$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d21d01d2-e477-40e0-a950-5c0cc4c51caf.roa File: d21d01d2-e477-40e0-a950-5c0cc4c51caf.roa (raw, json) Hash identifier: 5oJ9jxAFELu9X43M0lk9q5+gMGGTTh1f71iBLPqpOoc= Subject key identifier: CB:9A:89:D9:A7:D5:0F:E9:CD:27:95:FA:FE:EF:FF:0D:C1:49:57:B7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6D0227E3E76706A0FCC5E2B4BB4ED66E510F89F4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d21d01d2-e477-40e0-a950-5c0cc4c51caf.roa Signing time: Fri 31 Oct 2025 01:50:02 +0000 ROA not before: Fri 31 Oct 2025 01:50:02 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:02:27:e3:e7:67:06:a0:fc:c5:e2:b4:bb:4e:d6:6e:51:0f:89:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:02 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=6259f902074be561880f02cb1cf41dac278f4905c9e80ea009900535f478d9b2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:99:cc:19:8b:d6:16:2f:1c:c3:a0:01:c7: 8b:49:37:d8:63:69:6d:2c:b2:22:29:15:86:be:5e: 3f:fe:72:12:c7:27:57:4c:a2:f1:1d:a3:46:55:1e: 96:e2:04:5c:ca:77:43:80:fa:2e:82:44:a0:f8:43: 6e:b9:d0:00:77:63:42:fd:10:2e:c5:31:6b:b7:e4: 29:bb:3b:fd:55:81:b4:38:33:e1:33:31:18:34:ec: b5:3f:20:98:6f:2d:27:41:0f:bd:5f:3e:82:2e:2d: f5:e1:c3:d8:f2:bc:47:e5:71:b7:25:90:96:98:57: bc:ec:e9:f0:e1:85:13:e5:c8:69:b7:e8:03:ab:17: 84:f0:e8:bf:15:74:7a:dc:fb:c1:4c:be:f5:98:b5: 39:e4:77:33:d7:ac:60:58:85:e9:78:5f:a9:ba:f4: c4:34:8f:be:66:9d:1d:19:d0:f0:13:0e:3b:0b:49: c0:00:d3:11:75:a2:05:50:a8:57:71:94:e6:b8:8e: fd:b9:5b:b2:12:c0:c0:ae:11:93:1e:b1:da:fc:56: 05:7a:61:ea:11:6d:93:42:ef:29:11:19:da:8b:48: 43:b6:fc:70:c0:88:ef:19:09:9e:0d:d7:f7:6a:fb: 63:06:ad:38:36:14:46:d1:eb:30:fe:58:72:7f:12: d9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9A:89:D9:A7:D5:0F:E9:CD:27:95:FA:FE:EF:FF:0D:C1:49:57:B7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d21d01d2-e477-40e0-a950-5c0cc4c51caf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6105::/48 Signature Algorithm: sha256WithRSAEncryption 47:5a:b5:45:14:3a:ea:72:0c:91:f5:30:15:75:64:38:4e:ff: 5a:75:c7:8f:42:45:ac:e4:91:9e:2c:66:0b:e4:29:33:b9:36: fd:40:e4:d0:3b:72:a1:c4:68:c1:7c:3d:56:a5:ee:b3:a4:41: 40:b5:be:f3:c2:e4:2c:69:03:51:fa:c4:b9:83:c9:97:9d:da: d2:20:d1:f8:a0:33:4d:3d:f9:b2:f3:20:a1:57:14:1d:08:e3: bd:09:7c:d4:65:a9:34:c2:a2:a6:f7:a1:27:8a:0a:31:2c:52: 76:4f:a0:11:f8:9b:7d:df:31:e4:39:98:02:79:4d:b9:19:05: 4e:12:d5:a5:03:c4:81:33:8b:32:b7:44:1c:3d:aa:b7:78:60: de:82:ed:6f:93:cb:f1:4d:de:f0:54:af:71:bf:e4:23:ab:99: af:f9:a3:3c:33:ba:9c:70:8e:3d:e5:c3:16:7c:e7:79:a2:ed: 45:fc:26:81:7c:b6:22:8a:e6:7c:fc:a6:46:7b:c9:88:08:c7: 64:c5:26:91:6a:1e:8e:53:56:d2:17:d9:28:12:c7:a1:fa:0e: fd:31:ba:38:09:ca:02:2c:81:ae:f3:ca:b7:1d:d4:3e:74:b5: 35:69:d2:8c:da:5c:8b:9c:df:1e:52:8f:3e:d0:fc:f7:ee:b5: 7c:f6:af:e3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbQIn4+dnBqD8xeK0u07WblEPifQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDAyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjU5ZjkwMjA3NGJlNTYxODgwZjAyY2IxY2Y0MWRhYzI3 OGY0OTA1YzllODBlYTAwOTkwMDUzNWY0NzhkOWIyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwRpnMGYvWFi8cw6ABx4tJN9hjaW0ssiIpFYa+Xj/+chLH J1dMovEdo0ZVHpbiBFzKd0OA+i6CRKD4Q2650AB3Y0L9EC7FMWu35Cm7O/1VgbQ4 M+EzMRg07LU/IJhvLSdBD71fPoIuLfXhw9jyvEflcbclkJaYV7zs6fDhhRPlyGm3 6AOrF4Tw6L8VdHrc+8FMvvWYtTnkdzPXrGBYhel4X6m69MQ0j75mnR0Z0PATDjsL ScAA0xF1ogVQqFdxlOa4jv25W7ISwMCuEZMesdr8VgV6YeoRbZNC7ykRGdqLSEO2 /HDAiO8ZCZ4N1/dq+2MGrTg2FEbR6zD+WHJ/EtlPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUy5qJ2afVD+nNJ5X6/u//DcFJV7cwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyMWQwMWQyLWU0NzctNDBlMC1hOTUwLTVjMGNjNGM1MWNhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQUwDQYJKoZIhvcNAQELBQADggEBAEdatUUUOupyDJH1MBV1ZDhO /1p1x49CRazkkZ4sZgvkKTO5Nv1A5NA7cqHEaMF8PVal7rOkQUC1vvPC5CxpA1H6 xLmDyZed2tIg0figM009+bLzIKFXFB0I470JfNRlqTTCoqb3oSeKCjEsUnZPoBH4 m33fMeQ5mAJ5TbkZBU4S1aUDxIEzizK3RBw9qrd4YN6C7W+Ty/FN3vBUr3G/5COr ma/5ozwzupxwjj3lwxZ853mi7UX8JoF8tiKK5nz8pkZ7yYgIx2TFJpFqHo5TVtIX 2SgSx6H6Dv0xujgJygIsga7zyrcd1D50tTVp0ozaXIuc3x5Sjz7Q/PfutXz2r+M= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:21 2025 by rpki-client