$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/73ec20a3-a223-42f9-9ca6-4032bb9ec090.roa File: 73ec20a3-a223-42f9-9ca6-4032bb9ec090.roa (raw, json) Hash identifier: xx3w67yfA+Qdym6IFU+/iI+NYrMe1L5pIFsqE4vQGBw= Subject key identifier: 51:51:4E:A6:A5:EF:19:7C:50:39:DB:4A:95:C7:D5:48:B3:4A:44:0D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 5588D88079A3BD9F6F945D82AB6AB33AACF8FEA3 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/73ec20a3-a223-42f9-9ca6-4032bb9ec090.roa Signing time: Thu 30 Oct 2025 20:52:08 +0000 ROA not before: Thu 30 Oct 2025 20:52:08 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:136c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:88:d8:80:79:a3:bd:9f:6f:94:5d:82:ab:6a:b3:3a:ac:f8:fe:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 20:52:08 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=345b6baae576f4cc364a0f8aa09fe030342044b17dc70930da09f25ba3859f08, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:6f:e4:07:dd:be:24:e8:4c:a7:ba:8a:42: bd:3b:85:b4:98:b0:c4:06:a6:6f:c4:0a:84:52:4e: f3:b7:0c:35:2a:80:32:25:4a:f7:d6:17:37:ca:23: c7:89:82:b2:a3:b9:3d:af:1f:16:8b:da:40:89:49: 90:13:3b:9a:9f:85:90:bd:5d:93:6d:f9:8d:b1:5b: a1:d8:d2:eb:35:3f:a6:9e:e6:55:10:c6:8c:5a:4c: f4:64:ec:79:0b:41:6d:a9:07:a8:8b:fd:a6:80:55: 26:54:97:db:3c:4d:85:1f:4c:2c:09:6e:d3:c2:a7: 83:1c:06:62:cb:ea:86:9e:f6:cf:74:1a:ca:76:de: 94:97:74:62:63:c5:5f:2f:28:89:36:3e:25:84:fb: 18:d7:88:04:5a:fb:af:d8:9a:9f:94:03:c1:4c:55: e3:5c:b1:68:00:66:5a:b0:93:7f:30:cc:22:a0:9d: bd:6c:82:8d:ed:ff:23:16:d9:f8:f2:05:0c:29:59: 32:6a:f9:7a:bc:88:fe:54:41:53:1a:0f:9a:5f:69: 40:74:59:03:65:62:35:3f:31:fb:d0:e4:d5:be:74: 44:2c:86:46:7a:d0:7f:19:4e:31:22:fb:e1:e4:b4: 89:e5:4a:58:8a:63:5c:71:31:d9:f6:83:78:b5:42: 67:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:51:4E:A6:A5:EF:19:7C:50:39:DB:4A:95:C7:D5:48:B3:4A:44:0D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/73ec20a3-a223-42f9-9ca6-4032bb9ec090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:136c::/47 Signature Algorithm: sha256WithRSAEncryption 54:e5:9e:0a:46:23:ae:9c:d6:e3:c3:fe:0a:bd:c0:3e:27:2f: 6e:a4:c2:bb:d4:0e:88:51:97:04:fa:1d:00:2d:ed:38:bc:a0: 8e:73:dd:ab:fd:be:d5:26:1c:08:b9:43:6b:ce:a7:e6:59:ce: c3:b9:95:42:ea:99:a1:8a:a1:3d:b8:30:6c:b5:92:73:1d:4a: cc:6a:9c:16:71:52:21:53:46:ad:e5:1d:5a:8c:ba:2c:2a:c0: 94:f6:eb:38:57:64:8d:81:36:2d:25:de:3a:bf:3e:de:a4:08: aa:d6:1f:72:2e:f1:e2:ee:19:d8:4d:74:e4:19:70:2f:0a:fa: 67:51:03:d0:10:5c:25:b0:2d:72:5d:22:7f:5f:15:ed:0e:9c: 40:1e:26:09:a4:ab:6e:5a:73:78:fc:34:24:dc:4e:5a:c8:a7: 0c:fb:30:9e:3f:f4:b9:9a:1f:77:bd:6b:2d:28:54:de:7b:43: 46:b6:9e:c7:30:c6:1b:9c:68:fa:af:a7:c8:fc:91:ee:9f:cc: 22:34:76:55:fc:64:24:b3:0d:b5:f0:3b:4a:95:0d:78:e9:2d: 5a:e8:77:e0:02:8d:e1:3a:74:34:51:0b:ab:84:76:2c:f7:38: 30:ef:d2:ef:6d:14:bb:58:fc:b1:8c:9c:69:e1:e5:96:6c:cc: 1b:09:13:0c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVYjYgHmjvZ9vlF2Cq2qzOqz4/qMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjA1MjA4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDViNmJhYWU1NzZmNGNjMzY0YTBmOGFhMDlmZTAzMDM0 MjA0NGIxN2RjNzA5MzBkYTA5ZjI1YmEzODU5ZjA4MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/e2/kB92+JOhMp7qKQr07hbSYsMQGpm/ECoRSTvO3DDUq gDIlSvfWFzfKI8eJgrKjuT2vHxaL2kCJSZATO5qfhZC9XZNt+Y2xW6HY0us1P6ae 5lUQxoxaTPRk7HkLQW2pB6iL/aaAVSZUl9s8TYUfTCwJbtPCp4McBmLL6oae9s90 Gsp23pSXdGJjxV8vKIk2PiWE+xjXiARa+6/Ymp+UA8FMVeNcsWgAZlqwk38wzCKg nb1sgo3t/yMW2fjyBQwpWTJq+Xq8iP5UQVMaD5pfaUB0WQNlYjU/MfvQ5NW+dEQs hkZ60H8ZTjEi++HktInlSliKY1xxMdn2g3i1QmdpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUVFOpqXvGXxQOdtKlcfVSLNKRA0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzczZWMyMGEzLWEyMjMtNDJmOS05Y2E2LTQwMzJiYjllYzA5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAE2wwDQYJKoZIhvcNAQELBQADggEBAFTlngpGI66c1uPD/gq9wD4n L26kwrvUDohRlwT6HQAt7Ti8oI5z3av9vtUmHAi5Q2vOp+ZZzsO5lULqmaGKoT24 MGy1knMdSsxqnBZxUiFTRq3lHVqMuiwqwJT26zhXZI2BNi0l3jq/Pt6kCKrWH3Iu 8eLuGdhNdOQZcC8K+mdRA9AQXCWwLXJdIn9fFe0OnEAeJgmkq25ac3j8NCTcTlrI pwz7MJ4/9LmaH3e9ay0oVN57Q0a2nscwxhucaPqvp8j8ke6fzCI0dlX8ZCSzDbXw O0qVDXjpLVrod+ACjeE6dDRRC6uEdiz3ODDv0u9tFLtY/LGMnGnh5ZZszBsJEww= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:41 2025 by rpki-client