$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/df5a5b5e-7d3e-401e-a4e6-4d4a0175d77f.roa File: df5a5b5e-7d3e-401e-a4e6-4d4a0175d77f.roa (raw, json) Hash identifier: Jx2kq3vmZiweDzaY8HcwbUutWhqOxRGWFjwYjGV30uc= Subject key identifier: 5C:9E:E5:30:EC:92:A4:28:B3:BA:08:0B:5D:F1:CB:0E:56:42:2F:9D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 62679461B2C10ED68859E4F3F40B5A6FEEF5121C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/df5a5b5e-7d3e-401e-a4e6-4d4a0175d77f.roa Signing time: Fri 31 Oct 2025 01:50:45 +0000 ROA not before: Fri 31 Oct 2025 01:50:45 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6117::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:67:94:61:b2:c1:0e:d6:88:59:e4:f3:f4:0b:5a:6f:ee:f5:12:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:45 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=4515b188bdcd8c0f69617959379df5da2b410c3f30ceda86ee9d6e5cf4087dd4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:96:22:de:0e:34:cf:7e:71:4e:80:73:8c: b4:90:f4:b7:94:c4:0d:05:cc:30:d0:b9:d3:0d:bb: a2:63:06:6f:11:ae:31:e0:08:e2:ab:08:93:fb:1c: 07:3b:3d:e9:64:93:5a:77:de:e3:94:a6:21:17:34: 59:c6:29:ae:a7:dd:aa:29:64:74:f9:86:a0:01:e4: 89:c0:da:7f:f2:78:c8:eb:4a:1b:a9:09:7f:98:8f: d4:dc:b3:4d:a8:3d:c1:f7:62:d3:25:44:9f:d3:1a: 9d:f4:a5:cb:a2:90:70:36:06:86:52:da:c5:ac:dd: 3f:84:8e:ec:bd:2e:25:a2:d1:b3:da:53:56:e7:7c: ae:1c:de:b7:50:22:d1:ea:d5:48:54:6a:1c:3f:c0: 63:d8:e4:09:c0:84:03:4d:bd:58:33:67:55:68:43: a7:82:1d:e7:b1:e1:af:56:72:ad:84:95:7b:50:d5: f8:e8:9d:a4:3a:09:e4:ce:a6:15:f9:17:67:49:96: e6:ca:99:84:59:c4:29:14:4c:fc:2a:df:5b:81:26: 79:56:75:12:ce:4b:b9:51:0f:2e:33:f2:68:bd:01: fb:fa:5f:fc:30:bc:18:be:33:69:c1:bf:00:c9:1a: 82:05:ed:13:09:0f:20:a0:c0:dd:81:60:f8:a7:ca: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9E:E5:30:EC:92:A4:28:B3:BA:08:0B:5D:F1:CB:0E:56:42:2F:9D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/df5a5b5e-7d3e-401e-a4e6-4d4a0175d77f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6117::/48 Signature Algorithm: sha256WithRSAEncryption 87:88:12:3e:90:38:b1:54:52:2d:70:64:26:bf:b4:8d:0d:72: 79:14:be:77:74:1e:21:84:a2:be:7e:a0:18:45:c9:42:91:13: 11:26:61:28:37:54:df:23:dc:d5:c8:31:d8:ea:39:9a:99:41: 7f:43:3b:3c:7d:1f:a1:03:87:ca:57:54:15:8d:a1:fe:d3:46: c7:b6:77:cb:db:d5:22:f7:58:44:ff:a7:dd:7a:7b:59:78:f0: 04:d0:1c:08:0b:83:c3:1d:82:ab:2f:8c:5c:aa:2f:af:11:b9: 34:d8:79:31:46:44:62:1c:30:68:69:a8:07:34:ee:fa:c0:3e: 07:7c:bb:c2:b1:c8:18:d6:f7:29:d6:c3:9d:5f:1c:f9:fd:51: fb:77:2d:8a:57:04:fe:79:a5:ef:2c:5c:49:be:c9:87:c4:6b: 47:c0:d4:4c:66:2c:29:e6:f1:6f:f5:1d:00:bb:10:e6:99:65: 64:46:d1:c7:4d:85:41:88:85:0a:1a:24:6b:6d:dc:85:54:8b: 6e:8f:f9:88:3b:d5:c3:da:8a:e0:1d:bc:96:5a:a9:81:2c:42: 49:85:78:e4:b3:7c:75:fa:ee:3f:c6:55:4c:f8:6e:88:24:77: 2c:c2:a2:17:4d:23:84:95:b3:50:f3:54:5f:c0:67:23:24:07: c1:07:bc:3d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUYmeUYbLBDtaIWeTz9Atab+71EhwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDQ1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NTE1YjE4OGJkY2Q4YzBmNjk2MTc5NTkzNzlkZjVkYTJi NDEwYzNmMzBjZWRhODZlZTlkNmU1Y2Y0MDg3ZGQ0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCBpYi3g40z35xToBzjLSQ9LeUxA0FzDDQudMNu6JjBm8R rjHgCOKrCJP7HAc7Pelkk1p33uOUpiEXNFnGKa6n3aopZHT5hqAB5InA2n/yeMjr ShupCX+Yj9Tcs02oPcH3YtMlRJ/TGp30pcuikHA2BoZS2sWs3T+Ejuy9LiWi0bPa U1bnfK4c3rdQItHq1UhUahw/wGPY5AnAhANNvVgzZ1VoQ6eCHeex4a9Wcq2ElXtQ 1fjonaQ6CeTOphX5F2dJlubKmYRZxCkUTPwq31uBJnlWdRLOS7lRDy4z8mi9Afv6 X/wwvBi+M2nBvwDJGoIF7RMJDyCgwN2BYPinysDfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXJ7lMOySpCizuggLXfHLDlZCL50wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RmNWE1YjVlLTdkM2UtNDAxZS1hNGU2LTRkNGEwMTc1ZDc3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRcwDQYJKoZIhvcNAQELBQADggEBAIeIEj6QOLFUUi1wZCa/tI0N cnkUvnd0HiGEor5+oBhFyUKRExEmYSg3VN8j3NXIMdjqOZqZQX9DOzx9H6EDh8pX VBWNof7TRse2d8vb1SL3WET/p916e1l48ATQHAgLg8MdgqsvjFyqL68RuTTYeTFG RGIcMGhpqAc07vrAPgd8u8KxyBjW9ynWw51fHPn9Uft3LYpXBP55pe8sXEm+yYfE a0fA1ExmLCnm8W/1HQC7EOaZZWRG0cdNhUGIhQoaJGtt3IVUi26P+Yg71cPaiuAd vJZaqYEsQkmFeOSzfHX67j/GVUz4bogkdyzCohdNI4SVs1DzVF/AZyMkB8EHvD0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:27:15 2025 by rpki-client