$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b11f31cd-336e-4434-8174-6a90ba67bb58.roa File: b11f31cd-336e-4434-8174-6a90ba67bb58.roa (raw, json) Hash identifier: ffRPUmdVziTDKzQ3TUDOmm4Yq06RXC6sHeSEqc05ByA= Subject key identifier: 22:62:B1:69:EF:78:2C:25:3D:1A:8D:8B:18:EF:03:A0:27:98:D6:8B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7584F2EBDA957324A8538CC76EBE9EBC2FE764C8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b11f31cd-336e-4434-8174-6a90ba67bb58.roa Signing time: Tue 21 Oct 2025 13:00:23 +0000 ROA not before: Tue 21 Oct 2025 13:00:23 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5519::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:84:f2:eb:da:95:73:24:a8:53:8c:c7:6e:be:9e:bc:2f:e7:64:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 13:00:23 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=d1e5eda3dba19ecc53caf3ea2c50c148b53a79862e69a7dee3c88601d3db2845, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:61:f5:4b:d7:c9:b9:2e:e9:d7:03:a4:3a: 31:65:ae:ca:96:5a:50:69:16:19:98:a2:29:07:c7: af:7b:d3:04:db:c4:61:c0:63:9f:7a:ad:f7:1b:75: 38:4a:9d:fd:8b:be:61:ed:b8:43:7d:8b:31:80:13: d5:8a:b1:e9:de:2c:03:aa:2f:8d:18:bd:9b:d0:db: 90:8f:07:58:93:8e:47:a9:b9:2e:6c:74:ab:f8:e1: 00:38:c8:cc:4a:f2:a9:f0:bb:b3:e0:95:1c:bf:97: 4a:0a:57:d2:b2:47:01:b0:90:bf:8b:96:06:95:87: 8a:fc:5e:e0:1f:7d:e6:e2:79:1c:6b:d1:6d:df:70: 3f:9d:8f:06:3e:ab:7e:87:87:7d:57:68:21:6d:9d: ce:43:0d:ba:7f:64:d0:d8:e9:d6:4e:cb:5b:05:46: 07:6c:be:70:29:3b:6f:88:53:b7:aa:46:72:61:c7: 2a:d1:03:52:8f:4a:31:e4:bc:77:e3:ac:d4:5a:59: c8:15:a3:cb:50:04:3b:ac:53:fd:c7:8a:9e:dd:9c: 96:c0:cb:e0:48:18:63:a9:cb:c9:7e:ec:49:84:82: cc:9c:36:2d:ef:75:55:39:e1:2d:48:cc:e0:fc:f5: d8:2b:40:ac:05:ef:3c:db:e4:a8:d9:5d:07:63:46: b7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:62:B1:69:EF:78:2C:25:3D:1A:8D:8B:18:EF:03:A0:27:98:D6:8B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b11f31cd-336e-4434-8174-6a90ba67bb58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5519::/48 Signature Algorithm: sha256WithRSAEncryption 05:80:49:65:ed:b8:66:a3:6f:8b:cb:16:d4:79:a4:12:e6:0d: a3:5c:ca:22:e0:10:29:67:17:f2:4a:ee:e6:1f:55:c3:c6:3e: d2:93:e2:35:06:3b:e6:f3:fd:2d:f8:0b:2b:72:86:87:41:a5: 3d:e2:bb:8a:7e:7d:2b:3d:fd:c1:cf:3f:8c:2a:3e:96:e3:87: 40:39:0b:75:68:09:00:34:62:85:b5:01:00:fb:70:9f:ff:28: 1c:97:6d:7a:b6:5d:d6:15:b5:f9:0a:e2:3c:c3:9f:47:53:08: c1:13:98:a3:57:38:48:16:23:2c:18:47:26:6c:9a:4f:38:bb: 74:0b:fb:60:9c:03:1d:fc:b3:66:a0:90:e9:76:a9:b5:b9:fe: 15:1d:14:0d:89:17:4a:4e:15:66:2d:01:67:ad:ec:e5:3a:13: a5:4d:f0:1b:31:7b:41:fa:90:38:f2:c6:d3:5d:9a:67:e2:1b: 77:9d:c4:7e:73:f1:8a:67:6a:4b:0f:40:7b:8e:b1:eb:5e:f6: 7d:de:d7:4a:13:3f:50:79:52:15:ee:6d:39:27:22:20:99:b4: c0:4f:cb:8b:a7:47:1d:8a:87:27:3b:44:14:fd:f2:95:ae:a8: 77:19:84:48:85:7c:be:e2:47:5b:5f:6f:05:22:89:9f:05:36: 9b:53:18:f3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdYTy69qVcySoU4zHbr6evC/nZMgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTMwMDIzWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMWU1ZWRhM2RiYTE5ZWNjNTNjYWYzZWEyYzUwYzE0OGI1 M2E3OTg2MmU2OWE3ZGVlM2M4ODYwMWQzZGIyODQ1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC71WH1S9fJuS7p1wOkOjFlrsqWWlBpFhmYoikHx6970wTb xGHAY596rfcbdThKnf2LvmHtuEN9izGAE9WKseneLAOqL40YvZvQ25CPB1iTjkep uS5sdKv44QA4yMxK8qnwu7PglRy/l0oKV9KyRwGwkL+LlgaVh4r8XuAffebieRxr 0W3fcD+djwY+q36Hh31XaCFtnc5DDbp/ZNDY6dZOy1sFRgdsvnApO2+IU7eqRnJh xyrRA1KPSjHkvHfjrNRaWcgVo8tQBDusU/3Hip7dnJbAy+BIGGOpy8l+7EmEgsyc Ni3vdVU54S1IzOD89dgrQKwF7zzb5KjZXQdjRrd1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUImKxae94LCU9Go2LGO8DoCeY1oswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2IxMWYzMWNkLTMzNmUtNDQzNC04MTc0LTZhOTBiYTY3YmI1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRkwDQYJKoZIhvcNAQELBQADggEBAAWASWXtuGajb4vLFtR5pBLm DaNcyiLgEClnF/JK7uYfVcPGPtKT4jUGO+bz/S34CytyhodBpT3iu4p+fSs9/cHP P4wqPpbjh0A5C3VoCQA0YoW1AQD7cJ//KByXbXq2XdYVtfkK4jzDn0dTCMETmKNX OEgWIywYRyZsmk84u3QL+2CcAx38s2agkOl2qbW5/hUdFA2JF0pOFWYtAWet7OU6 E6VN8Bsxe0H6kDjyxtNdmmfiG3edxH5z8YpnaksPQHuOsete9n3e10oTP1B5UhXu bTknIiCZtMBPy4unRx2Khyc7RBT98pWuqHcZhEiFfL7iR1tfbwUiiZ8FNptTGPM= -----END CERTIFICATE-----Generated at Wed Nov 5 20:50:47 2025 by rpki-client