$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3562da89-c8ff-4159-8f92-365721d94405.roa File: 3562da89-c8ff-4159-8f92-365721d94405.roa (raw, json) Hash identifier: CnCneQePGZ652YzoIa6QpGZvzmIin1UytB9M9LomhA8= Subject key identifier: A6:02:66:DA:42:94:70:1A:EB:AB:9D:41:8C:BD:0E:58:AB:DD:5E:32 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0F90C80D31E6BF0B8EDDA14BEB3B22C3BCFF7E82 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3562da89-c8ff-4159-8f92-365721d94405.roa Signing time: Mon 06 Oct 2025 17:40:07 +0000 ROA not before: Mon 06 Oct 2025 17:40:07 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f030::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:90:c8:0d:31:e6:bf:0b:8e:dd:a1:4b:eb:3b:22:c3:bc:ff:7e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:40:07 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=4a3a8f696613651d327ec63fe04c12ba6e1586c28fb72557a0e83d0f7650bbd7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6b:a9:26:11:ec:f6:f2:81:d3:e4:69:f8:8a: 9f:67:b0:3c:52:f7:c2:43:e0:51:05:79:d2:1d:c0: 5f:ee:67:45:b3:e8:e8:cc:64:72:cb:e9:6e:2e:4b: 23:ec:dd:f2:18:6c:27:ab:c9:4f:71:47:32:03:00: 9e:01:ed:49:b6:e8:9c:3d:cc:0a:e9:36:9e:4a:1a: c2:95:ec:43:1e:66:30:76:98:0a:b7:f8:23:92:16: 33:8b:0f:cd:e9:ef:41:f5:fd:6f:c7:3a:4f:d5:73: f1:7a:31:97:b8:97:cb:d6:f1:5b:66:b2:2f:d3:46: 89:06:a9:f5:04:7b:58:ef:ad:a8:b2:b2:14:38:34: 1c:a6:b7:c9:3c:b3:6a:d6:59:d4:6a:e8:c2:4f:5b: 73:e8:d8:2c:12:e7:d1:fc:f3:e4:81:33:ea:cf:54: 3a:2c:ba:3c:59:98:db:da:8b:58:66:c1:29:43:81: 07:69:fd:18:65:b2:92:71:09:29:0c:4a:65:07:d8: ca:c3:bc:02:6f:9c:89:b5:3d:7c:c9:be:8e:16:b9: 1c:74:48:a3:ce:05:b1:a9:6f:af:8e:10:70:8c:c5: f3:c8:ff:2c:11:6d:01:f3:2e:d0:2a:c3:9a:58:34: 39:c9:8e:b9:29:63:fb:ee:64:6b:33:ed:b1:5e:eb: 4e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:02:66:DA:42:94:70:1A:EB:AB:9D:41:8C:BD:0E:58:AB:DD:5E:32 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3562da89-c8ff-4159-8f92-365721d94405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f030::/44 Signature Algorithm: sha256WithRSAEncryption 10:61:eb:90:90:53:2a:f1:f5:07:ed:03:8b:a2:5a:46:a4:1c: 42:01:bf:2c:89:cf:6c:fe:32:82:cb:d3:80:23:2a:29:12:22: 0c:36:5d:98:1b:aa:de:a8:ba:5f:30:af:f4:88:b9:e9:ee:4d: 2c:c4:f9:6d:dc:08:8c:68:ab:34:fd:9a:80:7f:96:75:ae:10: 3b:56:a1:5d:9f:e4:ed:98:0d:1c:b2:2a:0f:c0:bc:30:75:4a: e8:01:6f:8a:69:c7:d7:c4:34:c3:06:24:23:3d:63:d0:92:4a: ec:01:6e:3b:70:4d:c6:d5:ac:b6:f6:bd:74:14:e3:0e:17:b2: d2:9f:8e:c9:51:28:e7:1f:47:54:14:78:ac:f3:cc:2d:31:d6: 20:0c:8d:0a:ef:9e:65:bb:36:ab:fb:79:96:02:fb:47:11:52: 04:17:fd:4e:0f:3f:2f:6f:e6:96:a8:e0:c9:78:90:a8:f5:92: f1:96:e9:e8:63:27:ea:fe:13:8d:08:56:bd:3d:fe:41:68:b4: fb:f6:80:e9:c3:f9:63:05:11:ea:73:22:88:bc:de:c9:66:5a: 87:af:c7:76:e8:93:18:1d:8c:75:f3:ab:c1:b6:cd:b5:58:41: 97:2b:99:e7:59:56:1c:4d:ce:d2:82:d1:27:18:26:19:4d:de: 8d:b5:69:6c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUD5DIDTHmvwuO3aFL6zsiw7z/foIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTc0MDA3WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTNhOGY2OTY2MTM2NTFkMzI3ZWM2M2ZlMDRjMTJiYTZl MTU4NmMyOGZiNzI1NTdhMGU4M2QwZjc2NTBiYmQ3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDla6kmEez28oHT5Gn4ip9nsDxS98JD4FEFedIdwF/uZ0Wz 6OjMZHLL6W4uSyPs3fIYbCeryU9xRzIDAJ4B7Um26Jw9zArpNp5KGsKV7EMeZjB2 mAq3+COSFjOLD83p70H1/W/HOk/Vc/F6MZe4l8vW8Vtmsi/TRokGqfUEe1jvraiy shQ4NBymt8k8s2rWWdRq6MJPW3Po2CwS59H88+SBM+rPVDosujxZmNvai1hmwSlD gQdp/RhlspJxCSkMSmUH2MrDvAJvnIm1PXzJvo4WuRx0SKPOBbGpb6+OEHCMxfPI /ywRbQHzLtAqw5pYNDnJjrkpY/vuZGsz7bFe6063AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUpgJm2kKUcBrrq51BjL0OWKvdXjIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM1NjJkYTg5LWM4ZmYtNDE1OS04ZjkyLTM2NTcyMWQ5NDQwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78DAwDQYJKoZIhvcNAQELBQADggEBABBh65CQUyrx9QftA4uiWkak HEIBvyyJz2z+MoLL04AjKikSIgw2XZgbqt6oul8wr/SIuenuTSzE+W3cCIxoqzT9 moB/lnWuEDtWoV2f5O2YDRyyKg/AvDB1SugBb4ppx9fENMMGJCM9Y9CSSuwBbjtw TcbVrLb2vXQU4w4XstKfjslRKOcfR1QUeKzzzC0x1iAMjQrvnmW7Nqv7eZYC+0cR UgQX/U4PPy9v5pao4Ml4kKj1kvGW6ehjJ+r+E40IVr09/kFotPv2gOnD+WMFEepz Ioi83slmWoevx3bokxgdjHXzq8G2zbVYQZcrmedZVhxNztKC0ScYJhlN3o21aWw= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:53 2025 by rpki-client