$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa File: 8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa (raw, json) Hash identifier: lo3HC7uHm2LHi8Wx3URo/SjajHzOuMnRvJs9olWk0y0= Subject key identifier: A3:2A:3B:AC:76:0D:E3:5F:82:85:52:A2:30:7C:F4:E9:57:60:FD:B5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 666F2C9E9F068B13609D19A330161DDEA32C646E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa Signing time: Tue 04 Nov 2025 00:10:10 +0000 ROA not before: Tue 04 Nov 2025 00:10:10 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6f:2c:9e:9f:06:8b:13:60:9d:19:a3:30:16:1d:de:a3:2c:64:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 4 00:10:10 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=a01911804ea01cedb8b6cb91577972a190f2a9cb8b34e661160686698514d2db, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:50:4a:50:eb:b3:4b:fc:89:38:7c:6f:62: c4:a1:59:7e:dc:b8:bd:2a:04:81:cf:8b:48:6f:90: c2:e0:e5:0d:dd:96:4b:d5:0b:70:0f:d3:63:c9:c3: 2d:f3:4e:30:f5:6b:d9:cb:1a:7f:28:ad:b0:04:13: 5c:b5:16:9d:df:6a:09:ee:95:f5:d1:ea:83:bf:a1: 31:74:7d:08:22:a7:7c:c5:c9:68:82:46:ab:54:3e: bb:ae:47:14:a3:be:5d:7b:97:fd:ab:e1:bd:5a:3e: 36:20:c5:c2:26:8d:a7:2e:1d:9e:1b:f9:df:b1:db: 29:06:e8:7f:9b:8b:7b:2d:d9:2b:78:65:1f:57:47: 1d:80:e4:d0:15:1d:ef:eb:7f:d9:e6:19:d6:d6:05: 45:d1:04:58:26:76:ff:08:d1:79:25:d3:29:2e:72: 12:9a:7d:11:74:5c:65:14:f0:b1:0f:9a:d5:36:8d: 61:68:0e:3a:85:2b:62:c0:ee:a4:33:88:f4:83:1d: cf:f4:8f:6d:d0:96:f3:0d:3f:d1:6a:4e:af:b7:bb: de:22:ce:91:85:c4:49:53:ef:91:c2:f3:9b:df:de: c2:93:d5:3b:b0:d8:40:6e:40:b9:b1:da:3b:3a:5c: d8:50:30:12:16:ad:f4:e8:15:72:21:73:dc:e3:64: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2A:3B:AC:76:0D:E3:5F:82:85:52:A2:30:7C:F4:E9:57:60:FD:B5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8dfc4066-fbb3-4c80-b6d3-9ea1f4719c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6122::/48 Signature Algorithm: sha256WithRSAEncryption 59:4d:2e:1b:24:4e:75:9d:57:89:8e:6a:c2:db:8e:89:17:31: 11:b9:6a:c2:65:16:7b:e6:1b:bc:5d:c0:b1:c1:4c:2d:57:0c: ab:99:31:68:cc:f9:81:26:95:31:dc:43:be:dc:c5:22:84:64: 4d:b6:0a:42:72:cd:23:29:3e:6e:8f:ea:dd:b6:b8:fc:37:78: 10:33:4f:13:f1:be:e8:db:e7:8e:fd:3a:d9:4c:64:cc:af:06: 30:6a:f7:44:b7:ed:0d:66:06:e0:c0:1f:ed:c7:56:d0:64:a9: 9a:e9:0d:46:90:80:28:9d:c0:73:87:fc:fe:44:9b:f9:e5:32: 76:e9:1a:77:0a:77:bc:ad:7b:09:75:b7:24:1a:0e:b3:57:94: 36:22:8d:27:1e:53:f8:6d:e0:cc:82:53:3c:ef:3d:92:b2:7b: ed:fd:d6:f7:e4:bb:12:78:b6:9b:32:07:50:ac:28:3c:54:96: 16:ea:ed:cd:13:6e:87:51:39:5d:65:e0:52:e7:41:f2:45:78: 4f:9f:5b:02:d2:12:f7:a6:78:fa:e8:16:c4:d5:ff:ac:d3:44: 51:11:b9:ae:82:1d:b3:29:e0:c3:ca:9d:99:74:f3:18:23:a6: ce:94:03:f8:ab:ef:9e:cd:78:d1:6d:71:c3:2c:0b:a5:6a:51: b5:9b:39:d9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZm8snp8GixNgnRmjMBYd3qMsZG4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTA0MDAxMDEwWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDE5MTE4MDRlYTAxY2VkYjhiNmNiOTE1Nzc5NzJhMTkw ZjJhOWNiOGIzNGU2NjExNjA2ODY2OTg1MTRkMmRiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbVlBKUOuzS/yJOHxvYsShWX7cuL0qBIHPi0hvkMLg5Q3d lkvVC3AP02PJwy3zTjD1a9nLGn8orbAEE1y1Fp3fagnulfXR6oO/oTF0fQgip3zF yWiCRqtUPruuRxSjvl17l/2r4b1aPjYgxcImjacuHZ4b+d+x2ykG6H+bi3st2St4 ZR9XRx2A5NAVHe/rf9nmGdbWBUXRBFgmdv8I0Xkl0ykuchKafRF0XGUU8LEPmtU2 jWFoDjqFK2LA7qQziPSDHc/0j23QlvMNP9FqTq+3u94izpGFxElT75HC85vf3sKT 1Tuw2EBuQLmx2js6XNhQMBIWrfToFXIhc9zjZIcPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUoyo7rHYN41+ChVKiMHz06Vdg/bUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhkZmM0MDY2LWZiYjMtNGM4MC1iNmQzLTllYTFmNDcxOWM4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSIwDQYJKoZIhvcNAQELBQADggEBAFlNLhskTnWdV4mOasLbjokX MRG5asJlFnvmG7xdwLHBTC1XDKuZMWjM+YEmlTHcQ77cxSKEZE22CkJyzSMpPm6P 6t22uPw3eBAzTxPxvujb5479OtlMZMyvBjBq90S37Q1mBuDAH+3HVtBkqZrpDUaQ gCidwHOH/P5Em/nlMnbpGncKd7ytewl1tyQaDrNXlDYijSceU/ht4MyCUzzvPZKy e+391vfkuxJ4tpsyB1CsKDxUlhbq7c0TbodROV1l4FLnQfJFeE+fWwLSEvemePro FsTV/6zTRFERua6CHbMp4MPKnZl08xgjps6UA/ir757NeNFtccMsC6VqUbWbOdk= -----END CERTIFICATE-----Generated at Tue Nov 4 04:41:54 2025 by rpki-client