$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/373de46b-0532-424d-b3f0-749aec3cab9c.roa File: 373de46b-0532-424d-b3f0-749aec3cab9c.roa (raw, json) Hash identifier: Mss2UBIkq8sXjTjp1rkabA1j5zrkqeMlHwJTQwYZdeI= Subject key identifier: 21:84:43:56:63:C5:B8:02:9A:0D:D3:EE:CF:A7:EB:9E:D1:CD:B5:F0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 54DC23E246E9CD3DE8420B7A766FD9671D640E7A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/373de46b-0532-424d-b3f0-749aec3cab9c.roa Signing time: Fri 31 Oct 2025 01:50:44 +0000 ROA not before: Fri 31 Oct 2025 01:50:44 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6116::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:dc:23:e2:46:e9:cd:3d:e8:42:0b:7a:76:6f:d9:67:1d:64:0e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:44 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=cc08bd925d5e4234281e69bbdf97cac23098b22dcd51efdbfc26257daa995d28, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:aa:8b:96:73:a8:86:0c:c5:d7:a0:6d:2d:d2: ee:b8:3b:21:81:3b:cd:40:28:8b:0e:55:20:56:74: 85:04:47:5e:58:ec:87:73:9f:aa:14:e5:be:58:86: ab:f0:07:23:00:26:3b:20:4a:97:c6:3c:69:62:9f: dc:17:8b:3b:6b:ea:8d:a8:8e:92:17:23:a4:ae:8f: c2:23:c1:98:c4:d3:12:df:51:45:b1:3a:3d:f8:e2: 5a:1a:77:9b:71:af:ec:68:5e:66:95:e8:8f:38:6a: 9b:c1:41:fe:61:1b:95:d9:52:a5:01:c6:b3:22:2c: 72:43:82:bf:d9:b2:5c:3d:a6:8b:77:31:0d:c4:61: ce:fa:12:0f:03:be:58:de:81:e4:28:ac:e0:83:9e: 22:ab:0d:e0:72:4d:f6:12:3a:62:14:8c:4a:97:37: 13:3b:35:01:f3:46:83:b1:92:62:e2:22:fe:40:4f: cf:c5:ce:65:45:0e:ea:16:26:bd:b5:26:cc:08:be: 4f:1a:4c:b0:1a:d1:88:20:bb:c9:38:ed:cd:90:f2: a0:73:ae:fa:71:dd:37:7e:44:e7:ee:7d:0d:d3:b5: 0c:9c:2d:c3:28:a4:78:32:82:d9:f4:8a:8e:23:b5: 6b:d3:1a:6a:b8:5c:c8:55:ed:03:4b:b7:08:f9:20: 28:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:84:43:56:63:C5:B8:02:9A:0D:D3:EE:CF:A7:EB:9E:D1:CD:B5:F0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/373de46b-0532-424d-b3f0-749aec3cab9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6116::/48 Signature Algorithm: sha256WithRSAEncryption 5a:ee:95:34:29:bc:f4:1c:78:9f:f6:88:4a:05:de:02:3f:ad: 24:95:d2:a4:a1:a9:be:40:c5:b5:11:ab:59:f4:e8:04:7c:fe: 24:1d:8d:7d:52:d3:d4:d4:35:e8:58:68:4d:03:e3:b5:6f:c9: 83:cc:12:ee:20:c1:30:af:19:9b:75:f4:cf:08:e4:db:d6:9a: 8a:2b:55:c1:f3:63:56:25:9a:c6:89:dc:a7:2f:01:e8:08:ad: 35:95:2b:15:90:b8:9d:ed:76:d7:a3:5c:c2:92:13:a6:2f:aa: cb:a5:64:e5:22:71:02:cd:ee:33:61:3c:79:37:61:61:c5:e1: e3:fb:a3:ec:54:ac:6d:3a:44:f4:94:57:28:5d:39:74:81:59: f5:38:34:9b:29:66:86:a8:c6:26:ff:ab:fb:90:ef:98:30:de: f4:27:03:9c:d3:bd:10:79:96:c0:13:b8:20:5e:4f:c2:25:42: fa:15:18:f6:f7:8a:c2:1d:82:ea:16:89:8f:dd:d2:d4:b8:89: 5c:58:80:d7:17:b0:d1:66:06:5d:51:c0:11:e0:f3:f9:63:83: 87:1b:dc:db:f7:a1:33:e8:af:ef:b4:87:38:90:76:1f:d4:44: b3:38:d9:f7:31:c3:28:9d:06:44:52:2d:ae:cf:7f:5a:6d:1a: 9d:7b:b9:0a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVNwj4kbpzT3oQgt6dm/ZZx1kDnowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDQ0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzA4YmQ5MjVkNWU0MjM0MjgxZTY5YmJkZjk3Y2FjMjMw OThiMjJkY2Q1MWVmZGJmYzI2MjU3ZGFhOTk1ZDI4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiqouWc6iGDMXXoG0t0u64OyGBO81AKIsOVSBWdIUER15Y 7Idzn6oU5b5YhqvwByMAJjsgSpfGPGlin9wXiztr6o2ojpIXI6Suj8IjwZjE0xLf UUWxOj344load5txr+xoXmaV6I84apvBQf5hG5XZUqUBxrMiLHJDgr/Zslw9pot3 MQ3EYc76Eg8DvljegeQorOCDniKrDeByTfYSOmIUjEqXNxM7NQHzRoOxkmLiIv5A T8/FzmVFDuoWJr21JswIvk8aTLAa0Yggu8k47c2Q8qBzrvpx3Td+ROfufQ3TtQyc LcMopHgygtn0io4jtWvTGmq4XMhV7QNLtwj5ICjLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIYRDVmPFuAKaDdPuz6frntHNtfAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM3M2RlNDZiLTA1MzItNDI0ZC1iM2YwLTc0OWFlYzNjYWI5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRYwDQYJKoZIhvcNAQELBQADggEBAFrulTQpvPQceJ/2iEoF3gI/ rSSV0qShqb5AxbURq1n06AR8/iQdjX1S09TUNehYaE0D47VvyYPMEu4gwTCvGZt1 9M8I5NvWmoorVcHzY1YlmsaJ3KcvAegIrTWVKxWQuJ3tdtejXMKSE6YvqsulZOUi cQLN7jNhPHk3YWHF4eP7o+xUrG06RPSUVyhdOXSBWfU4NJspZoaoxib/q/uQ75gw 3vQnA5zTvRB5lsATuCBeT8IlQvoVGPb3isIdguoWiY/d0tS4iVxYgNcXsNFmBl1R wBHg8/ljg4cb3Nv3oTPor++0hziQdh/URLM42fcxwyidBkRSLa7Pf1ptGp17uQo= -----END CERTIFICATE-----Generated at Wed Nov 5 09:25:32 2025 by rpki-client