$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1bc377fa-1761-4743-8aa4-75cb00b977af.roa File: 1bc377fa-1761-4743-8aa4-75cb00b977af.roa (raw, json) Hash identifier: +8wHdAazrH0gXMhX7ERdVuZlSmesPBRN6u1Z0mKkUaA= Subject key identifier: C2:EF:3A:4E:17:BD:B7:D1:FA:09:08:DE:04:9F:66:22:FC:99:14:42 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 48D6A4619BE72114199C506213C2522A566F1EAD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1bc377fa-1761-4743-8aa4-75cb00b977af.roa Signing time: Wed 17 Sep 2025 15:07:01 +0000 ROA not before: Wed 17 Sep 2025 15:07:01 +0000 ROA not after: Wed 22 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d6:a4:61:9b:e7:21:14:19:9c:50:62:13:c2:52:2a:56:6f:1e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 17 15:07:01 2025 GMT Not After : Oct 22 23:59:59 2025 GMT Subject: serialNumber=b1a965898a205d26dfdf684e337cd97fe2015bbd44d108023ccd09da121f7065, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:9a:91:d9:0e:80:d4:43:63:f6:ed:af:c2: 6b:65:65:69:0a:6f:da:c2:b7:bf:6e:70:c2:b7:3e: 18:f4:e3:7d:b7:72:06:c3:8d:d1:18:25:11:19:39: ae:55:9c:de:1b:be:bd:f1:f8:d3:de:43:f8:ad:c3: dd:a2:7d:fd:90:c4:f4:03:26:5a:93:fc:e5:88:26: 99:d6:8f:3e:bd:e2:04:3c:1f:19:8b:24:8d:7d:72: 3c:c9:ab:4f:d4:6a:91:48:d8:13:3a:bf:0d:24:73: 35:39:09:79:7c:0d:f2:b4:54:04:1f:37:62:62:8e: 38:c2:ae:68:ff:5a:3c:f9:4b:b2:83:e0:fc:62:68: b0:ce:48:6c:91:4b:c3:7b:72:1a:f8:95:68:92:98: 40:2f:8d:b8:9b:b4:32:c2:46:ed:ab:0c:0a:50:0e: 01:05:9a:11:50:2e:df:5c:cd:58:c7:4c:71:1f:4d: 03:32:6a:22:aa:44:31:53:ca:26:0b:c3:3a:b4:19: bb:88:f8:7d:f1:30:61:5e:6e:0c:c5:38:9e:c2:0c: b4:01:98:f6:88:b2:d8:2c:a9:4c:50:18:36:21:40: a8:1b:72:45:4f:0a:7f:0c:dd:a6:f3:da:26:98:b8: 31:ee:71:6e:72:50:10:65:05:74:9f:e5:ba:aa:82: df:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EF:3A:4E:17:BD:B7:D1:FA:09:08:DE:04:9F:66:22:FC:99:14:42 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1bc377fa-1761-4743-8aa4-75cb00b977af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1::/44 Signature Algorithm: sha256WithRSAEncryption 6f:20:df:b9:2f:54:36:92:32:0f:37:77:3a:32:4a:be:ed:48: 82:3d:8a:1b:0a:fa:36:b5:68:c9:c8:94:77:66:b0:ff:14:a1: c5:71:4c:a1:30:ae:4d:af:ee:c8:02:d5:28:af:b1:59:a8:b9: f4:77:be:5d:48:3b:91:8b:c0:76:57:79:f8:8f:41:98:64:95: 9e:23:a9:17:81:43:ce:f8:b0:96:93:43:4f:2d:94:d1:5a:11: 02:e3:be:19:9c:3b:8d:30:c6:4b:f2:6d:a7:81:55:7d:b1:b9: 08:f3:42:78:e3:12:43:2f:8d:95:e5:39:2b:5d:e0:92:91:31: f7:ef:a4:e5:6d:25:d4:26:cd:be:d4:89:a3:0a:34:12:46:e7: bb:7a:10:3b:a2:2a:57:36:b8:90:bf:eb:9b:4a:16:fb:d7:32: 69:aa:8c:eb:b5:cd:c1:fb:21:bd:7b:31:21:1c:78:32:29:91: c3:c6:e2:1d:08:86:b9:5d:f0:ea:e1:d4:54:f1:cb:29:61:72: bd:9f:56:11:82:50:e4:15:bc:bd:1a:60:d2:e7:d0:19:fb:33: 55:5a:c0:5b:97:fe:32:e8:f7:14:eb:e1:b9:af:5a:c0:1f:ef: 75:81:48:c6:52:3a:c7:d8:0b:3a:b2:94:17:ee:55:cd:e4:db: ea:0b:e1:ae -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSNakYZvnIRQZnFBiE8JSKlZvHq0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTE3MTUwNzAxWhcNMjUxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWE5NjU4OThhMjA1ZDI2ZGZkZjY4NGUzMzdjZDk3ZmUy MDE1YmJkNDRkMTA4MDIzY2NkMDlkYTEyMWY3MDY1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfoZqR2Q6A1ENj9u2vwmtlZWkKb9rCt79ucMK3Phj04323 cgbDjdEYJREZOa5VnN4bvr3x+NPeQ/itw92iff2QxPQDJlqT/OWIJpnWjz694gQ8 HxmLJI19cjzJq0/UapFI2BM6vw0kczU5CXl8DfK0VAQfN2JijjjCrmj/Wjz5S7KD 4PxiaLDOSGyRS8N7chr4lWiSmEAvjbibtDLCRu2rDApQDgEFmhFQLt9czVjHTHEf TQMyaiKqRDFTyiYLwzq0GbuI+H3xMGFebgzFOJ7CDLQBmPaIstgsqUxQGDYhQKgb ckVPCn8M3abz2iaYuDHucW5yUBBlBXSf5bqqgt/rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwu86The9t9H6CQjeBJ9mIvyZFEIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFiYzM3N2ZhLTE3NjEtNDc0My04YWE0LTc1Y2IwMGI5NzdhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxAAAwDQYJKoZIhvcNAQELBQADggEBAG8g37kvVDaSMg83dzoySr7t SII9ihsK+ja1aMnIlHdmsP8UocVxTKEwrk2v7sgC1SivsVmoufR3vl1IO5GLwHZX efiPQZhklZ4jqReBQ874sJaTQ08tlNFaEQLjvhmcO40wxkvybaeBVX2xuQjzQnjj EkMvjZXlOStd4JKRMffvpOVtJdQmzb7UiaMKNBJG57t6EDuiKlc2uJC/65tKFvvX MmmqjOu1zcH7Ib17MSEceDIpkcPG4h0Ihrld8Orh1FTxyylhcr2fVhGCUOQVvL0a YNLn0Bn7M1VawFuX/jLo9xTr4bmvWsAf73WBSMZSOsfYCzqylBfuVc3k2+oL4a4= -----END CERTIFICATE-----Generated at Fri Sep 19 03:18:30 2025 by rpki-client