$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b0acdef-c848-447c-9624-6a4634464aaa.roa File: 0b0acdef-c848-447c-9624-6a4634464aaa.roa (raw, json) Hash identifier: SZ7K4t6BhHpoVyGxwvW+ItE/JfiBhSmJqZUA3QEPYPU= Subject key identifier: 36:EA:4A:4A:32:88:D8:E3:34:A7:7C:3A:D1:CA:CC:C7:0E:F3:7A:57 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4FAF445A0360CEFC71E2078EB6BC8ACE12269BB1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b0acdef-c848-447c-9624-6a4634464aaa.roa Signing time: Fri 26 Sep 2025 18:11:04 +0000 ROA not before: Fri 26 Sep 2025 18:11:04 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e800::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:af:44:5a:03:60:ce:fc:71:e2:07:8e:b6:bc:8a:ce:12:26:9b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:11:04 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=f4b105d1ceeaa6e895f54efc7dcf5a813dd9e131adaddfddd535d4457677668a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:46:89:d1:3b:9a:3c:11:be:57:d7:3a:05:c5: 6b:c3:98:9f:15:ee:42:84:61:50:e9:82:42:86:1e: 71:02:0e:af:2f:03:0c:55:38:c2:fa:93:0a:b1:85: d0:8a:a9:f2:21:10:8f:51:ef:db:76:7a:52:9e:62: 41:0f:ba:97:95:4f:f9:f5:36:46:8d:23:d7:8c:88: 2d:04:da:5d:85:08:ef:e6:6f:92:3e:6b:e7:c6:1a: 02:61:cf:c9:07:76:ca:40:5c:6c:aa:74:11:e4:06: 8c:20:b9:c5:fc:09:06:31:eb:40:95:58:24:94:9f: 8b:1b:93:6a:bf:83:71:f1:54:a9:00:f7:00:86:77: ff:59:e4:d1:8d:45:e5:6c:6b:76:b7:c3:26:f5:58: 38:46:f5:ef:3c:25:27:77:74:e8:d2:95:69:1b:c4: b5:0c:22:a4:68:c3:57:97:56:dd:65:92:0e:0e:96: 8e:d5:00:da:12:cc:6c:6a:7b:6d:a7:02:dd:cd:5d: 27:68:53:ac:28:9a:c8:89:92:94:39:81:5e:e4:08: c5:4a:ce:49:cd:51:5c:00:07:a8:a2:38:c6:44:3b: 76:e7:0d:41:c8:26:e8:ee:86:a0:be:50:b6:0a:ed: ed:e3:d3:4c:9c:c2:de:b6:1c:de:a3:c6:c8:6f:21: 1c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EA:4A:4A:32:88:D8:E3:34:A7:7C:3A:D1:CA:CC:C7:0E:F3:7A:57 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b0acdef-c848-447c-9624-6a4634464aaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e800::/42 Signature Algorithm: sha256WithRSAEncryption 2f:84:14:f6:6d:7d:71:d4:42:73:77:fa:38:a3:e9:f8:61:04: 71:6c:ea:d1:33:a7:13:78:5c:69:22:ca:d6:99:3e:8a:81:f7: fc:90:7b:95:72:64:68:4f:a6:f0:bb:46:aa:14:25:c8:7c:c4: 25:5e:12:85:56:0d:b7:8e:71:f6:61:20:86:02:eb:a7:8b:fd: b7:24:b3:61:14:3c:f5:67:f2:30:61:45:3a:f0:0e:f0:c3:ce: 40:b6:79:0b:7f:9a:6d:f1:05:c4:f5:5c:62:76:02:2b:3a:66: b5:84:1b:8a:16:ce:cc:0c:47:59:cd:49:b1:78:a3:b5:2c:dc: 80:e5:2d:1e:c3:9d:e0:d5:59:cc:03:69:9e:8e:0a:49:a4:a6: 76:14:1a:8d:69:25:87:e0:5c:a8:43:24:4e:a0:7e:9d:75:71: f9:68:28:78:71:14:5d:0d:ff:46:58:1c:0b:66:44:e2:a0:14: 26:d4:ce:6e:a3:01:e8:86:3a:97:b6:fa:00:98:35:c0:f4:0f: 3a:7e:85:23:af:7a:8a:6c:3f:e4:b3:d2:3d:4c:7d:bd:39:9b: 81:ad:45:b0:c4:8f:50:7a:59:6b:74:c1:01:97:09:c7:c2:4c: 97:5a:1b:06:e0:ea:0a:ac:5b:48:2c:14:d9:c3:7d:2a:ad:8b: f4:36:0e:e6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUT69EWgNgzvxx4geOtryKzhImm7EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMTA0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGIxMDVkMWNlZWFhNmU4OTVmNTRlZmM3ZGNmNWE4MTNk ZDllMTMxYWRhZGRmZGRkNTM1ZDQ0NTc2Nzc2NjhhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCBRonRO5o8Eb5X1zoFxWvDmJ8V7kKEYVDpgkKGHnECDq8v AwxVOML6kwqxhdCKqfIhEI9R79t2elKeYkEPupeVT/n1NkaNI9eMiC0E2l2FCO/m b5I+a+fGGgJhz8kHdspAXGyqdBHkBowgucX8CQYx60CVWCSUn4sbk2q/g3HxVKkA 9wCGd/9Z5NGNReVsa3a3wyb1WDhG9e88JSd3dOjSlWkbxLUMIqRow1eXVt1lkg4O lo7VANoSzGxqe22nAt3NXSdoU6womsiJkpQ5gV7kCMVKzknNUVwAB6iiOMZEO3bn DUHIJujuhqC+ULYK7e3j00ycwt62HN6jxshvIRwFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNupKSjKI2OM0p3w60crMxw7zelcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBiMGFjZGVmLWM4NDgtNDQ3Yy05NjI0LTZhNDYzNDQ2NGFhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD76AAwDQYJKoZIhvcNAQELBQADggEBAC+EFPZtfXHUQnN3+jij6fhh BHFs6tEzpxN4XGkiytaZPoqB9/yQe5VyZGhPpvC7RqoUJch8xCVeEoVWDbeOcfZh IIYC66eL/bcks2EUPPVn8jBhRTrwDvDDzkC2eQt/mm3xBcT1XGJ2Ais6ZrWEG4oW zswMR1nNSbF4o7Us3IDlLR7DneDVWcwDaZ6OCkmkpnYUGo1pJYfgXKhDJE6gfp11 cfloKHhxFF0N/0ZYHAtmROKgFCbUzm6jAeiGOpe2+gCYNcD0Dzp+hSOveopsP+Sz 0j1Mfb05m4GtRbDEj1B6WWt0wQGXCcfCTJdaGwbg6gqsW0gsFNnDfSqti/Q2DuY= -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:55 2025 by rpki-client