$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa File: 8befeacb-b991-408b-912e-a5a744fc13df.roa (raw, json) Hash identifier: +pjwJtdwbsEk7USwcTR2fpRSIq3CexdVWt5dCciDqUU= Subject key identifier: F2:F1:9B:75:DA:66:6E:E5:46:01:F0:9C:03:B3:FA:0F:9F:53:A8:54 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6E916ADB80F9143491AD5C02E37BC721F1F3C2F9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa Signing time: Fri 31 Oct 2025 01:50:34 +0000 ROA not before: Fri 31 Oct 2025 01:50:34 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:91:6a:db:80:f9:14:34:91:ad:5c:02:e3:7b:c7:21:f1:f3:c2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:34 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c903617b77b985a17e6367cffe4e3a6f4aacbcb2f261185943cbefce9dab12cd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:55:48:ef:2d:5d:6c:96:ae:12:3d:4d:4d: 32:3f:92:90:cd:a0:13:16:9e:0c:75:6f:f0:b7:5d: 67:35:85:4d:0e:f4:d9:4e:e3:69:c1:7b:ef:1f:97: fc:f4:e0:04:84:a4:c4:fb:2f:97:27:fa:c1:8c:70: b8:12:82:c2:ba:00:c4:8b:51:08:9d:8c:9b:72:17: 56:56:e2:10:04:ce:0d:af:d6:ed:88:72:b3:4b:6b: b4:d3:b8:5b:78:06:e9:22:f0:83:c0:b1:a4:8c:48: 14:03:41:0b:08:be:17:c4:e0:6d:18:3b:ca:18:a2: ac:8a:38:c8:3b:9e:74:68:c9:57:b5:15:32:bb:d3: 94:e7:76:e8:11:24:56:dd:10:cf:0b:d8:60:db:59: 1e:e5:9f:a3:7d:a7:63:d5:84:09:5d:c9:59:1d:13: 11:bd:f7:ed:a7:79:2e:67:9a:3a:2b:8c:8e:3e:d5: c2:08:ee:cb:64:63:ec:62:2f:31:55:67:a9:91:ac: ec:c3:17:1c:05:cc:92:15:e2:b9:22:04:c6:ed:dc: 82:b7:ee:74:97:b6:33:b0:65:18:85:f6:53:c0:90: e8:94:22:7f:85:17:05:bd:73:7f:93:dd:7d:01:46: f4:cf:f3:f0:fb:1e:4f:d6:7c:24:27:1f:e3:45:9c: 50:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F1:9B:75:DA:66:6E:E5:46:01:F0:9C:03:B3:FA:0F:9F:53:A8:54 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6106::/48 Signature Algorithm: sha256WithRSAEncryption 7f:51:2c:91:e0:db:40:e3:ef:2b:4e:31:41:e6:f3:37:09:bc: ee:53:3a:56:08:f4:9d:c4:3a:58:69:c0:bb:c0:6d:98:d8:1e: f4:43:10:a9:06:9a:c8:ef:6d:ce:8f:1a:26:6b:47:1a:0b:3a: 72:6b:4d:7b:6a:6e:11:71:b3:ba:27:2b:60:2b:51:cb:8c:4d: 64:8d:94:ca:1f:50:f2:15:58:bb:2a:0c:cb:43:64:0a:99:48: 6c:dd:0c:11:06:cc:0f:3d:df:84:f6:b7:6d:18:e7:d4:a9:b9: 98:9b:c3:d8:2d:34:01:48:a7:2e:1c:bf:80:33:92:f9:91:81: 84:51:5d:92:f1:c4:a2:e3:69:4b:6c:5c:fa:0f:09:4e:3d:c2: 2a:ed:b8:90:e3:45:3d:d4:51:12:52:e3:ab:ab:f2:f0:fb:f6: 8f:0a:87:22:7b:29:d7:e9:96:88:3c:f1:c4:5c:28:69:23:fd: a0:90:a6:8b:00:c5:c5:8b:b9:00:19:b6:e6:2f:22:b7:5c:72: 71:b9:31:1c:b9:23:09:4c:7b:11:23:cc:6a:71:49:90:a5:07: a3:9d:44:0f:52:4c:e7:e3:92:da:55:cb:cf:b1:56:4a:0b:29: 8d:fd:5a:e6:e5:d4:30:62:84:56:0e:82:b5:2b:a5:3b:c2:a5: b8:bf:c8:a3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbpFq24D5FDSRrVwC43vHIfHzwvkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDM0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTAzNjE3Yjc3Yjk4NWExN2U2MzY3Y2ZmZTRlM2E2ZjRh YWNiY2IyZjI2MTE4NTk0M2NiZWZjZTlkYWIxMmNkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1f1VI7y1dbJauEj1NTTI/kpDNoBMWngx1b/C3XWc1hU0O 9NlO42nBe+8fl/z04ASEpMT7L5cn+sGMcLgSgsK6AMSLUQidjJtyF1ZW4hAEzg2v 1u2IcrNLa7TTuFt4Buki8IPAsaSMSBQDQQsIvhfE4G0YO8oYoqyKOMg7nnRoyVe1 FTK705TndugRJFbdEM8L2GDbWR7ln6N9p2PVhAldyVkdExG99+2neS5nmjorjI4+ 1cII7stkY+xiLzFVZ6mRrOzDFxwFzJIV4rkiBMbt3IK37nSXtjOwZRiF9lPAkOiU In+FFwW9c3+T3X0BRvTP8/D7Hk/WfCQnH+NFnFCFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8vGbddpmbuVGAfCcA7P6D59TqFQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhiZWZlYWNiLWI5OTEtNDA4Yi05MTJlLWE1YTc0NGZjMTNkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQYwDQYJKoZIhvcNAQELBQADggEBAH9RLJHg20Dj7ytOMUHm8zcJ vO5TOlYI9J3EOlhpwLvAbZjYHvRDEKkGmsjvbc6PGiZrRxoLOnJrTXtqbhFxs7on K2ArUcuMTWSNlMofUPIVWLsqDMtDZAqZSGzdDBEGzA8934T2t20Y59SpuZibw9gt NAFIpy4cv4AzkvmRgYRRXZLxxKLjaUtsXPoPCU49wirtuJDjRT3UURJS46ur8vD7 9o8KhyJ7Kdfplog88cRcKGkj/aCQposAxcWLuQAZtuYvIrdccnG5MRy5IwlMexEj zGpxSZClB6OdRA9STOfjktpVy8+xVkoLKY39Wubl1DBihFYOgrUrpTvCpbi/yKM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:33 2025 by rpki-client