$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71593b3e-c097-4475-95c0-8a064df47fc0.roa File: 71593b3e-c097-4475-95c0-8a064df47fc0.roa (raw, json) Hash identifier: v1qwsLfqct+Lb96ye9mpX08eupXxBL0kKva03aUMt+o= Subject key identifier: 62:0C:57:E4:32:78:0F:80:D4:91:D3:DC:C4:41:F3:89:FF:95:44:DD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 67108B990E7DAAB924C0447A82091058FE31DD08 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71593b3e-c097-4475-95c0-8a064df47fc0.roa Signing time: Fri 31 Oct 2025 01:50:06 +0000 ROA not before: Fri 31 Oct 2025 01:50:06 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:10:8b:99:0e:7d:aa:b9:24:c0:44:7a:82:09:10:58:fe:31:dd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:06 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=92e3f29758bf8e5d60df040a813b2fb340ea3de09624c139fee93a7cc509e004, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:4c:d2:c0:9d:5a:c6:a5:41:de:48:bb:34: 17:3b:ec:f7:dd:88:e2:e1:fb:d6:a4:e6:5a:f9:8f: 92:af:09:d7:75:31:dc:19:b6:0c:ce:ff:e5:7e:16: 5c:92:21:b6:6e:64:b7:52:91:b9:e4:91:1d:fd:de: 70:84:a0:b3:da:99:d3:7f:45:70:b3:26:86:c4:33: b5:7a:20:29:62:5e:61:5c:dc:93:fc:62:df:ba:9c: c9:35:17:50:14:23:81:eb:b5:59:29:0d:7b:c4:a1: 46:44:4f:95:6a:db:b3:3b:85:33:23:e4:f1:2a:f0: 36:f9:8f:ac:ba:3e:f8:df:30:de:40:8d:d1:ee:13: 32:13:80:07:d0:30:46:7a:22:19:21:ee:2d:69:70: 28:a1:46:e3:8c:28:5f:27:d0:34:06:49:b1:37:7d: f7:79:c4:6a:8e:e9:06:d6:92:55:b3:90:f5:b2:ec: 0f:77:73:bc:c1:9a:41:39:1c:4c:aa:9f:c2:b2:37: 1a:72:4c:18:22:34:90:c5:05:9f:79:cb:95:d5:4e: 00:ef:55:1f:ea:85:ca:f7:78:2a:03:df:6b:41:45: 9c:f3:94:cf:a3:d2:7e:e7:1d:08:5c:c7:83:00:e7: 76:09:3a:aa:d9:d6:92:8b:24:7c:67:8d:f3:19:3e: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0C:57:E4:32:78:0F:80:D4:91:D3:DC:C4:41:F3:89:FF:95:44:DD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71593b3e-c097-4475-95c0-8a064df47fc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6110::/48 Signature Algorithm: sha256WithRSAEncryption 30:2e:1c:8a:1d:aa:d8:0a:62:43:a1:7a:21:b7:41:5a:6b:e3: 5d:f2:df:02:74:fc:a9:7d:41:9b:69:b7:04:87:c1:29:bd:cb: 2c:d0:db:fc:71:63:8d:77:28:c0:38:d7:81:8e:28:c6:d0:8d: 36:52:f3:cf:77:3c:13:04:7c:4a:de:e7:5d:6e:ef:fe:5a:a4: 76:eb:46:fe:ea:65:48:53:a8:50:11:7a:df:9b:2d:2f:eb:9d: a6:a7:03:ce:3e:8b:8a:b6:d0:71:78:08:14:19:c2:50:1f:50: 0d:0d:d3:c0:1f:88:5f:1b:06:7a:01:0e:79:d3:41:83:0b:ca: 51:5b:b7:67:49:a2:60:71:65:48:49:fb:32:ce:f6:fe:65:c1: f6:c6:8f:53:79:ce:85:13:3f:66:ec:2d:76:18:fc:7d:60:1e: 3f:76:d8:e5:f4:aa:98:af:f0:5c:7a:65:3c:84:5e:24:01:ae: 40:31:7d:b8:6e:5d:5a:11:76:9a:3d:14:f6:fe:c2:8e:32:4c: 24:bc:19:a8:12:32:30:7c:c4:52:ba:56:8e:6a:31:fe:86:10: 39:ef:e2:45:d4:99:c4:47:73:c2:94:43:76:6f:f2:ec:f2:d0: e5:8a:da:dd:88:68:47:28:a1:2c:c7:51:f3:ac:8f:03:f1:ac: ba:3b:41:c3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZxCLmQ59qrkkwER6ggkQWP4x3QgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDA2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MmUzZjI5NzU4YmY4ZTVkNjBkZjA0MGE4MTNiMmZiMzQw ZWEzZGUwOTYyNGMxMzlmZWU5M2E3Y2M1MDllMDA0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpH0zSwJ1axqVB3ki7NBc77PfdiOLh+9ak5lr5j5KvCdd1 MdwZtgzO/+V+FlySIbZuZLdSkbnkkR393nCEoLPamdN/RXCzJobEM7V6ICliXmFc 3JP8Yt+6nMk1F1AUI4HrtVkpDXvEoUZET5Vq27M7hTMj5PEq8Db5j6y6PvjfMN5A jdHuEzITgAfQMEZ6Ihkh7i1pcCihRuOMKF8n0DQGSbE3ffd5xGqO6QbWklWzkPWy 7A93c7zBmkE5HEyqn8KyNxpyTBgiNJDFBZ95y5XVTgDvVR/qhcr3eCoD32tBRZzz lM+j0n7nHQhcx4MA53YJOqrZ1pKLJHxnjfMZPrl5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYgxX5DJ4D4DUkdPcxEHzif+VRN0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcxNTkzYjNlLWMwOTctNDQ3NS05NWMwLThhMDY0ZGY0N2ZjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRAwDQYJKoZIhvcNAQELBQADggEBADAuHIodqtgKYkOheiG3QVpr 413y3wJ0/Kl9QZtptwSHwSm9yyzQ2/xxY413KMA414GOKMbQjTZS8893PBMEfEre 511u7/5apHbrRv7qZUhTqFARet+bLS/rnaanA84+i4q20HF4CBQZwlAfUA0N08Af iF8bBnoBDnnTQYMLylFbt2dJomBxZUhJ+zLO9v5lwfbGj1N5zoUTP2bsLXYY/H1g Hj922OX0qpiv8Fx6ZTyEXiQBrkAxfbhuXVoRdpo9FPb+wo4yTCS8GagSMjB8xFK6 Vo5qMf6GEDnv4kXUmcRHc8KUQ3Zv8uzy0OWK2t2IaEcooSzHUfOsjwPxrLo7QcM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:07 2025 by rpki-client