$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa File: aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa (raw, json) Hash identifier: PRK/0nz9alk+2OiTqGdDViX8h3TYzJ5VDu+UYCnuEc8= Subject key identifier: E4:F8:5A:A8:B1:45:64:EF:AA:4B:B1:33:D5:FD:78:D8:F8:09:5D:A2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 52A332CC8FBA5CA7391E70C2CC9C2110E1D92E9A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa Signing time: Fri 31 Oct 2025 02:00:05 +0000 ROA not before: Fri 31 Oct 2025 02:00:05 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5502::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a3:32:cc:8f:ba:5c:a7:39:1e:70:c2:cc:9c:21:10:e1:d9:2e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 02:00:05 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=492da1ac69b4191bab2e711037082ee3eb569b3b020667d31f50dea2805809db, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:b3:33:27:45:b9:2e:5b:72:bc:a8:bd:b7: d3:8a:ea:42:b4:96:c7:e9:00:86:41:70:a7:d1:0c: 9d:fa:46:ce:9e:62:d0:2e:1a:a9:92:1b:15:6c:b1: 48:78:98:ca:f0:88:42:57:29:52:fd:4e:58:cc:10: 70:10:c7:3e:31:2c:db:db:de:6f:b0:41:0d:ad:65: 61:cd:da:cb:f0:01:6f:10:3f:0d:a1:6f:e4:43:13: e1:c3:cf:29:c9:27:b6:7a:f2:b3:de:e8:5d:a7:2b: 27:41:ab:01:c4:1c:74:8c:f6:fe:8b:cf:cf:df:6d: 5d:5e:3e:80:92:0b:ec:8a:5f:72:2f:fa:dc:bd:f6: d6:f3:83:cf:ad:75:83:26:f7:1f:a6:3e:f6:5a:77: 11:c6:fd:ea:b6:83:dc:8d:b5:f0:52:ea:99:e1:fe: 10:a8:25:9a:9f:b5:dc:31:f6:d3:33:45:cb:57:c6: 25:8f:1c:b1:26:6d:1f:5f:07:56:15:07:3b:5c:f4: 37:d5:ae:e9:a5:b0:c0:2d:89:e3:46:d0:d3:b2:4f: ac:4e:93:d5:7f:22:64:f5:32:03:0a:14:cc:4e:57: 4b:d5:68:9d:9b:6f:40:94:b1:80:20:47:ba:4e:2a: b1:a7:22:7b:c3:5b:e8:d0:19:cc:8c:0b:9d:46:41: 16:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F8:5A:A8:B1:45:64:EF:AA:4B:B1:33:D5:FD:78:D8:F8:09:5D:A2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aad24a2e-f61b-42b4-9509-9e06a136eb0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5502::/48 Signature Algorithm: sha256WithRSAEncryption 88:43:33:b1:5f:69:3c:f3:d4:7f:25:69:be:7b:4e:26:d7:7a: ae:b5:fe:3f:d9:0e:42:fc:9e:95:ff:fe:72:9d:5d:0d:7d:3b: 9e:c5:6f:32:10:21:21:ba:1f:11:9c:b4:06:29:84:11:bc:07: 33:49:45:19:13:b0:7f:d4:02:4b:a8:e1:8b:e5:36:a3:2f:8d: 67:c9:28:53:e5:b2:ba:0a:15:62:ef:4a:6d:35:28:40:e5:ab: d4:97:6c:63:0c:e6:02:4e:82:9c:d7:14:4f:c0:1a:87:f2:d9: 56:84:9d:ec:2b:d0:15:49:1e:e8:ba:e5:f1:87:98:74:e4:b2: 21:43:a6:ba:4a:06:4d:51:61:11:75:ae:09:62:17:2e:7d:ae: c3:73:a0:38:3b:7d:fa:28:b1:4f:a1:4a:d9:2b:57:d8:c0:58: c3:13:b8:2e:c2:6f:1e:22:8b:dd:b9:86:ee:15:48:3c:a2:28: ec:3e:a3:27:23:e2:0c:0f:c4:aa:e9:9f:b8:35:2a:bb:49:41: 6c:3a:e8:c4:e2:4e:b2:c2:3b:d0:a5:c5:17:8b:2e:f4:c8:9f: 1a:f6:7e:f2:d7:7b:27:32:d4:9a:ea:da:32:dd:c3:0c:15:b6: 95:9b:8a:92:5d:9b:c7:9e:4c:65:f3:33:0d:bd:10:90:1c:57: 53:9e:5c:ce -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUqMyzI+6XKc5HnDCzJwhEOHZLpowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDIwMDA1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTJkYTFhYzY5YjQxOTFiYWIyZTcxMTAzNzA4MmVlM2Vi NTY5YjNiMDIwNjY3ZDMxZjUwZGVhMjgwNTgwOWRiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvV7MzJ0W5LltyvKi9t9OK6kK0lsfpAIZBcKfRDJ36Rs6e YtAuGqmSGxVssUh4mMrwiEJXKVL9TljMEHAQxz4xLNvb3m+wQQ2tZWHN2svwAW8Q Pw2hb+RDE+HDzynJJ7Z68rPe6F2nKydBqwHEHHSM9v6Lz8/fbV1ePoCSC+yKX3Iv +ty99tbzg8+tdYMm9x+mPvZadxHG/eq2g9yNtfBS6pnh/hCoJZqftdwx9tMzRctX xiWPHLEmbR9fB1YVBztc9DfVrumlsMAtieNG0NOyT6xOk9V/ImT1MgMKFMxOV0vV aJ2bb0CUsYAgR7pOKrGnInvDW+jQGcyMC51GQRbbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5PhaqLFFZO+qS7Ez1f142PgJXaIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FhZDI0YTJlLWY2MWItNDJiNC05NTA5LTllMDZhMTM2ZWIwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQIwDQYJKoZIhvcNAQELBQADggEBAIhDM7FfaTzz1H8lab57TibX eq61/j/ZDkL8npX//nKdXQ19O57FbzIQISG6HxGctAYphBG8BzNJRRkTsH/UAkuo 4YvlNqMvjWfJKFPlsroKFWLvSm01KEDlq9SXbGMM5gJOgpzXFE/AGofy2VaEnewr 0BVJHui65fGHmHTksiFDprpKBk1RYRF1rgliFy59rsNzoDg7ffoosU+hStkrV9jA WMMTuC7Cbx4ii925hu4VSDyiKOw+oycj4gwPxKrpn7g1KrtJQWw66MTiTrLCO9Cl xReLLvTInxr2fvLXeycy1Jrq2jLdwwwVtpWbipJdm8eeTGXzMw29EJAcV1OeXM4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:24 2025 by rpki-client