$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75e5e6ce-a11a-4045-bcc5-38c5085921a3.roa File: 75e5e6ce-a11a-4045-bcc5-38c5085921a3.roa (raw, json) Hash identifier: u7liN+xk6kKtv3irVwlQ/OpwvvsgwnhD8JqUUCK/Gc8= Subject key identifier: 37:4C:87:FD:CA:A4:3C:E6:1F:34:39:A6:3C:FC:B8:68:9B:BC:81:B6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6A53FADF36CD9868D91DB15C4D382ABD3803F9D2 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75e5e6ce-a11a-4045-bcc5-38c5085921a3.roa Signing time: Fri 31 Oct 2025 01:50:37 +0000 ROA not before: Fri 31 Oct 2025 01:50:37 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:53:fa:df:36:cd:98:68:d9:1d:b1:5c:4d:38:2a:bd:38:03:f9:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:37 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=3ec94662be25afe42432be4ffae607ff19468a4d299c677014ac2ce5c380bc16, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a3:4e:2a:dd:b6:aa:75:fc:bc:99:34:6e:bb: 1e:8f:ff:c0:08:61:42:42:b6:ec:c9:40:8a:62:1a: 9c:ad:f2:57:19:c5:eb:90:59:a8:1b:1b:0f:08:30: a5:ce:f6:a6:fb:7f:4d:7a:b4:26:fc:4e:d6:d4:1a: a6:6c:5d:cc:58:09:11:95:a2:f9:68:39:22:de:c1: 05:1f:11:0a:c3:ea:ef:6b:fe:bd:e9:c5:55:c1:e8: 5a:4f:25:b4:27:ec:b2:dc:79:9e:57:89:17:2f:91: f2:4e:f8:53:28:95:49:50:2c:06:a1:2e:2b:18:6b: f2:29:73:4a:23:01:27:ec:66:ae:39:ca:f4:53:c1: d3:ab:c1:b4:f5:9a:1a:58:d5:02:35:a8:42:60:02: 9b:90:97:c7:17:8e:d6:00:46:f7:a8:c0:5d:f2:ab: 3d:1b:d8:02:79:0c:82:9d:3f:57:6f:d6:d2:5a:05: 4c:20:0b:54:6a:15:79:8a:bc:1e:75:51:53:83:e1: af:86:aa:54:02:c9:36:76:90:71:f6:ca:30:0c:7f: c5:e5:0c:02:ad:24:81:7a:f3:c0:16:fd:07:aa:33: 05:2d:5e:c6:39:78:c3:28:50:74:50:7f:e6:6e:44: a8:3f:14:b8:1c:b3:8c:2f:bf:a2:69:8a:8e:c1:ec: 76:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4C:87:FD:CA:A4:3C:E6:1F:34:39:A6:3C:FC:B8:68:9B:BC:81:B6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75e5e6ce-a11a-4045-bcc5-38c5085921a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6109::/48 Signature Algorithm: sha256WithRSAEncryption 8f:09:20:94:5a:43:3d:0a:70:41:60:7b:db:20:83:6f:55:91: ee:49:92:f0:13:5c:d3:b9:d6:bd:90:90:30:c7:64:96:46:c8: 0d:88:db:bc:81:00:af:3b:d1:8c:21:16:4e:51:4d:03:b6:6d: 33:22:16:7a:a5:8a:4a:9d:0f:f0:9b:8e:a9:6e:c0:a9:b2:66: 1c:eb:5a:39:a1:58:e4:4e:8d:21:80:7d:79:40:31:ce:c9:b5: 34:25:f4:a9:51:a1:cc:9b:93:a5:95:7d:45:57:67:30:57:e5: e7:de:97:ae:68:b0:d2:ba:f3:76:7c:45:59:0e:6b:c8:39:02: e5:3a:f5:20:74:fa:58:04:53:26:71:39:0c:de:3e:3b:62:fe: ab:ef:32:17:3f:7b:33:e9:c0:56:8d:a5:fe:32:34:c9:45:02: 09:af:17:fd:2c:d0:f4:c1:90:67:ad:18:1d:e2:61:d1:0f:e6: 27:7f:d5:e2:ce:b2:c8:d3:66:40:ce:96:d3:24:52:3d:34:97: bd:c1:77:74:9d:95:ea:f1:fa:31:bc:a1:73:73:98:4b:bb:6b: 22:e0:e0:cd:22:51:1c:ee:54:ef:09:2d:0e:6d:48:bd:90:07: 5d:90:f3:38:98:69:e7:9d:51:b8:7b:af:ff:73:71:9a:45:63: 53:11:d6:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUalP63zbNmGjZHbFcTTgqvTgD+dIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDM3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZWM5NDY2MmJlMjVhZmU0MjQzMmJlNGZmYWU2MDdmZjE5 NDY4YTRkMjk5YzY3NzAxNGFjMmNlNWMzODBiYzE2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfo04q3baqdfy8mTRuux6P/8AIYUJCtuzJQIpiGpyt8lcZ xeuQWagbGw8IMKXO9qb7f016tCb8TtbUGqZsXcxYCRGVovloOSLewQUfEQrD6u9r /r3pxVXB6FpPJbQn7LLceZ5XiRcvkfJO+FMolUlQLAahLisYa/Ipc0ojASfsZq45 yvRTwdOrwbT1mhpY1QI1qEJgApuQl8cXjtYARveowF3yqz0b2AJ5DIKdP1dv1tJa BUwgC1RqFXmKvB51UVOD4a+GqlQCyTZ2kHH2yjAMf8XlDAKtJIF688AW/QeqMwUt XsY5eMMoUHRQf+ZuRKg/FLgcs4wvv6Jpio7B7HYTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUN0yH/cqkPOYfNDmmPPy4aJu8gbYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzc1ZTVlNmNlLWExMWEtNDA0NS1iY2M1LTM4YzUwODU5MjFhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQkwDQYJKoZIhvcNAQELBQADggEBAI8JIJRaQz0KcEFge9sgg29V ke5JkvATXNO51r2QkDDHZJZGyA2I27yBAK870YwhFk5RTQO2bTMiFnqlikqdD/Cb jqluwKmyZhzrWjmhWOROjSGAfXlAMc7JtTQl9KlRocybk6WVfUVXZzBX5efel65o sNK683Z8RVkOa8g5AuU69SB0+lgEUyZxOQzePjti/qvvMhc/ezPpwFaNpf4yNMlF AgmvF/0s0PTBkGetGB3iYdEP5id/1eLOssjTZkDOltMkUj00l73Bd3Sdlerx+jG8 oXNzmEu7ayLg4M0iURzuVO8JLQ5tSL2QB12Q8ziYaeedUbh7r/9zcZpFY1MR1tI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:28:43 2025 by rpki-client