$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c005aeb-f132-4bb2-a865-90077d8d5e49.roa File: 2c005aeb-f132-4bb2-a865-90077d8d5e49.roa (raw, json) Hash identifier: 5INe1feZ7QRsPzXPfgQcfSJRKGLjcgKpe0NvzuUOIWA= Subject key identifier: 98:A2:23:E2:9C:AA:70:CF:EE:05:15:1B:1F:B0:FA:01:43:AE:53:4F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 677D002ADAAC3A6038A7C9EE3F14C79D049CE7C6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c005aeb-f132-4bb2-a865-90077d8d5e49.roa Signing time: Mon 06 Oct 2025 17:40:48 +0000 ROA not before: Mon 06 Oct 2025 17:40:48 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:10a::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7d:00:2a:da:ac:3a:60:38:a7:c9:ee:3f:14:c7:9d:04:9c:e7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:40:48 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=969d315016272ef11ac0c7ded950f966d9e1bc464172a316e29dfb440e93c5f9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:00:ff:c1:31:c9:48:c0:44:8c:66:00:07:27: 3d:db:74:b5:98:74:fd:38:94:87:b8:fc:d4:51:fe: 23:c7:da:3a:0d:72:92:7f:25:79:02:c9:69:9b:8b: 47:f9:86:f4:81:14:c8:a6:a4:c0:43:61:5a:20:92: d4:af:8d:50:9f:f0:fc:41:7f:39:1a:20:fd:34:84: 10:de:13:2d:96:dc:40:69:ba:f2:5b:67:8d:09:27: 04:7f:5b:28:9e:12:80:4c:ab:8e:63:eb:a9:db:7a: 6e:06:02:43:88:3f:f3:d9:c3:62:18:46:d5:56:07: 2b:f0:80:78:64:3f:98:20:fa:a5:00:34:fb:fd:74: 6d:7c:60:a4:a5:f5:e2:3b:d2:77:11:36:d6:18:9c: 45:73:b3:e1:c9:5e:28:ab:09:d1:1a:13:66:4a:33: a2:62:a6:ee:06:4e:7c:be:29:b3:23:ab:77:ae:01: 2a:fa:ef:18:6d:04:f4:d7:f6:ed:83:a2:bb:2d:4b: b0:e7:c0:61:36:67:a5:25:b7:fb:f3:be:9c:1f:0a: 69:3b:ac:a2:8f:b4:a6:01:48:75:f0:1d:fa:5c:0e: bf:f0:d8:60:c8:d2:e5:6f:66:06:8a:3a:2b:0a:72: ef:17:cd:9c:94:ef:94:b9:fa:5d:b2:84:28:48:38: ce:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A2:23:E2:9C:AA:70:CF:EE:05:15:1B:1F:B0:FA:01:43:AE:53:4F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c005aeb-f132-4bb2-a865-90077d8d5e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:10a::/47 Signature Algorithm: sha256WithRSAEncryption 52:45:20:ae:18:28:33:e3:25:82:6f:8f:2a:01:ed:e0:d3:45: a3:20:a7:62:fe:d2:2a:19:6f:6f:ee:35:66:90:9b:60:62:a0: e8:36:51:e1:e4:58:ab:e2:60:8c:9c:eb:5e:84:d4:00:b4:8a: 31:dc:a3:10:5e:cf:9c:87:91:10:28:16:b1:c4:14:80:95:43: 28:98:1b:f1:2d:1a:b9:56:2c:c7:3a:55:d0:ec:8a:5a:bd:27: c1:09:a0:88:8a:9e:42:90:f7:49:17:45:4e:34:a3:2f:73:62: 00:b0:89:78:b9:2c:c9:ef:fc:76:ff:68:b6:92:4b:ec:db:07: 42:05:c2:d2:fc:e4:23:bc:5d:80:f1:2d:48:27:9d:58:6b:31: 01:b2:be:e2:21:9c:f7:aa:33:b6:19:ee:84:3b:b1:62:4e:3d: e8:5d:df:7a:b7:c1:67:b7:19:f9:70:e9:81:65:13:8d:00:ca: 34:20:fc:c4:33:fe:61:81:3b:e4:01:e0:41:6f:95:ab:07:89: 82:06:a1:c0:eb:24:9a:7b:45:21:3d:94:8f:73:1f:81:f2:c1: 4a:6f:df:79:1c:ef:af:fa:23:bb:c8:7b:75:d3:3d:7a:ae:3d: 77:d4:96:52:eb:c0:75:a3:4a:f5:eb:64:66:ec:34:0a:00:af: 47:61:8c:b3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZ30AKtqsOmA4p8nuPxTHnQSc58YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTc0MDQ4WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjlkMzE1MDE2MjcyZWYxMWFjMGM3ZGVkOTUwZjk2NmQ5 ZTFiYzQ2NDE3MmEzMTZlMjlkZmI0NDBlOTNjNWY5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpAP/BMclIwESMZgAHJz3bdLWYdP04lIe4/NRR/iPH2joN cpJ/JXkCyWmbi0f5hvSBFMimpMBDYVogktSvjVCf8PxBfzkaIP00hBDeEy2W3EBp uvJbZ40JJwR/WyieEoBMq45j66nbem4GAkOIP/PZw2IYRtVWByvwgHhkP5gg+qUA NPv9dG18YKSl9eI70ncRNtYYnEVzs+HJXiirCdEaE2ZKM6Jipu4GTny+KbMjq3eu ASr67xhtBPTX9u2DorstS7DnwGE2Z6Ult/vzvpwfCmk7rKKPtKYBSHXwHfpcDr/w 2GDI0uVvZgaKOisKcu8XzZyU75S5+l2yhChIOM7/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmKIj4pyqcM/uBRUbH7D6AUOuU08wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzJjMDA1YWViLWYxMzItNGJiMi1hODY1LTkwMDc3ZDhkNWU0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDwAQowDQYJKoZIhvcNAQELBQADggEBAFJFIK4YKDPjJYJvjyoB7eDT RaMgp2L+0ioZb2/uNWaQm2BioOg2UeHkWKviYIyc616E1AC0ijHcoxBez5yHkRAo FrHEFICVQyiYG/EtGrlWLMc6VdDsilq9J8EJoIiKnkKQ90kXRU40oy9zYgCwiXi5 LMnv/Hb/aLaSS+zbB0IFwtL85CO8XYDxLUgnnVhrMQGyvuIhnPeqM7YZ7oQ7sWJO Pehd33q3wWe3Gflw6YFlE40AyjQg/MQz/mGBO+QB4EFvlasHiYIGocDrJJp7RSE9 lI9zH4HywUpv33kc76/6I7vIe3XTPXquPXfUllLrwHWjSvXrZGbsNAoAr0dhjLM= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:53 2025 by rpki-client