$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa File: 321028ee-2e2d-410c-8bdc-39a00f2044f0.roa (raw, json) Hash identifier: O3jGfumXJmnqxUbSS4xCIFZc2s6Ig4QIwpmYn36ET88= Subject key identifier: 56:78:BA:CF:29:F2:4B:78:6A:22:0F:8E:37:0D:EB:AB:8F:DE:A1:A4 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2E8219691B86E77C598828023E213C45C28AF34A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa Signing time: Fri 26 Sep 2025 18:00:33 +0000 ROA not before: Fri 26 Sep 2025 18:00:33 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:82:19:69:1b:86:e7:7c:59:88:28:02:3e:21:3c:45:c2:8a:f3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:00:33 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=2fcc5c9a91451e1dc403c1303950694cad0f1b22ede833f16392c7d60cdf7b9a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:56:da:90:48:bc:d4:e0:ce:02:b0:16:e4: de:05:a3:12:54:4a:8c:e4:7c:82:20:66:dd:8d:99: 42:73:27:e1:56:1f:fb:d8:ce:39:fe:e1:a6:e9:62: 6c:e3:14:7b:8b:b5:c6:37:82:91:ae:53:e7:54:d2: fb:5a:06:57:f0:77:74:52:13:d3:7e:2a:b0:07:e4: a5:f6:7e:27:67:23:8b:93:c2:a1:3b:95:b5:1a:ab: 72:19:31:e4:15:9b:3d:31:e6:bc:39:58:f8:31:26: 3b:74:72:63:e9:b0:2b:5f:cb:da:47:0e:3a:71:de: cc:13:8b:43:7d:d2:1b:a2:5f:cf:4b:9f:62:c8:f2: 78:2e:f7:99:34:e8:5b:99:35:18:fc:dc:52:f9:8b: 5c:5e:9e:98:c4:bd:b8:5a:ca:79:f0:bd:38:1a:81: 4d:a0:61:73:6c:b6:a1:b3:18:69:6d:de:32:11:e5: 37:c2:44:6d:7e:2b:eb:dc:db:32:8f:03:03:20:6c: 44:67:d7:14:f8:65:75:c3:74:04:7b:98:54:2e:35: 0f:01:ee:62:2b:49:0e:76:67:bd:a3:2c:2a:d6:16: 81:ef:13:19:35:a8:7c:21:17:73:13:23:07:2c:00: e5:a6:85:71:db:f1:66:15:6f:12:82:57:34:81:26: 8d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:78:BA:CF:29:F2:4B:78:6A:22:0F:8E:37:0D:EB:AB:8F:DE:A1:A4 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:500::/48 Signature Algorithm: sha256WithRSAEncryption 00:ee:a8:46:64:ab:77:2e:16:d2:05:6b:5a:a5:38:74:01:fc: 1a:8e:41:49:d4:fc:ec:fd:5f:14:56:f4:5e:da:27:a4:c8:d8: 5c:b9:e1:b8:b8:c1:86:ef:f6:8f:b7:93:c3:b9:c2:49:36:bf: dd:ed:63:ae:3e:bf:9c:4d:63:8c:21:a6:a1:0b:55:81:67:bd: e7:62:fb:da:05:6f:eb:43:2d:30:ca:58:7a:c5:0f:fa:83:3f: 5c:c8:3d:74:a9:63:7e:36:f5:f1:51:76:b2:d1:97:41:df:79: b8:cf:e0:2e:a3:8a:36:6f:57:5d:cf:d1:24:8b:ba:cb:3c:9b: 47:31:4e:5d:63:e2:8d:31:e9:39:77:07:f7:30:34:79:96:00: c5:7d:f6:18:65:8f:ca:c4:b7:5c:26:41:86:84:9f:51:ca:d9: 81:fe:f2:ac:6e:21:3d:c8:e7:cf:68:28:41:95:c8:e6:4a:87: 96:23:70:ba:ae:b1:35:89:34:87:44:3c:2e:a6:12:6c:b5:67: 3d:82:3c:ca:cb:d1:4f:3e:4e:78:81:6e:0c:c2:2a:c8:1d:ef: b1:a0:4a:51:a4:af:65:cf:10:71:08:5a:5f:6c:d2:26:b6:ea: 5c:be:c7:f4:39:79:f9:50:12:7d:23:1b:b2:1e:38:76:b0:96: c4:bc:cf:87 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULoIZaRuG53xZiCgCPiE8RcKK80owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgwMDMzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmNjNWM5YTkxNDUxZTFkYzQwM2MxMzAzOTUwNjk0Y2Fk MGYxYjIyZWRlODMzZjE2MzkyYzdkNjBjZGY3YjlhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfuFbakEi81ODOArAW5N4FoxJUSozkfIIgZt2NmUJzJ+FW H/vYzjn+4abpYmzjFHuLtcY3gpGuU+dU0vtaBlfwd3RSE9N+KrAH5KX2fidnI4uT wqE7lbUaq3IZMeQVmz0x5rw5WPgxJjt0cmPpsCtfy9pHDjpx3swTi0N90huiX89L n2LI8ngu95k06FuZNRj83FL5i1xenpjEvbhaynnwvTgagU2gYXNstqGzGGlt3jIR 5TfCRG1+K+vc2zKPAwMgbERn1xT4ZXXDdAR7mFQuNQ8B7mIrSQ52Z72jLCrWFoHv Exk1qHwhF3MTIwcsAOWmhXHb8WYVbxKCVzSBJo3XAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVni6zynyS3hqIg+ONw3rq4/eoaQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMyMTAyOGVlLTJlMmQtNDEwYy04YmRjLTM5YTAwZjIwNDRmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwBQAwDQYJKoZIhvcNAQELBQADggEBAADuqEZkq3cuFtIFa1qlOHQB /BqOQUnU/Oz9XxRW9F7aJ6TI2Fy54bi4wYbv9o+3k8O5wkk2v93tY64+v5xNY4wh pqELVYFnvedi+9oFb+tDLTDKWHrFD/qDP1zIPXSpY3429fFRdrLRl0HfebjP4C6j ijZvV13P0SSLuss8m0cxTl1j4o0x6Tl3B/cwNHmWAMV99hhlj8rEt1wmQYaEn1HK 2YH+8qxuIT3I589oKEGVyOZKh5YjcLqusTWJNIdEPC6mEmy1Zz2CPMrL0U8+TniB bgzCKsgd77GgSlGkr2XPEHEIWl9s0ia26ly+x/Q5eflQEn0jG7IeOHawlsS8z4c= -----END CERTIFICATE-----Generated at Wed Oct 8 21:16:58 2025 by rpki-client