$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/28dabfe2-3770-4fc6-a7a9-5b0a8edaf11b.roa File: 28dabfe2-3770-4fc6-a7a9-5b0a8edaf11b.roa (raw, json) Hash identifier: NOXqTGkvmdPK79wwn/Lz30FsnLTZD/B6JpMbZ4NpzMU= Subject key identifier: C5:43:3D:AF:35:32:5C:F0:99:5E:99:BE:19:3E:E2:53:9C:00:BE:40 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3C55658AF3C7DEBA70C18C90CB35429AD1FC8F02 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/28dabfe2-3770-4fc6-a7a9-5b0a8edaf11b.roa Signing time: Tue 28 Oct 2025 00:10:08 +0000 ROA not before: Tue 28 Oct 2025 00:10:08 +0000 ROA not after: Tue 02 Dec 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f2:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:55:65:8a:f3:c7:de:ba:70:c1:8c:90:cb:35:42:9a:d1:fc:8f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 28 00:10:08 2025 GMT Not After : Dec 2 23:59:59 2025 GMT Subject: serialNumber=9ced65d22292d5687fb25c13351bac2c1d8987f4d42ca92f89c7d33687ce4b81, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:0d:9b:c5:58:c9:15:73:51:a2:8a:dd:a3: 90:2c:f0:80:0b:af:b7:3d:15:ca:3e:7e:84:46:a2: c8:9a:18:3f:92:da:70:8d:a0:f9:9a:6a:f2:a4:c7: 72:c3:80:d7:bc:30:b0:0f:2c:05:ea:bb:11:e7:df: 04:10:d3:4f:87:4d:ed:dd:1e:12:08:df:72:6f:c0: e8:08:d5:7c:74:3c:a0:fb:27:fc:f7:5a:ce:ce:58: 33:84:8c:9c:f8:cd:9c:53:41:72:fe:be:2e:07:75: e2:a3:a9:35:ea:89:c0:6c:59:a2:84:56:e0:8b:85: 60:e5:85:86:9c:97:1f:67:6e:79:13:3a:33:ff:8b: 48:ee:47:69:f7:ed:d0:44:42:7f:52:08:30:cb:b0: aa:3d:e7:46:42:18:6d:41:62:76:ac:43:0f:b4:29: fe:07:2d:67:37:3e:f2:4e:53:f0:24:c7:c4:1c:5d: a3:c2:28:86:f8:33:f9:f5:cf:3f:c0:e1:10:d8:df: 76:98:05:e1:0f:d8:be:3f:68:9f:1f:db:e7:44:ff: 61:08:89:86:e6:f8:f0:cf:2c:3f:7b:db:56:08:49: 4a:23:61:1b:42:2c:23:53:2b:e3:b2:c5:8b:d6:4d: e8:71:b0:88:d2:4b:1a:96:7e:21:e9:c4:f4:a1:eb: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:43:3D:AF:35:32:5C:F0:99:5E:99:BE:19:3E:E2:53:9C:00:BE:40 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/28dabfe2-3770-4fc6-a7a9-5b0a8edaf11b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7100::/40 Signature Algorithm: sha256WithRSAEncryption 60:c9:a4:77:e9:67:75:68:76:69:6a:55:c0:7d:29:e1:81:21: ae:d6:a0:fd:9e:c7:db:c3:e2:ae:5d:78:0c:e9:ce:9a:2a:6e: c8:77:26:b1:f6:a5:37:87:07:35:ec:57:8e:f2:f8:fa:66:4e: 03:b3:58:2a:18:fc:fc:9b:81:56:2e:62:01:4f:90:e6:f2:ba: e4:ce:df:93:eb:8b:2b:4c:1f:3e:84:7d:ee:96:dd:73:03:4d: 93:6a:ab:ad:45:70:e2:94:65:cb:0e:a5:fe:ca:d4:49:5f:c3: c5:8d:c0:26:05:2c:3a:5b:5a:45:13:94:a9:38:0e:5b:14:5a: ab:4e:82:cf:7d:3a:da:62:03:38:6a:c1:d5:56:32:39:6a:7a: f8:0f:a3:cd:d3:98:5b:01:48:57:1c:7c:9e:c4:f1:74:c6:ff: e0:e8:11:c9:54:d0:83:db:e5:e4:be:82:c9:d3:ed:bf:d3:ba: d0:09:e1:6d:dc:ab:4f:40:0a:d2:ae:aa:ae:b7:5a:18:62:52: d2:14:3a:09:00:ce:03:37:93:28:f4:d3:e8:4e:36:d0:2f:8f: 49:64:8e:c2:72:fa:c0:07:3c:43:0d:0e:ae:e7:31:a2:88:66: 37:f6:ed:f5:a1:fc:99:14:08:40:7d:df:2b:55:5c:9b:18:34: fc:f9:0f:e2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUPFVlivPH3rpwwYyQyzVCmtH8jwIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDI4MDAxMDA4WhcNMjUxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5Y2VkNjVkMjIyOTJkNTY4N2ZiMjVjMTMzNTFiYWMyYzFk ODk4N2Y0ZDQyY2E5MmY4OWM3ZDMzNjg3Y2U0YjgxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5CQ2bxVjJFXNRoordo5As8IALr7c9Fco+foRGosiaGD+S 2nCNoPmaavKkx3LDgNe8MLAPLAXquxHn3wQQ00+HTe3dHhII33JvwOgI1Xx0PKD7 J/z3Ws7OWDOEjJz4zZxTQXL+vi4HdeKjqTXqicBsWaKEVuCLhWDlhYaclx9nbnkT OjP/i0juR2n37dBEQn9SCDDLsKo950ZCGG1BYnasQw+0Kf4HLWc3PvJOU/Akx8Qc XaPCKIb4M/n1zz/A4RDY33aYBeEP2L4/aJ8f2+dE/2EIiYbm+PDPLD9721YISUoj YRtCLCNTK+OyxYvWTehxsIjSSxqWfiHpxPSh6yBxAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUxUM9rzUyXPCZXpm+GT7iU5wAvkAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzI4ZGFiZmUyLTM3NzAtNGZjNi1hN2E5LTViMGE4ZWRhZjExYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDycTANBgkqhkiG9w0BAQsFAAOCAQEAYMmkd+lndWh2aWpVwH0p4YEh rtag/Z7H28Pirl14DOnOmipuyHcmsfalN4cHNexXjvL4+mZOA7NYKhj8/JuBVi5i AU+Q5vK65M7fk+uLK0wfPoR97pbdcwNNk2qrrUVw4pRlyw6l/srUSV/DxY3AJgUs OltaRROUqTgOWxRaq06Cz3062mIDOGrB1VYyOWp6+A+jzdOYWwFIVxx8nsTxdMb/ 4OgRyVTQg9vl5L6CydPtv9O60AnhbdyrT0AK0q6qrrdaGGJS0hQ6CQDOAzeTKPTT 6E420C+PSWSOwnL6wAc8Qw0OrucxoohmN/bt9aH8mRQIQH3fK1Vcmxg0/PkP4g== -----END CERTIFICATE-----Generated at Wed Nov 5 03:05:34 2025 by rpki-client