$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c49b356-187d-4223-bfed-b3dba0ce3e66.roa File: 5c49b356-187d-4223-bfed-b3dba0ce3e66.roa (raw, json) Hash identifier: 3v0A7tely1maTr6P053iGO/QEE1NQH6NQa4eoSeRk0Q= Subject key identifier: 7C:40:09:95:0D:26:53:0C:09:A9:97:12:1B:C5:90:FD:60:8D:16:7F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6F1337C488A74D8979E6E0DFC6F971194C404CD6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c49b356-187d-4223-bfed-b3dba0ce3e66.roa Signing time: Mon 13 Oct 2025 17:55:13 +0000 ROA not before: Mon 13 Oct 2025 17:55:13 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:13:37:c4:88:a7:4d:89:79:e6:e0:df:c6:f9:71:19:4c:40:4c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 13 17:55:13 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=1d1c36e4ce5f3c805d41b4e580a6f2dc331a0f0a3181f60d64942765778ede71, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:1e:88:75:c9:f8:85:45:1f:47:bf:52:7c: 19:90:d0:72:40:e1:32:6f:aa:8f:8d:d5:1c:e8:76: ee:d8:a9:38:0f:4a:86:dc:88:3b:45:a0:c0:b4:24: f2:e8:f0:ff:48:cc:be:27:53:22:6d:b0:0a:88:a2: f8:15:9a:18:61:34:d0:59:7e:2b:2c:6b:f7:c2:6e: 36:4b:59:bc:c8:4e:18:0d:25:e8:81:93:cb:fc:ec: 12:22:16:e2:2d:a4:b3:71:ef:1f:f2:7e:ee:c8:40: 31:65:1f:c3:03:59:60:3e:65:af:a0:d1:8b:d7:15: 69:4c:90:d6:c5:de:83:c0:c3:d4:32:b9:fb:bd:43: 5c:e7:6c:ef:72:72:16:7a:6d:55:75:ac:ec:8f:b8: 8a:4d:20:32:32:c7:16:47:f8:35:41:a9:81:18:a7: 98:7f:ef:24:dd:8c:95:11:a6:86:4d:23:8e:4b:86: 70:06:28:7e:73:83:ef:1b:d9:a1:1d:56:4e:34:c8: 10:c5:68:19:02:2b:d4:d2:21:cb:56:fc:29:f6:f6: 83:ab:ae:74:18:d1:80:ea:39:45:1e:7f:49:23:13: e4:e7:ce:4b:00:a3:a8:82:7a:8e:a5:dd:17:8d:4c: 74:c8:ac:1f:fd:f8:04:94:6a:7a:75:35:58:2d:86: 1a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:40:09:95:0D:26:53:0C:09:A9:97:12:1B:C5:90:FD:60:8D:16:7F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c49b356-187d-4223-bfed-b3dba0ce3e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7010::/48 Signature Algorithm: sha256WithRSAEncryption 65:2e:75:66:17:c9:56:32:37:3e:42:42:82:53:9d:1e:04:a0: 0c:be:34:24:89:b4:72:73:de:ba:99:f9:99:62:9e:17:c4:d3: 4b:23:94:0f:89:87:65:ea:10:e0:97:e2:f9:64:5f:3a:4a:88: 3e:c3:bc:f3:c3:99:39:b2:ba:1b:ce:11:1c:b1:8f:e3:2c:2d: 26:98:9b:e8:78:e1:0c:0a:65:32:cc:0a:57:60:f4:f4:6d:2d: 56:47:de:c4:9d:92:67:12:e5:75:dc:d1:9e:46:1e:c9:99:a7: c1:e3:eb:07:2a:99:9a:ee:ab:c9:72:cb:85:91:b3:6c:59:8d: ad:fc:85:4d:53:b8:67:4d:b1:a5:79:a9:c1:7b:cf:38:45:7b: d4:7c:70:ab:4a:06:02:e0:3a:8c:87:d9:57:e6:5a:6d:88:6a: 2d:a5:8f:9b:59:67:cd:e5:71:6c:b1:2f:a7:02:8c:f3:0c:97: cd:9f:11:ab:29:de:83:bd:96:50:29:03:d4:d4:a5:1e:1c:db: 9b:77:86:bb:47:c4:27:08:66:8f:b8:c8:5e:72:a7:e1:b6:30: 1c:a5:f8:c3:96:0c:97:d0:94:3c:0d:a5:17:77:38:96:20:7a: cf:03:9d:2c:d7:ba:69:be:57:89:35:03:24:e2:e5:2c:9e:b3: b2:be:7b:56 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbxM3xIinTYl55uDfxvlxGUxATNYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDEzMTc1NTEzWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDFjMzZlNGNlNWYzYzgwNWQ0MWI0ZTU4MGE2ZjJkYzMz MWEwZjBhMzE4MWY2MGQ2NDk0Mjc2NTc3OGVkZTcxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvlB6Idcn4hUUfR79SfBmQ0HJA4TJvqo+N1Rzodu7YqTgP SobciDtFoMC0JPLo8P9IzL4nUyJtsAqIovgVmhhhNNBZfissa/fCbjZLWbzIThgN JeiBk8v87BIiFuItpLNx7x/yfu7IQDFlH8MDWWA+Za+g0YvXFWlMkNbF3oPAw9Qy ufu9Q1znbO9ychZ6bVV1rOyPuIpNIDIyxxZH+DVBqYEYp5h/7yTdjJURpoZNI45L hnAGKH5zg+8b2aEdVk40yBDFaBkCK9TSIctW/Cn29oOrrnQY0YDqOUUef0kjE+Tn zksAo6iCeo6l3ReNTHTIrB/9+ASUanp1NVgthhpxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfEAJlQ0mUwwJqZcSG8WQ/WCNFn8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVjNDliMzU2LTE4N2QtNDIyMy1iZmVkLWIzZGJhMGNlM2U2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBAwDQYJKoZIhvcNAQELBQADggEBAGUudWYXyVYyNz5CQoJTnR4E oAy+NCSJtHJz3rqZ+ZlinhfE00sjlA+Jh2XqEOCX4vlkXzpKiD7DvPPDmTmyuhvO ERyxj+MsLSaYm+h44QwKZTLMCldg9PRtLVZH3sSdkmcS5XXc0Z5GHsmZp8Hj6wcq mZruq8lyy4WRs2xZja38hU1TuGdNsaV5qcF7zzhFe9R8cKtKBgLgOoyH2VfmWm2I ai2lj5tZZ83lcWyxL6cCjPMMl82fEasp3oO9llApA9TUpR4c25t3hrtHxCcIZo+4 yF5yp+G2MByl+MOWDJfQlDwNpRd3OJYges8DnSzXumm+V4k1AyTi5Syes7K+e1Y= -----END CERTIFICATE-----Generated at Sun Oct 19 23:05:05 2025 by rpki-client