$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66670019-79ae-40a9-83e2-1b63d07062ad.roa File: 66670019-79ae-40a9-83e2-1b63d07062ad.roa (raw, json) Hash identifier: 7/pSa2eq4SZ+33sgjrphOEZaM/qMx9bpCvJzwvUyT7s= Subject key identifier: DA:B0:DD:B0:1A:A0:08:D5:A4:AA:86:3A:82:3D:BB:8D:5F:F0:E6:41 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 3190D7B3E6A47318FFC704AA41F1E461AD207799 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66670019-79ae-40a9-83e2-1b63d07062ad.roa Signing time: Thu 30 Oct 2025 22:28:48 +0000 ROA not before: Thu 30 Oct 2025 22:28:48 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1d84::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:90:d7:b3:e6:a4:73:18:ff:c7:04:aa:41:f1:e4:61:ad:20:77:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 22:28:48 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=a01ef8fcc37260247831ba41b69fb1ba062109c9b5d9011bb126c13834334232, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:43:ba:1c:75:0d:0a:58:e4:94:54:c7:e8:f4: 59:ad:84:a4:d8:54:54:b6:b6:99:69:ed:33:9c:48: 2d:d6:a2:12:a5:2e:0d:be:38:2b:69:d3:12:35:ac: 43:0e:a0:59:ff:48:87:35:aa:25:8a:58:ce:0b:57: 28:65:3c:d5:62:a0:24:06:e4:3a:5f:7e:84:7d:f6: bf:ab:40:30:bc:ac:fc:d8:5a:30:b2:c7:48:88:98: 4f:61:3b:a4:26:67:6a:54:2d:4f:15:a2:36:ce:01: e9:94:d4:ec:7e:47:20:4e:29:97:e8:f4:9e:a2:27: e9:47:60:9e:cd:1d:1c:a0:c2:0a:12:16:36:a9:29: 19:42:58:d1:6f:70:e1:ba:4f:29:05:45:bb:f1:45: d0:83:95:44:42:ef:ca:8d:a0:97:24:0a:f9:8f:ca: 47:58:34:97:f9:03:a2:af:68:be:40:f1:8f:59:fe: 9e:77:2a:6f:4f:7b:95:cf:15:5c:87:71:11:0f:db: b8:13:f8:58:45:f3:f9:28:d4:c4:0d:31:c0:f0:45: c9:dc:5e:63:eb:36:01:24:ec:a4:f1:52:2c:e1:13: 6c:14:ff:c4:f1:2f:2c:55:54:96:ac:52:d9:78:01: a8:3e:9d:d8:1f:9f:93:e9:fe:d0:1a:7a:ef:11:9a: 58:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B0:DD:B0:1A:A0:08:D5:A4:AA:86:3A:82:3D:BB:8D:5F:F0:E6:41 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66670019-79ae-40a9-83e2-1b63d07062ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1d84::/47 Signature Algorithm: sha256WithRSAEncryption b3:90:09:3b:cd:61:64:0f:96:93:18:4c:48:84:ec:bd:8e:13: 39:79:25:c3:ec:ea:e1:c4:f5:66:fd:97:46:90:e7:58:b1:dc: 79:9e:bb:6d:bc:bf:6f:9f:89:c7:da:06:44:81:fa:c7:0d:64: 64:97:6f:7e:8f:cd:ad:c9:9c:1a:2e:b5:af:f0:10:cf:fa:5b: f0:92:c0:89:27:a0:71:1a:2d:6d:8e:7b:a2:9b:44:f2:8c:16: e2:5c:87:be:fb:12:6a:96:eb:5e:c5:ce:e5:8f:5b:d7:aa:e5: 2a:c6:f7:09:f0:22:79:be:74:c9:c3:03:64:fb:12:ce:fd:a0: 2b:4b:2a:80:d2:d2:96:e0:f0:e1:c9:52:bf:3d:ae:95:6d:40: 26:b7:ad:c8:88:e3:0d:79:04:54:f7:8a:a6:79:5e:41:57:a2: 33:3c:f2:5f:bd:e2:00:38:4e:11:7c:26:99:71:34:01:4b:d9: c5:84:f8:a8:ad:a7:38:2e:91:f9:be:dd:44:32:20:49:a2:85: 62:fd:dc:b9:d7:33:2f:2d:77:b8:f9:ec:58:c5:69:35:88:9d: 11:76:2a:af:64:71:8a:d0:2c:f0:a8:b8:42:5a:a3:04:c3:f2: a9:ae:91:15:c1:19:bf:9c:68:19:10:de:f3:e1:74:d5:d9:b3: af:d0:28:c2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMZDXs+akcxj/xwSqQfHkYa0gd5kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjIyODQ4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDFlZjhmY2MzNzI2MDI0NzgzMWJhNDFiNjlmYjFiYTA2 MjEwOWM5YjVkOTAxMWJiMTI2YzEzODM0MzM0MjMyMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIQ7ocdQ0KWOSUVMfo9FmthKTYVFS2tplp7TOcSC3WohKl Lg2+OCtp0xI1rEMOoFn/SIc1qiWKWM4LVyhlPNVioCQG5DpffoR99r+rQDC8rPzY WjCyx0iImE9hO6QmZ2pULU8VojbOAemU1Ox+RyBOKZfo9J6iJ+lHYJ7NHRygwgoS FjapKRlCWNFvcOG6TykFRbvxRdCDlURC78qNoJckCvmPykdYNJf5A6KvaL5A8Y9Z /p53Km9Pe5XPFVyHcREP27gT+FhF8/ko1MQNMcDwRcncXmPrNgEk7KTxUizhE2wU /8TxLyxVVJasUtl4Aag+ndgfn5Pp/tAaeu8RmliHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2rDdsBqgCNWkqoY6gj27jV/w5kEwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzY2NjcwMDE5LTc5YWUtNDBhOS04M2UyLTFiNjNkMDcwNjJhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAHYQwDQYJKoZIhvcNAQELBQADggEBALOQCTvNYWQPlpMYTEiE7L2O Ezl5JcPs6uHE9Wb9l0aQ51ix3Hmeu228v2+ficfaBkSB+scNZGSXb36Pza3JnBou ta/wEM/6W/CSwIknoHEaLW2Oe6KbRPKMFuJch777EmqW617FzuWPW9eq5SrG9wnw Inm+dMnDA2T7Es79oCtLKoDS0pbg8OHJUr89rpVtQCa3rciI4w15BFT3iqZ5XkFX ojM88l+94gA4ThF8JplxNAFL2cWE+Kitpzgukfm+3UQyIEmihWL93LnXMy8td7j5 7FjFaTWInRF2Kq9kcYrQLPCouEJaowTD8qmukRXBGb+caBkQ3vPhdNXZs6/QKMI= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:20 2025 by rpki-client