$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa File: 25c2cfc0-0999-4c50-a813-1379410017e8.roa (raw, json) Hash identifier: 3VIwMwEYZMtyqWzCO6Ov+8afHyLzrhj0JmcoSzzEL/U= Subject key identifier: DA:93:4C:20:00:ED:53:3B:17:49:E2:9A:7F:7A:70:36:DF:90:91:61 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 22C5977FB6122077E7A31542F5AC2A432530891D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa Signing time: Tue 21 Oct 2025 13:00:26 +0000 ROA not before: Tue 21 Oct 2025 13:00:26 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c5:97:7f:b6:12:20:77:e7:a3:15:42:f5:ac:2a:43:25:30:89:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 13:00:26 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=5fc330198d8afe819fde9a27bfd386a4210f700d227d2d7e09af0b11f2f112d6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:36:94:c4:43:8a:fc:a0:22:26:f1:9c:57: aa:5f:18:30:dd:bb:a4:91:b6:3e:9e:e3:34:f0:0d: 09:eb:9c:1b:0e:38:4d:06:30:63:e7:90:ec:8f:b9: 6b:d1:5a:a2:2d:13:6c:d6:7d:26:78:89:5a:1e:47: 0f:25:89:7a:62:72:98:d1:12:af:f1:47:63:18:7a: b1:a2:68:e8:55:a0:8d:9c:8f:cd:59:a6:cb:d5:ba: 2f:0a:57:03:74:11:84:c7:46:ea:60:f2:71:16:4c: 23:2d:79:a9:c1:18:56:f0:af:6c:20:c3:42:5c:06: a6:bd:0e:94:d1:c0:be:89:0f:51:e8:bb:82:80:e4: 4d:72:55:71:89:99:ef:c9:84:47:1c:9b:68:a1:57: 01:ed:d6:d0:44:32:d0:5a:20:91:a2:67:67:3a:96: a1:56:dc:4c:7d:b4:d3:be:e3:29:e4:f2:de:b7:2b: c2:db:a1:be:f0:9f:35:93:aa:d4:ef:98:36:e7:33: be:63:11:61:af:ae:4e:e3:ea:1e:4a:83:77:f5:1e: c2:26:43:f4:57:34:b4:d5:c7:c5:83:37:38:f4:9a: c3:f6:3a:d9:ae:81:67:7c:ed:26:34:23:3f:82:31: 94:d3:ab:ec:07:2f:b2:04:2a:12:b9:7a:d4:f0:a9: 1a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:93:4C:20:00:ED:53:3B:17:49:E2:9A:7F:7A:70:36:DF:90:91:61 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/25c2cfc0-0999-4c50-a813-1379410017e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e800::/40 Signature Algorithm: sha256WithRSAEncryption 62:2f:fc:72:4c:83:c7:cb:ad:cb:e7:54:cd:b6:72:e0:9f:8c: 05:03:c0:04:96:ea:fb:d5:49:38:8b:03:16:55:bf:7d:37:d1: 7f:3e:06:36:df:aa:59:f4:4a:bb:16:d0:21:9e:3f:6e:f8:a0: 69:4d:02:77:ba:a7:10:e4:51:70:4e:e1:18:7a:a2:dd:f9:40: 57:6a:83:eb:21:83:50:d4:91:ca:9e:23:0a:9c:17:98:b7:19: bd:5c:9e:15:92:94:79:79:69:ac:ba:75:5b:1f:d9:6d:8f:be: dd:e8:06:b3:bf:17:a9:85:b0:33:e2:5d:79:e0:aa:95:f3:f6: ff:a7:f2:02:02:18:53:61:b5:b5:6d:4b:5e:92:f1:06:72:2b: db:07:6f:ba:9f:55:2f:e3:16:00:1d:d4:d4:26:9f:5f:79:93: 39:bc:5e:14:9e:09:c2:16:ce:35:97:19:61:55:51:b4:66:b1: dd:ca:79:33:3c:bf:08:d4:c8:fa:78:a8:bb:30:85:14:c4:c2: ed:81:43:a4:c8:6e:d0:03:cc:ec:7d:fa:00:2b:67:b9:20:67: 70:40:57:af:f9:9a:e8:4b:ca:5a:27:4c:8b:94:64:91:96:e9: bd:73:5c:e6:1a:a1:6c:c4:32:b0:cc:23:8c:df:0a:0f:b9:a8: 03:99:2d:00 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUIsWXf7YSIHfnoxVC9awqQyUwiR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTMwMDI2WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmMzMzAxOThkOGFmZTgxOWZkZTlhMjdiZmQzODZhNDIx MGY3MDBkMjI3ZDJkN2UwOWFmMGIxMWYyZjExMmQ2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQTDaUxEOK/KAiJvGcV6pfGDDdu6SRtj6e4zTwDQnrnBsO OE0GMGPnkOyPuWvRWqItE2zWfSZ4iVoeRw8liXpicpjREq/xR2MYerGiaOhVoI2c j81ZpsvVui8KVwN0EYTHRupg8nEWTCMteanBGFbwr2wgw0JcBqa9DpTRwL6JD1Ho u4KA5E1yVXGJme/JhEccm2ihVwHt1tBEMtBaIJGiZ2c6lqFW3Ex9tNO+4ynk8t63 K8Lbob7wnzWTqtTvmDbnM75jEWGvrk7j6h5Kg3f1HsImQ/RXNLTVx8WDNzj0msP2 OtmugWd87SY0Iz+CMZTTq+wHL7IEKhK5etTwqRrnAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU2pNMIADtUzsXSeKaf3pwNt+QkWEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzI1YzJjZmMwLTA5OTktNGM1MC1hODEzLTEzNzk0MTAwMTdlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76DANBgkqhkiG9w0BAQsFAAOCAQEAYi/8ckyDx8uty+dUzbZy4J+M BQPABJbq+9VJOIsDFlW/fTfRfz4GNt+qWfRKuxbQIZ4/bvigaU0Cd7qnEORRcE7h GHqi3flAV2qD6yGDUNSRyp4jCpwXmLcZvVyeFZKUeXlprLp1Wx/ZbY++3egGs78X qYWwM+JdeeCqlfP2/6fyAgIYU2G1tW1LXpLxBnIr2wdvup9VL+MWAB3U1CafX3mT ObxeFJ4JwhbONZcZYVVRtGax3cp5Mzy/CNTI+niouzCFFMTC7YFDpMhu0APM7H36 ACtnuSBncEBXr/ma6EvKWidMi5RkkZbpvXNc5hqhbMQysMwjjN8KD7moA5ktAA== -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:42 2025 by rpki-client