$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/18a81d27-7f1e-4a83-80cc-8b089f18a344.roa File: 18a81d27-7f1e-4a83-80cc-8b089f18a344.roa (raw, json) Hash identifier: uh8QzGvuI659oj2Zg3t5yjvEz45HAui8FXiWHUZJzyo= Subject key identifier: 39:DD:29:59:B3:FF:D6:22:78:9A:B7:0B:0C:D7:76:64:83:84:11:32 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6423D80629A3E5625C0B2C0AC5A1FC05CBAF9317 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/18a81d27-7f1e-4a83-80cc-8b089f18a344.roa Signing time: Wed 22 Oct 2025 00:40:10 +0000 ROA not before: Wed 22 Oct 2025 00:40:10 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:23:d8:06:29:a3:e5:62:5c:0b:2c:0a:c5:a1:fc:05:cb:af:93:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:40:10 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=5b8fb6c3cb9ccbed278b97177291b9bff1559337927485c59e16e2810f5a9c07, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:61:00:d3:60:27:1c:44:6a:20:83:fc:17: f6:d2:f7:24:90:e5:ff:f6:8e:37:46:42:a8:e8:59: 08:4d:11:64:a4:79:28:a3:a9:5f:51:76:bc:f7:e0: 3a:88:a0:fd:49:6d:cf:c6:7a:4d:cb:b3:20:06:e6: 32:fc:ce:49:07:90:11:1d:61:39:17:ed:40:17:cd: 0d:fc:24:75:70:58:c6:ac:a9:64:99:f5:d6:3f:38: 7a:ef:c2:9d:c7:0a:a5:44:1e:6d:11:dd:75:a2:fd: 8e:72:91:d3:9e:10:a9:ff:7f:8a:8d:b0:34:cc:70: dd:a3:34:0c:32:6b:27:5c:bd:32:af:09:df:42:4a: f2:10:8f:c9:52:34:8d:d8:a6:b9:2c:11:03:c7:2e: a1:71:44:ae:f0:62:41:42:00:15:f4:bb:4b:6a:ce: f8:56:3c:6e:99:de:a0:68:18:ff:d1:c8:22:1c:38: 0d:3e:cb:61:c8:c9:ce:9d:00:95:09:ce:5b:24:81: 9e:1c:1e:0d:b6:00:5e:54:e5:ee:9f:bc:db:8c:13: 65:ec:de:3e:6d:52:fc:d3:9c:20:11:75:53:aa:c3: 8f:62:c6:46:ae:f1:17:be:87:9d:8d:8f:ff:89:45: e9:4f:4c:da:51:9e:68:09:de:bc:af:4e:94:c0:b6: 79:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DD:29:59:B3:FF:D6:22:78:9A:B7:0B:0C:D7:76:64:83:84:11:32 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/18a81d27-7f1e-4a83-80cc-8b089f18a344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f107::/48 Signature Algorithm: sha256WithRSAEncryption 8f:19:77:61:3e:83:58:da:69:2e:46:4d:43:a3:f1:94:28:b3: 64:84:18:4d:b5:05:c7:d1:bb:05:7e:3e:05:f6:c3:01:bd:95: 4f:03:4a:6e:b2:9a:cb:50:7d:3c:f7:39:cc:ff:2f:bb:d7:10: bd:e7:7f:34:88:86:47:52:af:eb:b6:fe:fa:3f:0c:95:2b:10: 7e:a7:f8:f5:6f:13:11:22:cc:cc:f9:38:fb:68:b7:59:9a:ad: a1:61:62:fb:25:e1:2c:c6:2e:20:2b:df:92:50:94:2b:06:53: 59:91:d4:2f:e5:e7:6d:99:f2:f1:ba:22:23:c8:c2:6f:64:ca: 1c:d5:52:e8:e3:11:c5:5a:fd:6b:22:74:77:c5:91:cf:7e:6e: cf:c0:31:ec:70:37:a3:6d:cf:0f:a9:cb:3b:de:48:69:3f:55: a6:24:16:8b:25:dc:1c:11:7a:b5:c7:5a:67:b4:e7:93:14:01: 4c:fb:b2:c8:33:1a:27:1c:33:62:10:02:08:fd:d1:8b:3c:75: 66:2b:55:9e:06:60:c9:f3:80:30:c6:3f:a7:87:3e:c6:80:20: 32:83:bd:c4:32:de:f2:f8:ae:ff:74:b2:52:2c:3a:86:10:0e: 5b:12:30:80:f7:eb:75:bf:94:96:6b:33:1c:cb:33:b6:27:21: ea:84:1d:ff -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZCPYBimj5WJcCywKxaH8BcuvkxcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA0MDEwWhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjhmYjZjM2NiOWNjYmVkMjc4Yjk3MTc3MjkxYjliZmYx NTU5MzM3OTI3NDg1YzU5ZTE2ZTI4MTBmNWE5YzA3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFhGEA02AnHERqIIP8F/bS9ySQ5f/2jjdGQqjoWQhNEWSk eSijqV9Rdrz34DqIoP1Jbc/Gek3LsyAG5jL8zkkHkBEdYTkX7UAXzQ38JHVwWMas qWSZ9dY/OHrvwp3HCqVEHm0R3XWi/Y5ykdOeEKn/f4qNsDTMcN2jNAwyaydcvTKv Cd9CSvIQj8lSNI3YprksEQPHLqFxRK7wYkFCABX0u0tqzvhWPG6Z3qBoGP/RyCIc OA0+y2HIyc6dAJUJzlskgZ4cHg22AF5U5e6fvNuME2Xs3j5tUvzTnCARdVOqw49i xkau8Re+h52Nj/+JRelPTNpRnmgJ3ryvTpTAtnmZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOd0pWbP/1iJ4mrcLDNd2ZIOEETIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE4YTgxZDI3LTdmMWUtNGE4My04MGNjLThiMDg5ZjE4YTM0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QcwDQYJKoZIhvcNAQELBQADggEBAI8Zd2E+g1jaaS5GTUOj8ZQo s2SEGE21BcfRuwV+PgX2wwG9lU8DSm6ymstQfTz3Ocz/L7vXEL3nfzSIhkdSr+u2 /vo/DJUrEH6n+PVvExEizMz5OPtot1maraFhYvsl4SzGLiAr35JQlCsGU1mR1C/l 522Z8vG6IiPIwm9kyhzVUujjEcVa/WsidHfFkc9+bs/AMexwN6Ntzw+pyzveSGk/ VaYkFosl3BwRerXHWme055MUAUz7ssgzGiccM2IQAgj90Ys8dWYrVZ4GYMnzgDDG P6eHPsaAIDKDvcQy3vL4rv90slIsOoYQDlsSMID363W/lJZrMxzLM7YnIeqEHf8= -----END CERTIFICATE-----Generated at Tue Nov 4 04:41:04 2025 by rpki-client