$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa File: ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa (raw, json) Hash identifier: 9AFJwi7dwx2hVTrKoy7xPUqO86lj4sdwJ+2sqLUGdlY= Subject key identifier: 70:84:F3:8C:64:FC:B8:3A:B3:E3:4F:C6:70:2E:36:46:29:6F:82:24 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 77C880552E8837BF7C0248E849D8CA4C2B87611D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa Signing time: Fri 31 Oct 2025 01:50:10 +0000 ROA not before: Fri 31 Oct 2025 01:50:10 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c8:80:55:2e:88:37:bf:7c:02:48:e8:49:d8:ca:4c:2b:87:61:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:10 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0bb1fc3465f032e7daaf1e38b36665ed043ef8e3efddb78c9b184b14a8364f3b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e6:ed:0a:e5:99:c0:35:bc:f5:08:ce:e5:f9: e0:a5:23:8a:03:98:54:e0:3b:a4:98:8e:db:9c:62: 9a:d7:6f:02:71:e2:3b:17:b6:61:02:30:17:b7:55: 77:97:bd:32:b0:7c:ca:d2:91:76:8b:d5:36:7e:f8: 5c:89:07:1a:6a:b0:00:35:ea:23:65:b0:f5:7f:1b: 11:50:9b:4f:ab:f0:85:1d:43:43:f2:60:ac:63:be: fd:bc:50:96:9f:b0:50:84:0f:87:96:d7:d1:e5:5f: 73:73:d6:b1:e4:f4:c3:57:ee:90:27:25:2f:f7:80: d0:32:d3:c7:60:ea:ea:00:fa:af:1c:44:fd:6d:69: d4:18:c2:4d:4e:4d:d7:af:2a:0c:d0:59:f6:27:f7: 31:47:21:b1:c9:52:82:0b:eb:e0:d8:c5:3b:27:a2: 69:c6:87:f2:7f:5c:f3:13:49:0f:f0:7f:15:96:43: 37:30:f0:93:a4:4b:74:42:4b:fa:61:d5:62:be:24: 68:2c:25:74:f0:8a:5d:4f:b4:5a:32:9d:94:9c:16: 92:e1:d2:8a:6e:47:1d:11:19:c8:58:54:05:5d:00: a5:5c:7d:60:d1:14:5f:8e:a2:92:67:c8:b9:48:99: c4:75:b2:11:f1:59:e4:c9:26:cf:03:de:1a:9b:53: ff:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:84:F3:8C:64:FC:B8:3A:B3:E3:4F:C6:70:2E:36:46:29:6F:82:24 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ba699c1e-9e17-4134-9d1f-8ba97ffd9f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611a::/48 Signature Algorithm: sha256WithRSAEncryption 65:49:1c:91:7d:bd:1d:e7:09:c1:b7:9a:46:29:9a:dd:0a:e0: 45:fc:b5:f6:e6:e3:df:b6:ad:55:db:d4:e8:83:64:53:6a:da: 09:08:6f:47:d1:57:50:7e:c7:42:61:9d:c7:16:4b:3f:4f:b6: 43:3e:17:1f:a5:a5:a8:39:c1:73:bc:20:d7:ad:7c:e8:23:fc: 83:9d:53:a8:7d:b3:9f:61:7a:4a:35:55:34:45:8b:07:ae:41: 6f:06:3e:1f:3a:31:3b:95:07:67:96:5f:38:bb:12:96:62:5b: 5a:bf:4c:41:a2:99:40:02:cb:7d:b6:c4:2a:b5:b0:48:9d:f0: 9c:7c:2f:a4:52:c2:06:b9:70:79:9a:87:91:cf:fc:fd:99:a6: 9a:63:9a:20:6a:5a:2c:0b:cf:1c:dc:46:e8:c9:a4:0e:f1:54: 25:86:69:32:de:a0:9e:fb:b9:01:a1:1a:d8:6d:65:d6:62:ab: e5:36:b7:18:d2:1a:ef:e4:a0:99:4e:07:ee:07:b7:05:3e:24: 6d:b4:84:16:79:4a:d9:da:a6:8b:c9:0c:90:52:fc:a1:03:69: 34:ba:8b:d8:a5:e4:59:38:05:e4:c5:45:ca:13:c5:52:87:6e: c2:cb:c1:5f:1e:fc:26:2b:a5:52:7b:5a:bc:50:54:b2:0a:65: dc:e6:b8:b0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUd8iAVS6IN798AkjoSdjKTCuHYR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDEwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmIxZmMzNDY1ZjAzMmU3ZGFhZjFlMzhiMzY2NjVlZDA0 M2VmOGUzZWZkZGI3OGM5YjE4NGIxNGE4MzY0ZjNiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK5u0K5ZnANbz1CM7l+eClI4oDmFTgO6SYjtucYprXbwJx 4jsXtmECMBe3VXeXvTKwfMrSkXaL1TZ++FyJBxpqsAA16iNlsPV/GxFQm0+r8IUd Q0PyYKxjvv28UJafsFCED4eW19HlX3Nz1rHk9MNX7pAnJS/3gNAy08dg6uoA+q8c RP1tadQYwk1OTdevKgzQWfYn9zFHIbHJUoIL6+DYxTsnomnGh/J/XPMTSQ/wfxWW Qzcw8JOkS3RCS/ph1WK+JGgsJXTwil1PtFoynZScFpLh0opuRx0RGchYVAVdAKVc fWDRFF+OopJnyLlImcR1shHxWeTJJs8D3hqbU//NAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUcITzjGT8uDqz40/GcC42RilvgiQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JhNjk5YzFlLTllMTctNDEzNC05ZDFmLThiYTk3ZmZkOWYzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRowDQYJKoZIhvcNAQELBQADggEBAGVJHJF9vR3nCcG3mkYpmt0K 4EX8tfbm49+2rVXb1OiDZFNq2gkIb0fRV1B+x0JhnccWSz9PtkM+Fx+lpag5wXO8 INetfOgj/IOdU6h9s59heko1VTRFiweuQW8GPh86MTuVB2eWXzi7EpZiW1q/TEGi mUACy322xCq1sEid8Jx8L6RSwga5cHmah5HP/P2ZpppjmiBqWiwLzxzcRujJpA7x VCWGaTLeoJ77uQGhGthtZdZiq+U2txjSGu/koJlOB+4HtwU+JG20hBZ5StnapovJ DJBS/KEDaTS6i9il5Fk4BeTFRcoTxVKHbsLLwV8e/CYrpVJ7WrxQVLIKZdzmuLA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:11 2025 by rpki-client