$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa File: 8638aa88-01e8-41ec-a10e-f2452ac701be.roa (raw, json) Hash identifier: KnCIkGmhqcvc/NWALhdzyKx/vq3vqy2FxeNz0pdPR4w= Subject key identifier: 64:81:9C:97:7C:C2:D5:86:C3:E2:F3:7E:C7:25:9C:A4:D4:4B:04:2E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7348955E05F51AD5BB230A0D370FEE482A6707DD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa Signing time: Tue 21 Oct 2025 13:00:30 +0000 ROA not before: Tue 21 Oct 2025 13:00:30 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ed00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:48:95:5e:05:f5:1a:d5:bb:23:0a:0d:37:0f:ee:48:2a:67:07:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 13:00:30 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=0edd3842501662ae15d1645650cf4a33666744c17d969f6ff79daa3a36ed46bc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:61:a5:25:9e:3e:b2:58:5b:d6:df:d4:f2: 7a:58:62:94:3c:42:ba:45:ca:82:00:33:11:4f:9c: 21:2f:ee:91:f9:d9:1d:ee:ba:02:5e:c9:f4:68:7c: b2:57:12:f9:c0:72:c0:71:d5:bf:36:70:d1:79:60: 40:5d:26:8d:c7:84:fd:2d:50:ca:35:b8:42:5b:ba: 31:b9:85:b7:8f:0c:df:da:f1:fd:76:e7:d7:23:0c: 46:13:e3:7e:48:cd:2e:15:30:f4:03:f5:e0:a1:b7: 98:6e:89:c3:6c:c9:07:32:46:b9:51:c2:ef:05:4a: 5b:55:1f:39:2b:68:65:95:2a:2b:ac:f2:67:fe:e0: cb:56:c8:be:98:0d:c1:d0:76:1c:d1:9a:7e:df:75: 20:c8:44:26:05:1d:a4:6e:fa:03:ea:8b:40:91:78: bd:19:15:90:fb:52:26:93:30:f0:6f:fb:e8:80:22: 44:65:e6:60:73:b1:9a:d5:2d:20:4c:0a:d4:b8:65: f3:7a:6a:c8:73:e3:a2:b3:70:ed:1d:8a:35:80:b2: 40:02:d1:5d:9b:b7:35:67:f5:f5:7e:5e:94:47:7d: 5d:7f:3a:b7:49:fd:94:8b:76:a4:f6:fa:28:87:89: 26:f9:fb:60:57:04:6e:bc:83:d6:c2:b1:1b:c9:e2: 2f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:81:9C:97:7C:C2:D5:86:C3:E2:F3:7E:C7:25:9C:A4:D4:4B:04:2E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ed00::/42 Signature Algorithm: sha256WithRSAEncryption 67:ee:f8:bf:30:8c:17:a4:e4:2b:15:14:e3:b4:64:7d:90:30: 75:7c:e9:7b:20:3c:bb:5f:f0:5d:f3:61:e4:8d:16:c7:af:37: 04:e3:51:92:e8:9f:65:2d:b9:b8:57:9b:71:60:39:b1:96:f5: f5:7d:62:1a:35:bd:b2:bf:0c:79:52:6a:40:0a:18:a6:2b:a7: 05:8b:4f:c8:b0:22:ab:e7:6f:f1:3f:1a:57:96:fa:c9:2a:b5: 9e:c9:6b:69:49:0b:3b:3e:55:7e:45:30:41:bf:a5:32:1c:2b: dc:f2:b8:cb:ba:2c:14:b6:88:f5:b5:a7:3e:19:49:17:9d:69: b5:e8:e9:e3:a0:9b:6b:68:43:1f:0e:9c:7a:09:f9:07:76:38: 9a:ae:21:17:a7:b2:a0:85:b4:03:5b:c3:04:13:d6:9d:5c:e5: 64:39:2d:e5:4e:55:d2:f1:6b:2f:fc:be:c8:ee:e8:ca:7d:2a: b9:3e:11:bc:ac:b7:67:28:b2:55:94:44:34:48:86:2a:ee:a4: ab:95:53:9a:df:cf:62:be:5b:b9:32:c5:a8:71:73:66:0e:18: e3:26:85:fc:98:28:00:3b:f5:4d:59:37:5d:d8:d0:99:5b:a9: f0:58:75:98:47:45:d3:3d:bd:33:94:10:dc:4d:ad:15:56:9c: 2e:88:07:29 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUc0iVXgX1GtW7IwoNNw/uSCpnB90wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTMwMDMwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWRkMzg0MjUwMTY2MmFlMTVkMTY0NTY1MGNmNGEzMzY2 Njc0NGMxN2Q5NjlmNmZmNzlkYWEzYTM2ZWQ0NmJjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjxWGlJZ4+slhb1t/U8npYYpQ8QrpFyoIAMxFPnCEv7pH5 2R3uugJeyfRofLJXEvnAcsBx1b82cNF5YEBdJo3HhP0tUMo1uEJbujG5hbePDN/a 8f1259cjDEYT435IzS4VMPQD9eCht5huicNsyQcyRrlRwu8FSltVHzkraGWVKius 8mf+4MtWyL6YDcHQdhzRmn7fdSDIRCYFHaRu+gPqi0CReL0ZFZD7UiaTMPBv++iA IkRl5mBzsZrVLSBMCtS4ZfN6ashz46KzcO0dijWAskAC0V2btzVn9fV+XpRHfV1/ OrdJ/ZSLdqT2+iiHiSb5+2BXBG68g9bCsRvJ4i9RAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZIGcl3zC1YbD4vN+xyWcpNRLBC4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg2MzhhYTg4LTAxZTgtNDFlYy1hMTBlLWYyNDUyYWM3MDFiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77QAwDQYJKoZIhvcNAQELBQADggEBAGfu+L8wjBek5CsVFOO0ZH2Q MHV86XsgPLtf8F3zYeSNFsevNwTjUZLon2UtubhXm3FgObGW9fV9Yho1vbK/DHlS akAKGKYrpwWLT8iwIqvnb/E/GleW+skqtZ7Ja2lJCzs+VX5FMEG/pTIcK9zyuMu6 LBS2iPW1pz4ZSRedabXo6eOgm2toQx8OnHoJ+Qd2OJquIRensqCFtANbwwQT1p1c 5WQ5LeVOVdLxay/8vsju6Mp9Krk+Ebyst2coslWURDRIhirupKuVU5rfz2K+W7ky xahxc2YOGOMmhfyYKAA79U1ZN13Y0JlbqfBYdZhHRdM9vTOUENxNrRVWnC6IByk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:35:55 2025 by rpki-client