$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b5c62bbb-1686-4eb4-a175-a589cb237d72.roa File: b5c62bbb-1686-4eb4-a175-a589cb237d72.roa (raw, json) Hash identifier: 3bBaxQGqq9jXBl0FAg00DdhOGsdd6i32o/RXYFwFY+4= Subject key identifier: 2D:8B:93:76:5E:44:EF:FC:81:E8:F8:6D:BF:FD:02:7E:0C:E9:96:01 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7EBBE26493135CAD691DBD4C03AAA6A1BB590712 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b5c62bbb-1686-4eb4-a175-a589cb237d72.roa Signing time: Fri 31 Oct 2025 01:50:07 +0000 ROA not before: Fri 31 Oct 2025 01:50:07 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bb:e2:64:93:13:5c:ad:69:1d:bd:4c:03:aa:a6:a1:bb:59:07:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:07 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=20df3fcc8e27c706f9ef909bd16064fd6d4191566838055ea0222f4cf328dd40, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:42:4c:d6:0a:51:8c:fc:b8:9d:49:f2:77:6d: e9:84:5c:90:25:4e:ff:f5:1f:7b:d3:ac:66:92:c9: 4b:78:f2:84:27:b7:32:66:5d:4e:45:88:c9:ee:0d: 46:ab:7c:6f:64:07:b5:a1:01:05:b7:fe:30:cc:73: a2:89:b8:e8:f3:15:2b:c2:ae:41:41:a0:3b:50:08: f8:9e:06:68:89:d8:22:df:87:0f:f5:c6:c5:ad:c7: d7:6f:fb:2b:2d:11:0a:2d:05:fe:ef:0c:67:bf:39: 93:ac:5d:35:3a:b7:b6:22:53:39:99:bd:3b:f6:74: 30:69:c0:4e:e2:2b:b9:04:49:a0:bc:81:e4:63:a9: 7d:30:2b:92:38:06:5f:c3:06:fe:82:f6:f7:c6:e7: 8f:f3:2a:ca:5e:7d:1a:9a:ca:3e:80:c0:ba:18:48: 10:44:9f:b0:0f:47:98:bc:6a:4e:34:e6:c2:cf:2d: dc:69:2b:43:17:c4:95:a4:4e:e5:ef:5b:4d:b7:be: 63:5e:97:18:32:4e:60:43:99:17:0d:e7:49:d8:c0: d1:31:82:cb:ec:22:f8:80:23:fa:c5:eb:14:82:4c: d5:bb:0b:74:45:15:42:61:4f:5b:00:38:44:e0:24: 8b:de:25:d6:b0:b4:51:59:18:16:b7:04:16:f0:df: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8B:93:76:5E:44:EF:FC:81:E8:F8:6D:BF:FD:02:7E:0C:E9:96:01 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b5c62bbb-1686-4eb4-a175-a589cb237d72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6112::/48 Signature Algorithm: sha256WithRSAEncryption 64:31:4b:7e:5c:de:7d:3e:5d:50:d7:56:43:46:5a:f4:71:0f: 3e:db:df:9e:38:1c:da:6b:b1:2b:2a:58:f8:1b:8e:ea:7e:ff: 98:7b:5d:90:fd:c8:17:0f:f4:3d:a1:33:e2:70:eb:18:32:f4: 73:d0:25:37:a5:df:07:d4:02:5a:55:b7:a6:fa:c0:8e:fc:77: be:c4:2b:47:33:08:ea:ef:a0:2a:a5:97:23:38:1c:8e:4a:c6: 5c:10:dd:ca:af:b7:6a:6f:8a:b6:f1:20:cd:e8:00:58:67:93: 35:05:fc:2d:95:82:1f:37:cf:b2:43:e8:e4:1f:f9:86:51:7f: 72:10:96:0b:9f:a8:88:9a:54:bc:56:07:a6:d8:d9:db:92:7d: 59:31:c4:5c:3b:db:0c:6a:b2:56:f5:fe:0a:cd:9e:75:3c:04: b2:34:9a:23:b4:fa:6d:25:90:4e:e9:ff:0a:b7:5f:fc:13:e1: 76:f0:65:1f:7e:0a:00:9f:a4:3b:4f:46:b1:b1:c7:8f:82:ff: 6c:9e:b0:1b:33:44:15:fc:90:55:c7:0e:7e:65:9f:49:c7:d8: 1c:5d:6b:29:6e:4f:11:ed:7e:61:18:28:ef:64:24:58:a9:2b: 29:a7:27:6a:13:42:68:23:a7:b2:3d:dd:2b:17:cb:ee:cc:2c: 9b:53:95:9d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfrviZJMTXK1pHb1MA6qmobtZBxIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDA3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGRmM2ZjYzhlMjdjNzA2ZjllZjkwOWJkMTYwNjRmZDZk NDE5MTU2NjgzODA1NWVhMDIyMmY0Y2YzMjhkZDQwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYQkzWClGM/LidSfJ3bemEXJAlTv/1H3vTrGaSyUt48oQn tzJmXU5FiMnuDUarfG9kB7WhAQW3/jDMc6KJuOjzFSvCrkFBoDtQCPieBmiJ2CLf hw/1xsWtx9dv+ystEQotBf7vDGe/OZOsXTU6t7YiUzmZvTv2dDBpwE7iK7kESaC8 geRjqX0wK5I4Bl/DBv6C9vfG54/zKspefRqayj6AwLoYSBBEn7APR5i8ak405sLP LdxpK0MXxJWkTuXvW023vmNelxgyTmBDmRcN50nYwNExgsvsIviAI/rF6xSCTNW7 C3RFFUJhT1sAOETgJIveJdawtFFZGBa3BBbw3/FFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQULYuTdl5E7/yB6Phtv/0CfgzplgEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I1YzYyYmJiLTE2ODYtNGViNC1hMTc1LWE1ODljYjIzN2Q3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRIwDQYJKoZIhvcNAQELBQADggEBAGQxS35c3n0+XVDXVkNGWvRx Dz7b3544HNprsSsqWPgbjup+/5h7XZD9yBcP9D2hM+Jw6xgy9HPQJTel3wfUAlpV t6b6wI78d77EK0czCOrvoCqllyM4HI5KxlwQ3cqvt2pvirbxIM3oAFhnkzUF/C2V gh83z7JD6OQf+YZRf3IQlgufqIiaVLxWB6bY2duSfVkxxFw72wxqslb1/grNnnU8 BLI0miO0+m0lkE7p/wq3X/wT4XbwZR9+CgCfpDtPRrGxx4+C/2yesBszRBX8kFXH Dn5ln0nH2BxdayluTxHtfmEYKO9kJFipKymnJ2oTQmgjp7I93SsXy+7MLJtTlZ0= -----END CERTIFICATE-----Generated at Wed Nov 5 05:39:11 2025 by rpki-client