$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/93bd8041-4018-45ab-ad29-ec9c12c01fe3.roa File: 93bd8041-4018-45ab-ad29-ec9c12c01fe3.roa (raw, json) Hash identifier: 0FkUsx1rQUvrcYy2UcGdDzfaD51tuh0mgEa6UVB7M5I= Subject key identifier: D2:94:F5:A9:21:8C:F4:A3:E1:1A:B1:E3:AB:4E:8D:0E:46:F3:46:DE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 20A65A78A6BBF64B4B4D97B93F586B8A06A34E1F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/93bd8041-4018-45ab-ad29-ec9c12c01fe3.roa Signing time: Fri 31 Oct 2025 02:00:07 +0000 ROA not before: Fri 31 Oct 2025 02:00:07 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a6:5a:78:a6:bb:f6:4b:4b:4d:97:b9:3f:58:6b:8a:06:a3:4e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 02:00:07 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=572bceb2c2de6e15db338b12fd8c6e9acd606aa4f6372b68a06fbbe19eb75c29, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:df:2e:83:e7:23:b1:ea:f4:0d:55:97:44:b6: 33:19:c6:dd:3e:df:60:b0:75:36:5a:ba:32:dc:dc: a7:90:32:ba:6a:ab:87:a8:a6:ab:06:c0:85:ab:2a: 92:f8:56:84:7d:b7:77:3c:1f:04:fd:a1:91:cf:30: 2a:05:35:0c:67:dc:5f:e6:8a:c9:c7:86:23:ad:4f: 16:99:07:c3:5b:51:57:8e:d7:eb:ed:b7:87:27:ae: 0d:aa:c0:6b:2e:65:5e:30:42:2c:4e:7b:ca:12:0c: 38:21:c4:3f:a2:2a:8c:7c:55:8d:12:fa:7f:ac:2d: 41:4c:d1:96:2e:79:16:9d:b4:c3:4a:72:0d:c8:e8: 44:f7:c9:aa:d3:d8:73:f7:16:7e:0f:74:8d:f6:40: 57:f8:8d:5c:e5:14:e7:ec:fb:be:e7:23:45:be:d6: 4e:22:34:66:2e:63:d9:7d:5e:05:45:e2:76:90:64: bd:b4:3e:3e:33:e2:8d:f0:80:ba:a5:29:2e:24:9b: 80:f0:7b:27:70:eb:df:79:95:e4:64:01:14:ca:c6: a5:c0:84:44:69:38:b2:4a:21:33:07:d3:54:59:bd: 92:20:f9:56:79:46:9a:4e:c7:c7:4e:d6:00:fc:57: ea:b4:33:6f:48:7a:c7:8d:8b:4e:e9:cb:ad:62:43: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:F5:A9:21:8C:F4:A3:E1:1A:B1:E3:AB:4E:8D:0E:46:F3:46:DE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/93bd8041-4018-45ab-ad29-ec9c12c01fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6104::/48 Signature Algorithm: sha256WithRSAEncryption a3:f8:5f:0f:5e:0c:c1:2d:8e:54:37:7c:4d:3b:bf:76:9e:1d: f5:4f:51:2e:e9:a5:04:6e:7f:dd:ab:9e:c1:fa:91:d8:e3:65: 14:d4:f0:e9:20:f6:32:65:5b:0d:a6:09:32:9d:18:fa:fd:ae: 82:e6:89:29:4a:99:5c:d3:22:76:74:5a:3f:47:d0:ae:c7:59: ca:50:e3:d4:fc:41:af:ee:16:6a:ae:33:32:a1:4b:38:28:0b: 4d:83:49:f0:68:4b:a1:3f:f9:53:af:7c:a3:05:06:0d:da:df: 5e:17:87:67:bc:44:50:88:da:82:51:a2:f8:f4:c1:34:e7:d9: f7:67:ba:b7:4b:e3:96:7a:b1:e9:4e:b8:c8:37:99:eb:7b:0f: 7f:da:49:a6:d2:88:fc:6d:65:0c:a8:ed:82:b3:ee:ab:6d:f7: d7:76:9f:87:b8:4d:39:c9:d1:19:3e:08:8a:12:48:8a:3a:37: 41:6a:d4:8d:94:13:16:25:70:3b:cc:6c:1e:45:3c:e3:7e:47: 80:40:1b:af:e9:4f:5f:d2:ba:b5:78:67:1c:36:09:53:49:d2: 03:cd:b1:e1:f4:51:71:45:f8:89:10:8f:3d:30:11:90:5a:aa: e1:ba:d9:d2:a8:3c:96:18:a3:6e:09:af:f3:b3:11:9d:2a:82: 92:fa:57:70 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIKZaeKa79ktLTZe5P1hrigajTh8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDIwMDA3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzJiY2ViMmMyZGU2ZTE1ZGIzMzhiMTJmZDhjNmU5YWNk NjA2YWE0ZjYzNzJiNjhhMDZmYmJlMTllYjc1YzI5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD63y6D5yOx6vQNVZdEtjMZxt0+32CwdTZaujLc3KeQMrpq q4eopqsGwIWrKpL4VoR9t3c8HwT9oZHPMCoFNQxn3F/misnHhiOtTxaZB8NbUVeO 1+vtt4cnrg2qwGsuZV4wQixOe8oSDDghxD+iKox8VY0S+n+sLUFM0ZYueRadtMNK cg3I6ET3yarT2HP3Fn4PdI32QFf4jVzlFOfs+77nI0W+1k4iNGYuY9l9XgVF4naQ ZL20Pj4z4o3wgLqlKS4km4Dweydw6995leRkARTKxqXAhERpOLJKITMH01RZvZIg +VZ5RppOx8dO1gD8V+q0M29IeseNi07py61iQ5ibAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0pT1qSGM9KPhGrHjq06NDkbzRt4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzkzYmQ4MDQxLTQwMTgtNDVhYi1hZDI5LWVjOWMxMmMwMWZlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQQwDQYJKoZIhvcNAQELBQADggEBAKP4Xw9eDMEtjlQ3fE07v3ae HfVPUS7ppQRuf92rnsH6kdjjZRTU8Okg9jJlWw2mCTKdGPr9roLmiSlKmVzTInZ0 Wj9H0K7HWcpQ49T8Qa/uFmquMzKhSzgoC02DSfBoS6E/+VOvfKMFBg3a314Xh2e8 RFCI2oJRovj0wTTn2fdnurdL45Z6selOuMg3met7D3/aSabSiPxtZQyo7YKz7qtt 99d2n4e4TTnJ0Rk+CIoSSIo6N0Fq1I2UExYlcDvMbB5FPON+R4BAG6/pT1/SurV4 Zxw2CVNJ0gPNseH0UXFF+IkQjz0wEZBaquG62dKoPJYYo24Jr/OzEZ0qgpL6V3A= -----END CERTIFICATE-----Generated at Wed Nov 5 09:25:28 2025 by rpki-client