$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1a47a69-1d53-4fa8-bab2-1b1f60e74655.roa File: c1a47a69-1d53-4fa8-bab2-1b1f60e74655.roa (raw, json) Hash identifier: iTwlsGc9ihfkmt/1ScXQX3YEwP8IADBKVv/gWEdQ1qA= Subject key identifier: C5:93:44:44:8F:C8:01:62:07:D1:8F:7A:85:93:D1:DE:1D:DA:AD:DF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7742502A3712E56A67ECC7C1D2045445CC0FA8D8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1a47a69-1d53-4fa8-bab2-1b1f60e74655.roa Signing time: Wed 22 Oct 2025 00:50:06 +0000 ROA not before: Wed 22 Oct 2025 00:50:06 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:42:50:2a:37:12:e5:6a:67:ec:c7:c1:d2:04:54:45:cc:0f:a8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:50:06 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=f0cc352c92c111fb2bbdd0e634ad3edb71f7ad9c995677fcac011c78b69dd784, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:56:e7:61:5d:98:c6:b6:01:eb:dc:45:c4: 81:d9:c8:7a:65:e5:4e:94:70:39:fb:22:94:33:c3: 03:5a:ec:f6:3a:7f:63:18:03:2b:b7:b2:5e:38:3b: 54:ee:38:52:13:e1:5f:e9:32:7c:fa:ca:ef:42:68: 39:01:e3:b9:62:e9:07:67:62:77:3c:06:4a:b5:90: 6b:4d:13:42:1e:4c:a1:73:bc:68:cb:18:12:0b:1d: e9:51:35:ce:37:20:83:b7:44:56:66:59:85:66:49: d9:e4:78:d5:0c:58:d6:f7:aa:e4:af:a2:95:d6:64: 01:bf:64:cd:b6:06:e2:e3:fd:32:f8:98:e1:78:22: 02:11:a7:cd:05:72:7b:74:27:65:0a:48:e9:e5:e3: 7b:f7:6c:67:09:b5:9c:18:8d:1b:88:1f:37:e2:12: 37:1a:66:6e:3b:43:c1:e5:65:d6:7e:6e:ca:bb:fa: d9:aa:83:49:e0:0c:dd:a8:1b:87:4f:49:db:4a:f0: 62:d1:31:29:9e:e2:08:ce:61:79:7b:79:e3:61:c0: d0:90:72:a3:89:fd:2b:4e:62:61:1d:a0:a8:01:e4: 9e:82:de:fb:e6:63:6f:e7:3f:3d:8c:8c:0b:a0:6a: 71:7b:ec:9c:60:02:e5:44:9f:06:5d:ad:41:28:de: 1b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:93:44:44:8F:C8:01:62:07:D1:8F:7A:85:93:D1:DE:1D:DA:AD:DF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1a47a69-1d53-4fa8-bab2-1b1f60e74655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f102::/48 Signature Algorithm: sha256WithRSAEncryption 8e:f3:a4:41:31:8e:97:69:69:0c:63:44:60:a2:6a:69:90:52: d3:28:aa:46:27:e8:bd:e4:51:8a:94:9c:63:ae:6b:f6:bf:f6: 7f:c2:4d:4a:67:02:6d:ae:da:2c:88:69:79:fd:10:64:3d:90: 30:9c:1a:7f:de:ec:cf:d7:72:96:88:86:73:42:54:49:ec:4e: 25:6f:60:08:39:8c:52:cb:9b:b5:f3:6d:36:56:c7:af:93:a9: 2f:39:18:7e:1f:84:7d:53:b6:7d:ba:ea:04:17:e1:44:1f:f8: 8b:de:69:2b:e4:1b:de:4e:45:6e:f5:d6:5f:fa:49:8c:71:f3: 93:8c:a1:a4:7a:0b:e9:01:5b:75:58:9e:54:29:ca:0d:28:a2: bb:0f:b6:e9:d7:86:5b:7a:0b:89:94:d9:eb:6b:03:22:63:b7: a5:4b:cd:79:20:83:89:ea:2a:16:4a:b0:41:1a:24:85:6d:4b: 6d:e3:0a:11:0e:4d:4b:b6:2f:f6:e8:f1:3a:67:04:8b:3d:2a: f6:2b:ac:aa:a4:ff:96:9c:3d:69:e0:b2:67:f3:35:ad:2e:9e: e2:6d:31:bd:4f:70:8a:de:6e:56:e9:e4:52:fe:9c:21:2a:e2: 81:33:04:2d:da:63:f4:32:de:f8:2a:da:f1:d7:39:25:83:1d: 78:bf:ef:69 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd0JQKjcS5Wpn7MfB0gRURcwPqNgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA1MDA2WhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGNjMzUyYzkyYzExMWZiMmJiZGQwZTYzNGFkM2VkYjcx ZjdhZDljOTk1Njc3ZmNhYzAxMWM3OGI2OWRkNzg0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbBFbnYV2YxrYB69xFxIHZyHpl5U6UcDn7IpQzwwNa7PY6 f2MYAyu3sl44O1TuOFIT4V/pMnz6yu9CaDkB47li6QdnYnc8Bkq1kGtNE0IeTKFz vGjLGBILHelRNc43IIO3RFZmWYVmSdnkeNUMWNb3quSvopXWZAG/ZM22BuLj/TL4 mOF4IgIRp80Fcnt0J2UKSOnl43v3bGcJtZwYjRuIHzfiEjcaZm47Q8HlZdZ+bsq7 +tmqg0ngDN2oG4dPSdtK8GLRMSme4gjOYXl7eeNhwNCQcqOJ/StOYmEdoKgB5J6C 3vvmY2/nPz2MjAuganF77JxgAuVEnwZdrUEo3hurAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxZNERI/IAWIH0Y96hZPR3h3ard8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MxYTQ3YTY5LTFkNTMtNGZhOC1iYWIyLTFiMWY2MGU3NDY1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QIwDQYJKoZIhvcNAQELBQADggEBAI7zpEExjpdpaQxjRGCiammQ UtMoqkYn6L3kUYqUnGOua/a/9n/CTUpnAm2u2iyIaXn9EGQ9kDCcGn/e7M/XcpaI hnNCVEnsTiVvYAg5jFLLm7XzbTZWx6+TqS85GH4fhH1Ttn266gQX4UQf+IveaSvk G95ORW711l/6SYxx85OMoaR6C+kBW3VYnlQpyg0oorsPtunXhlt6C4mU2etrAyJj t6VLzXkgg4nqKhZKsEEaJIVtS23jChEOTUu2L/bo8TpnBIs9KvYrrKqk/5acPWng smfzNa0unuJtMb1PcIreblbp5FL+nCEq4oEzBC3aY/Qy3vgq2vHXOSWDHXi/72k= -----END CERTIFICATE-----Generated at Tue Nov 4 04:41:05 2025 by rpki-client