$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa File: 2b654b1b-1b20-4e58-b50d-f23964f25963.roa (raw, json) Hash identifier: I1obgGU6eJKsyVjWUhH9UbqsXWtzkA6Nns0NB/Vo+Gs= Subject key identifier: D1:CB:94:65:13:A8:72:6C:58:F5:8A:06:6D:6C:3D:B9:1B:DC:B0:00 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5492DA733968262DAD76F247AD1FA6A0D3722B4D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa Signing time: Mon 06 Oct 2025 17:40:40 +0000 ROA not before: Mon 06 Oct 2025 17:40:40 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6115::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:92:da:73:39:68:26:2d:ad:76:f2:47:ad:1f:a6:a0:d3:72:2b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:40:40 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=58ea8074645a8634784dfd8c15fd72c99c925778a3195003685dbf9349c8c368, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:9c:55:00:ee:9f:0f:d1:d8:fe:0a:c0:ca: 26:b5:cb:08:16:8e:b5:98:a7:07:7d:87:5b:31:cb: 35:b9:36:34:43:7c:bc:a4:ae:c0:84:cb:ef:f4:eb: 1c:d6:6d:d2:b9:84:05:ce:99:d3:52:35:fa:39:61: ea:33:22:a1:9c:0d:43:85:b6:0a:d1:b8:86:9a:54: 4a:60:f0:4d:d7:7f:63:27:aa:5d:c3:76:fc:cc:89: 73:cf:9c:33:ab:28:03:d5:d1:d4:38:3d:98:9f:87: 29:56:4e:56:99:b5:19:25:5d:b1:6d:8d:78:ed:84: ce:9a:49:42:da:c3:8d:1e:50:c4:b4:cb:20:1a:65: 52:18:83:99:dd:f8:21:56:61:aa:96:b3:91:af:60: 0e:fc:8e:5c:9b:d6:47:8e:56:a8:db:ad:f8:9f:f3: 0d:cf:65:10:67:76:3e:e1:8c:a1:ab:da:27:7c:ac: c4:9a:b2:1f:8d:02:7c:19:60:a1:ed:cc:7a:19:34: af:f0:60:72:5a:10:17:84:f9:8c:e9:3a:05:b4:c6: 57:55:4b:56:4d:7c:11:11:67:c3:e1:88:0f:5a:35: 48:e6:f6:e0:03:f0:e1:70:a8:92:8c:45:5d:72:fd: 79:63:4a:b6:a4:d9:ae:2a:97:33:ca:fa:c3:ad:7c: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CB:94:65:13:A8:72:6C:58:F5:8A:06:6D:6C:3D:B9:1B:DC:B0:00 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6115::/48 Signature Algorithm: sha256WithRSAEncryption a2:8b:31:45:d5:fd:ea:41:cc:dc:bf:76:5f:0b:32:38:98:fd: b8:61:3c:ce:3a:87:4c:86:f1:b8:11:91:19:9f:8f:d3:eb:97: ad:b3:d1:23:43:79:78:15:c7:81:13:e0:44:2f:3f:d2:12:fc: 26:d4:11:48:f3:a9:38:bd:65:15:17:d5:88:5f:9e:b7:df:2c: 4e:62:6e:16:79:80:5b:55:ee:a4:3e:a8:90:b2:45:a8:f8:12: 46:5b:08:b5:e8:8c:1a:e9:e1:79:de:07:1c:90:d0:99:08:e7: 56:e0:27:c5:32:b6:f0:05:ea:e9:67:ae:e2:91:dc:2f:a0:fb: 5b:07:f4:28:19:92:2c:41:9f:e0:6b:32:bb:0b:8e:aa:55:09: d7:01:d5:b4:d7:69:30:a6:24:e3:e1:8a:c9:45:82:b6:18:ba: 23:11:eb:b3:a1:ea:c2:38:b5:fc:2c:e9:3c:4a:1b:54:e4:8a: eb:f2:7c:b7:00:81:7c:a0:df:f1:cc:ce:81:d7:58:8e:ac:61: eb:5d:e8:b8:71:86:b2:23:a8:f8:e8:5a:49:fb:24:2f:b6:fe: fe:9a:7f:e7:4c:f7:c9:f3:bb:ba:52:7f:7c:a4:f5:a2:e7:8b: 42:cb:b8:0a:8d:f5:74:92:69:e2:96:90:b1:17:f0:32:a1:03: 66:91:0f:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVJLaczloJi2tdvJHrR+moNNyK00wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTc0MDQwWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OGVhODA3NDY0NWE4NjM0Nzg0ZGZkOGMxNWZkNzJjOTlj OTI1Nzc4YTMxOTUwMDM2ODVkYmY5MzQ5YzhjMzY4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE4JxVAO6fD9HY/grAyia1ywgWjrWYpwd9h1sxyzW5NjRD fLykrsCEy+/06xzWbdK5hAXOmdNSNfo5YeozIqGcDUOFtgrRuIaaVEpg8E3Xf2Mn ql3DdvzMiXPPnDOrKAPV0dQ4PZifhylWTlaZtRklXbFtjXjthM6aSULaw40eUMS0 yyAaZVIYg5nd+CFWYaqWs5GvYA78jlyb1keOVqjbrfif8w3PZRBndj7hjKGr2id8 rMSash+NAnwZYKHtzHoZNK/wYHJaEBeE+YzpOgW0xldVS1ZNfBERZ8PhiA9aNUjm 9uAD8OFwqJKMRV1y/XljSrak2a4qlzPK+sOtfLcrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0cuUZROocmxY9YoGbWw9uRvcsAAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzJiNjU0YjFiLTFiMjAtNGU1OC1iNTBkLWYyMzk2NGYyNTk2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRUwDQYJKoZIhvcNAQELBQADggEBAKKLMUXV/epBzNy/dl8LMjiY /bhhPM46h0yG8bgRkRmfj9Prl62z0SNDeXgVx4ET4EQvP9IS/CbUEUjzqTi9ZRUX 1YhfnrffLE5ibhZ5gFtV7qQ+qJCyRaj4EkZbCLXojBrp4XneBxyQ0JkI51bgJ8Uy tvAF6ulnruKR3C+g+1sH9CgZkixBn+BrMrsLjqpVCdcB1bTXaTCmJOPhislFgrYY uiMR67Oh6sI4tfws6TxKG1TkiuvyfLcAgXyg3/HMzoHXWI6sYetd6LhxhrIjqPjo Wkn7JC+2/v6af+dM98nzu7pSf3yk9aLni0LLuAqN9XSSaeKWkLEX8DKhA2aRD/U= -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:29 2025 by rpki-client