$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa File: 100ca166-7317-4d78-8102-ea1dfe26d0e3.roa (raw, json) Hash identifier: Lryo/kQEo/eNDs37qRU22iPDPdAevmVfZb1vGmQmGB8= Subject key identifier: 43:D8:AF:E5:BB:5D:95:F1:8F:B3:B8:A5:83:B9:F4:C1:9C:29:C2:2A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6E7CD33280F5A00833F87C1F2AE7AB2552C17CD0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa Signing time: Tue 21 Oct 2025 12:50:06 +0000 ROA not before: Tue 21 Oct 2025 12:50:06 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:551a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7c:d3:32:80:f5:a0:08:33:f8:7c:1f:2a:e7:ab:25:52:c1:7c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 12:50:06 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=202648a5b424f1a1af8cd0076633e19880978e773a34c00cda605e8f71a9030b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:82:fe:a3:11:c4:d6:27:70:3c:e2:49:27: 62:5f:64:07:8d:52:0c:5a:8f:03:7e:20:e6:2c:0c: 28:c2:90:93:98:c4:11:03:24:c5:be:1d:4f:81:4d: 27:d5:d6:d9:9d:79:c9:6b:23:2a:c0:c8:b4:1f:2b: 0c:c1:70:b0:fb:3a:18:b1:b0:37:ec:c0:79:eb:74: 27:80:05:1d:5a:2b:46:00:d1:cd:25:7d:fa:88:6e: a0:d4:98:82:9a:b4:88:1b:9e:6e:6c:4b:8c:df:83: 67:35:5d:93:29:4f:2e:95:6b:ed:ea:fb:cb:5f:fa: e7:6f:7f:11:b1:a6:8c:06:e9:8d:2c:8b:df:2f:57: ad:71:8c:0e:7b:f9:63:f2:51:6b:ee:30:19:49:67: 47:fc:93:c6:2a:f2:04:ae:58:75:92:22:cd:6b:72: 11:d4:b0:30:73:e6:9c:ad:94:e3:a9:2a:7c:13:d8: 2c:fc:52:c5:a8:88:cc:be:8f:f0:1f:2d:34:7c:07: 08:71:d6:60:90:87:d6:23:56:9a:80:7f:42:3f:80: ae:56:06:6c:5b:76:47:8e:3e:59:b3:ef:5c:58:40: ba:4d:f2:db:fd:ba:b1:f0:37:90:05:ae:75:f5:d6: 9b:b8:eb:73:1c:d3:c4:4e:dd:58:ad:7c:71:b4:2c: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D8:AF:E5:BB:5D:95:F1:8F:B3:B8:A5:83:B9:F4:C1:9C:29:C2:2A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/100ca166-7317-4d78-8102-ea1dfe26d0e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551a::/48 Signature Algorithm: sha256WithRSAEncryption 41:8c:e3:1b:85:5a:45:43:6a:e2:ec:bf:2d:26:39:1b:9d:ce: 5b:e7:47:9e:3d:42:23:c1:ef:80:4f:0d:7e:22:e8:c4:a2:f4: 9f:22:78:0a:de:09:0e:24:91:c8:43:bd:fc:9f:53:f2:67:5a: a7:e6:80:43:ee:b2:49:e9:54:ca:69:34:53:ab:1b:17:2e:d4: 7b:28:99:9f:18:25:ba:e1:63:e6:33:2f:bf:06:67:e0:22:e4: db:01:f7:05:fd:02:9e:00:f6:29:43:83:62:30:2a:5e:ba:4d: c3:0a:fa:1b:28:4a:6f:da:ce:78:23:cc:82:1c:ac:a2:ea:ed: da:ec:d2:b3:4e:4f:c6:49:04:a4:e0:50:82:54:39:49:01:35: b7:0f:67:08:0e:e5:7b:c4:6f:f6:6a:72:bc:f2:8f:6a:bd:65: 65:18:49:65:a9:55:c0:cd:a8:05:94:95:8f:87:6c:41:4b:89: ac:76:85:8a:52:af:d4:e2:e7:ca:bd:56:1f:19:00:7b:d7:60: e7:07:14:55:05:35:82:c8:d4:56:cc:7b:cd:57:08:2d:6a:f6: 0b:b4:92:7e:19:01:e3:6c:91:ad:11:b9:95:66:61:e6:db:9d: 6e:df:a7:54:95:34:a7:49:14:59:e7:c1:2e:20:f8:68:1e:74: 35:88:9c:db -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbnzTMoD1oAgz+HwfKuerJVLBfNAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTI1MDA2WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDI2NDhhNWI0MjRmMWExYWY4Y2QwMDc2NjMzZTE5ODgw OTc4ZTc3M2EzNGMwMGNkYTYwNWU4ZjcxYTkwMzBiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCidYL+oxHE1idwPOJJJ2JfZAeNUgxajwN+IOYsDCjCkJOY xBEDJMW+HU+BTSfV1tmdeclrIyrAyLQfKwzBcLD7OhixsDfswHnrdCeABR1aK0YA 0c0lffqIbqDUmIKatIgbnm5sS4zfg2c1XZMpTy6Va+3q+8tf+udvfxGxpowG6Y0s i98vV61xjA57+WPyUWvuMBlJZ0f8k8Yq8gSuWHWSIs1rchHUsDBz5pytlOOpKnwT 2Cz8UsWoiMy+j/AfLTR8Bwhx1mCQh9YjVpqAf0I/gK5WBmxbdkeOPlmz71xYQLpN 8tv9urHwN5AFrnX11pu463Mc08RO3VitfHG0LFpbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUQ9iv5btdlfGPs7ilg7n0wZwpwiowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzEwMGNhMTY2LTczMTctNGQ3OC04MTAyLWVhMWRmZTI2ZDBlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRowDQYJKoZIhvcNAQELBQADggEBAEGM4xuFWkVDauLsvy0mORud zlvnR549QiPB74BPDX4i6MSi9J8ieAreCQ4kkchDvfyfU/JnWqfmgEPusknpVMpp NFOrGxcu1HsomZ8YJbrhY+YzL78GZ+Ai5NsB9wX9Ap4A9ilDg2IwKl66TcMK+hso Sm/azngjzIIcrKLq7drs0rNOT8ZJBKTgUIJUOUkBNbcPZwgO5XvEb/Zqcrzyj2q9 ZWUYSWWpVcDNqAWUlY+HbEFLiax2hYpSr9Ti58q9Vh8ZAHvXYOcHFFUFNYLI1FbM e81XCC1q9gu0kn4ZAeNska0RuZVmYebbnW7fp1SVNKdJFFnnwS4g+GgedDWInNs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:15 2025 by rpki-client