$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6185ff3d-ccdb-477b-a33c-aacb10361062.roa File: 6185ff3d-ccdb-477b-a33c-aacb10361062.roa (raw, json) Hash identifier: +cLfYml56VfuQW0RBvDI7lS5Mc8xQVyEQO5AvFO6CC4= Subject key identifier: 05:E8:FE:6B:85:CA:AC:40:8E:A0:97:28:2D:C2:97:3D:8D:AF:19:AD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 089BB6BA509288590B3D7504CD1EA633D6D15BEE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6185ff3d-ccdb-477b-a33c-aacb10361062.roa Signing time: Mon 13 Oct 2025 17:55:19 +0000 ROA not before: Mon 13 Oct 2025 17:55:19 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1:8a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9b:b6:ba:50:92:88:59:0b:3d:75:04:cd:1e:a6:33:d6:d1:5b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 13 17:55:19 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=cb70c3d64c2a5ab994dab72de74d07568d20ccc16d47714e0df2d11aca0dcb6f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:c9:cc:4c:09:63:0d:64:d4:66:5b:56:cd: 18:a2:64:0f:45:fc:a8:5f:1e:3e:be:9e:93:73:88: c6:88:ae:b4:95:bf:17:06:a6:a5:61:11:aa:f5:d2: a3:46:02:23:2b:21:e7:97:f7:c8:b6:97:4a:ab:71: ef:26:82:15:0e:66:f7:68:39:55:c7:ea:d2:31:a7: 20:99:6b:d5:8e:c8:a1:47:41:fe:35:f4:5d:6a:b3: cd:e3:a0:78:b8:84:29:d2:37:11:9c:fd:f0:00:58: 48:d7:28:bc:77:3d:de:63:e8:d9:28:74:5e:05:e0: 8d:20:e1:a0:68:64:e5:67:50:02:97:1f:83:42:52: 25:4a:6e:dc:55:20:b4:77:c5:88:32:45:46:0e:86: 58:5c:15:e4:62:8c:ee:24:8e:a3:f2:ef:b7:20:a9: 60:62:1f:0c:f5:a3:84:76:60:80:57:d2:55:f4:39: 4b:7b:52:28:27:b1:4e:67:96:40:61:1f:a9:67:98: 46:ed:9e:17:28:07:c6:0e:57:51:ce:84:40:34:59: 23:ed:b0:f5:1f:c4:2c:96:2c:01:d8:d2:43:05:bb: 88:12:b8:ca:67:d5:50:25:7b:65:bb:3e:9e:f1:c4: c5:cc:0d:1a:41:a0:e4:65:2f:ab:28:c6:ca:44:a8: f1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E8:FE:6B:85:CA:AC:40:8E:A0:97:28:2D:C2:97:3D:8D:AF:19:AD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6185ff3d-ccdb-477b-a33c-aacb10361062.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8a00::/40 Signature Algorithm: sha256WithRSAEncryption 24:b6:6f:70:0f:71:ab:43:4b:e0:2e:59:7c:fa:10:92:36:2d: f7:cb:bd:69:5e:50:14:f9:9f:57:0d:1c:c5:e4:a6:a4:ad:06: cb:30:5d:de:95:0b:67:8f:b9:4a:02:e1:55:b4:9d:5c:bf:74: ce:be:75:f8:e6:9b:a4:ff:70:bc:0c:fd:4b:5f:f9:be:34:c7: 24:be:2a:a7:12:b6:9a:a8:4a:7c:30:04:21:f7:18:5c:0b:40: 9e:b5:37:87:04:63:26:e4:c4:23:79:f0:db:52:4c:ec:48:8e: 24:b5:87:6f:1b:54:e9:23:5a:3d:43:9d:12:d9:25:0c:b2:c1: ec:56:49:ac:c3:4c:60:f0:d7:6f:80:0c:54:83:7e:0f:ad:52: 26:fd:f3:6e:61:9d:4a:68:fb:c9:c4:ef:42:18:d9:58:d6:cd: 52:c0:da:e7:02:12:8a:85:1f:dc:ef:7c:2f:9a:85:a3:af:b2: 21:42:cb:03:22:d0:43:c1:7c:87:c5:ef:e8:f5:55:06:53:71: d0:5d:c8:0e:97:f8:5b:01:63:13:ea:85:d5:87:dc:66:ec:73: 53:e8:7a:9e:bd:a0:ac:9d:69:96:3a:a4:da:ab:70:29:7d:f2: 52:c5:69:0f:e9:cc:b4:58:30:6c:f2:de:f4:ae:bb:5a:68:2f: 2d:33:f8:6c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCJu2ulCSiFkLPXUEzR6mM9bRW+4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDEzMTc1NTE5WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjcwYzNkNjRjMmE1YWI5OTRkYWI3MmRlNzRkMDc1Njhk MjBjY2MxNmQ0NzcxNGUwZGYyZDExYWNhMGRjYjZmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9IcnMTAljDWTUZltWzRiiZA9F/KhfHj6+npNziMaIrrSV vxcGpqVhEar10qNGAiMrIeeX98i2l0qrce8mghUOZvdoOVXH6tIxpyCZa9WOyKFH Qf419F1qs83joHi4hCnSNxGc/fAAWEjXKLx3Pd5j6NkodF4F4I0g4aBoZOVnUAKX H4NCUiVKbtxVILR3xYgyRUYOhlhcFeRijO4kjqPy77cgqWBiHwz1o4R2YIBX0lX0 OUt7UignsU5nlkBhH6lnmEbtnhcoB8YOV1HOhEA0WSPtsPUfxCyWLAHY0kMFu4gS uMpn1VAle2W7Pp7xxMXMDRpBoORlL6soxspEqPGvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUBej+a4XKrECOoJcoLcKXPY2vGa0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzYxODVmZjNkLWNjZGItNDc3Yi1hMzNjLWFhY2IxMDM2MTA2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDxijANBgkqhkiG9w0BAQsFAAOCAQEAJLZvcA9xq0NL4C5ZfPoQkjYt 98u9aV5QFPmfVw0cxeSmpK0GyzBd3pULZ4+5SgLhVbSdXL90zr51+OabpP9wvAz9 S1/5vjTHJL4qpxK2mqhKfDAEIfcYXAtAnrU3hwRjJuTEI3nw21JM7EiOJLWHbxtU 6SNaPUOdEtklDLLB7FZJrMNMYPDXb4AMVIN+D61SJv3zbmGdSmj7ycTvQhjZWNbN UsDa5wISioUf3O98L5qFo6+yIULLAyLQQ8F8h8Xv6PVVBlNx0F3IDpf4WwFjE+qF 1YfcZuxzU+h6nr2grJ1pljqk2qtwKX3yUsVpD+nMtFgwbPLe9K67WmgvLTP4bA== -----END CERTIFICATE-----Generated at Wed Nov 5 19:10:51 2025 by rpki-client