$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2537a9dc-38fe-4282-a7fd-c3f10cbb6270.roa File: 2537a9dc-38fe-4282-a7fd-c3f10cbb6270.roa (raw, json) Hash identifier: dlsjUYuzzepIgVz2rLBHZ38bgvs2sIfKvbzWKhNB1gI= Subject key identifier: BF:56:F2:C7:4F:48:0C:1B:24:D9:AC:E0:5F:1B:5D:AB:D3:56:F9:FF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 231D3EFDEC304784684C7C417CE7EA6041D0B2BB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2537a9dc-38fe-4282-a7fd-c3f10cbb6270.roa Signing time: Wed 22 Oct 2025 00:40:04 +0000 ROA not before: Wed 22 Oct 2025 00:40:04 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f3:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1d:3e:fd:ec:30:47:84:68:4c:7c:41:7c:e7:ea:60:41:d0:b2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:40:04 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=86f72bd4f34b2e5f9845104a4c54d97ebe91defb08bbe85ee86c3c13e04f7586, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:b5:65:94:38:36:f1:c7:01:e5:34:eb:f5: c1:bc:0a:59:bf:10:c7:79:96:11:21:1a:66:b1:95: 17:3d:dd:ff:0d:84:e3:c4:c0:fe:9c:0f:d6:1f:8e: 4d:71:b9:59:e2:02:ec:d5:c5:d7:22:8b:e8:af:2a: 9e:a6:b6:a8:c6:41:cc:27:c9:11:20:57:4e:69:68: c6:e7:28:c5:61:51:ed:22:87:f9:31:ce:73:31:af: ba:67:4a:46:af:04:a7:46:11:27:eb:39:ed:9e:29: 16:32:93:2f:28:34:db:00:cd:39:bf:a8:d1:45:35: e5:5e:1e:d4:23:9f:55:59:2d:86:85:7a:07:d2:f4: 9a:f3:1b:c4:9d:77:8b:0b:d6:9f:91:84:87:5a:00: 4f:69:93:20:fe:0a:87:07:8e:b1:56:bb:20:ab:4e: fc:26:92:a9:fe:07:04:64:be:12:76:8c:09:15:56: dc:ed:b9:54:62:ff:46:d3:82:e1:6e:90:58:e3:53: 8a:68:3f:2a:2d:b3:13:3e:fa:be:5b:b1:ee:f2:1e: ea:b5:1a:77:56:e3:85:d8:7f:36:4a:3e:c1:39:89: 73:39:21:ab:43:88:e4:ae:9e:68:cc:de:10:18:c9: ed:bb:4d:ae:74:f6:8f:45:8e:db:88:6c:10:d2:a5: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:56:F2:C7:4F:48:0C:1B:24:D9:AC:E0:5F:1B:5D:AB:D3:56:F9:FF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2537a9dc-38fe-4282-a7fd-c3f10cbb6270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f3:f000::/44 Signature Algorithm: sha256WithRSAEncryption 94:62:f8:ec:9a:12:49:8e:4f:f6:7a:d1:e6:52:2c:5f:21:5c: 46:48:d8:f9:e7:70:98:a5:54:9d:8b:ba:c3:d9:e7:e7:09:0e: 70:7c:a9:4b:d3:75:79:a3:b1:12:09:53:de:69:f6:95:4f:06: e2:ed:f9:71:d5:de:e4:de:8f:d8:67:24:1b:2c:eb:a1:1b:be: c0:69:2c:03:75:05:af:de:c4:41:ac:51:b9:bc:7d:bd:1f:a3: 3a:ca:01:49:ec:d1:17:63:4b:34:5b:f8:8d:4e:a9:9e:cd:a4: b0:31:9a:70:d7:c4:9c:28:8e:3d:19:0d:7b:56:5e:40:e8:2a: 12:ac:ac:62:3f:01:db:b2:84:5d:5d:b6:84:d8:ff:85:7c:72: 56:c7:db:2a:19:a4:4f:73:45:23:68:30:d5:97:5b:ab:62:75: 54:4a:8a:f1:d5:e3:fe:3d:1d:8b:63:c2:be:30:65:fc:0f:8d: f5:5a:a0:e8:b3:78:c2:ee:6f:e4:9d:33:3b:b4:f8:37:9d:7b: e4:de:7f:4c:b0:53:46:fa:e9:b9:2e:77:f5:29:17:45:09:fc: 89:bb:a8:e4:ba:91:9a:78:ac:5a:bd:fb:34:e8:7a:15:64:7c: ee:20:ac:d1:3b:4d:60:68:c8:da:bf:8d:35:83:15:36:73:67: d2:9f:5e:37 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIx0+/ewwR4RoTHxBfOfqYEHQsrswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA0MDA0WhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmY3MmJkNGYzNGIyZTVmOTg0NTEwNGE0YzU0ZDk3ZWJl OTFkZWZiMDhiYmU4NWVlODZjM2MxM2UwNGY3NTg2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrp7VllDg28ccB5TTr9cG8Clm/EMd5lhEhGmaxlRc93f8N hOPEwP6cD9Yfjk1xuVniAuzVxdcii+ivKp6mtqjGQcwnyREgV05paMbnKMVhUe0i h/kxznMxr7pnSkavBKdGESfrOe2eKRYyky8oNNsAzTm/qNFFNeVeHtQjn1VZLYaF egfS9JrzG8Sdd4sL1p+RhIdaAE9pkyD+CocHjrFWuyCrTvwmkqn+BwRkvhJ2jAkV VtztuVRi/0bTguFukFjjU4poPyotsxM++r5bse7yHuq1GndW44XYfzZKPsE5iXM5 IatDiOSunmjM3hAYye27Ta509o9FjtuIbBDSpS/TAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUv1byx09IDBsk2azgXxtdq9NW+f8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzI1MzdhOWRjLTM4ZmUtNDI4Mi1hN2ZkLWMzZjEwY2JiNjI3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDz8AAwDQYJKoZIhvcNAQELBQADggEBAJRi+OyaEkmOT/Z60eZSLF8h XEZI2PnncJilVJ2LusPZ5+cJDnB8qUvTdXmjsRIJU95p9pVPBuLt+XHV3uTej9hn JBss66EbvsBpLAN1Ba/exEGsUbm8fb0fozrKAUns0RdjSzRb+I1OqZ7NpLAxmnDX xJwojj0ZDXtWXkDoKhKsrGI/AduyhF1dtoTY/4V8clbH2yoZpE9zRSNoMNWXW6ti dVRKivHV4/49HYtjwr4wZfwPjfVaoOizeMLub+SdMzu0+Dede+Tef0ywU0b66bku d/UpF0UJ/Im7qOS6kZp4rFq9+zToehVkfO4grNE7TWBoyNq/jTWDFTZzZ9KfXjc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:26 2025 by rpki-client