$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3026e026-f5e8-46be-927e-d13ed27dd55c.roa File: 3026e026-f5e8-46be-927e-d13ed27dd55c.roa (raw, json) Hash identifier: ADA4Jt1Vr2pzbfVowg8F5MrvpYTo8ouF4lt+iE8th4U= Subject key identifier: 0F:F5:4A:3F:52:7A:26:06:A8:AA:D0:72:5A:C1:BF:48:21:B9:E7:1E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 770CE13BC1AAAE74AD05A26302BAC0CFC22419B0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3026e026-f5e8-46be-927e-d13ed27dd55c.roa Signing time: Wed 22 Oct 2025 00:50:09 +0000 ROA not before: Wed 22 Oct 2025 00:50:09 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0c:e1:3b:c1:aa:ae:74:ad:05:a2:63:02:ba:c0:cf:c2:24:19:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:50:09 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=dfc985abb37cd374d04af1bafd02a5b5f96a34334e51c90b3a98150696ec99bb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:ec:37:c4:65:32:c8:df:e9:35:ab:f0:3e: 1d:a9:26:f1:9b:80:80:27:15:a3:62:4b:16:d7:86: 0c:05:71:16:78:17:79:3c:43:4e:b7:af:e6:b2:be: 94:b5:b7:7a:5b:79:f8:6d:74:34:57:f4:a1:16:63: 90:5f:c1:7c:1b:6d:39:8f:65:15:f2:17:04:ec:38: f9:c4:03:57:59:64:c7:e3:f1:4c:e1:86:f7:07:1c: 69:8e:52:a1:e7:fa:81:72:b7:a1:70:65:e0:a0:c0: 84:6e:c9:f1:85:27:08:fe:0f:86:2a:86:4c:63:bd: 98:a7:32:e1:0f:94:14:f2:ce:ee:67:ac:4a:5b:80: 25:4f:38:15:80:50:9f:2c:99:f2:f8:47:13:69:43: 9e:a0:a3:eb:e7:75:66:81:45:9e:aa:84:83:28:76: d9:76:0e:f6:fe:dc:b1:7e:d1:5d:30:23:c6:a6:22: 1e:b2:60:71:c8:d0:60:8a:5d:b8:2d:fa:74:1d:18: 5e:20:42:e3:ea:c7:00:9d:79:c2:71:0d:92:93:74: c9:34:d2:64:3a:c4:73:13:b4:d6:7c:21:79:32:a1: 71:4d:d5:0d:7f:31:c2:7e:e5:2b:d1:6f:71:1e:93: 62:59:06:d7:8c:2e:92:bb:dc:eb:5e:a1:fb:b0:76: fc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F5:4A:3F:52:7A:26:06:A8:AA:D0:72:5A:C1:BF:48:21:B9:E7:1E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3026e026-f5e8-46be-927e-d13ed27dd55c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f108::/48 Signature Algorithm: sha256WithRSAEncryption 6c:01:ae:65:c6:7c:2d:28:73:9b:70:94:bc:b1:8d:fe:bb:81: c1:b9:c5:74:7d:e4:6f:e3:bd:a9:3b:93:d2:ef:16:1e:6b:83: 40:27:23:b8:ec:23:ec:50:64:ac:29:f9:82:98:2c:77:e0:54: 03:bf:eb:ce:dc:18:fd:c1:75:32:1b:65:86:ce:41:b2:27:d4: 88:f5:80:4d:1d:03:5d:fd:36:ef:e1:21:6e:01:79:68:22:50: 43:c1:36:67:df:52:cb:ab:cd:d3:af:66:a0:b9:de:30:aa:51: a4:9e:e7:dc:e1:89:2b:d0:e3:72:15:c5:5e:00:d6:b6:0a:26: 6f:c8:fa:18:0f:e0:3a:49:f3:55:8a:57:1f:72:d3:f6:af:a8: e0:16:db:2d:dd:95:05:5c:21:ee:78:63:10:ba:0e:d4:29:73: b4:9f:27:a3:e4:2a:98:03:dd:2b:d1:f6:1e:32:84:15:35:ce: 34:be:02:33:4b:eb:ce:e2:e0:b1:f3:7b:79:90:9d:7e:ec:43: 43:b3:dc:ad:69:3a:f5:c4:76:58:11:b9:cb:74:cf:62:50:62: 09:8f:8a:31:56:85:c3:5e:59:ad:00:7d:d5:19:ac:64:1c:f2: 42:af:59:86:1d:ea:7d:9a:ab:56:45:2a:cd:33:b8:2c:1a:c2: 26:be:d9:bb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdwzhO8GqrnStBaJjArrAz8IkGbAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA1MDA5WhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmM5ODVhYmIzN2NkMzc0ZDA0YWYxYmFmZDAyYTViNWY5 NmEzNDMzNGU1MWM5MGIzYTk4MTUwNjk2ZWM5OWJiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAqew3xGUyyN/pNavwPh2pJvGbgIAnFaNiSxbXhgwFcRZ4 F3k8Q063r+ayvpS1t3pbefhtdDRX9KEWY5BfwXwbbTmPZRXyFwTsOPnEA1dZZMfj 8UzhhvcHHGmOUqHn+oFyt6FwZeCgwIRuyfGFJwj+D4YqhkxjvZinMuEPlBTyzu5n rEpbgCVPOBWAUJ8smfL4RxNpQ56go+vndWaBRZ6qhIModtl2Dvb+3LF+0V0wI8am Ih6yYHHI0GCKXbgt+nQdGF4gQuPqxwCdecJxDZKTdMk00mQ6xHMTtNZ8IXkyoXFN 1Q1/McJ+5SvRb3Eek2JZBteMLpK73Oteofuwdvx5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUD/VKP1J6JgaoqtByWsG/SCG55x4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMwMjZlMDI2LWY1ZTgtNDZiZS05MjdlLWQxM2VkMjdkZDU1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QgwDQYJKoZIhvcNAQELBQADggEBAGwBrmXGfC0oc5twlLyxjf67 gcG5xXR95G/jvak7k9LvFh5rg0AnI7jsI+xQZKwp+YKYLHfgVAO/687cGP3BdTIb ZYbOQbIn1Ij1gE0dA139Nu/hIW4BeWgiUEPBNmffUsurzdOvZqC53jCqUaSe59zh iSvQ43IVxV4A1rYKJm/I+hgP4DpJ81WKVx9y0/avqOAW2y3dlQVcIe54YxC6DtQp c7SfJ6PkKpgD3SvR9h4yhBU1zjS+AjNL687i4LHze3mQnX7sQ0Oz3K1pOvXEdlgR uct0z2JQYgmPijFWhcNeWa0AfdUZrGQc8kKvWYYd6n2aq1ZFKs0zuCwawia+2bs= -----END CERTIFICATE-----Generated at Tue Nov 4 04:43:51 2025 by rpki-client