$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa File: b90bcce5-377e-4df4-b77e-97a06ec916c4.roa (raw, json) Hash identifier: ERi/2kQCEfufs23sOJxWlxmYZY7kPkUVdkVe/Y4PD7s= Subject key identifier: 37:49:9A:FD:46:39:1B:47:53:AA:1F:5C:02:F3:9F:69:10:C6:CA:FC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 752B671310B576DC9FC2B33C81F4CCFDD891E57A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa Signing time: Tue 21 Oct 2025 13:00:03 +0000 ROA not before: Tue 21 Oct 2025 13:00:03 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2b:67:13:10:b5:76:dc:9f:c2:b3:3c:81:f4:cc:fd:d8:91:e5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 13:00:03 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=68934e6f868635017b2eea7c49e077e77a607faef92cbc866343c75e1f3c7239, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4c:01:64:41:09:04:49:fe:e7:27:1d:49:7c: bc:70:3b:09:c0:28:d6:41:f6:f4:50:bb:eb:05:cd: 41:d2:01:a6:4b:f1:9e:9c:22:f6:e2:2a:be:f4:49: f6:72:79:12:e0:28:4d:71:6d:94:b5:b8:13:89:74: 09:28:29:a5:bf:b9:4e:2b:ac:94:f6:6d:96:5a:70: df:2a:3e:78:e7:97:be:5a:b7:15:21:22:fc:5d:12: 7d:1a:ef:15:0f:1e:3b:fa:60:66:d2:8b:04:f5:6f: 80:e4:9c:70:f0:83:42:e6:a4:29:be:29:3b:54:14: 9d:20:c0:8c:9d:b0:e4:38:2a:a2:21:0c:c8:32:af: e0:d1:8a:53:ef:2b:1b:e8:c0:26:07:ac:b8:56:26: d4:eb:8e:4e:ca:fc:46:d3:96:0f:6e:b5:8a:fa:09: 03:e1:5c:fd:8f:69:28:90:55:67:c4:e4:4f:19:5f: 1a:c3:84:81:09:95:24:a4:bb:a5:89:fc:5f:8c:3e: fb:a6:8d:a1:39:dd:c6:c9:17:37:c6:b4:fd:c5:ca: cc:5e:1a:09:5b:a2:97:38:da:db:03:f2:4c:b5:51: 46:36:d7:ba:64:41:98:b7:30:54:16:ac:ed:32:3f: 74:7e:fc:4e:93:45:bc:4e:50:ee:2b:48:fd:db:fc: b3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:49:9A:FD:46:39:1B:47:53:AA:1F:5C:02:F3:9F:69:10:C6:CA:FC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:30::/44 Signature Algorithm: sha256WithRSAEncryption 72:44:96:99:82:63:81:af:14:97:29:f3:1d:72:22:ec:d8:59: 4b:83:45:b2:f1:5d:22:ff:ac:b8:5a:6e:f8:f7:3c:b2:fa:5a: de:f0:50:fa:6b:c4:66:41:db:7d:6e:80:c5:e7:0a:11:69:9e: 96:da:9d:fd:ad:f6:28:83:5d:5c:0a:ad:be:d7:f4:cd:5e:e4: ca:e7:75:0d:13:ea:ac:bf:a0:fe:40:6c:01:f0:09:08:64:2d: 4a:87:8e:e4:46:49:77:b1:3e:ec:64:7c:29:87:55:7d:c7:9a: 87:d6:2d:a9:0c:0d:68:e0:9b:e0:7b:02:79:00:ba:e5:49:c2: 3e:d7:50:a7:09:1d:2c:2f:5a:59:d2:70:6a:d6:f1:d4:d8:65: 78:4c:e3:9b:ff:b6:18:6e:8f:23:a2:73:3d:a2:53:1c:ca:11: 52:86:de:9b:4e:52:8c:4f:0b:74:d2:b9:04:4b:15:55:15:79: 55:ba:c6:07:04:75:13:76:a9:51:31:d1:e3:5d:14:3e:59:7c: 38:42:13:9b:90:32:0a:86:a3:93:f1:78:67:9a:f4:7e:e8:78: ff:df:a8:74:36:fc:84:54:9e:6c:3e:97:e8:e3:a6:98:95:d7: 77:c5:5a:b6:cd:91:6d:36:dc:7a:7a:95:ac:e9:6b:7b:51:04: 70:18:3b:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdStnExC1dtyfwrM8gfTM/diR5XowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTMwMDAzWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODkzNGU2Zjg2ODYzNTAxN2IyZWVhN2M0OWUwNzdlNzdh NjA3ZmFlZjkyY2JjODY2MzQzYzc1ZTFmM2M3MjM5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkTAFkQQkESf7nJx1JfLxwOwnAKNZB9vRQu+sFzUHSAaZL 8Z6cIvbiKr70SfZyeRLgKE1xbZS1uBOJdAkoKaW/uU4rrJT2bZZacN8qPnjnl75a txUhIvxdEn0a7xUPHjv6YGbSiwT1b4DknHDwg0LmpCm+KTtUFJ0gwIydsOQ4KqIh DMgyr+DRilPvKxvowCYHrLhWJtTrjk7K/EbTlg9utYr6CQPhXP2PaSiQVWfE5E8Z XxrDhIEJlSSku6WJ/F+MPvumjaE53cbJFzfGtP3FysxeGglbopc42tsD8ky1UUY2 17pkQZi3MFQWrO0yP3R+/E6TRbxOUO4rSP3b/LNHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUN0ma/UY5G0dTqh9cAvOfaRDGyvwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I5MGJjY2U1LTM3N2UtNGRmNC1iNzdlLTk3YTA2ZWM5MTZjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwADAwDQYJKoZIhvcNAQELBQADggEBAHJElpmCY4GvFJcp8x1yIuzY WUuDRbLxXSL/rLhabvj3PLL6Wt7wUPprxGZB231ugMXnChFpnpbanf2t9iiDXVwK rb7X9M1e5MrndQ0T6qy/oP5AbAHwCQhkLUqHjuRGSXexPuxkfCmHVX3HmofWLakM DWjgm+B7AnkAuuVJwj7XUKcJHSwvWlnScGrW8dTYZXhM45v/thhujyOicz2iUxzK EVKG3ptOUoxPC3TSuQRLFVUVeVW6xgcEdRN2qVEx0eNdFD5ZfDhCE5uQMgqGo5Px eGea9H7oeP/fqHQ2/IRUnmw+l+jjppiV13fFWrbNkW023Hp6lazpa3tRBHAYO+A= -----END CERTIFICATE-----Generated at Wed Nov 5 05:43:20 2025 by rpki-client