$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa File: 6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa (raw, json) Hash identifier: Y8aYMay2J4PRWpn1dB97WWhnT6lc1xObhU16atbhoOk= Subject key identifier: 38:78:CD:FD:3B:33:66:1E:B3:39:E0:BA:41:73:A8:9F:BA:C3:FB:D0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4E147109497C7E38998541432FE6AE49CDC3869A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa Signing time: Tue 04 Nov 2025 00:10:06 +0000 ROA not before: Tue 04 Nov 2025 00:10:06 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:14:71:09:49:7c:7e:38:99:85:41:43:2f:e6:ae:49:cd:c3:86:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 4 00:10:06 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=993de683e710695e2f0662a683cc295ff63eaeb8dc07df7c0f1d7f28fc861194, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:a5:06:ac:8e:bc:c5:db:d3:25:b8:ad:74: 0a:fe:0b:e9:b8:ce:b2:59:de:ac:8e:67:61:21:1e: c5:14:46:a9:de:e3:72:0b:76:89:57:00:5a:e8:cd: 7b:98:68:09:1e:ae:dc:ad:65:94:93:db:0e:7c:1b: 79:f4:33:d5:d5:0e:14:7f:61:e3:7f:58:bf:3e:9f: af:74:44:b3:c3:d9:1b:fc:05:38:f5:91:62:c7:24: 62:b5:87:3b:9c:ff:83:a8:78:56:f8:c2:8e:81:d1: d7:ae:da:82:54:00:b7:9b:68:f4:2e:02:61:cb:88: e5:41:06:45:e9:7e:ff:66:1d:14:05:8f:16:a0:a9: c6:d2:12:71:1c:e8:f9:91:d9:89:4c:3a:fb:5f:f6: 30:7c:35:99:79:13:97:20:55:f5:02:c6:03:89:30: dc:03:17:70:e3:20:84:25:d5:6a:b1:be:45:1d:d1: 04:8a:46:fc:ba:6a:e1:e5:bb:be:6b:3d:a7:3b:51: 4c:b6:45:d1:dc:a3:8b:13:7f:14:5b:1c:fd:fb:ea: cd:1c:82:bb:3b:40:1f:eb:20:0a:20:f6:e3:d9:c4: fb:1d:99:9e:ae:09:8e:6c:ee:26:ff:23:81:25:a1: 53:aa:ec:05:46:7b:38:86:aa:d0:84:7f:d9:f5:72: 59:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:78:CD:FD:3B:33:66:1E:B3:39:E0:BA:41:73:A8:9F:BA:C3:FB:D0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1100::/40 Signature Algorithm: sha256WithRSAEncryption 07:bd:7c:f7:36:60:1c:f0:b0:f1:b3:f2:d5:28:91:d4:e8:15: 2a:8f:9c:e4:f9:e4:80:07:4d:0e:a8:f8:cb:07:c1:81:18:32: 8b:58:4e:ad:c6:d4:0f:d4:24:ae:e8:79:76:cd:53:f8:2d:02: 71:81:2c:ed:f4:48:8e:0b:a5:1c:3a:f3:e7:d6:e8:84:cd:2d: d3:8e:2d:e8:72:da:3b:88:bf:54:53:55:09:9c:18:5a:34:34: d9:10:22:02:16:d1:92:25:6d:21:eb:05:bd:59:48:fe:e0:17: 8c:23:55:c2:01:f2:c9:77:9b:99:72:51:27:92:e4:b2:24:86: 17:85:0c:43:9a:a7:b4:c5:47:37:37:2a:39:fc:99:22:98:24: f9:6d:5f:a5:02:07:b7:a8:7e:a4:7c:09:59:25:08:84:68:a5: 24:25:94:4e:c9:d6:56:cf:c8:32:a6:4f:cd:3c:38:5d:d1:8e: 59:22:4f:ca:f7:9e:6c:fa:f8:05:ea:56:76:d7:10:df:6e:61: b8:00:91:07:57:15:17:7f:30:7e:7d:1e:af:27:e0:fb:79:85: df:1c:fb:c0:87:b2:c6:0c:55:bb:0c:d3:12:a3:1c:40:ac:78: 30:40:79:5c:cd:eb:31:26:bc:91:c0:25:00:b9:2f:d7:b7:6c: 56:dc:ad:f1 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUThRxCUl8fjiZhUFDL+auSc3DhpowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTA0MDAxMDA2WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OTNkZTY4M2U3MTA2OTVlMmYwNjYyYTY4M2NjMjk1ZmY2 M2VhZWI4ZGMwN2RmN2MwZjFkN2YyOGZjODYxMTk0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD7KUGrI68xdvTJbitdAr+C+m4zrJZ3qyOZ2EhHsUURqne 43ILdolXAFrozXuYaAkertytZZST2w58G3n0M9XVDhR/YeN/WL8+n690RLPD2Rv8 BTj1kWLHJGK1hzuc/4OoeFb4wo6B0deu2oJUALebaPQuAmHLiOVBBkXpfv9mHRQF jxagqcbSEnEc6PmR2YlMOvtf9jB8NZl5E5cgVfUCxgOJMNwDF3DjIIQl1WqxvkUd 0QSKRvy6auHlu75rPac7UUy2RdHco4sTfxRbHP376s0cgrs7QB/rIAog9uPZxPsd mZ6uCY5s7ib/I4EloVOq7AVGeziGqtCEf9n1clnbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUOHjN/TszZh6zOeC6QXOon7rD+9AwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZlYWY5YWI1LWVjOGItNDJlYi1hZGU5LTc4MWJmMTIyMTJhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwETANBgkqhkiG9w0BAQsFAAOCAQEAB7189zZgHPCw8bPy1SiR1OgV Ko+c5PnkgAdNDqj4ywfBgRgyi1hOrcbUD9Qkruh5ds1T+C0CcYEs7fRIjgulHDrz 59bohM0t044t6HLaO4i/VFNVCZwYWjQ02RAiAhbRkiVtIesFvVlI/uAXjCNVwgHy yXebmXJRJ5LksiSGF4UMQ5qntMVHNzcqOfyZIpgk+W1fpQIHt6h+pHwJWSUIhGil JCWUTsnWVs/IMqZPzTw4XdGOWSJPyveebPr4BepWdtcQ325huACRB1cVF38wfn0e ryfg+3mF3xz7wIeyxgxVuwzTEqMcQKx4MEB5XM3rMSa8kcAlALkv17dsVtyt8Q== -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:44 2025 by rpki-client