$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0a9c1ab1-49ce-487d-9702-dc4efc450447.roa File: 0a9c1ab1-49ce-487d-9702-dc4efc450447.roa (raw, json) Hash identifier: uSfOVbOSOXpunljyQw+QHTiTVIZ+BUj8e+jAuRygjyw= Subject key identifier: 1D:C3:CC:4C:13:B9:71:A7:1B:C8:DD:F2:BE:6C:79:3A:DF:13:04:0B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1D964B9C6EA9EE3B40BFADC8B9F080922EB0CA4D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0a9c1ab1-49ce-487d-9702-dc4efc450447.roa Signing time: Fri 31 Oct 2025 02:00:09 +0000 ROA not before: Fri 31 Oct 2025 02:00:09 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6118::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:96:4b:9c:6e:a9:ee:3b:40:bf:ad:c8:b9:f0:80:92:2e:b0:ca:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 02:00:09 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=4c8c05421300beaafb726a0f4878ba8d6ef9ed0c827dc77f481ee5f8ed9cde4a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ff:96:af:27:06:83:de:2e:5c:cd:1e:f2:ec: 49:05:38:9c:69:83:13:51:04:71:b0:b9:99:a0:e9: c0:62:61:02:7b:c4:79:3b:3f:76:3c:02:44:16:e3: be:87:9e:a1:f2:1c:5b:5e:81:96:b4:6c:56:47:54: 6b:1e:2f:24:31:62:8e:86:91:63:e8:32:72:9d:31: 9c:9a:b9:68:10:96:ee:a6:57:eb:0c:5b:73:d9:62: 0d:1a:5e:4b:08:f0:8b:11:fe:a8:6e:ff:e3:e3:5a: dc:c8:a4:6e:54:9d:75:42:2d:86:67:09:1f:06:84: 78:a1:01:a1:33:64:64:99:55:2b:7e:43:b0:6c:24: b9:5a:b3:2f:9d:d4:99:69:d9:a3:1a:28:ba:44:ef: d9:46:3a:93:88:77:18:60:08:ac:f9:22:cc:e5:9d: 0b:e0:86:98:a0:f5:fb:d6:2a:3c:3d:94:71:db:f0: a7:94:a2:51:30:33:12:50:77:ef:83:63:e8:46:97: fd:50:0b:dc:e1:3b:6f:3e:3d:8b:5d:05:d6:63:47: 0a:6c:17:09:c4:66:c4:16:5f:7d:ff:06:2e:8e:a8: 17:b4:31:71:3c:a3:80:52:cf:bd:44:65:94:c2:46: 99:a9:13:b1:e2:e4:44:22:de:75:86:79:58:ac:78: e7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C3:CC:4C:13:B9:71:A7:1B:C8:DD:F2:BE:6C:79:3A:DF:13:04:0B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0a9c1ab1-49ce-487d-9702-dc4efc450447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6118::/48 Signature Algorithm: sha256WithRSAEncryption 6f:53:b0:cd:05:20:86:a0:b5:bf:d1:ac:8e:db:f0:bf:95:d6: 0e:65:a5:8a:9d:c9:4f:fe:02:4d:f2:5a:cd:49:8b:ec:ae:96: a6:10:6b:2b:2e:ac:3a:46:ea:a4:c5:41:c0:d5:a2:66:02:4e: bd:22:69:3a:ec:b5:57:72:8f:08:ab:24:1b:aa:59:41:13:44: 87:0b:7a:96:9a:84:67:03:a9:61:4c:04:5a:f1:54:9d:ac:fc: 28:3d:54:4f:f5:39:6f:dd:e1:c4:6d:e9:d7:98:d1:a2:bf:5a: ae:34:cf:a5:0f:07:01:86:34:19:af:8e:07:f4:64:b1:db:07: 97:34:f3:8f:c4:3f:37:74:f6:8a:2e:db:7e:36:b0:fc:12:12: 9b:e6:d1:11:36:8d:de:7f:03:81:25:f3:06:9b:9a:7f:70:5b: 7b:f3:3c:43:25:58:89:a8:e2:79:8a:7e:62:cf:32:2e:6d:41: f8:6c:ae:7e:c3:83:ab:bd:b2:58:fc:54:32:ac:3a:70:09:b1: 48:cf:90:37:c0:7d:a4:4a:a3:ae:c0:e4:68:76:21:cb:e0:26: 84:2f:e3:b1:dd:61:0f:69:28:2e:c4:57:f8:ad:70:cb:d0:8a: 61:fc:d6:3a:db:b5:c8:1e:14:64:d7:a0:23:1e:bf:e5:0b:82: 67:f2:e2:07 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHZZLnG6p7jtAv63IufCAki6wyk0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDIwMDA5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzhjMDU0MjEzMDBiZWFhZmI3MjZhMGY0ODc4YmE4ZDZl ZjllZDBjODI3ZGM3N2Y0ODFlZTVmOGVkOWNkZTRhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC/5avJwaD3i5czR7y7EkFOJxpgxNRBHGwuZmg6cBiYQJ7 xHk7P3Y8AkQW476HnqHyHFtegZa0bFZHVGseLyQxYo6GkWPoMnKdMZyauWgQlu6m V+sMW3PZYg0aXksI8IsR/qhu/+PjWtzIpG5UnXVCLYZnCR8GhHihAaEzZGSZVSt+ Q7BsJLlasy+d1Jlp2aMaKLpE79lGOpOIdxhgCKz5IszlnQvghpig9fvWKjw9lHHb 8KeUolEwMxJQd++DY+hGl/1QC9zhO28+PYtdBdZjRwpsFwnEZsQWX33/Bi6OqBe0 MXE8o4BSz71EZZTCRpmpE7Hi5EQi3nWGeViseOclAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHcPMTBO5cacbyN3yvmx5Ot8TBAswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBhOWMxYWIxLTQ5Y2UtNDg3ZC05NzAyLWRjNGVmYzQ1MDQ0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRgwDQYJKoZIhvcNAQELBQADggEBAG9TsM0FIIagtb/RrI7b8L+V 1g5lpYqdyU/+Ak3yWs1Ji+yulqYQaysurDpG6qTFQcDVomYCTr0iaTrstVdyjwir JBuqWUETRIcLepaahGcDqWFMBFrxVJ2s/Cg9VE/1OW/d4cRt6deY0aK/Wq40z6UP BwGGNBmvjgf0ZLHbB5c084/EPzd09oou2342sPwSEpvm0RE2jd5/A4El8wabmn9w W3vzPEMlWImo4nmKfmLPMi5tQfhsrn7Dg6u9slj8VDKsOnAJsUjPkDfAfaRKo67A 5Gh2IcvgJoQv47HdYQ9pKC7EV/itcMvQimH81jrbtcgeFGTXoCMev+ULgmfy4gc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:52 2025 by rpki-client