$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ddabe105-17a8-4460-a8c9-18b7474ee13f.roa File: ddabe105-17a8-4460-a8c9-18b7474ee13f.roa (raw, json) Hash identifier: dFLZHZXSbo1KGWzjqe93qk/mud2b50q2V66X0jy529g= Subject key identifier: 8C:82:F5:4B:2A:BC:48:C0:BC:F2:EC:D4:F8:8F:6A:F6:FF:AA:11:BD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5E5E9D3ECCA18B6E97354F110E64EC4F05CA7D97 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ddabe105-17a8-4460-a8c9-18b7474ee13f.roa Signing time: Wed 22 Oct 2025 00:50:03 +0000 ROA not before: Wed 22 Oct 2025 00:50:03 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5e:9d:3e:cc:a1:8b:6e:97:35:4f:11:0e:64:ec:4f:05:ca:7d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:50:03 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=46d36a7ee8da8ecbbe3b683965e547e9d0c1999b0847ba7bf03d6d0b0d3341de, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:be:8b:db:e0:d5:f1:2e:33:8c:6f:3d:e0:5f: 20:56:e8:87:48:90:ac:5e:d9:2c:77:9b:8d:60:dd: e8:2f:47:94:f8:b5:fb:31:af:e4:d3:7a:54:a2:bb: 68:39:76:a3:09:75:d9:3f:9c:38:9c:5f:7d:de:89: b0:de:90:34:46:31:7d:bc:35:2b:93:a5:39:6a:cd: dd:bf:55:a5:0b:0a:eb:93:8c:c1:a8:36:3a:3e:36: bb:79:66:55:35:09:65:76:fc:0b:3d:7e:d3:73:73: 4a:70:9f:16:88:3f:91:94:c9:8d:5c:60:89:05:5c: 48:85:ba:76:09:bb:57:3a:d5:35:e8:de:1b:95:a6: 95:2a:ab:c4:0f:86:bc:0b:ee:20:2e:34:f2:17:eb: d7:b6:16:0a:9f:06:d3:fe:ad:e3:41:ce:ce:cd:5b: 6d:09:b8:0a:21:6f:7a:17:49:3b:e6:c1:fc:b9:c3: af:5d:53:e9:aa:5f:9c:ee:b7:20:ba:61:67:3e:28: 2c:19:c5:13:9a:4d:92:84:22:f5:56:ef:c3:9e:a9: 7d:b1:ce:b9:dc:a0:1c:1b:48:81:7e:49:f3:5c:8e: 14:d2:c3:82:e4:8d:44:b8:eb:77:42:20:a5:dd:4b: e6:fd:ad:0a:10:47:3b:f1:fe:aa:51:fb:78:cd:e8: 43:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:82:F5:4B:2A:BC:48:C0:BC:F2:EC:D4:F8:8F:6A:F6:FF:AA:11:BD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ddabe105-17a8-4460-a8c9-18b7474ee13f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:400::/44 Signature Algorithm: sha256WithRSAEncryption 98:09:09:c5:3e:bd:d2:0a:e7:e2:d5:ad:95:89:3a:54:55:78: 61:ca:42:88:b2:de:0c:88:44:7a:2d:52:04:0a:e8:e7:66:2a: 96:c3:74:4c:c6:95:4e:b1:68:44:66:d3:13:b0:6a:00:84:47: 07:4a:80:83:27:51:80:8f:91:40:d2:63:1c:d8:c0:25:da:fa: 8b:fd:da:a4:82:8c:68:31:2d:6b:77:d6:72:e7:db:f5:75:5a: 84:fc:5f:a5:19:d9:f5:0a:62:51:a2:51:82:8e:f7:7c:ae:81: 71:39:97:11:e3:89:11:11:3c:b1:0c:5f:c0:bd:f4:eb:95:e6: c6:57:51:87:12:ed:c5:52:b4:fc:7e:06:a8:53:2a:e1:44:6f: 00:a8:2e:73:d1:01:74:09:03:cc:1b:47:b2:65:13:3e:8e:ee: b2:a9:22:01:96:6c:a4:9f:60:fb:07:88:4e:88:d7:2e:8f:e8: e6:2e:19:87:10:1b:1a:78:15:83:be:49:7f:60:6d:aa:5f:08: 5d:eb:b8:48:4d:32:35:43:dd:5c:25:47:fa:a0:58:89:6e:96: ac:6c:b2:64:55:d4:16:77:bd:5e:13:75:57:da:6c:43:4d:ed: db:1c:a3:bd:93:0f:a8:6d:24:8d:bd:31:1c:18:9c:68:30:24: 33:f2:7c:51 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXl6dPsyhi26XNU8RDmTsTwXKfZcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA1MDAzWhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmQzNmE3ZWU4ZGE4ZWNiYmUzYjY4Mzk2NWU1NDdlOWQw YzE5OTliMDg0N2JhN2JmMDNkNmQwYjBkMzM0MWRlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzvovb4NXxLjOMbz3gXyBW6IdIkKxe2Sx3m41g3egvR5T4 tfsxr+TTelSiu2g5dqMJddk/nDicX33eibDekDRGMX28NSuTpTlqzd2/VaULCuuT jMGoNjo+Nrt5ZlU1CWV2/As9ftNzc0pwnxaIP5GUyY1cYIkFXEiFunYJu1c61TXo 3huVppUqq8QPhrwL7iAuNPIX69e2FgqfBtP+reNBzs7NW20JuAohb3oXSTvmwfy5 w69dU+mqX5zutyC6YWc+KCwZxROaTZKEIvVW78OeqX2xzrncoBwbSIF+SfNcjhTS w4LkjUS463dCIKXdS+b9rQoQRzvx/qpR+3jN6EP5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjIL1Syq8SMC88uzU+I9q9v+qEb0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RkYWJlMTA1LTE3YTgtNDQ2MC1hOGM5LTE4Yjc0NzRlZTEzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBAJgJCcU+vdIK5+LVrZWJOlRV eGHKQoiy3gyIRHotUgQK6OdmKpbDdEzGlU6xaERm0xOwagCERwdKgIMnUYCPkUDS YxzYwCXa+ov92qSCjGgxLWt31nLn2/V1WoT8X6UZ2fUKYlGiUYKO93yugXE5lxHj iRERPLEMX8C99OuV5sZXUYcS7cVStPx+BqhTKuFEbwCoLnPRAXQJA8wbR7JlEz6O 7rKpIgGWbKSfYPsHiE6I1y6P6OYuGYcQGxp4FYO+SX9gbapfCF3ruEhNMjVD3Vwl R/qgWIlulqxssmRV1BZ3vV4TdVfabENN7dsco72TD6htJI29MRwYnGgwJDPyfFE= -----END CERTIFICATE-----Generated at Tue Nov 4 04:41:54 2025 by rpki-client