$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e66c3be-912b-4085-ba1b-0faf84a9bdae.roa File: 7e66c3be-912b-4085-ba1b-0faf84a9bdae.roa (raw, json) Hash identifier: sSaTHLQPB7tvF6vhWVAG+f32mAPlc8HSwn9MSdj6W+I= Subject key identifier: 3C:C1:E3:8C:3B:43:22:04:E3:19:E5:54:2E:F5:A2:EC:33:34:09:F9 Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 59DFBA8819CC50BBDDF7F4BE82A694C6E232D1D9 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e66c3be-912b-4085-ba1b-0faf84a9bdae.roa Signing time: Thu 30 Oct 2025 21:51:59 +0000 ROA not before: Thu 30 Oct 2025 21:51:59 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1936::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:df:ba:88:19:cc:50:bb:dd:f7:f4:be:82:a6:94:c6:e2:32:d1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:51:59 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=0a4cdc87dbc797d827478913be979009f8ff2969bb0ddf5b535ad61ecd2ab01a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:7c:28:3a:d9:c8:23:e4:9e:b2:da:58:53: 90:b1:d7:d7:ef:fa:10:fb:75:94:c6:5e:ed:25:22: bc:ae:a1:f8:68:f5:51:a5:bc:f1:11:39:ad:2f:81: cc:4c:50:33:c9:56:68:a8:66:eb:55:9b:d0:75:05: a2:99:37:30:94:6b:85:85:1f:f2:4f:94:54:74:e7: 52:61:54:39:20:a9:18:c1:68:83:d0:ca:a1:e4:46: ac:b6:ec:df:e5:37:79:4a:19:56:0e:e8:89:10:62: bb:95:72:ad:5a:19:29:42:f6:99:75:10:76:51:af: 01:2d:af:10:3b:0d:7f:e2:ba:37:48:38:1f:ac:69: 90:c0:01:e8:f2:79:00:b9:06:b8:7c:cd:81:b1:8e: 20:0b:3d:52:7e:b9:22:bb:70:9f:4a:7d:e3:e0:bf: 0f:94:95:82:02:a8:b7:39:e2:f2:a2:ba:2e:e6:47: 73:5c:62:56:fd:de:e5:e8:bc:fb:59:65:16:8b:ff: fa:f4:90:5f:0b:cd:2b:16:f0:97:80:52:19:12:33: 83:0b:6f:12:a8:c7:e7:c2:2e:8b:bc:70:9e:47:5c: 1d:e2:ae:8b:33:f8:f9:fc:c9:38:d2:c0:5c:63:f8: 5f:fd:29:53:c6:f8:a4:45:16:4b:9f:51:5e:c1:3a: dc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C1:E3:8C:3B:43:22:04:E3:19:E5:54:2E:F5:A2:EC:33:34:09:F9 X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7e66c3be-912b-4085-ba1b-0faf84a9bdae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1936::/47 Signature Algorithm: sha256WithRSAEncryption 5f:dd:25:1c:75:3a:31:da:0b:74:a7:bb:6f:11:82:16:bf:e7: be:cd:4a:70:a5:b0:8c:1c:9f:a6:52:0b:8b:d4:ba:1c:6e:4e: bc:23:49:12:65:34:05:1a:fe:02:ce:37:67:96:16:50:a6:68: a8:0d:b1:13:1c:9a:86:44:8f:8d:b9:fa:75:e8:2a:aa:77:ab: 1c:c3:62:2a:16:30:21:95:54:cf:43:33:bf:3b:46:da:91:40: c9:94:36:64:8e:2e:45:98:4d:98:9a:09:2a:71:35:77:2a:cb: 79:e2:43:2c:10:9f:1c:63:e8:73:39:1d:40:5e:f1:dd:34:9c: 33:d6:a7:11:73:1f:58:e8:cd:97:86:cd:f4:9d:6d:15:21:37: ed:26:76:d0:72:d6:67:1f:f1:be:5c:9a:72:ef:4a:bd:81:68: e6:9e:33:ad:93:d9:3e:d1:ad:99:0e:b1:f1:ca:9e:da:03:a2: 7b:f0:1f:9e:da:2c:5c:6a:37:b3:fe:82:c0:27:ab:92:b2:81: 3b:7b:70:3f:8d:54:c3:3b:5c:fe:d5:b1:a0:28:fb:57:0f:a0: 10:14:2b:d9:43:3f:3f:0e:d4:93:29:c7:22:88:55:ef:72:d2: 6c:0b:2a:7c:bc:4a:4e:05:0a:a2:b7:6b:87:e6:56:96:00:57: 13:67:81:bc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWd+6iBnMULvd9/S+gqaUxuIy0dkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjE1MTU5WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYTRjZGM4N2RiYzc5N2Q4Mjc0Nzg5MTNiZTk3OTAwOWY4 ZmYyOTY5YmIwZGRmNWI1MzVhZDYxZWNkMmFiMDFhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCwXwoOtnII+SestpYU5Cx19fv+hD7dZTGXu0lIryuofho 9VGlvPEROa0vgcxMUDPJVmioZutVm9B1BaKZNzCUa4WFH/JPlFR051JhVDkgqRjB aIPQyqHkRqy27N/lN3lKGVYO6IkQYruVcq1aGSlC9pl1EHZRrwEtrxA7DX/iujdI OB+saZDAAejyeQC5Brh8zYGxjiALPVJ+uSK7cJ9KfePgvw+UlYICqLc54vKiui7m R3NcYlb93uXovPtZZRaL//r0kF8LzSsW8JeAUhkSM4MLbxKox+fCLou8cJ5HXB3i rosz+Pn8yTjSwFxj+F/9KVPG+KRFFkufUV7BOtzdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPMHjjDtDIgTjGeVULvWi7DM0CfkwHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1LzdlNjZjM2JlLTkxMmItNDA4NS1iYTFiLTBmYWY4NGE5YmRhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAGTYwDQYJKoZIhvcNAQELBQADggEBAF/dJRx1OjHaC3Snu28Rgha/ 577NSnClsIwcn6ZSC4vUuhxuTrwjSRJlNAUa/gLON2eWFlCmaKgNsRMcmoZEj425 +nXoKqp3qxzDYioWMCGVVM9DM787RtqRQMmUNmSOLkWYTZiaCSpxNXcqy3niQywQ nxxj6HM5HUBe8d00nDPWpxFzH1jozZeGzfSdbRUhN+0mdtBy1mcf8b5cmnLvSr2B aOaeM62T2T7RrZkOsfHKntoDonvwH57aLFxqN7P+gsAnq5KygTt7cD+NVMM7XP7V saAo+1cPoBAUK9lDPz8O1JMpxyKIVe9y0mwLKny8Sk4FCqK3a4fmVpYAVxNngbw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:18 2025 by rpki-client