$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fab882b1-a5c9-4c16-a9b2-b7fd9891d5b5.roa File: fab882b1-a5c9-4c16-a9b2-b7fd9891d5b5.roa (raw, json) Hash identifier: mQuhOJmtQeAy9wL4ak7FVzaEgdcWnffYRlcICedAnVc= Subject key identifier: 31:D2:21:71:DE:7C:C3:99:A2:B8:11:AA:6C:E6:90:F4:03:4A:99:26 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 76605FF07D2756F7FBF9F62E5F1EB96A5CD99C83 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fab882b1-a5c9-4c16-a9b2-b7fd9891d5b5.roa Signing time: Mon 13 Oct 2025 17:55:15 +0000 ROA not before: Mon 13 Oct 2025 17:55:15 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:60:5f:f0:7d:27:56:f7:fb:f9:f6:2e:5f:1e:b9:6a:5c:d9:9c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 13 17:55:15 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=30814fb5d594d94b5d1fc001a2ffb0eca81ec955e94db3f9721f9e3328655156, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:e7:b2:64:a8:fb:08:46:c5:91:8d:85:a5: 53:23:27:61:16:e9:eb:79:40:61:5c:c3:45:3d:99: 02:04:2c:3f:7d:02:13:e7:ef:d1:52:1b:80:4e:69: d9:b9:98:99:05:90:ac:07:e1:14:9a:90:ae:1d:b0: 29:9c:77:89:4c:0d:de:bb:ae:83:b9:54:8c:45:7d: 71:fa:25:f3:96:ab:ff:00:db:77:01:f4:84:ff:36: c1:7a:84:1a:d3:5a:2e:1a:09:51:98:8d:2b:f5:2f: f9:1b:e9:f6:33:fb:19:e2:c5:99:75:44:0f:0c:c5: ed:7b:68:95:eb:e5:32:46:65:e2:97:8c:cd:b4:27: d2:c6:ad:e6:e6:33:de:d0:5b:53:31:f4:90:d6:3c: 88:58:2b:9e:39:b3:38:f7:7c:1a:d7:29:94:cb:45: 2a:03:13:ea:fb:dd:c1:e2:fd:ec:28:f2:3e:d1:6b: 7d:40:bf:eb:31:6f:d5:27:ac:d5:a2:ce:b0:b4:ba: eb:6b:c9:31:ed:d9:a4:1d:b8:4b:ff:46:d5:01:08: 22:b9:c3:73:d9:7b:ff:88:de:e2:3c:35:ad:b9:ac: f4:c2:65:4f:6d:d0:8a:90:ae:50:4e:69:b3:5c:57: 11:57:f8:57:70:b4:96:ee:18:f3:8e:f7:8e:d4:44: 3e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D2:21:71:DE:7C:C3:99:A2:B8:11:AA:6C:E6:90:F4:03:4A:99:26 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fab882b1-a5c9-4c16-a9b2-b7fd9891d5b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7010::/44 Signature Algorithm: sha256WithRSAEncryption 69:95:a5:40:5a:39:c5:b1:57:7b:42:be:9c:9a:7f:10:0a:e4: 0c:20:a0:5d:6a:ee:a2:2c:1f:8c:d7:16:45:f9:ea:8b:62:90: 44:49:81:3b:98:9b:10:03:d7:1c:75:b0:fb:ed:51:a1:f8:a7: 5d:f8:46:7b:0c:61:b8:96:0e:b7:0e:93:62:3a:b4:6d:6d:4d: 2f:ac:db:e3:94:49:4f:ca:12:1c:8d:09:eb:eb:cb:c1:be:48: 4c:73:97:f2:55:e8:66:76:8b:5c:12:eb:4c:dc:7d:47:42:26: fb:b9:57:5d:49:b7:52:b4:84:c2:3d:d1:5a:46:ab:e6:b3:46: 36:43:2c:53:8d:9e:ca:35:7f:3f:ba:f5:fd:bd:ad:c7:a4:74: d0:8e:66:d1:50:20:02:7e:cf:6f:63:50:78:7e:af:16:83:d3: e1:8f:e6:e4:a3:05:82:28:69:00:6b:d2:ee:7d:6e:d4:a4:52: 00:f7:6e:89:a9:db:1a:f9:66:3b:0d:df:4d:ac:0b:1c:ed:38: c3:98:b5:48:86:88:e9:8d:c4:50:ae:65:7c:f2:b1:5c:61:9f: 3c:80:e5:8f:1f:7c:d4:0a:09:a1:27:1a:60:ea:f2:4f:8c:12: 6d:7b:a3:54:79:4b:ea:d1:05:07:a0:2b:cf:0c:65:bd:97:22: 72:9d:72:2e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdmBf8H0nVvf7+fYuXx65alzZnIMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDEzMTc1NTE1WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDgxNGZiNWQ1OTRkOTRiNWQxZmMwMDFhMmZmYjBlY2E4 MWVjOTU1ZTk0ZGIzZjk3MjFmOWUzMzI4NjU1MTU2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+5+eyZKj7CEbFkY2FpVMjJ2EW6et5QGFcw0U9mQIELD99 AhPn79FSG4BOadm5mJkFkKwH4RSakK4dsCmcd4lMDd67roO5VIxFfXH6JfOWq/8A 23cB9IT/NsF6hBrTWi4aCVGYjSv1L/kb6fYz+xnixZl1RA8Mxe17aJXr5TJGZeKX jM20J9LGrebmM97QW1Mx9JDWPIhYK545szj3fBrXKZTLRSoDE+r73cHi/ewo8j7R a31Av+sxb9UnrNWizrC0uutryTHt2aQduEv/RtUBCCK5w3PZe/+I3uI8Na25rPTC ZU9t0IqQrlBOabNcVxFX+FdwtJbuGPOO947URD5bAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMdIhcd58w5miuBGqbOaQ9ANKmSYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ZhYjg4MmIxLWE1YzktNGMxNi1hOWIyLWI3ZmQ5ODkxZDViNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDycBAwDQYJKoZIhvcNAQELBQADggEBAGmVpUBaOcWxV3tCvpyafxAK 5AwgoF1q7qIsH4zXFkX56otikERJgTuYmxAD1xx1sPvtUaH4p134RnsMYbiWDrcO k2I6tG1tTS+s2+OUSU/KEhyNCevry8G+SExzl/JV6GZ2i1wS60zcfUdCJvu5V11J t1K0hMI90VpGq+azRjZDLFONnso1fz+69f29rcekdNCOZtFQIAJ+z29jUHh+rxaD 0+GP5uSjBYIoaQBr0u59btSkUgD3bomp2xr5ZjsN302sCxztOMOYtUiGiOmNxFCu ZXzysVxhnzyA5Y8ffNQKCaEnGmDq8k+MEm17o1R5S+rRBQegK88MZb2XInKdci4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:00 2025 by rpki-client