$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa File: 6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa (raw, json) Hash identifier: 2hzzGIlwQYUgf6IWLwEr/FWxwZUyAcYB4B/jOGc7wPw= Subject key identifier: ED:9E:43:15:F8:F9:D5:AA:35:5C:9C:86:2B:47:1E:77:3C:6A:E5:9E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3A5892708137998D57A329540628823BB27A55FA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa Signing time: Wed 22 Oct 2025 00:40:05 +0000 ROA not before: Wed 22 Oct 2025 00:40:05 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:58:92:70:81:37:99:8d:57:a3:29:54:06:28:82:3b:b2:7a:55:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:40:05 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=ea10f21b30aac5549eab8e95c1bc1e3e7c60cd333f7cf44aea1915bc698068e5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:6e:96:1b:9e:ec:1d:8a:32:ef:2c:87:11: ac:16:52:1e:6e:76:69:d2:20:06:02:35:7b:c0:7c: 56:f4:ba:a6:b8:04:70:27:fe:a6:c8:60:93:aa:bf: dc:f2:bd:b0:82:a0:a8:8a:9d:dc:7a:ee:0f:a1:63: 70:32:e1:c0:8e:8b:56:19:1f:4c:0c:26:31:32:ce: 65:9f:dc:24:be:92:bc:dc:b2:84:a2:c2:1c:f8:bb: c3:1d:a4:8f:0f:00:71:62:85:1a:48:ae:66:0b:4d: d2:c7:6c:8d:28:2a:7e:c8:62:d5:99:0c:ee:37:09: 1b:6d:c0:50:9b:cb:a7:23:ef:7f:05:44:2d:21:30: 23:39:de:68:f2:52:fb:af:4f:ec:b3:84:07:bd:92: 6c:3b:91:0c:cd:1f:ba:c7:dd:fe:2d:d6:bd:91:26: fa:c5:3b:50:ed:e1:20:f2:9f:1a:77:bb:60:6b:62: 84:cd:b1:ce:a4:40:7d:05:38:99:d4:9d:38:bd:45: a9:d1:81:a3:76:5f:a9:b6:bc:22:36:b6:22:39:85: 35:06:5a:e3:26:e8:d1:a5:4c:69:63:9c:33:d1:b6: 0b:d4:08:ff:17:e1:48:e7:6d:90:e4:02:a1:9f:5d: b1:a8:e0:32:2e:3b:8a:a4:9b:e6:50:27:cf:c3:6f: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9E:43:15:F8:F9:D5:AA:35:5C:9C:86:2B:47:1E:77:3C:6A:E5:9E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f100::/48 Signature Algorithm: sha256WithRSAEncryption 1f:5a:a9:f8:16:10:e6:e0:68:8e:74:b0:26:f1:a9:85:78:cf: 9c:6d:9e:1a:d1:b6:89:e3:fa:70:fc:94:30:be:15:bd:38:0d: ea:dd:c5:f5:10:34:9a:a3:32:5b:7a:05:d0:3a:fa:01:77:65: ba:60:29:0c:d2:bc:e9:42:45:14:e9:9f:e6:2c:4c:4d:e1:3e: a0:ae:e4:11:70:8a:9c:2a:3c:33:d2:e2:e7:66:f9:c1:27:6d: f3:97:c7:e0:86:c0:bb:a9:fc:63:22:51:99:a1:cf:12:19:f0: e6:22:f6:ad:22:f2:c1:b3:26:16:12:e8:a9:4b:d8:61:45:74: 23:63:6c:5d:3b:fe:75:89:8f:5c:ee:22:f5:e8:4e:15:2f:04: d5:c6:f8:72:32:cb:50:91:eb:ac:73:56:ee:2e:aa:e0:26:1c: 9d:8a:5c:0d:70:76:42:53:56:7b:f0:94:59:ce:f9:86:c3:3f: 9d:db:d6:9e:af:3a:1d:a5:ac:2f:42:a4:9d:9f:ba:55:38:d9: 2f:37:22:97:7c:a1:f4:5a:09:5a:65:4e:70:ae:63:64:9f:34: 21:be:45:76:e7:82:7c:81:ae:ec:92:87:f2:de:be:7d:c8:35: f7:89:8a:e8:57:92:7f:0c:a4:db:12:20:3c:1a:d2:26:b3:38: 79:4f:c4:4d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOliScIE3mY1XoylUBiiCO7J6VfowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA0MDA1WhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTEwZjIxYjMwYWFjNTU0OWVhYjhlOTVjMWJjMWUzZTdj NjBjZDMzM2Y3Y2Y0NGFlYTE5MTViYzY5ODA2OGU1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCySm6WG57sHYoy7yyHEawWUh5udmnSIAYCNXvAfFb0uqa4 BHAn/qbIYJOqv9zyvbCCoKiKndx67g+hY3Ay4cCOi1YZH0wMJjEyzmWf3CS+krzc soSiwhz4u8MdpI8PAHFihRpIrmYLTdLHbI0oKn7IYtWZDO43CRttwFCby6cj738F RC0hMCM53mjyUvuvT+yzhAe9kmw7kQzNH7rH3f4t1r2RJvrFO1Dt4SDynxp3u2Br YoTNsc6kQH0FOJnUnTi9RanRgaN2X6m2vCI2tiI5hTUGWuMm6NGlTGljnDPRtgvU CP8X4UjnbZDkAqGfXbGo4DIuO4qkm+ZQJ8/Db10vAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7Z5DFfj51ao1XJyGK0cedzxq5Z4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZkYWQ4NDhjLWVjZjYtNDBlMi04NWIwLTAxNGE2MGRkOTZlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QAwDQYJKoZIhvcNAQELBQADggEBAB9aqfgWEObgaI50sCbxqYV4 z5xtnhrRtonj+nD8lDC+Fb04DerdxfUQNJqjMlt6BdA6+gF3ZbpgKQzSvOlCRRTp n+YsTE3hPqCu5BFwipwqPDPS4udm+cEnbfOXx+CGwLup/GMiUZmhzxIZ8OYi9q0i 8sGzJhYS6KlL2GFFdCNjbF07/nWJj1zuIvXoThUvBNXG+HIyy1CR66xzVu4uquAm HJ2KXA1wdkJTVnvwlFnO+YbDP53b1p6vOh2lrC9CpJ2fulU42S83Ipd8ofRaCVpl TnCuY2SfNCG+RXbngnyBruySh/Levn3INfeJiuhXkn8MpNsSIDwa0iazOHlPxE0= -----END CERTIFICATE-----Generated at Tue Nov 4 04:41:07 2025 by rpki-client