$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/15261f12-a3b4-407e-9226-8285aa79061d.roa File: 15261f12-a3b4-407e-9226-8285aa79061d.roa (raw, json) Hash identifier: MQWg4iyMmXTL8z8h0flni8t+KObg4Drjoa0Pe33jDus= Subject key identifier: F3:79:0F:C5:36:F8:2B:B3:F3:13:20:20:A4:CE:27:AA:22:B8:EC:3C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6C481F45A93EB18E58120BD1E60A0C05304F79BA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/15261f12-a3b4-407e-9226-8285aa79061d.roa Signing time: Mon 29 Sep 2025 15:23:38 +0000 ROA not before: Mon 29 Sep 2025 15:23:38 +0000 ROA not after: Mon 03 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:4100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:48:1f:45:a9:3e:b1:8e:58:12:0b:d1:e6:0a:0c:05:30:4f:79:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 29 15:23:38 2025 GMT Not After : Nov 3 23:59:59 2025 GMT Subject: serialNumber=e72854162db508c7d9b605e4053164f68ac37b8a4cf128eb377791d3f654f0fa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:18:45:2e:96:eb:d2:26:a5:ec:9d:87:14:a1: 51:04:ed:bd:08:d7:e9:e8:51:71:9e:15:4b:48:25: 13:b4:41:7b:d9:db:57:ba:98:27:e5:64:a9:e6:ce: 2e:0c:5c:aa:8d:21:11:c4:85:c2:c4:66:57:26:cc: f0:79:4a:c0:46:2e:df:fc:21:eb:44:ba:1b:6b:5a: 55:04:c9:91:16:d2:ea:6d:f9:89:45:d9:f5:85:d4: 23:82:5a:7b:88:89:a4:86:d8:e4:01:e9:8f:b6:31: bd:96:d1:39:20:19:6c:e1:7a:7a:72:e6:02:9a:47: 1d:16:ab:4d:15:36:9b:d0:76:4c:74:ec:70:15:b1: dd:d3:71:3e:17:8d:66:6d:4f:24:bc:bf:0f:76:57: 45:5e:6c:bf:d0:b4:41:38:7a:fc:70:b5:da:72:c0: 74:ef:04:6d:83:5d:2d:14:c6:ed:8f:49:08:87:e9: 05:6a:dd:39:f1:19:8f:3c:c6:34:0e:4a:27:67:b5: 64:6a:2c:41:37:23:87:34:f1:24:30:cf:a5:8b:66: c4:c6:e7:f1:0e:cd:31:df:b5:57:29:63:11:62:80: 7d:67:c9:2d:6c:35:61:37:aa:10:f6:a5:a1:6c:b5: 29:4f:12:42:58:1b:e8:0a:79:72:e5:82:8e:7c:33: 37:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:79:0F:C5:36:F8:2B:B3:F3:13:20:20:A4:CE:27:AA:22:B8:EC:3C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/15261f12-a3b4-407e-9226-8285aa79061d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4100::/40 Signature Algorithm: sha256WithRSAEncryption 61:2e:70:8a:22:6d:45:a5:e6:b1:4a:b6:83:45:de:99:a2:46: 7e:e3:71:ef:07:30:1c:96:ce:0a:18:6c:40:02:92:79:02:5d: 8d:12:c5:82:8c:45:7f:7d:e7:47:bb:ed:20:d5:22:82:13:93: 1e:90:20:2e:d5:79:3f:94:55:3a:2a:55:be:c0:ad:81:9b:c1: 26:02:61:0c:45:ec:d1:eb:2a:4a:6b:2f:dc:96:db:7c:0b:70: 50:91:40:07:86:a5:ce:94:16:43:30:1f:54:1a:19:da:d0:fd: 85:98:f8:6a:3f:5b:0a:1a:48:27:44:60:30:eb:bb:8f:d5:5d: 92:8c:b6:ce:fe:c8:c0:8d:dc:a2:21:56:ec:3e:0a:88:a3:6d: 12:b1:31:1e:9d:60:e6:15:de:44:f9:26:4d:f8:5f:21:74:9a: 84:ff:10:5f:82:b2:8e:86:54:6c:55:d1:b3:3e:db:b1:38:4c: 7b:39:5b:fb:d8:bb:7a:17:1e:0e:ce:64:2c:f3:10:bc:24:c3: ba:dc:fd:48:0b:73:21:ec:02:15:99:28:a2:c7:b1:73:d8:90: 3b:d7:dd:2c:33:30:4c:1c:50:fd:3b:a3:9c:99:d9:2e:dd:a9: 15:ec:e8:18:f3:61:ad:65:23:c7:e9:18:63:4a:fb:b8:33:b6: ff:b0:cc:ae -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUbEgfRak+sY5YEgvR5goMBTBPebowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI5MTUyMzM4WhcNMjUxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzI4NTQxNjJkYjUwOGM3ZDliNjA1ZTQwNTMxNjRmNjhh YzM3YjhhNGNmMTI4ZWIzNzc3OTFkM2Y2NTRmMGZhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5GEUuluvSJqXsnYcUoVEE7b0I1+noUXGeFUtIJRO0QXvZ 21e6mCflZKnmzi4MXKqNIRHEhcLEZlcmzPB5SsBGLt/8IetEuhtrWlUEyZEW0upt +YlF2fWF1COCWnuIiaSG2OQB6Y+2Mb2W0TkgGWzhenpy5gKaRx0Wq00VNpvQdkx0 7HAVsd3TcT4XjWZtTyS8vw92V0VebL/QtEE4evxwtdpywHTvBG2DXS0Uxu2PSQiH 6QVq3TnxGY88xjQOSidntWRqLEE3I4c08SQwz6WLZsTG5/EOzTHftVcpYxFigH1n yS1sNWE3qhD2paFstSlPEkJYG+gKeXLlgo58Mzd3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU83kPxTb4K7PzEyAgpM4nqiK47DwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE1MjYxZjEyLWEzYjQtNDA3ZS05MjI2LTgyODVhYTc5MDYxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwQTANBgkqhkiG9w0BAQsFAAOCAQEAYS5wiiJtRaXmsUq2g0XemaJG fuNx7wcwHJbOChhsQAKSeQJdjRLFgoxFf33nR7vtINUighOTHpAgLtV5P5RVOipV vsCtgZvBJgJhDEXs0esqSmsv3JbbfAtwUJFAB4alzpQWQzAfVBoZ2tD9hZj4aj9b ChpIJ0RgMOu7j9Vdkoy2zv7IwI3coiFW7D4KiKNtErExHp1g5hXeRPkmTfhfIXSa hP8QX4KyjoZUbFXRsz7bsThMezlb+9i7ehceDs5kLPMQvCTDutz9SAtzIewCFZko osexc9iQO9fdLDMwTBxQ/TujnJnZLt2pFezoGPNhrWUjx+kYY0r7uDO2/7DMrg== -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:21 2025 by rpki-client