$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa File: c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa (raw, json) Hash identifier: eNTTKFIPWmYahg7nZXiyCjU9869pruP/dI4OWswIwjM= Subject key identifier: 61:E8:59:77:2C:8F:FD:D9:5B:69:D4:89:47:6E:F7:49:45:0D:A9:7C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 71B1018A0F38EE174509D227E84EF9D47FD9D298 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa Signing time: Wed 22 Oct 2025 00:40:03 +0000 ROA not before: Wed 22 Oct 2025 00:40:03 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:8801::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b1:01:8a:0f:38:ee:17:45:09:d2:27:e8:4e:f9:d4:7f:d9:d2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:40:03 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=ac3f0fb72d81da3375c749bc1b7faf398b04f8a96c873fe21641bea0067a1ac7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:6c:3c:4a:96:6a:2b:da:f5:a5:32:69:9b: 74:91:cc:7d:1e:55:b6:09:da:82:96:09:b4:d1:93: 62:54:72:af:0b:f2:5a:47:8c:3c:7c:35:55:2d:43: 2a:a5:48:92:05:b7:08:36:1e:36:ad:31:e6:bd:6a: 6d:92:8a:18:1b:3c:ae:3b:6e:87:97:d7:12:55:1a: 3c:04:22:63:a3:dd:59:3d:a9:d9:cd:55:1a:26:1d: 5a:cb:5d:d4:d0:6e:82:95:0d:ce:d1:dc:61:bb:51: 08:74:39:1f:7a:66:5c:4a:f2:34:17:fc:52:07:34: ca:cc:b2:01:d8:d4:cc:c0:6c:ea:1c:e1:22:73:59: d4:95:bc:a1:3d:f6:00:8c:b4:48:96:eb:5d:d9:e1: 69:6a:58:48:20:13:25:a9:11:4a:60:f4:cb:bb:6e: d6:a3:f6:d8:bb:f1:e6:35:4f:0b:71:c5:c4:4e:19: d1:82:4b:c6:98:27:bb:16:e1:8d:18:04:f1:f9:cc: 94:af:f4:7d:64:85:93:be:33:2b:1e:56:b4:50:19: c6:13:7c:5a:87:d1:1d:f8:34:a0:c0:62:e5:d0:5a: cd:57:39:1b:a9:51:4a:9a:af:23:58:8f:d7:c2:64: 8f:f3:b4:82:c1:7e:31:6d:01:6a:08:8d:8e:55:d6: 5c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E8:59:77:2C:8F:FD:D9:5B:69:D4:89:47:6E:F7:49:45:0D:A9:7C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c49749c5-4263-443f-a5d1-f0fc1a27edc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8801::/48 Signature Algorithm: sha256WithRSAEncryption 19:d0:cb:77:be:41:a4:d6:41:ca:cf:58:b4:9f:a6:cc:01:ae: 34:1f:6e:e8:23:84:3b:a6:50:d1:4f:54:f7:21:ac:b0:b0:73: f6:fa:3a:36:10:88:18:1c:1e:29:6b:2e:35:8f:9d:6c:1f:b7: 64:0c:e1:44:bf:44:52:36:37:47:a9:53:b2:83:74:6d:3a:fd: a4:24:2b:9e:a9:d0:c9:2b:86:4b:c4:4c:e0:8c:bf:af:bf:03: 25:82:48:e7:4a:77:8a:fe:20:0f:66:81:91:1f:81:a9:17:be: 92:1e:94:af:e3:0d:9c:2f:39:74:a9:ba:d5:2b:17:f0:c4:c5: 76:7b:c4:52:fd:bf:26:ce:7b:25:aa:94:96:36:87:34:60:c4: 60:5f:0c:52:3c:50:6d:ac:a2:b1:12:d2:08:49:bc:f3:f4:3b: 30:1e:fd:6a:27:26:11:b0:90:16:a7:75:84:13:08:b5:77:17: 7d:36:07:c2:af:b8:a9:8d:e2:9f:52:66:5f:7e:00:07:d3:55: dd:ce:19:3c:22:f3:42:c7:dc:fb:ad:4b:d4:ad:19:cd:3d:6e: f2:cc:2f:6e:6a:7a:ed:aa:e6:fe:e8:f2:26:80:8e:02:49:1b: 7e:c2:02:17:ab:d9:59:5a:33:34:96:df:c2:0f:51:6a:c9:cf: b8:ce:8e:1d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcbEBig847hdFCdIn6E751H/Z0pgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA0MDAzWhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzNmMGZiNzJkODFkYTMzNzVjNzQ5YmMxYjdmYWYzOThi MDRmOGE5NmM4NzNmZTIxNjQxYmVhMDA2N2ExYWM3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUkWw8SpZqK9r1pTJpm3SRzH0eVbYJ2oKWCbTRk2JUcq8L 8lpHjDx8NVUtQyqlSJIFtwg2HjatMea9am2SihgbPK47boeX1xJVGjwEImOj3Vk9 qdnNVRomHVrLXdTQboKVDc7R3GG7UQh0OR96ZlxK8jQX/FIHNMrMsgHY1MzAbOoc 4SJzWdSVvKE99gCMtEiW613Z4WlqWEggEyWpEUpg9Mu7btaj9ti78eY1TwtxxcRO GdGCS8aYJ7sW4Y0YBPH5zJSv9H1khZO+MyseVrRQGcYTfFqH0R34NKDAYuXQWs1X ORupUUqaryNYj9fCZI/ztILBfjFtAWoIjY5V1lxNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUYehZdyyP/dlbadSJR273SUUNqXwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M0OTc0OWM1LTQyNjMtNDQzZi1hNWQxLWYwZmMxYTI3ZWRjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiAEwDQYJKoZIhvcNAQELBQADggEBABnQy3e+QaTWQcrPWLSfpswB rjQfbugjhDumUNFPVPchrLCwc/b6OjYQiBgcHilrLjWPnWwft2QM4US/RFI2N0ep U7KDdG06/aQkK56p0MkrhkvETOCMv6+/AyWCSOdKd4r+IA9mgZEfgakXvpIelK/j DZwvOXSputUrF/DExXZ7xFL9vybOeyWqlJY2hzRgxGBfDFI8UG2sorES0ghJvPP0 OzAe/WonJhGwkBandYQTCLV3F302B8KvuKmN4p9SZl9+AAfTVd3OGTwi80LH3Put S9StGc09bvLML25qeu2q5v7o8iaAjgJJG37CAher2VlaMzSW38IPUWrJz7jOjh0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:10 2025 by rpki-client