$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/320ac659-3ec0-4c68-b834-ada37188b990.roa File: 320ac659-3ec0-4c68-b834-ada37188b990.roa (raw, json) Hash identifier: 6e6lVpNgFtcFxOO+YeUZCJ7JBNyLgRrbTkNuBZnoabs= Subject key identifier: 6B:D6:9F:CC:D7:C2:E2:FA:2C:F6:9C:E1:29:82:18:05:85:A8:CC:F7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4C2B0E6390CA4F0838D2CEA47D784C53D4026FAA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/320ac659-3ec0-4c68-b834-ada37188b990.roa Signing time: Mon 06 Oct 2025 17:40:22 +0000 ROA not before: Mon 06 Oct 2025 17:40:22 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:610e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:2b:0e:63:90:ca:4f:08:38:d2:ce:a4:7d:78:4c:53:d4:02:6f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:40:22 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=241138e6b7cd2b67c94358de4ed58f74778e9c7a49def835186a136e40637afa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d2:47:5f:ba:8f:e6:ca:3b:ba:62:94:ec:46: ad:f1:b6:dc:f7:d6:25:92:05:05:8d:87:d1:11:90: 72:f2:39:7a:9d:58:0a:8b:7f:33:30:f4:8c:1e:a2: a4:42:e6:95:1a:2f:cf:98:42:39:4d:45:fc:8f:01: e8:b2:99:67:0c:e9:52:c1:bb:fb:5a:b3:bf:9b:c3: 9a:b1:c9:a3:97:3a:e5:d6:41:00:2e:c0:00:19:18: 4d:c0:90:63:10:ed:c9:9e:42:2f:98:02:d6:fa:e5: 62:0f:c2:ee:85:b9:13:da:e3:b8:1a:3e:e6:26:2e: 2c:b8:db:4f:98:7f:d2:8c:f9:ee:ca:ba:19:92:d8: e2:a5:4b:10:1a:44:93:d1:3f:ad:b8:c9:81:d7:dd: c5:39:28:57:6f:d3:dd:6c:f3:b1:51:2a:1a:e9:15: 93:a2:76:5e:c0:ef:f9:15:2b:a0:70:54:88:11:b6: 73:02:74:93:2e:62:b9:6a:9f:b2:90:0e:cb:94:27: 7d:04:97:cf:c6:dc:6a:78:7d:53:77:f4:c1:dc:d6: 48:3c:30:de:cb:c1:af:c7:42:8e:ea:70:32:27:39: 21:ac:b3:e3:30:4e:97:7f:3d:ed:37:56:50:82:ff: 2b:42:9a:62:ee:f3:ba:b9:a1:10:cc:90:d7:2f:18: 9b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D6:9F:CC:D7:C2:E2:FA:2C:F6:9C:E1:29:82:18:05:85:A8:CC:F7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/320ac659-3ec0-4c68-b834-ada37188b990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610e::/48 Signature Algorithm: sha256WithRSAEncryption 0f:e0:0f:ba:24:2f:58:c5:94:79:59:51:07:0b:9f:26:07:85: ed:6f:7f:30:6b:ce:2a:77:81:f5:3b:8e:9d:00:f2:83:2a:c7: 0a:db:af:9e:13:39:d9:01:7d:13:77:b5:1f:f9:58:e1:76:89: 3a:f3:36:60:8d:1c:c1:f2:e0:b5:13:31:1e:01:56:ce:d9:07: 55:78:fd:3e:0c:ae:49:f6:5d:e2:1a:fe:3e:0f:78:89:0d:6d: 02:82:9a:1b:60:b9:f4:58:8e:fa:59:be:19:1e:b3:2f:b6:75: fa:c1:5d:07:0e:28:e4:ff:74:95:4f:45:4f:71:d6:84:c0:67: ef:c2:a6:3b:44:a0:d9:46:c6:a8:bc:0a:ef:63:16:03:c7:2d: b0:39:9d:55:3f:3f:4a:d4:5a:8a:e5:9a:fe:cd:28:95:3e:51: 80:e3:7f:99:45:d7:3b:ff:fe:da:c9:22:43:76:01:8c:42:e5: 4c:e7:bf:a1:de:02:50:d8:88:37:da:f8:62:1f:36:d9:a9:e4: ee:49:70:62:bf:d9:d1:05:05:38:e5:af:1c:6d:7f:bd:da:92: 6c:f5:0f:d7:4d:99:92:d7:94:1e:d1:a4:fe:b5:85:4e:9b:f6: 4f:72:f7:7b:c0:34:f0:3b:58:63:a1:ce:15:13:8c:ef:7b:30: 9d:15:45:ce -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTCsOY5DKTwg40s6kfXhMU9QCb6owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTc0MDIyWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDExMzhlNmI3Y2QyYjY3Yzk0MzU4ZGU0ZWQ1OGY3NDc3 OGU5YzdhNDlkZWY4MzUxODZhMTM2ZTQwNjM3YWZhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCW0kdfuo/myju6YpTsRq3xttz31iWSBQWNh9ERkHLyOXqd WAqLfzMw9IweoqRC5pUaL8+YQjlNRfyPAeiymWcM6VLBu/tas7+bw5qxyaOXOuXW QQAuwAAZGE3AkGMQ7cmeQi+YAtb65WIPwu6FuRPa47gaPuYmLiy420+Yf9KM+e7K uhmS2OKlSxAaRJPRP624yYHX3cU5KFdv091s87FRKhrpFZOidl7A7/kVK6BwVIgR tnMCdJMuYrlqn7KQDsuUJ30El8/G3Gp4fVN39MHc1kg8MN7Lwa/HQo7qcDInOSGs s+MwTpd/Pe03VlCC/ytCmmLu87q5oRDMkNcvGJvhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUa9afzNfC4vos9pzhKYIYBYWozPcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMyMGFjNjU5LTNlYzAtNGM2OC1iODM0LWFkYTM3MTg4Yjk5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQ4wDQYJKoZIhvcNAQELBQADggEBAA/gD7okL1jFlHlZUQcLnyYH he1vfzBrzip3gfU7jp0A8oMqxwrbr54TOdkBfRN3tR/5WOF2iTrzNmCNHMHy4LUT MR4BVs7ZB1V4/T4Mrkn2XeIa/j4PeIkNbQKCmhtgufRYjvpZvhkesy+2dfrBXQcO KOT/dJVPRU9x1oTAZ+/CpjtEoNlGxqi8Cu9jFgPHLbA5nVU/P0rUWorlmv7NKJU+ UYDjf5lF1zv//trJIkN2AYxC5Uznv6HeAlDYiDfa+GIfNtmp5O5JcGK/2dEFBTjl rxxtf73akmz1D9dNmZLXlB7RpP61hU6b9k9y93vANPA7WGOhzhUTjO97MJ0VRc4= -----END CERTIFICATE-----Generated at Wed Oct 8 21:19:58 2025 by rpki-client