$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa File: 4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa (raw, json) Hash identifier: RgcCq//k3Dt1i4LvNJCJ9jMxczt1jyLpS+GCf85Ik3w= Subject key identifier: AC:92:D3:7E:A1:C0:B3:B4:6B:DB:CC:3D:A5:BF:E6:2D:14:8A:85:41 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 79E1B1563DB337A4DC4CEE1002E2A00879E76338 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa Signing time: Tue 21 Oct 2025 13:10:02 +0000 ROA not before: Tue 21 Oct 2025 13:10:02 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5520::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e1:b1:56:3d:b3:37:a4:dc:4c:ee:10:02:e2:a0:08:79:e7:63:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 13:10:02 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=ad5228b74689b239c5fd196196299360e8efca38c207374a0cbc6843041853a2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cb:64:19:49:07:6e:4c:4b:78:7b:b6:60:8f: ff:11:37:da:ad:fc:7e:b0:f9:9b:dd:17:b6:66:08: f1:be:1d:69:7e:2d:03:22:35:47:7c:6e:ae:98:a4: 94:73:3e:a1:1a:e2:a4:0f:d6:a7:4c:e3:0a:5f:15: da:e7:58:54:30:44:c3:ba:00:8a:4d:87:b6:47:18: a9:25:a6:47:44:bf:3e:22:40:c6:58:c3:86:03:c6: 69:39:93:14:97:85:5d:fb:8a:c9:e8:7a:96:e9:5f: cd:fc:29:38:bd:7f:1a:3f:02:65:8c:42:ee:ed:79: d6:8f:51:c5:cd:e2:4d:a3:b5:99:b1:8a:36:2e:d8: ae:7b:cc:83:27:75:ae:b6:98:4a:e0:c9:cf:7c:2f: ff:60:17:94:25:9b:60:25:39:ef:3e:43:49:fe:e5: 19:f8:fe:82:9a:f4:e7:51:2b:62:de:e4:f5:86:30: e6:6c:dd:88:de:46:2d:e4:e7:30:ae:79:8d:2c:26: 92:f0:48:bf:62:e2:2d:65:b0:1b:72:ce:95:09:20: fa:27:13:67:10:25:18:dc:eb:0e:e7:b0:dd:c5:61: 6b:da:bc:f7:b9:f5:5b:5c:29:75:57:ca:8a:eb:26: 62:32:2f:ab:a9:0a:51:9e:dc:c6:16:7a:c6:13:0d: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:92:D3:7E:A1:C0:B3:B4:6B:DB:CC:3D:A5:BF:E6:2D:14:8A:85:41 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4cdb43dd-1b49-4f22-93e8-b2153c2cac83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5520::/44 Signature Algorithm: sha256WithRSAEncryption 57:38:c6:0c:5e:31:3d:a5:33:4b:3d:4b:66:61:be:02:21:42: d8:8d:47:ef:39:32:80:17:41:1d:ef:2a:82:a1:5c:7b:d6:9f: f9:37:45:dd:5b:74:62:d1:72:8a:9a:71:b1:df:4b:f4:ad:14: b8:36:33:49:14:d6:9b:cf:c9:61:55:24:9a:a0:44:01:21:52: f6:28:cd:64:df:6c:6a:de:20:24:5b:ea:ad:fa:49:92:dd:60: 30:b0:a2:02:11:e5:a5:e2:92:b4:7b:9d:c7:ab:d9:30:32:2b: da:49:0f:5f:2c:82:a2:d6:0c:12:a0:54:f7:4a:63:4f:06:0d: d4:b0:7c:d1:53:4c:aa:ff:81:19:3f:b5:db:5b:31:f1:a2:30: 32:6d:13:b6:be:d9:42:fc:3d:b3:35:5b:fa:1e:82:2a:aa:c8: 5b:03:6b:08:88:96:13:53:f0:19:59:b4:d9:d2:d8:58:f1:78: 98:af:02:ff:3a:82:2a:c0:de:b5:42:3c:40:56:b3:43:7e:1d: 49:7a:2b:41:74:43:68:74:71:09:64:cf:70:fc:db:ea:a5:a2: fe:71:be:2a:d0:cc:46:72:86:54:c5:93:33:77:9e:43:6a:66: 28:7c:51:b5:2d:ed:43:c5:bd:d9:7f:be:46:fa:cb:35:98:27: 1e:fc:6a:f0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeeGxVj2zN6TcTO4QAuKgCHnnYzgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTMxMDAyWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDUyMjhiNzQ2ODliMjM5YzVmZDE5NjE5NjI5OTM2MGU4 ZWZjYTM4YzIwNzM3NGEwY2JjNjg0MzA0MTg1M2EyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOy2QZSQduTEt4e7Zgj/8RN9qt/H6w+ZvdF7ZmCPG+HWl+ LQMiNUd8bq6YpJRzPqEa4qQP1qdM4wpfFdrnWFQwRMO6AIpNh7ZHGKklpkdEvz4i QMZYw4YDxmk5kxSXhV37isnoepbpX838KTi9fxo/AmWMQu7tedaPUcXN4k2jtZmx ijYu2K57zIMnda62mErgyc98L/9gF5Qlm2AlOe8+Q0n+5Rn4/oKa9OdRK2Le5PWG MOZs3YjeRi3k5zCueY0sJpLwSL9i4i1lsBtyzpUJIPonE2cQJRjc6w7nsN3FYWva vPe59VtcKXVXyorrJmIyL6upClGe3MYWesYTDbuLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrJLTfqHAs7Rr28w9pb/mLRSKhUEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRjZGI0M2RkLTFiNDktNGYyMi05M2U4LWIyMTUzYzJjYWM4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwVSAwDQYJKoZIhvcNAQELBQADggEBAFc4xgxeMT2lM0s9S2ZhvgIh QtiNR+85MoAXQR3vKoKhXHvWn/k3Rd1bdGLRcoqacbHfS/StFLg2M0kU1pvPyWFV JJqgRAEhUvYozWTfbGreICRb6q36SZLdYDCwogIR5aXikrR7ncer2TAyK9pJD18s gqLWDBKgVPdKY08GDdSwfNFTTKr/gRk/tdtbMfGiMDJtE7a+2UL8PbM1W/oegiqq yFsDawiIlhNT8BlZtNnS2FjxeJivAv86girA3rVCPEBWs0N+HUl6K0F0Q2h0cQlk z3D82+qlov5xvirQzEZyhlTFkzN3nkNqZih8UbUt7UPFvdl/vkb6yzWYJx78avA= -----END CERTIFICATE-----Generated at Wed Nov 5 14:55:42 2025 by rpki-client