$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa File: 1713f755-e887-41fa-83fe-8bab1dc14311.roa (raw, json) Hash identifier: CL3s+5R/eTgp3dHqW6MyMd0yvboyrA+IqZw6nzzjtxk= Subject key identifier: FD:22:C0:E7:FC:A7:2C:F0:DA:D2:E2:DE:39:BE:2D:6A:00:58:85:1C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 318A5CB04A377BE7B6DEFFD23886AA10C1244B1F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa Signing time: Tue 21 Oct 2025 13:10:09 +0000 ROA not before: Tue 21 Oct 2025 13:10:09 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ea00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8a:5c:b0:4a:37:7b:e7:b6:de:ff:d2:38:86:aa:10:c1:24:4b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 13:10:09 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=c51d3d628dcf761f9ee0fb0755501082607c890b4d604ca6b2ec0863693bbdcc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a6:a0:71:fe:e7:25:ff:3b:f2:33:97:57:4c: 74:68:9b:4b:15:83:7c:d3:d8:b4:e9:0c:7d:3a:41: 8a:91:cd:c2:ad:69:3c:a1:29:b9:e9:3b:8f:e6:bb: 9c:2b:ff:ac:70:1a:8d:78:4e:38:4f:31:e6:87:80: 0f:56:89:d3:86:24:8d:67:01:7f:ea:13:24:0d:ae: ed:a4:b1:b9:4b:3e:87:68:eb:96:7e:8c:73:a8:af: 40:fd:41:f1:b3:68:cc:84:49:94:38:fb:6e:eb:3e: 73:35:b4:ee:43:20:06:e2:b6:03:17:42:b3:d7:19: a4:99:78:e2:36:55:5f:75:86:bf:b4:1a:66:bd:22: 1a:46:4c:d5:3f:1f:35:6d:a6:41:bb:86:8f:96:c7: 13:36:f9:fd:06:91:21:61:7d:42:56:e7:d6:ba:dd: db:f0:e2:7d:87:f2:d6:76:bf:24:9e:29:ec:ec:e6: 3c:68:21:72:9d:d8:7d:0e:7b:78:60:43:d2:f6:4e: b8:f0:b6:d1:ce:7c:46:87:51:eb:64:e1:ec:33:4c: b6:da:62:c5:64:a1:96:46:ee:69:02:4e:be:27:91: f2:90:e9:72:9d:95:d5:7a:3e:b2:59:ab:df:c7:58: 82:bc:2d:59:b6:b1:e0:e5:b4:a7:45:eb:30:77:5a: 76:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:22:C0:E7:FC:A7:2C:F0:DA:D2:E2:DE:39:BE:2D:6A:00:58:85:1C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1713f755-e887-41fa-83fe-8bab1dc14311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/42 Signature Algorithm: sha256WithRSAEncryption 2b:6b:36:85:17:10:ff:18:d6:e9:6d:c8:7f:79:57:fc:42:30: 80:ab:66:a6:84:3a:a1:86:ce:41:6e:eb:f6:c8:ed:3a:17:c6: 1a:d8:0b:6a:b5:45:74:ab:e4:c9:74:e2:24:04:fb:68:55:9a: 72:73:ae:57:25:21:6b:c7:4d:be:f3:5d:c5:48:b0:e5:24:aa: 03:e0:76:ff:a5:d4:81:3f:d9:9a:c7:a0:21:da:37:ce:34:30: 43:92:4c:08:d7:70:14:04:be:7f:3b:35:8b:b7:1a:52:a1:9a: 41:40:73:06:57:16:e4:f4:08:1b:e8:9a:15:3e:fa:c1:4a:c0: cf:ea:ce:b8:3c:1a:57:b6:7f:d1:b1:2e:4c:38:93:8c:d8:c4: 14:0f:d0:1e:f1:f8:70:f6:d8:c4:74:23:ee:17:56:d2:08:41: 9d:ec:48:45:45:c0:b2:d2:01:d3:18:dd:71:b3:ca:cd:ac:af: d2:73:94:dc:ca:97:44:9b:e5:d3:15:5e:ba:d7:ec:07:e3:98: fa:c6:d8:13:0b:2d:b4:e6:32:1e:ff:44:fd:95:5d:16:34:e7: 40:89:48:a9:7e:87:b2:1f:42:46:c8:f6:c0:80:ba:60:97:f5: 40:e5:af:ae:8d:ac:d7:bb:b8:8c:67:00:e7:24:90:31:f9:b9: df:b5:c0:4b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMYpcsEo3e+e23v/SOIaqEMEkSx8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTMxMDA5WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTFkM2Q2MjhkY2Y3NjFmOWVlMGZiMDc1NTUwMTA4MjYw N2M4OTBiNGQ2MDRjYTZiMmVjMDg2MzY5M2JiZGNjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZpqBx/ucl/zvyM5dXTHRom0sVg3zT2LTpDH06QYqRzcKt aTyhKbnpO4/mu5wr/6xwGo14TjhPMeaHgA9WidOGJI1nAX/qEyQNru2ksblLPodo 65Z+jHOor0D9QfGzaMyESZQ4+27rPnM1tO5DIAbitgMXQrPXGaSZeOI2VV91hr+0 Gma9IhpGTNU/HzVtpkG7ho+WxxM2+f0GkSFhfUJW59a63dvw4n2H8tZ2vySeKezs 5jxoIXKd2H0Oe3hgQ9L2TrjwttHOfEaHUetk4ewzTLbaYsVkoZZG7mkCTr4nkfKQ 6XKdldV6PrJZq9/HWIK8LVm2seDltKdF6zB3WnavAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/SLA5/ynLPDa0uLeOb4tagBYhRwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE3MTNmNzU1LWU4ODctNDFmYS04M2ZlLThiYWIxZGMxNDMxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD76gAwDQYJKoZIhvcNAQELBQADggEBACtrNoUXEP8Y1ultyH95V/xC MICrZqaEOqGGzkFu6/bI7ToXxhrYC2q1RXSr5Ml04iQE+2hVmnJzrlclIWvHTb7z XcVIsOUkqgPgdv+l1IE/2ZrHoCHaN840MEOSTAjXcBQEvn87NYu3GlKhmkFAcwZX FuT0CBvomhU++sFKwM/qzrg8Gle2f9GxLkw4k4zYxBQP0B7x+HD22MR0I+4XVtII QZ3sSEVFwLLSAdMY3XGzys2sr9JzlNzKl0Sb5dMVXrrX7AfjmPrG2BMLLbTmMh7/ RP2VXRY050CJSKl+h7IfQkbI9sCAumCX9UDlr66NrNe7uIxnAOckkDH5ud+1wEs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:09 2025 by rpki-client