:8b:24:2e:d7:ce:a0:65:94:83:01:59: 47:33:a7:c0:02:c9:43:37:bd:63:f6:d7:d7:ca:e4:f5:6a:3a: f6:1e:08:e6:56:85:82:ed:d0:41:c1:2b:d2:b8:ae:63:44:49: dd:92:5d:8f:b6:cd:16:24:c6:99:cf:13:f3:a7:2b:6d:60:95: da:e9:c4:25:0b:d0:96:56:55:77:e1:99:38:7e:ec:e1:17:02: c1:7b:51:ed:55:86:0c:ab:08:b4:77:36:b4:d8:d2:d8:92:5e: eb:d9:d7:81:17:2d:ea:0a:ad:2f:17:3c:8f:ec:26:45:05:63: 39:eb:2c:ef:07:36:dc:cd:bc:e1:d7:a1:bf:ee:10:9b:f9:da: 74:ca:27:7c:5e:8f:9c:f3:3e:2c:26:98:ea:45:21:9b:fa:77: f0:6f:e4:02:b1:df:9f:1c:26:28:a1:2d:17:99:10:0d:43:8d: 98:83:34:19:20:61:0c:5e:ab:95:56:a6:a9:ba:21:a5:07:56: 87:fa:3a:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaE8gWDDp/LqCShMz8FRY1FWzsowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDIwNjU2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDM4YTk3OGFiZTg0NmZjZWVmMDE2NzliYjNmM2VlYWNh MGViMWVjNWU4YjU0Y2E4MjMzZTU3OTVjZTQ0YTgwMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPeyjXULIG5UAZmLMnk1Sz8SGiF43XPsVvWJWeVV9e1Ntv 3qSL2DCF8MglpQ8JCNhZYgqeuBws5PYzkpmwD9AOfzrWv6XNYthkMypO9syvqoSB LfW28F4kYGTrYqCfbUPwCha/RLOe/Xeenzn38SouMjyEXHt8K0qim02AkVb3aQ+U pjyJvaRXBIUDELx+ktRC2Vm9Pxn177e/ww6inoqB4OPXuQRrRqoRxsZGqpho8Nau RPhP8tJ2xM35kU9JQSU+x3xA3AkJePKDRJO62mgPSj0GVQRlBFlZE5SG8AaT1W9D kZpMQtNIcPr5H3SGdJbOaSndEXHkxostY2TxGaUdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaGXm2Y1EtfJ9nc3x3HGfDPgZfZgwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2I1OWZiMmRhLWU2NDctNDBlMi1hZmMyLTYyMjRlZTRhNGQzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAP6IwDQYJKoZIhvcNAQELBQADggEBABo5nZJ+2trsm2gKS/YH3E/N XiZZ+6mKk+SieX322mfzKgzrl/7/XPZkCFX8CQx+7zHUQ3ea1DTIJwwkuImLJC7X zqBllIMBWUczp8ACyUM3vWP219fK5PVqOvYeCOZWhYLt0EHBK9K4rmNESd2SXY+2 zRYkxpnPE/OnK21gldrpxCUL0JZWVXfhmTh+7OEXAsF7Ue1VhgyrCLR3NrTY0tiS XuvZ14EXLeoKrS8XPI/sJkUFYznrLO8HNtzNvOHXob/uEJv52nTKJ3xej5zzPiwm mOpFIZv6d/Bv5AKx358cJiihLReZEA1DjZiDNBkgYQxeq5VWpqm6IaUHVof6OuA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:42 2025 by rpki-client