$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa File: c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa (raw, json) Hash identifier: d6sWmTqqfcI6I7DHv11Uily0vclAPBKXQnah1mZS/LI= Subject key identifier: C2:0F:2C:C3:92:D9:7C:CC:69:5F:D7:FE:CB:58:61:E7:FC:83:A6:06 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2A9DBCB290901B4DB2BEC249DC5767F131D2470C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa Signing time: Fri 24 Oct 2025 00:20:07 +0000 ROA not before: Fri 24 Oct 2025 00:20:07 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:4140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:9d:bc:b2:90:90:1b:4d:b2:be:c2:49:dc:57:67:f1:31:d2:47:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 24 00:20:07 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=dabfc66678570737948e57dcd2d87fe9cd6d7c12d35341d32303499da54ff5c1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6b:b8:62:50:d6:13:dc:43:ea:a1:4c:41:8a: e8:03:d4:df:59:d5:15:c2:d6:92:1e:1f:ad:74:96: 77:a4:e8:5a:87:57:27:18:2e:49:89:ee:7e:99:11: fc:41:00:ea:c3:a2:ce:9c:7f:ed:04:22:b0:3b:a3: 93:42:f7:fa:26:35:83:b9:3f:03:8f:db:9c:28:56: 89:e8:6e:24:c4:bf:54:c4:15:59:69:b2:27:c6:fc: 2b:4c:08:94:d2:81:76:58:b3:8e:5d:41:21:9a:3f: 91:71:c8:4e:c1:f9:f5:89:5d:95:15:3d:b0:f0:b1: 52:3a:e7:af:72:b4:58:48:d0:f7:15:d8:b1:16:d5: 56:38:8e:65:ad:5f:eb:d6:d7:1f:0e:47:8d:53:ae: 54:ca:5a:1c:d6:85:3e:00:96:76:31:b8:9f:a0:91: d1:19:aa:a9:48:50:a6:46:34:fa:25:51:2a:c1:0a: 7f:f2:1a:b7:56:cc:ac:05:7b:e5:2e:e9:5c:44:26: 13:f6:24:a2:ab:6b:70:1b:2d:26:b5:38:a5:22:7f: 0d:cc:b1:b2:bb:55:ad:80:3e:8d:c5:f3:8e:16:c2: 30:e1:cb:8a:8b:a2:f6:2d:ed:7c:1c:1e:19:fd:d3: fd:e2:1b:56:d5:10:b8:64:9e:79:0a:64:11:bf:12: 51:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0F:2C:C3:92:D9:7C:CC:69:5F:D7:FE:CB:58:61:E7:FC:83:A6:06 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4140::/48 Signature Algorithm: sha256WithRSAEncryption 9e:a4:0d:5d:93:d6:c8:64:a0:02:6c:0d:8c:de:a3:4c:04:2c: 56:4c:cb:56:46:86:c8:e2:b3:76:da:0a:0a:dc:86:e8:a3:48: d0:9d:68:c5:41:4d:eb:9f:5b:ab:14:c2:f5:4d:65:87:87:1a: 0a:c2:b3:b3:6f:d0:27:02:ef:d0:db:98:17:a7:5e:64:03:e1: 7b:6d:d8:8a:de:f3:82:49:18:93:03:fa:8b:e0:42:d9:fe:6f: 57:64:3f:5a:76:be:b4:ca:02:14:92:46:73:00:fa:3e:ad:9c: 01:f4:2b:68:2e:89:b8:02:46:91:56:99:94:4d:0d:7f:ea:16: 56:aa:95:bb:6f:af:28:de:cb:59:b5:ae:cf:8c:15:1f:99:9e: 9b:46:ec:80:62:d1:76:23:62:43:69:87:6f:35:58:5e:b2:ed: c6:cc:c7:98:b6:ee:4d:52:ff:80:8c:90:59:63:1c:d6:60:72: c9:9f:a0:33:29:dc:58:f2:44:2b:1b:84:db:1e:6d:b6:03:c6: 37:b1:65:14:eb:66:ad:ca:f0:0c:2b:b6:57:18:6b:b4:30:67: 37:20:9e:92:39:30:cb:83:e4:fc:f7:e6:61:6c:7e:c3:84:24: 53:43:20:38:8c:91:fa:e6:4b:50:b9:43:50:71:72:f5:9d:60: 9e:e7:b5:1d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKp28spCQG02yvsJJ3Fdn8THSRwwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDI0MDAyMDA3WhcNMjUxMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWJmYzY2Njc4NTcwNzM3OTQ4ZTU3ZGNkMmQ4N2ZlOWNk NmQ3YzEyZDM1MzQxZDMyMzAzNDk5ZGE1NGZmNWMxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaa7hiUNYT3EPqoUxBiugD1N9Z1RXC1pIeH610lnek6FqH VycYLkmJ7n6ZEfxBAOrDos6cf+0EIrA7o5NC9/omNYO5PwOP25woVonobiTEv1TE FVlpsifG/CtMCJTSgXZYs45dQSGaP5FxyE7B+fWJXZUVPbDwsVI6569ytFhI0PcV 2LEW1VY4jmWtX+vW1x8OR41TrlTKWhzWhT4AlnYxuJ+gkdEZqqlIUKZGNPolUSrB Cn/yGrdWzKwFe+Uu6VxEJhP2JKKra3AbLSa1OKUifw3MsbK7Va2APo3F844WwjDh y4qLovYt7XwcHhn90/3iG1bVELhknnkKZBG/ElFbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwg8sw5LZfMxpX9f+y1hh5/yDpgYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MzMzdkMWM2LTU4ZmMtNGZmYy1iZjRiLTMwM2FkMDhiYzllZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwQUAwDQYJKoZIhvcNAQELBQADggEBAJ6kDV2T1shkoAJsDYzeo0wE LFZMy1ZGhsjis3baCgrchuijSNCdaMVBTeufW6sUwvVNZYeHGgrCs7Nv0CcC79Db mBenXmQD4Xtt2Ire84JJGJMD+ovgQtn+b1dkP1p2vrTKAhSSRnMA+j6tnAH0K2gu ibgCRpFWmZRNDX/qFlaqlbtvryjey1m1rs+MFR+ZnptG7IBi0XYjYkNph281WF6y 7cbMx5i27k1S/4CMkFljHNZgcsmfoDMp3FjyRCsbhNsebbYDxjexZRTrZq3K8Awr tlcYa7QwZzcgnpI5MMuD5Pz35mFsfsOEJFNDIDiMkfrmS1C5Q1BxcvWdYJ7ntR0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:31:25 2025 by rpki-client