$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74ecd40c-8365-49b4-a27b-066578cec1cc.roa File: 74ecd40c-8365-49b4-a27b-066578cec1cc.roa (raw, json) Hash identifier: H0lee+GX6LJldJN8xBS8WUe2Yizr29vzK2y6MI6BiwQ= Subject key identifier: 02:B0:F5:8B:76:5F:EB:F0:8B:C5:CC:78:DD:87:8F:BD:87:92:42:7F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 064A97CCF1AB4F4C5190E236D697905035E9649A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74ecd40c-8365-49b4-a27b-066578cec1cc.roa Signing time: Wed 22 Oct 2025 00:40:12 +0000 ROA not before: Wed 22 Oct 2025 00:40:12 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f10c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:4a:97:cc:f1:ab:4f:4c:51:90:e2:36:d6:97:90:50:35:e9:64:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:40:12 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=cc10e04761f041a4233b2e1c75df4bd148525838ea0db5d12a1c51b22c910af6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:65:eb:1b:2c:f0:d8:a9:bf:ce:72:7e:2b: 58:be:6c:8c:40:1a:d5:45:44:67:18:52:cb:f3:0e: ce:74:28:0f:8e:16:92:dd:84:63:08:fe:e7:f2:61: b1:35:4a:61:7c:ea:20:69:bc:d3:32:98:45:74:41: 5e:c7:09:c1:8e:ab:a4:b5:aa:75:54:d3:0c:15:1f: 74:14:f8:94:8c:63:cf:52:38:29:f5:25:85:09:0b: 9b:10:43:49:ab:67:ec:f4:c3:42:d6:0e:47:8c:d0: 3a:6b:8c:b4:4b:29:ce:8f:4a:bf:be:2b:81:82:9e: ae:da:d4:6f:a4:b2:3b:89:ba:41:46:27:35:26:38: 85:bd:ca:43:5a:c7:1a:dc:60:f6:5c:25:94:5a:7a: 45:a0:10:c9:bc:9b:99:33:92:ad:c6:5e:e6:c9:7e: d7:16:64:89:0b:12:84:bc:99:a8:b8:ba:46:a6:00: 18:9f:25:b2:e1:19:ba:a2:44:e6:f8:4b:bd:d1:bf: 14:f8:a8:1f:de:23:18:b1:a0:40:82:00:50:0d:ea: 04:17:40:1d:41:9e:79:15:3e:ea:74:2d:3d:b3:81: ca:5d:21:b3:f8:60:7b:89:8c:c1:b3:7b:70:60:f1: 95:9d:a1:69:c7:d4:ff:35:d5:45:5a:cb:92:bb:fd: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B0:F5:8B:76:5F:EB:F0:8B:C5:CC:78:DD:87:8F:BD:87:92:42:7F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74ecd40c-8365-49b4-a27b-066578cec1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10c::/48 Signature Algorithm: sha256WithRSAEncryption 8a:26:2e:59:c5:5f:66:53:2a:08:09:db:c7:35:80:c2:7d:fc: e6:66:38:83:3c:a4:e0:f9:cc:0c:b7:1c:89:33:32:6f:0f:1c: bd:48:8b:8c:4f:14:95:ad:db:3c:4f:a5:d2:de:4e:7c:44:f5: 97:02:43:ed:ec:2b:85:75:ea:04:b3:e4:66:54:27:6c:65:76: 28:20:15:fc:b4:13:ea:dd:31:c5:42:06:24:7b:c0:2b:ba:55: 09:f9:53:3a:84:22:4b:52:fb:3d:06:7a:4d:63:44:70:26:ae: 7b:95:f3:ff:90:67:b0:92:56:80:bd:49:f5:09:00:2d:f0:12: 68:06:92:00:14:b7:18:1e:88:81:4c:d1:6d:d4:36:09:1c:7b: e3:b8:ec:6c:a0:ad:ac:e5:86:c4:84:39:41:01:08:ee:1a:78: b3:47:3d:0d:79:f4:bd:e8:f1:ba:4c:75:d6:d0:42:c1:77:0d: f8:70:e8:da:2a:02:c7:ea:07:eb:b4:a4:44:ea:f7:34:f9:7b: b5:2b:c7:af:b0:ff:8c:54:6a:d1:5e:7b:1e:ec:2b:e6:f1:c5: 6e:af:5b:e7:59:2a:e8:18:fa:4a:9f:d4:81:2b:1b:d2:8a:6b: 87:1c:7d:5d:ee:d4:a5:be:b3:03:38:89:2b:e9:fa:af:39:7f: 84:64:bc:34 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBkqXzPGrT0xRkOI21peQUDXpZJowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA0MDEyWhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzEwZTA0NzYxZjA0MWE0MjMzYjJlMWM3NWRmNGJkMTQ4 NTI1ODM4ZWEwZGI1ZDEyYTFjNTFiMjJjOTEwYWY2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUEmXrGyzw2Km/znJ+K1i+bIxAGtVFRGcYUsvzDs50KA+O FpLdhGMI/ufyYbE1SmF86iBpvNMymEV0QV7HCcGOq6S1qnVU0wwVH3QU+JSMY89S OCn1JYUJC5sQQ0mrZ+z0w0LWDkeM0DprjLRLKc6PSr++K4GCnq7a1G+ksjuJukFG JzUmOIW9ykNaxxrcYPZcJZRaekWgEMm8m5kzkq3GXubJftcWZIkLEoS8mai4ukam ABifJbLhGbqiROb4S73RvxT4qB/eIxixoECCAFAN6gQXQB1BnnkVPup0LT2zgcpd IbP4YHuJjMGze3Bg8ZWdoWnH1P811UVay5K7/ZL9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUArD1i3Zf6/CLxcx43YePvYeSQn8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzc0ZWNkNDBjLTgzNjUtNDliNC1hMjdiLTA2NjU3OGNlYzFjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QwwDQYJKoZIhvcNAQELBQADggEBAIomLlnFX2ZTKggJ28c1gMJ9 /OZmOIM8pOD5zAy3HIkzMm8PHL1Ii4xPFJWt2zxPpdLeTnxE9ZcCQ+3sK4V16gSz 5GZUJ2xldiggFfy0E+rdMcVCBiR7wCu6VQn5UzqEIktS+z0Gek1jRHAmrnuV8/+Q Z7CSVoC9SfUJAC3wEmgGkgAUtxgeiIFM0W3UNgkce+O47GygrazlhsSEOUEBCO4a eLNHPQ159L3o8bpMddbQQsF3Dfhw6NoqAsfqB+u0pETq9zT5e7Urx6+w/4xUatFe ex7sK+bxxW6vW+dZKugY+kqf1IErG9KKa4ccfV3u1KW+swM4iSvp+q85f4RkvDQ= -----END CERTIFICATE-----Generated at Tue Nov 4 04:43:52 2025 by rpki-client