$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e40236b0-984f-43cb-abc3-52e70df4a8c8.roa File: e40236b0-984f-43cb-abc3-52e70df4a8c8.roa (raw, json) Hash identifier: Mg+dU6h3DEfPTSucY6SNL9PUxq1T8veB7Ve1LQIPmEA= Subject key identifier: C7:8F:AC:DD:83:BD:E0:F5:61:55:AB:83:E8:66:6E:6B:1E:95:6B:BF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6C504BA42EBF02062851E62D6508D173E1783136 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e40236b0-984f-43cb-abc3-52e70df4a8c8.roa Signing time: Fri 31 Oct 2025 01:50:39 +0000 ROA not before: Fri 31 Oct 2025 01:50:39 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:50:4b:a4:2e:bf:02:06:28:51:e6:2d:65:08:d1:73:e1:78:31:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:39 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=d33e9a2a2f584f76d90e7206917cebec5e9ee5c77bef041a3194d1864cf57a8c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:71:24:b1:38:8f:e7:c8:9b:1b:d1:75:1c:e3: c3:1f:4e:14:c1:ca:3b:3e:57:13:9c:fb:a1:69:24: 91:7a:b2:e5:98:df:73:f3:32:df:6c:43:58:87:1c: 81:b3:60:a3:70:55:ba:ec:30:35:63:fc:9d:06:21: 99:4c:7d:a9:91:c4:0d:1a:90:94:73:70:f4:43:95: 5a:92:8b:0e:9a:3e:58:44:7d:be:4e:e0:db:4f:e5: 40:65:2a:b5:4c:6c:78:5e:eb:e2:28:26:54:50:98: 00:07:40:fc:05:12:01:c2:8c:d3:bd:ef:13:f6:4d: 9a:d1:bc:84:a6:b3:31:5a:82:1d:ad:2f:92:eb:c8: 6e:97:8e:75:47:27:5e:ac:f9:1f:dd:af:0d:3e:11: 3e:68:ab:7f:50:f6:4b:65:71:03:ae:d5:11:6f:e7: ab:5a:58:01:d7:8f:83:14:d5:a6:8b:1d:90:be:94: 49:55:24:db:93:71:a9:fe:21:f2:54:20:52:60:ef: 43:2a:d4:40:bc:12:9d:0d:e7:79:7f:4a:10:ee:a4: b0:08:52:2d:aa:bc:d0:3c:0b:c4:50:e7:e6:67:53: 4f:08:32:dd:59:93:e5:cd:2e:ad:99:e6:96:3b:73: 7f:cf:8a:7b:6c:3e:cc:fa:1b:0d:fb:d5:a6:c2:4a: 81:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8F:AC:DD:83:BD:E0:F5:61:55:AB:83:E8:66:6E:6B:1E:95:6B:BF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e40236b0-984f-43cb-abc3-52e70df4a8c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610c::/48 Signature Algorithm: sha256WithRSAEncryption 1d:33:61:75:32:2b:7c:d8:58:16:29:5f:2c:0a:08:f9:f0:5a: 1c:2a:10:2a:d2:bd:3a:ad:08:a9:c6:55:82:e9:9f:d7:70:26: 36:ed:2f:f7:29:76:a4:4c:f3:2c:af:59:3a:ac:ec:2b:5e:f9: 12:1a:0c:fd:1a:64:40:b6:82:7b:93:6a:0a:b5:ca:74:63:81: 99:bc:b0:e8:dd:01:09:57:14:b0:c6:d0:8a:ce:ef:b4:38:0a: f1:7f:c7:9e:f6:ef:93:86:1b:f7:f3:2b:c4:82:33:7c:bd:42: 1d:46:80:b2:6b:1f:0c:8b:31:f8:b3:20:fb:ae:92:ec:55:00: 62:f0:b5:50:d0:fb:2c:a3:ca:4b:cd:97:a5:52:7f:f0:e4:c9: e4:24:8b:5f:ab:f0:1f:60:e6:83:98:72:b3:83:31:37:8d:74: b4:1b:e7:e1:55:c4:e5:7e:c0:4a:97:ef:06:ae:6f:a3:60:7a: f8:9a:44:50:8d:73:63:59:3f:f8:06:44:cc:2c:69:17:51:92: 36:35:99:5d:09:d3:b7:67:8a:86:a7:a8:bd:ab:b5:14:a4:68: 38:e0:6d:08:e1:03:cb:41:61:31:96:58:3b:1e:9e:00:6f:bf: ec:7f:e9:fe:36:6b:82:1f:2e:f9:68:0a:8a:e1:20:a8:41:00: c6:25:1a:9c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbFBLpC6/AgYoUeYtZQjRc+F4MTYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDM5WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzNlOWEyYTJmNTg0Zjc2ZDkwZTcyMDY5MTdjZWJlYzVl OWVlNWM3N2JlZjA0MWEzMTk0ZDE4NjRjZjU3YThjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNcSSxOI/nyJsb0XUc48MfThTByjs+VxOc+6FpJJF6suWY 33PzMt9sQ1iHHIGzYKNwVbrsMDVj/J0GIZlMfamRxA0akJRzcPRDlVqSiw6aPlhE fb5O4NtP5UBlKrVMbHhe6+IoJlRQmAAHQPwFEgHCjNO97xP2TZrRvISmszFagh2t L5LryG6XjnVHJ16s+R/drw0+ET5oq39Q9ktlcQOu1RFv56taWAHXj4MU1aaLHZC+ lElVJNuTcan+IfJUIFJg70Mq1EC8Ep0N53l/ShDupLAIUi2qvNA8C8RQ5+ZnU08I Mt1Zk+XNLq2Z5pY7c3/PintsPsz6Gw371abCSoFzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUx4+s3YO94PVhVauD6GZuax6Va78wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2U0MDIzNmIwLTk4NGYtNDNjYi1hYmMzLTUyZTcwZGY0YThjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQwwDQYJKoZIhvcNAQELBQADggEBAB0zYXUyK3zYWBYpXywKCPnw WhwqECrSvTqtCKnGVYLpn9dwJjbtL/cpdqRM8yyvWTqs7Cte+RIaDP0aZEC2gnuT agq1ynRjgZm8sOjdAQlXFLDG0IrO77Q4CvF/x57275OGG/fzK8SCM3y9Qh1GgLJr HwyLMfizIPuukuxVAGLwtVDQ+yyjykvNl6VSf/DkyeQki1+r8B9g5oOYcrODMTeN dLQb5+FVxOV+wEqX7waub6NgeviaRFCNc2NZP/gGRMwsaRdRkjY1mV0J07dnioan qL2rtRSkaDjgbQjhA8tBYTGWWDsengBvv+x/6f42a4IfLvloCorhIKhBAMYlGpw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:41:28 2025 by rpki-client