$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa File: a7be9120-e9b3-488c-b7e4-818fad18a69e.roa (raw, json) Hash identifier: CK2ctpAoI3J4RQ7dERrMOfByjf4XNBSagaXIBD0gJMM= Subject key identifier: 8B:67:16:BB:80:BA:4C:81:E8:91:96:1C:8B:62:7F:51:95:31:18:36 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2FA6AE5A780CEA2D092A1F91F63B14C8825B15CE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa Signing time: Tue 28 Oct 2025 00:10:08 +0000 ROA not before: Tue 28 Oct 2025 00:10:08 +0000 ROA not after: Tue 02 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a6:ae:5a:78:0c:ea:2d:09:2a:1f:91:f6:3b:14:c8:82:5b:15:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 28 00:10:08 2025 GMT Not After : Dec 2 23:59:59 2025 GMT Subject: serialNumber=5c14d39e309e664482ddfad24431f6377c74f6ac5dac214a4f62af007798fb55, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9d:41:f7:d4:80:6a:2d:41:cd:1a:21:6d:8d: 6b:72:c2:58:e5:b0:cc:b8:34:73:54:f7:2a:87:4f: 08:03:f7:2b:91:a3:f1:70:c1:33:41:ef:d8:0d:39: c7:dd:56:c7:db:1b:73:96:9a:7e:fb:4f:f4:69:45: e5:ca:58:82:97:11:21:40:8f:a6:8d:9e:15:95:fe: b5:49:ef:9c:ba:db:3b:03:8c:69:51:2d:a3:96:7a: 79:61:0c:83:c0:79:8f:07:0c:7c:7a:cc:11:d1:d1: 44:48:c9:f3:56:b0:61:5d:b1:20:52:86:6c:69:cf: b8:37:d2:b9:b7:53:d6:66:7d:5f:63:ad:f8:1c:1b: 32:0b:56:b2:57:a1:d4:e4:68:b4:4e:7b:65:66:59: bb:ee:f8:ec:b4:49:e3:9e:3c:d1:76:ef:2c:95:1f: 0e:6b:53:a6:86:5e:43:c9:9a:e2:dc:2f:70:83:0a: 8a:79:91:62:e2:3b:79:bf:ab:0b:79:c6:80:58:c6: 92:e7:c9:22:9d:05:5e:c7:8d:02:bc:e0:ff:c9:8e: 96:7a:55:95:08:af:55:c9:b1:c2:98:15:5b:e7:67: 5b:e9:7f:e2:55:69:1b:8d:ec:2c:d3:2f:69:47:cc: e4:02:65:e6:94:55:40:8e:e6:07:a0:e7:39:42:07: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:67:16:BB:80:BA:4C:81:E8:91:96:1C:8B:62:7F:51:95:31:18:36 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7100::/40 Signature Algorithm: sha256WithRSAEncryption 61:f9:87:ff:aa:3b:6d:24:7b:97:8a:f6:cb:8d:65:48:d9:38: 4f:bc:b1:ee:44:64:9a:82:99:a1:58:be:bb:5b:c4:f2:85:a5: 8c:a1:07:a6:fd:6f:4c:11:1f:70:88:30:37:27:4a:9d:97:f0: 8f:64:03:a2:f7:f9:8e:08:14:82:fa:bd:10:4d:28:70:8a:49: 08:d8:ac:c7:9b:cb:6d:ef:06:b3:61:b0:d6:d4:e5:b2:8a:1b: d9:14:24:0c:4e:bf:7d:c5:8c:fd:91:de:b4:98:74:e6:37:37: af:15:01:03:8b:c7:cd:a6:6b:b2:81:b6:ec:78:be:5e:3d:f5: 4f:2c:9a:b8:47:c0:fe:65:cb:dd:9c:39:08:a1:1a:ec:58:88: f9:8e:33:f0:7b:ad:da:e7:f8:ba:0f:8f:36:d6:56:74:42:36: 89:5d:9f:97:e6:29:bb:dc:2a:87:58:6e:8a:39:c5:9d:f9:08: 3a:ef:75:81:d4:58:12:27:94:00:e6:6e:62:34:c4:fe:f5:d8: ef:30:59:7e:62:07:fb:9a:a6:f5:aa:01:ed:4d:e0:8a:5f:28: 80:ef:89:22:77:7c:df:ed:56:05:a8:be:b5:e8:80:b6:15:dd: 36:dc:93:2b:05:2c:54:71:76:03:45:35:be:ff:4b:1d:43:39: 16:cd:80:cc -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUL6auWngM6i0JKh+R9jsUyIJbFc4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDI4MDAxMDA4WhcNMjUxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzE0ZDM5ZTMwOWU2NjQ0ODJkZGZhZDI0NDMxZjYzNzdj NzRmNmFjNWRhYzIxNGE0ZjYyYWYwMDc3OThmYjU1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRnUH31IBqLUHNGiFtjWtywljlsMy4NHNU9yqHTwgD9yuR o/FwwTNB79gNOcfdVsfbG3OWmn77T/RpReXKWIKXESFAj6aNnhWV/rVJ75y62zsD jGlRLaOWenlhDIPAeY8HDHx6zBHR0URIyfNWsGFdsSBShmxpz7g30rm3U9ZmfV9j rfgcGzILVrJXodTkaLROe2VmWbvu+Oy0SeOePNF27yyVHw5rU6aGXkPJmuLcL3CD Cop5kWLiO3m/qwt5xoBYxpLnySKdBV7HjQK84P/JjpZ6VZUIr1XJscKYFVvnZ1vp f+JVaRuN7CzTL2lHzOQCZeaUVUCO5geg5zlCB3/hAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUi2cWu4C6TIHokZYci2J/UZUxGDYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E3YmU5MTIwLWU5YjMtNDg4Yy1iN2U0LTgxOGZhZDE4YTY5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDycTANBgkqhkiG9w0BAQsFAAOCAQEAYfmH/6o7bSR7l4r2y41lSNk4 T7yx7kRkmoKZoVi+u1vE8oWljKEHpv1vTBEfcIgwNydKnZfwj2QDovf5jggUgvq9 EE0ocIpJCNisx5vLbe8Gs2Gw1tTlsoob2RQkDE6/fcWM/ZHetJh05jc3rxUBA4vH zaZrsoG27Hi+Xj31TyyauEfA/mXL3Zw5CKEa7FiI+Y4z8Hut2uf4ug+PNtZWdEI2 iV2fl+Ypu9wqh1huijnFnfkIOu91gdRYEieUAOZuYjTE/vXY7zBZfmIH+5qm9aoB 7U3gil8ogO+JInd83+1WBai+teiAthXdNtyTKwUsVHF2A0U1vv9LHUM5Fs2AzA== -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:35 2025 by rpki-client