$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa File: 0668f39a-0950-45e9-b174-8f7a83ff26e9.roa (raw, json) Hash identifier: EfYdg3QjaoYouIgb3n2XVZcj5Z5LCeW79oS95Ltc4dA= Subject key identifier: E5:BD:6D:AE:85:92:08:89:5F:7C:01:52:1B:A0:72:71:62:36:C7:80 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 47A041409011B8EF160333CE6594774710CEDF61 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa Signing time: Fri 26 Sep 2025 18:00:20 +0000 ROA not before: Fri 26 Sep 2025 18:00:20 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a0:41:40:90:11:b8:ef:16:03:33:ce:65:94:77:47:10:ce:df:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:00:20 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=bab9dd15537a9bfe0a747729757cfc4f3de29c21060c6bb240fedd2461a69df1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:d9:5d:02:27:de:76:9b:32:50:07:2a:28: b6:f8:bf:cc:b5:a9:39:59:e0:ec:43:9c:66:b5:9e: f0:57:8d:62:de:e8:1d:47:26:83:d4:c5:83:26:a7: c3:53:c7:d9:81:18:e5:f8:f3:dc:cb:09:99:59:62: 11:a2:18:3e:36:9f:b5:4c:90:3c:11:75:90:d6:31: 96:d0:d9:69:a6:cf:66:00:6d:73:ed:e9:93:08:55: 15:96:54:60:0d:d7:a3:44:fc:ac:24:1f:1c:da:c6: 10:4f:89:29:eb:5b:14:36:2b:78:a0:8a:81:4c:d8: 21:82:84:17:b8:e8:d0:a6:4b:4f:e4:0d:6a:2d:af: 0b:3a:b4:01:e6:5c:fe:a7:73:d5:a8:04:d5:b4:eb: 34:d1:d8:3a:ab:8a:a7:be:55:7e:67:ae:a6:af:3f: 15:22:ef:0e:e4:b9:05:60:c7:14:d3:f4:9c:3f:11: f8:b1:ea:0f:3d:e4:1f:77:12:ea:70:d6:4f:cb:86: 8a:05:6a:90:88:5a:17:16:94:cc:c2:4b:d4:45:dc: aa:0f:ac:9f:c0:da:61:f1:95:52:a3:93:05:ba:c2: 48:2e:fd:3b:3d:b2:36:6d:f7:12:1a:05:8a:95:fa: dd:92:25:67:95:4a:85:06:43:8b:d5:84:6b:d5:9d: e6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BD:6D:AE:85:92:08:89:5F:7C:01:52:1B:A0:72:71:62:36:C7:80 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0668f39a-0950-45e9-b174-8f7a83ff26e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1000::/48 Signature Algorithm: sha256WithRSAEncryption 68:af:03:0f:13:b8:f7:fe:e4:b2:86:40:f4:9a:1e:f6:1c:f1: 3f:36:53:64:79:f8:8d:6c:b5:9c:87:1b:ea:b1:96:01:40:3f: f6:2b:30:45:a4:61:5b:21:46:57:f5:4d:62:c3:c7:20:01:a1: c7:38:c1:ef:f7:2e:a9:1e:49:ab:84:ed:cd:8c:89:94:e6:5b: 2b:89:86:1d:da:3f:a6:94:f3:93:4a:a4:de:b2:2f:40:87:da: bc:b4:de:39:00:e5:45:73:34:f1:2a:61:40:0a:80:26:6b:05: c6:b1:65:88:da:91:6f:04:f1:32:9c:99:66:bb:fe:c6:c7:1e: 33:cd:93:e9:b6:60:2a:ff:79:f7:22:14:86:6d:b2:41:22:58: ae:a7:e4:a4:9d:ff:63:55:08:3e:25:9f:e8:ef:dd:0a:72:12: 4a:45:2c:87:e8:92:19:a6:38:b8:93:95:9d:1c:0b:30:f9:37: e2:57:e1:bf:ea:ab:04:49:e1:e9:15:ae:a7:46:0a:57:94:f3: 49:0f:f2:1a:01:78:44:87:86:09:13:91:f2:bc:38:f6:09:05: a1:c3:d6:9b:1a:9d:5f:ac:f7:75:ee:b7:18:7e:78:8f:71:ee: d8:f5:9b:43:72:56:d1:b1:98:38:c5:b3:fd:ef:c7:5f:04:73: bf:c5:56:da -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUR6BBQJARuO8WAzPOZZR3RxDO32EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgwMDIwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWI5ZGQxNTUzN2E5YmZlMGE3NDc3Mjk3NTdjZmM0ZjNk ZTI5YzIxMDYwYzZiYjI0MGZlZGQyNDYxYTY5ZGYxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyCNldAifedpsyUAcqKLb4v8y1qTlZ4OxDnGa1nvBXjWLe 6B1HJoPUxYMmp8NTx9mBGOX489zLCZlZYhGiGD42n7VMkDwRdZDWMZbQ2Wmmz2YA bXPt6ZMIVRWWVGAN16NE/KwkHxzaxhBPiSnrWxQ2K3igioFM2CGChBe46NCmS0/k DWotrws6tAHmXP6nc9WoBNW06zTR2Dqriqe+VX5nrqavPxUi7w7kuQVgxxTT9Jw/ Efix6g895B93Eupw1k/LhooFapCIWhcWlMzCS9RF3KoPrJ/A2mHxlVKjkwW6wkgu /Ts9sjZt9xIaBYqV+t2SJWeVSoUGQ4vVhGvVnebLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5b1troWSCIlffAFSG6BycWI2x4AwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA2NjhmMzlhLTA5NTAtNDVlOS1iMTc0LThmN2E4M2ZmMjZlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwEAAwDQYJKoZIhvcNAQELBQADggEBAGivAw8TuPf+5LKGQPSaHvYc 8T82U2R5+I1stZyHG+qxlgFAP/YrMEWkYVshRlf1TWLDxyABocc4we/3LqkeSauE 7c2MiZTmWyuJhh3aP6aU85NKpN6yL0CH2ry03jkA5UVzNPEqYUAKgCZrBcaxZYja kW8E8TKcmWa7/sbHHjPNk+m2YCr/efciFIZtskEiWK6n5KSd/2NVCD4ln+jv3Qpy EkpFLIfokhmmOLiTlZ0cCzD5N+JX4b/qqwRJ4ekVrqdGCleU80kP8hoBeESHhgkT kfK8OPYJBaHD1psanV+s93Xutxh+eI9x7tj1m0NyVtGxmDjFs/3vx18Ec7/FVto= -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:08 2025 by rpki-client