$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/83f507f9-6df5-4947-842f-b89f2709cc4a.roa File: 83f507f9-6df5-4947-842f-b89f2709cc4a.roa (raw, json) Hash identifier: Mj9uxVVqAdG63MQpVXu2JdqtRC5/ZTxrHZDQEN6I2vQ= Subject key identifier: B3:A6:79:00:F9:4E:52:EE:7E:D7:E4:6E:1B:E2:9B:29:CE:75:25:71 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 43EC489FFDB678DE51B136DDFEE40B251F136A79 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/83f507f9-6df5-4947-842f-b89f2709cc4a.roa Signing time: Tue 21 Oct 2025 12:50:51 +0000 ROA not before: Tue 21 Oct 2025 12:50:51 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ef00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ec:48:9f:fd:b6:78:de:51:b1:36:dd:fe:e4:0b:25:1f:13:6a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 12:50:51 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=f0fbdb95a274f713abb4cef8fdea1a107f60eb70f107ce9e6929ef07b58c881d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d1:a5:39:f6:8a:ff:9d:8d:c5:e3:d7:aa:9b: f9:8b:9d:91:ed:aa:13:01:5d:b9:da:ef:05:86:fa: 19:87:5b:7e:a4:a5:0d:be:43:62:b7:41:9d:3e:75: 15:2b:ec:0d:1b:54:4a:d4:4b:f4:b6:86:02:b3:9c: 1a:81:9e:c6:a4:ac:09:27:1a:73:73:8e:20:11:1c: 8f:f1:53:1e:39:08:cd:78:84:c1:5c:ed:cf:ac:00: ff:00:09:b8:b9:62:7d:8f:a5:95:64:dd:64:bc:8e: 62:e9:62:76:27:ce:4e:b3:8b:63:d6:01:21:01:67: 93:83:7f:79:70:78:90:70:5b:21:d4:dc:82:b4:9e: 38:a1:81:eb:30:e8:33:86:3a:af:f3:be:cd:b8:95: 14:f6:2b:d6:29:0a:f9:1f:39:53:f9:b3:d1:20:7d: 5b:b1:30:9d:14:3c:8e:ff:b9:57:e7:85:f3:b7:8a: 92:b0:c6:95:11:4f:19:90:92:56:c1:c5:a7:3c:7d: b3:2b:61:ba:43:ac:ca:e4:03:d9:4a:42:be:aa:a8: 53:33:6d:44:9d:06:b8:82:04:c5:48:6a:48:1d:7b: e3:a1:1f:2c:f2:08:8f:49:05:35:25:bd:57:f7:94: 88:1f:fd:5a:d5:d7:31:f8:1f:78:90:ee:47:04:1f: b8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A6:79:00:F9:4E:52:EE:7E:D7:E4:6E:1B:E2:9B:29:CE:75:25:71 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/83f507f9-6df5-4947-842f-b89f2709cc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ef00::/42 Signature Algorithm: sha256WithRSAEncryption 6b:9d:d9:cb:18:33:10:20:02:18:cf:b6:eb:a0:1a:e3:71:61: a2:6b:f5:ef:89:e6:83:93:32:87:2c:10:b8:43:a3:f1:07:d9: 81:eb:4d:65:c7:6a:86:5e:80:29:c1:0b:77:1b:c3:d2:49:eb: fd:82:5c:2f:71:a9:ff:8e:59:ac:d0:d4:70:33:81:5d:74:48: 08:7b:20:af:38:bc:34:44:29:43:b7:1b:8b:09:d9:30:a1:92: 33:38:97:1c:52:1e:13:a7:11:2a:8e:71:95:46:a8:97:28:4f: 81:0a:5c:e4:e0:5d:a9:c6:33:46:c1:ca:00:1e:d3:fa:7e:16: 65:a5:7e:a7:c1:53:14:0b:96:f4:f7:09:02:c1:da:44:5f:46: d2:b5:0b:f7:4c:4d:5c:b3:b5:17:f4:29:5b:ee:7d:50:ed:e6: a6:28:a7:b5:ef:df:9b:5a:da:25:c4:a9:98:6d:1d:25:0f:75: 4c:19:00:f9:b6:26:35:e6:e3:f4:ad:d2:f9:d0:1b:c4:9d:26: 4b:38:8e:3d:2c:f9:78:d9:41:67:d4:5d:aa:c8:7b:a9:58:2d: 04:38:c0:19:77:be:8c:f8:f8:44:f6:99:12:cc:e7:9d:80:79: 40:9e:ee:cb:85:43:e5:0c:cf:d6:73:40:d1:7e:1a:3a:58:87: 08:83:9e:99 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQ+xIn/22eN5RsTbd/uQLJR8TankwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTI1MDUxWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGZiZGI5NWEyNzRmNzEzYWJiNGNlZjhmZGVhMWExMDdm NjBlYjcwZjEwN2NlOWU2OTI5ZWYwN2I1OGM4ODFkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi0aU59or/nY3F49eqm/mLnZHtqhMBXbna7wWG+hmHW36k pQ2+Q2K3QZ0+dRUr7A0bVErUS/S2hgKznBqBnsakrAknGnNzjiARHI/xUx45CM14 hMFc7c+sAP8ACbi5Yn2PpZVk3WS8jmLpYnYnzk6zi2PWASEBZ5ODf3lweJBwWyHU 3IK0njihgesw6DOGOq/zvs24lRT2K9YpCvkfOVP5s9EgfVuxMJ0UPI7/uVfnhfO3 ipKwxpURTxmQklbBxac8fbMrYbpDrMrkA9lKQr6qqFMzbUSdBriCBMVIakgde+Oh HyzyCI9JBTUlvVf3lIgf/VrV1zH4H3iQ7kcEH7gPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUs6Z5APlOUu5+1+RuG+KbKc51JXEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzgzZjUwN2Y5LTZkZjUtNDk0Ny04NDJmLWI4OWYyNzA5Y2M0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77wAwDQYJKoZIhvcNAQELBQADggEBAGud2csYMxAgAhjPtuugGuNx YaJr9e+J5oOTMocsELhDo/EH2YHrTWXHaoZegCnBC3cbw9JJ6/2CXC9xqf+OWazQ 1HAzgV10SAh7IK84vDREKUO3G4sJ2TChkjM4lxxSHhOnESqOcZVGqJcoT4EKXOTg XanGM0bBygAe0/p+FmWlfqfBUxQLlvT3CQLB2kRfRtK1C/dMTVyztRf0KVvufVDt 5qYop7Xv35ta2iXEqZhtHSUPdUwZAPm2JjXm4/St0vnQG8SdJks4jj0s+XjZQWfU XarIe6lYLQQ4wBl3voz4+ET2mRLM552AeUCe7suFQ+UMz9ZzQNF+GjpYhwiDnpk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:40 2025 by rpki-client