$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/32a0b25a-e9d9-4889-bdbc-1a73e15f591c.roa File: 32a0b25a-e9d9-4889-bdbc-1a73e15f591c.roa (raw, json) Hash identifier: VdX4X63Yae+Z77dYDFLwjuOQU6zv5DGL7SOP0cobZ0E= Subject key identifier: 01:8E:1E:D5:FE:B6:34:05:8D:F9:36:FC:82:2D:BD:2E:4D:37:64:96 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 58E60CB0523E6756B18541365CE81B0B17CDCE82 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/32a0b25a-e9d9-4889-bdbc-1a73e15f591c.roa Signing time: Fri 10 Oct 2025 17:04:19 +0000 ROA not before: Fri 10 Oct 2025 17:04:19 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e6:0c:b0:52:3e:67:56:b1:85:41:36:5c:e8:1b:0b:17:cd:ce:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 10 17:04:19 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=4b284455a9287e1ae9df7b440f81726fb1503aa0389b97b105dbeee4857915de, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:bb:de:ad:2a:5c:e3:ad:cf:b6:1d:49:5a: e0:ea:da:0b:1d:5b:f3:4f:b6:76:cb:3f:29:62:74: 54:6b:b8:7b:7b:42:07:bb:e5:27:62:28:d4:43:4d: 23:ee:ac:d5:e2:9b:6d:0a:ca:e3:4d:a0:97:1d:09: 4d:8a:cc:b0:05:df:13:13:01:d7:f2:c1:e8:68:39: ff:28:07:d9:18:bd:4e:86:2b:27:83:0d:bc:01:ee: 3f:74:fd:96:b2:93:db:42:b4:23:67:65:0f:a3:aa: d2:dc:68:81:95:16:15:90:e0:bc:af:44:a1:03:b2: 7f:c8:00:9d:b0:c6:b6:cb:c3:b7:e0:6d:32:23:53: 50:ca:72:c2:1c:c6:7a:60:b6:b9:59:50:15:c1:a8: 84:5f:04:d6:56:5b:d0:ef:04:0b:2c:81:c8:52:02: b5:36:7c:fe:d5:18:3e:a6:ba:13:65:a9:5d:99:15: f5:f4:3b:34:e0:f2:27:fc:ab:f1:89:a4:d3:1f:98: 7a:92:3d:28:9f:d7:91:55:49:88:6c:a8:55:35:72: 70:6e:ea:e8:76:2c:33:c0:82:c7:ef:0e:86:0a:cd: 4b:a0:ca:7a:54:46:b8:c4:9e:29:cb:43:d8:41:b9: 57:50:e6:eb:12:fe:ea:31:64:a0:58:e4:e9:24:10: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8E:1E:D5:FE:B6:34:05:8D:F9:36:FC:82:2D:BD:2E:4D:37:64:96 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/32a0b25a-e9d9-4889-bdbc-1a73e15f591c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6100::/40 Signature Algorithm: sha256WithRSAEncryption 1c:24:13:9a:91:e2:ce:7f:28:a5:ce:c5:f7:a8:5c:be:97:97: 1a:78:0e:a8:2e:c9:9e:8a:72:9d:2d:b6:09:7e:45:a2:f6:6e: 47:c1:0a:8b:0b:e2:cf:00:56:d6:22:87:dd:e6:6f:a6:20:2f: a7:26:5a:49:b2:93:04:13:c6:52:1e:57:d6:f1:14:47:ca:61: 67:21:74:11:19:47:0a:5d:96:25:08:7f:30:12:5b:97:b5:de: 68:28:3a:a8:00:f2:a8:1a:92:9b:b9:cd:bf:44:dc:5f:c2:c5: f4:96:9c:92:e4:61:6c:14:61:f0:01:a9:3f:70:02:e6:aa:de: 87:de:01:be:a0:e3:d2:45:10:1a:01:83:f5:e4:79:b2:35:32: 18:3d:a3:46:7a:ee:59:70:3d:35:35:14:76:16:d8:af:1b:f9: b1:77:fe:63:f9:48:63:b2:26:75:bb:be:59:a3:56:99:a5:86: 89:48:ec:d0:df:d5:a3:76:84:3d:f5:33:a7:31:75:fe:83:bc: b9:95:a6:a5:e5:57:27:90:08:23:48:d7:a9:5e:2f:f2:22:e4: c6:be:73:41:2d:da:b6:76:1c:2e:0f:d2:1b:ca:bb:96:77:cf: a9:62:0e:71:d9:7f:01:d3:d5:ed:80:cf:70:81:1f:00:3c:83: 9b:0a:27:46 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWOYMsFI+Z1axhUE2XOgbCxfNzoIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDEwMTcwNDE5WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjI4NDQ1NWE5Mjg3ZTFhZTlkZjdiNDQwZjgxNzI2ZmIx NTAzYWEwMzg5Yjk3YjEwNWRiZWVlNDg1NzkxNWRlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFh7verSpc463Pth1JWuDq2gsdW/NPtnbLPylidFRruHt7 Qge75SdiKNRDTSPurNXim20KyuNNoJcdCU2KzLAF3xMTAdfywehoOf8oB9kYvU6G KyeDDbwB7j90/Zayk9tCtCNnZQ+jqtLcaIGVFhWQ4LyvRKEDsn/IAJ2wxrbLw7fg bTIjU1DKcsIcxnpgtrlZUBXBqIRfBNZWW9DvBAssgchSArU2fP7VGD6muhNlqV2Z FfX0OzTg8if8q/GJpNMfmHqSPSif15FVSYhsqFU1cnBu6uh2LDPAgsfvDoYKzUug ynpURrjEninLQ9hBuVdQ5usS/uoxZKBY5OkkEPzhAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUAY4e1f62NAWN+Tb8gi29Lk03ZJYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMyYTBiMjVhLWU5ZDktNDg4OS1iZGJjLTFhNzNlMTVmNTkxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwYTANBgkqhkiG9w0BAQsFAAOCAQEAHCQTmpHizn8opc7F96hcvpeX GngOqC7JnopynS22CX5FovZuR8EKiwvizwBW1iKH3eZvpiAvpyZaSbKTBBPGUh5X 1vEUR8phZyF0ERlHCl2WJQh/MBJbl7XeaCg6qADyqBqSm7nNv0TcX8LF9JackuRh bBRh8AGpP3AC5qreh94BvqDj0kUQGgGD9eR5sjUyGD2jRnruWXA9NTUUdhbYrxv5 sXf+Y/lIY7Imdbu+WaNWmaWGiUjs0N/Vo3aEPfUzpzF1/oO8uZWmpeVXJ5AII0jX qV4v8iLkxr5zQS3atnYcLg/SG8q7lnfPqWIOcdl/AdPV7YDPcIEfADyDmwonRg== -----END CERTIFICATE-----Generated at Mon Oct 20 07:21:28 2025 by rpki-client