$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8a24442-56c6-46d4-9923-f4d5b17fd850.roa File: f8a24442-56c6-46d4-9923-f4d5b17fd850.roa (raw, json) Hash identifier: o6SRijSFDShYdPkO61oilyCIVqkaMGCo1QuWNLS/oMk= Subject key identifier: B3:C9:7F:09:BB:79:3C:68:BA:3E:B2:03:23:E0:5C:93:09:79:23:EE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 70A38266F00BB1C8036A6CE44D79A79EAB3E18E5 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8a24442-56c6-46d4-9923-f4d5b17fd850.roa Signing time: Tue 21 Oct 2025 12:50:45 +0000 ROA not before: Tue 21 Oct 2025 12:50:45 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a3:82:66:f0:0b:b1:c8:03:6a:6c:e4:4d:79:a7:9e:ab:3e:18:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 12:50:45 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=a0b71d0d785ced9b7c040dc23444a414a4628def104af8017210ea18ef2b5829, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:25:f2:86:ba:3f:5d:0f:4b:82:a6:b9:be: b0:96:92:b9:bc:39:ae:68:1a:cc:41:4b:4e:a0:3b: c8:40:15:9a:02:a7:23:c2:d3:06:55:70:4c:5f:f2: 76:9e:c1:d5:86:dd:f7:a0:55:d2:29:1b:7f:b8:bc: b0:c6:ce:bd:02:04:9d:14:bf:36:77:81:30:2b:5d: 3b:bc:d2:d3:de:b4:73:05:1d:65:8b:bb:1b:c6:3c: 1a:21:36:4d:9e:25:09:58:7a:b7:c5:07:02:2e:fe: 98:9c:23:ce:77:2e:c4:ec:7a:c6:e9:95:f1:5d:35: 7f:57:5b:b3:64:9c:7a:8e:4c:f4:cd:18:d5:fe:a2: a1:e5:20:b4:f2:43:11:a4:f6:fe:64:80:b4:2b:38: e7:b5:7b:d5:53:c2:40:a9:ec:ef:ae:58:e0:18:ce: a2:11:a0:f2:3a:8a:b2:cd:0f:41:72:54:c4:1b:41: 7d:8f:ce:e8:40:e3:8d:89:c6:69:54:b0:92:42:2b: 2d:d9:8b:52:0c:3e:4f:a8:6b:f0:2c:55:8f:53:c1: 7f:10:fa:51:23:b9:d4:f0:81:69:80:1e:fb:db:cf: 27:b7:6c:57:c8:f8:d6:d1:df:c2:eb:df:ee:2f:3f: 78:22:3f:79:5f:9e:cb:62:28:a2:f0:d6:56:b2:f9: 63:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C9:7F:09:BB:79:3C:68:BA:3E:B2:03:23:E0:5C:93:09:79:23:EE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8a24442-56c6-46d4-9923-f4d5b17fd850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6010::/44 Signature Algorithm: sha256WithRSAEncryption 10:fe:64:4b:5d:04:be:ef:b2:49:c7:bb:42:99:ca:fa:43:81: 7a:40:1a:6a:7f:7f:9a:e0:61:39:59:a0:25:52:85:42:bd:ce: b5:19:3f:a0:ff:ea:f2:b8:20:4f:22:85:4f:bf:eb:f3:5d:77: e0:f7:0a:00:57:a2:dc:9e:de:86:8f:59:fc:3a:a5:e4:eb:c3: 35:70:f8:b7:e9:c8:52:42:6b:52:28:94:b3:aa:99:75:da:01: 27:33:e4:46:45:57:bd:d3:32:51:bf:9a:fd:30:29:7a:98:e8: ba:67:18:d0:a2:6f:73:5f:6d:39:24:71:01:bf:f1:25:27:1a: 58:60:71:d9:8d:d8:cd:13:e9:ad:15:e1:db:a0:dc:c5:a9:4e: 6d:7b:1b:01:96:cc:dd:08:57:4e:39:a4:0f:05:25:b6:58:35: 13:35:b6:02:1e:38:1d:9f:df:56:52:49:7e:f1:c3:f3:69:1c: 8e:d4:ca:05:6b:e7:61:0b:50:e4:2b:f2:13:0b:6f:68:c8:e1: d1:e8:46:9e:15:10:22:38:39:82:e5:95:ed:67:0b:6c:3c:a6: 98:eb:cd:dd:ba:56:b2:d0:45:57:af:4c:f4:e8:f4:fd:51:dc: 92:f6:f2:22:5d:d2:fd:68:8d:60:a0:1a:87:54:b7:6c:26:f1: fe:87:24:b3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcKOCZvALscgDamzkTXmnnqs+GOUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTI1MDQ1WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGI3MWQwZDc4NWNlZDliN2MwNDBkYzIzNDQ0YTQxNGE0 NjI4ZGVmMTA0YWY4MDE3MjEwZWExOGVmMmI1ODI5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmviXyhro/XQ9Lgqa5vrCWkrm8Oa5oGsxBS06gO8hAFZoC pyPC0wZVcExf8naewdWG3fegVdIpG3+4vLDGzr0CBJ0UvzZ3gTArXTu80tPetHMF HWWLuxvGPBohNk2eJQlYerfFBwIu/picI853LsTsesbplfFdNX9XW7NknHqOTPTN GNX+oqHlILTyQxGk9v5kgLQrOOe1e9VTwkCp7O+uWOAYzqIRoPI6irLND0FyVMQb QX2PzuhA442JxmlUsJJCKy3Zi1IMPk+oa/AsVY9TwX8Q+lEjudTwgWmAHvvbzye3 bFfI+NbR38Lr3+4vP3giP3lfnstiKKLw1lay+WM1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUs8l/Cbt5PGi6PrIDI+Bckwl5I+4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4YTI0NDQyLTU2YzYtNDZkNC05OTIzLWY0ZDViMTdmZDg1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYBAwDQYJKoZIhvcNAQELBQADggEBABD+ZEtdBL7vsknHu0KZyvpD gXpAGmp/f5rgYTlZoCVShUK9zrUZP6D/6vK4IE8ihU+/6/Ndd+D3CgBXotye3oaP Wfw6peTrwzVw+LfpyFJCa1IolLOqmXXaAScz5EZFV73TMlG/mv0wKXqY6LpnGNCi b3NfbTkkcQG/8SUnGlhgcdmN2M0T6a0V4dug3MWpTm17GwGWzN0IV045pA8FJbZY NRM1tgIeOB2f31ZSSX7xw/NpHI7UygVr52ELUOQr8hMLb2jI4dHoRp4VECI4OYLl le1nC2w8ppjrzd26VrLQRVevTPTo9P1R3JL28iJd0v1ojWCgGodUt2wm8f6HJLM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:36 2025 by rpki-client