$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa File: 357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa (raw, json) Hash identifier: TkGLBBGqOZDM2karrAol2sQOGu0vryiPevP4eFJ1rPI= Subject key identifier: 90:54:D6:7C:D9:67:78:5A:BC:81:E5:5E:8D:B7:D8:FB:F3:44:F4:97 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 509CC6CC4EF6A21F809368A3303432E9F002BCE6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa Signing time: Fri 31 Oct 2025 01:50:05 +0000 ROA not before: Fri 31 Oct 2025 01:50:05 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9c:c6:cc:4e:f6:a2:1f:80:93:68:a3:30:34:32:e9:f0:02:bc:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:05 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=f2a66b7b277fa04a3028bace647b1f99ad4e5434286eee72bdf771093bacf98d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:43:81:f8:90:03:35:ab:63:7c:79:0e:0a:91: 72:d0:5f:12:74:71:ce:a1:ce:a7:b6:01:37:9b:ec: 32:8b:84:1d:bc:ea:a6:c1:e4:cd:5a:79:5a:6a:c8: 75:94:ba:dd:7d:ad:cd:d2:2d:f0:00:7e:ec:56:fd: e2:3b:d6:e5:e3:12:7e:72:c9:d7:6e:0f:68:de:69: 84:5e:71:ba:61:a9:91:1c:79:b6:f4:3a:75:48:e9: 76:c5:5a:64:df:18:f4:d6:46:a9:1e:5f:85:7d:fd: 56:fc:9d:f3:83:39:55:63:0b:55:ea:cd:a0:4c:8f: 84:14:7e:4f:09:44:9b:2c:1c:c0:57:ef:fd:59:37: fd:20:4e:b4:e1:d3:2d:03:f1:da:bf:36:25:f0:da: bf:d0:c3:c7:1f:10:f8:19:01:19:e0:27:a8:bb:1a: 3c:0e:0d:53:46:11:87:2b:b8:a1:80:c1:33:2d:e1: 7d:31:12:54:1c:2f:03:b7:de:66:49:48:47:bc:73: 1c:81:88:f4:40:ae:d0:75:73:f1:dd:a9:5a:2f:e7: 46:ba:c9:48:c6:09:89:21:2f:1a:b9:03:7a:d8:ad: 50:dd:eb:b8:54:7c:58:aa:d4:5f:99:c6:2d:68:99: 41:3e:dd:29:71:35:02:45:46:3e:b9:00:c3:65:39: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:54:D6:7C:D9:67:78:5A:BC:81:E5:5E:8D:B7:D8:FB:F3:44:F4:97 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/357a15e7-0dd8-4ac4-88b4-0996a1f7e7bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6110::/48 Signature Algorithm: sha256WithRSAEncryption a6:bd:88:bb:02:69:b2:a6:50:0f:96:d4:f0:62:c2:e2:9b:bd: 70:5e:2f:89:91:c3:28:a6:a4:4c:c7:79:27:24:54:a1:78:79: 53:4a:30:d3:25:db:6a:c9:02:b8:aa:e3:dd:18:df:18:56:37: a2:22:4a:c8:ab:50:3f:38:94:00:f7:dc:0c:60:0c:98:05:07: 23:00:fc:d8:de:09:4c:6b:b7:27:45:63:50:45:0b:1e:98:5c: b8:04:20:3d:19:97:a7:85:47:06:5b:48:f6:04:37:bc:01:bc: f2:48:e7:1b:bd:72:0d:01:b8:a5:bd:98:9e:59:e7:bd:1d:c5: 88:3b:cb:3c:d8:ab:19:35:6e:18:71:62:c1:f1:82:96:b1:f0: 47:f1:fb:27:c1:f0:ab:c8:c5:6b:3d:90:6f:01:21:07:27:9d: d7:3b:6b:76:f2:3f:73:2a:28:34:71:39:49:0a:21:7f:65:4b: 58:1e:f9:76:e0:91:83:c5:78:8f:8c:05:34:b9:11:67:6d:f1: ef:d4:86:86:b1:2d:5b:d4:91:ce:7e:f1:0d:51:78:61:80:e3: 45:af:d6:ac:54:7d:39:0e:46:04:42:54:5a:f2:01:72:86:a2: 78:51:b2:da:14:40:7c:bd:80:cb:5a:f3:95:73:8c:fc:27:9d: 26:6a:02:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUJzGzE72oh+Ak2ijMDQy6fACvOYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDA1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMmE2NmI3YjI3N2ZhMDRhMzAyOGJhY2U2NDdiMWY5OWFk NGU1NDM0Mjg2ZWVlNzJiZGY3NzEwOTNiYWNmOThkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWQ4H4kAM1q2N8eQ4KkXLQXxJ0cc6hzqe2ATeb7DKLhB28 6qbB5M1aeVpqyHWUut19rc3SLfAAfuxW/eI71uXjEn5yydduD2jeaYRecbphqZEc ebb0OnVI6XbFWmTfGPTWRqkeX4V9/Vb8nfODOVVjC1XqzaBMj4QUfk8JRJssHMBX 7/1ZN/0gTrTh0y0D8dq/NiXw2r/Qw8cfEPgZARngJ6i7GjwODVNGEYcruKGAwTMt 4X0xElQcLwO33mZJSEe8cxyBiPRArtB1c/HdqVov50a6yUjGCYkhLxq5A3rYrVDd 67hUfFiq1F+Zxi1omUE+3SlxNQJFRj65AMNlORqjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkFTWfNlneFq8geVejbfY+/NE9JcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM1N2ExNWU3LTBkZDgtNGFjNC04OGI0LTA5OTZhMWY3ZTdiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRAwDQYJKoZIhvcNAQELBQADggEBAKa9iLsCabKmUA+W1PBiwuKb vXBeL4mRwyimpEzHeSckVKF4eVNKMNMl22rJAriq490Y3xhWN6IiSsirUD84lAD3 3AxgDJgFByMA/NjeCUxrtydFY1BFCx6YXLgEID0Zl6eFRwZbSPYEN7wBvPJI5xu9 cg0BuKW9mJ5Z570dxYg7yzzYqxk1bhhxYsHxgpax8Efx+yfB8KvIxWs9kG8BIQcn ndc7a3byP3MqKDRxOUkKIX9lS1ge+XbgkYPFeI+MBTS5EWdt8e/UhoaxLVvUkc5+ 8Q1ReGGA40Wv1qxUfTkORgRCVFryAXKGonhRstoUQHy9gMta85VzjPwnnSZqAoE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:34:48 2025 by rpki-client