$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/88a5dee6-8e6a-4e36-826a-c664471dad1e.roa File: 88a5dee6-8e6a-4e36-826a-c664471dad1e.roa (raw, json) Hash identifier: e832hlBgYjtuZ5gSACVLPUvJXvf+T0cCTKcuO+9kjB4= Subject key identifier: 0D:CE:D1:BE:4A:CC:78:88:B6:E0:96:F2:A8:95:61:04:4E:3D:E6:2E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3CC57AB09BAF5F1C6BCD856E2CEE3D3A32898BE1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/88a5dee6-8e6a-4e36-826a-c664471dad1e.roa Signing time: Wed 22 Oct 2025 00:40:02 +0000 ROA not before: Wed 22 Oct 2025 00:40:02 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c5:7a:b0:9b:af:5f:1c:6b:cd:85:6e:2c:ee:3d:3a:32:89:8b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:40:02 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=32729e34f8cd43015a1b19c7ab3b40df488df55dca556967125bb81ab5f4bd8d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cb:d9:0c:94:9b:51:f8:7b:0d:a3:19:47:27: 98:39:ab:ea:ff:47:f6:73:26:eb:0d:db:b5:3d:50: cb:4e:23:2f:08:89:29:c4:2d:1f:3a:22:9a:d3:38: bc:8e:03:15:a9:2c:fe:91:78:69:87:c9:1b:c8:59: 95:79:10:c9:87:28:fd:ed:9c:8f:92:14:7b:89:14: da:99:cc:23:44:20:18:7b:2b:eb:67:41:79:a0:67: 9a:1f:34:02:6c:53:7e:66:30:79:63:a6:16:f8:3c: 49:ca:74:2a:cf:86:be:2b:4d:22:cf:9a:2e:c2:dd: 8c:f3:00:71:50:c6:30:5d:6c:5e:fe:60:7d:1c:5d: ab:03:2e:35:93:7c:5e:d9:e9:99:de:a3:1e:4e:48: 9b:62:fa:d0:e8:76:70:30:5d:56:e5:60:b3:36:f2: 60:cd:2d:88:57:75:fc:60:e0:c8:2d:75:c9:f4:18: 8a:cb:7d:58:1d:4d:48:eb:6c:f6:6e:03:9a:12:f1: 37:22:f1:28:f1:55:c6:9c:10:ae:85:df:8b:67:b1: fd:3c:79:f4:63:8e:c3:6a:43:06:14:36:26:d3:b9: 41:aa:1c:ed:3b:75:94:5a:55:e5:0f:e1:07:fa:00: 7e:a1:ee:f0:64:91:fb:06:c9:88:70:6a:d6:3e:65: 8d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CE:D1:BE:4A:CC:78:88:B6:E0:96:F2:A8:95:61:04:4E:3D:E6:2E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/88a5dee6-8e6a-4e36-826a-c664471dad1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c000::/40 Signature Algorithm: sha256WithRSAEncryption 52:b3:31:49:88:e6:0c:eb:6c:bc:1c:49:f6:c6:e8:24:41:f4: 31:4d:a4:c0:a8:67:bd:aa:53:d4:ff:b4:bd:c9:ab:41:03:1f: 86:5c:11:bc:9b:c5:27:b2:ed:a8:6d:26:8f:33:ab:99:7d:f1: 59:31:ad:f0:eb:bb:a5:16:61:61:89:22:34:69:05:a5:2a:e6: a6:41:df:a7:6e:95:a2:8f:40:55:74:a2:a6:b6:1e:4d:56:08: 9e:7a:bc:66:21:2a:60:01:dc:77:de:01:92:a0:5a:66:49:50: a6:55:0a:b9:ac:46:85:41:84:22:12:51:02:9c:5a:9c:4a:28: 55:8b:7f:11:7c:2a:01:59:6f:22:8e:b0:27:4f:d2:58:52:87: 43:a7:53:70:c1:80:c3:29:a4:2c:5c:be:4c:51:c2:f9:30:b3: c4:f7:04:86:02:0d:04:9a:06:4e:75:99:c5:9c:fa:5b:67:71: a1:f1:dd:09:33:d4:d1:9f:9a:78:76:73:0f:ad:3e:08:49:99: e0:b6:59:2e:dd:36:bc:cb:8f:ce:75:7f:a1:fb:92:00:4d:f5: e3:4c:c2:1e:9d:f8:6a:3e:64:d8:4b:f7:e8:83:c9:5a:5e:45: 7c:d4:69:55:ea:c4:54:62:f5:37:f5:bf:11:7f:c4:25:33:49: 85:8c:71:db -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPMV6sJuvXxxrzYVuLO49OjKJi+EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA0MDAyWhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjcyOWUzNGY4Y2Q0MzAxNWExYjE5YzdhYjNiNDBkZjQ4 OGRmNTVkY2E1NTY5NjcxMjViYjgxYWI1ZjRiZDhkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjy9kMlJtR+HsNoxlHJ5g5q+r/R/ZzJusN27U9UMtOIy8I iSnELR86IprTOLyOAxWpLP6ReGmHyRvIWZV5EMmHKP3tnI+SFHuJFNqZzCNEIBh7 K+tnQXmgZ5ofNAJsU35mMHljphb4PEnKdCrPhr4rTSLPmi7C3YzzAHFQxjBdbF7+ YH0cXasDLjWTfF7Z6Zneox5OSJti+tDodnAwXVblYLM28mDNLYhXdfxg4Mgtdcn0 GIrLfVgdTUjrbPZuA5oS8Tci8SjxVcacEK6F34tnsf08efRjjsNqQwYUNibTuUGq HO07dZRaVeUP4Qf6AH6h7vBkkfsGyYhwatY+ZY1NAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUDc7RvkrMeIi24JbyqJVhBE495i4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg4YTVkZWU2LThlNmEtNGUzNi04MjZhLWM2NjQ0NzFkYWQxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwwDANBgkqhkiG9w0BAQsFAAOCAQEAUrMxSYjmDOtsvBxJ9sboJEH0 MU2kwKhnvapT1P+0vcmrQQMfhlwRvJvFJ7LtqG0mjzOrmX3xWTGt8Ou7pRZhYYki NGkFpSrmpkHfp26Voo9AVXSiprYeTVYInnq8ZiEqYAHcd94BkqBaZklQplUKuaxG hUGEIhJRApxanEooVYt/EXwqAVlvIo6wJ0/SWFKHQ6dTcMGAwymkLFy+TFHC+TCz xPcEhgINBJoGTnWZxZz6W2dxofHdCTPU0Z+aeHZzD60+CEmZ4LZZLt02vMuPznV/ ofuSAE3140zCHp34aj5k2Ev36IPJWl5FfNRpVerEVGL1N/W/EX/EJTNJhYxx2w== -----END CERTIFICATE-----Generated at Tue Nov 4 04:42:54 2025 by rpki-client