$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc79b01a-ecf0-401a-9d3e-b6354eac90da.roa File: cc79b01a-ecf0-401a-9d3e-b6354eac90da.roa (raw, json) Hash identifier: QUUj1jrmuYFpwYVofgql4apH9YvpKPu6sjljP6JlNMY= Subject key identifier: A7:25:21:6A:26:3B:76:7D:C4:23:85:86:4B:5F:89:BC:F7:D1:0E:BA Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 79B823F98AE04E70B21C8FFA3B12FA3EA4AFF8E9 Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc79b01a-ecf0-401a-9d3e-b6354eac90da.roa Signing time: Thu 30 Oct 2025 21:22:05 +0000 ROA not before: Thu 30 Oct 2025 21:22:05 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:1622::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b8:23:f9:8a:e0:4e:70:b2:1c:8f:fa:3b:12:fa:3e:a4:af:f8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 30 21:22:05 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=4aa0bce53a3729ce25295eda9525b75da4f90c48c0d76124c7e7aa591b4c52d9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:03:84:a6:7e:b3:50:12:24:37:f8:8e:76:34: a7:b3:3b:5b:06:7e:94:2a:dc:ff:fb:81:21:3d:bd: 50:6d:7a:c2:f7:43:ea:66:86:48:18:95:df:a9:3a: f6:5e:df:9e:af:55:e3:42:f8:c1:0c:c9:54:df:7d: 23:b9:e2:5f:b8:2c:01:ff:66:ea:6f:0e:ad:e5:50: 76:eb:33:f2:56:b9:d8:d0:9c:5f:50:d5:8c:f7:66: 69:93:bc:78:71:9d:07:54:e4:75:30:0c:7a:1d:d2: 3a:1b:5d:39:b0:dc:12:72:90:20:7d:06:0f:62:97: f6:ff:5b:d1:82:5d:ae:d1:13:24:ca:61:ef:bf:8c: 6a:06:ad:f0:91:f0:d8:e4:72:41:cc:dd:d1:24:43: 24:1b:c0:d4:ef:e4:d1:45:82:d3:9c:c6:25:e7:1b: a6:b9:f8:a5:03:4e:af:b5:fb:33:6b:c6:b9:e8:96: f1:28:42:f8:5b:9e:88:1d:9a:77:8d:7a:73:67:b6: 72:18:8a:ef:5e:dc:26:78:11:f0:be:05:3c:b9:54: e2:78:72:0c:58:6b:4d:78:fd:ce:ff:2e:94:e0:0b: fe:6c:1a:f4:6a:7c:a5:3b:83:6b:e2:c4:1e:39:08: 23:6c:18:c8:29:94:89:be:ff:d9:3d:34:59:ac:01: e7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:25:21:6A:26:3B:76:7D:C4:23:85:86:4B:5F:89:BC:F7:D1:0E:BA X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc79b01a-ecf0-401a-9d3e-b6354eac90da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:1622::/47 Signature Algorithm: sha256WithRSAEncryption 08:b8:c5:8b:b0:74:24:48:b2:0f:a2:b4:cd:da:f5:a7:21:40: 8e:ed:0b:1d:30:60:29:d4:95:94:10:b4:a9:b3:cb:94:d0:c2: 6b:c2:65:ce:c0:ca:03:c5:c3:d3:14:82:42:9f:8e:5f:b7:fa: 17:ab:8f:02:0a:f7:d3:90:4f:c1:76:3b:8d:1b:7f:7c:51:3b: ef:97:07:e2:af:68:92:eb:ae:b1:90:b8:d7:3a:46:e1:2d:0e: 27:bc:61:09:f6:ad:40:14:e0:1a:0d:8b:78:a5:a7:d8:a8:88: f8:ac:ee:c4:4a:69:61:f1:04:0a:10:a0:21:f4:81:2a:22:c9: 08:c6:ef:54:bb:27:b5:19:66:a7:30:f6:27:48:6b:31:af:55: 64:b4:07:81:66:ee:7e:3f:87:ad:d1:b7:d6:1a:77:dd:f8:7a: fa:26:cc:16:e3:9d:43:35:86:1e:4a:52:60:20:62:86:fd:9f: c2:1f:2f:3c:c2:72:31:54:0d:d6:8e:b5:97:c3:6e:49:c6:12: 0a:76:3f:7f:bf:ec:81:68:74:aa:6d:94:bf:0c:33:45:60:54: 52:a8:cb:f0:11:80:f2:d7:c5:11:96:57:62:bc:6f:ea:2b:81: 91:66:5a:5a:67:84:43:37:b8:59:09:54:41:a1:2d:6e:e9:fe: 58:c8:af:13 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUebgj+YrgTnCyHI/6OxL6PqSv+OkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMwMjEyMjA1WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWEwYmNlNTNhMzcyOWNlMjUyOTVlZGE5NTI1Yjc1ZGE0 ZjkwYzQ4YzBkNzYxMjRjN2U3YWE1OTFiNGM1MmQ5MS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuA4SmfrNQEiQ3+I52NKezO1sGfpQq3P/7gSE9vVBtesL3 Q+pmhkgYld+pOvZe356vVeNC+MEMyVTffSO54l+4LAH/ZupvDq3lUHbrM/JWudjQ nF9Q1Yz3ZmmTvHhxnQdU5HUwDHod0jobXTmw3BJykCB9Bg9il/b/W9GCXa7REyTK Ye+/jGoGrfCR8NjkckHM3dEkQyQbwNTv5NFFgtOcxiXnG6a5+KUDTq+1+zNrxrno lvEoQvhbnogdmneNenNntnIYiu9e3CZ4EfC+BTy5VOJ4cgxYa014/c7/LpTgC/5s GvRqfKU7g2vixB45CCNsGMgplIm+/9k9NFmsAedVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpyUhaiY7dn3EI4WGS1+JvPfRDrowHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1L2NjNzliMDFhLWVjZjAtNDAxYS05ZDNlLWI2MzU0ZWFjOTBkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAFiIwDQYJKoZIhvcNAQELBQADggEBAAi4xYuwdCRIsg+itM3a9ach QI7tCx0wYCnUlZQQtKmzy5TQwmvCZc7AygPFw9MUgkKfjl+3+herjwIK99OQT8F2 O40bf3xRO++XB+KvaJLrrrGQuNc6RuEtDie8YQn2rUAU4BoNi3ilp9ioiPis7sRK aWHxBAoQoCH0gSoiyQjG71S7J7UZZqcw9idIazGvVWS0B4Fm7n4/h63Rt9Yad934 evomzBbjnUM1hh5KUmAgYob9n8IfLzzCcjFUDdaOtZfDbknGEgp2P3+/7IFodKpt lL8MM0VgVFKoy/ARgPLXxRGWV2K8b+orgZFmWlpnhEM3uFkJVEGhLW7p/ljIrxM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:45 2025 by rpki-client