$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43de5aff-1abc-4ba4-ac76-194395f6be8f.roa File: 43de5aff-1abc-4ba4-ac76-194395f6be8f.roa (raw, json) Hash identifier: r1prbvj8nMzP18qvFCfXGh3EzwHDAm0ZBXvqJFomegU= Subject key identifier: FB:A4:69:80:0F:7B:F1:CD:16:33:44:33:00:16:B7:C3:AB:46:9F:FB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1B119FB4ED9A1BF7A8583EFC5B634D40D1E2263D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43de5aff-1abc-4ba4-ac76-194395f6be8f.roa Signing time: Mon 22 Sep 2025 18:20:02 +0000 ROA not before: Mon 22 Sep 2025 18:20:02 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1:8b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:11:9f:b4:ed:9a:1b:f7:a8:58:3e:fc:5b:63:4d:40:d1:e2:26:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 22 18:20:02 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=1e732799fe2860f381c88a55db6343b555d22d46664a614c86bc0c53561f2716, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:08:14:91:82:91:34:e4:ce:5d:8b:09:92:32: dd:6c:bd:b7:84:00:04:01:df:69:d7:38:8c:fc:e7: fa:ce:c2:66:01:4c:fe:f8:55:f5:fb:d1:7d:4a:ae: 54:5f:81:12:18:b1:4e:54:a0:64:77:61:5f:b1:b8: 64:2f:4a:b3:2c:4d:23:43:1b:4a:d1:d2:72:7a:44: 30:f1:5a:1c:d7:b7:63:13:b1:3b:8e:a3:ef:70:1b: fe:da:83:fd:6f:6b:d9:d7:81:1e:de:f8:8b:9c:22: 0f:0a:5c:49:b4:3c:f5:68:63:82:f6:c7:9e:98:fc: 6f:5e:56:23:44:8c:4a:88:12:82:f4:00:af:f7:48: e2:29:40:5e:ed:7c:c6:ed:f4:82:ca:c1:cf:44:f2: eb:81:ff:8c:a4:73:4a:33:1d:0b:8c:a5:75:49:84: 7f:ee:ad:f0:8f:9f:e2:5f:b4:14:8b:3b:9e:5f:54: 24:42:26:a9:e1:ce:d7:5d:20:86:f9:12:49:37:5f: ef:74:0f:7a:10:be:39:c8:38:61:cf:54:84:83:04: 31:8f:3a:60:31:d0:b8:bb:bf:6c:f7:26:a5:3b:4b: be:60:20:39:8f:e7:3b:ea:99:f8:dc:0c:be:05:f7: 18:6b:a2:b5:6d:01:83:35:d5:06:8a:e0:53:c0:4c: ff:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A4:69:80:0F:7B:F1:CD:16:33:44:33:00:16:B7:C3:AB:46:9F:FB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43de5aff-1abc-4ba4-ac76-194395f6be8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:8b00::/48 Signature Algorithm: sha256WithRSAEncryption 20:f0:d8:8e:f5:89:27:70:7e:c4:71:17:a4:31:f8:12:74:f8: d2:ba:45:ce:cb:46:c4:72:64:ab:54:92:09:22:41:f3:7c:3f: 99:7e:8b:e3:c6:87:e1:c9:f9:55:ba:99:87:75:64:18:8d:81: de:61:56:fc:15:d8:d1:cc:00:78:5f:90:25:2f:b6:69:ee:eb: 89:b3:89:4a:c6:d5:06:18:8b:ad:39:73:09:88:80:68:f8:45: 45:f8:f8:94:19:4e:4b:8f:65:78:1d:1c:50:d0:43:71:76:ac: af:b9:31:1c:f7:22:94:c7:0b:99:8d:96:51:a6:3c:a6:c2:dc: 9c:df:c1:02:42:5b:83:d3:68:ff:95:4d:28:27:a1:ac:20:9a: 68:b9:4c:e8:e9:ba:44:42:21:1c:23:eb:28:16:94:9f:1f:84: 77:32:7a:ac:db:13:58:5f:69:e1:06:82:65:fe:c2:ee:3c:6b: 28:14:50:05:a2:c2:34:e3:9a:4f:ff:59:85:9d:45:59:0d:4f: 8a:87:4b:4a:5a:5c:f5:9b:02:4e:58:d6:7c:bc:d6:ac:c3:d6: 19:f0:f4:7d:1c:28:ff:fc:96:c3:43:bb:af:21:74:f7:6d:2c: 00:70:8d:6c:28:57:9a:0c:73:fd:f7:a4:c7:9f:7f:3f:af:39: 20:71:27:4b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGxGftO2aG/eoWD78W2NNQNHiJj0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTIyMTgyMDAyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTczMjc5OWZlMjg2MGYzODFjODhhNTVkYjYzNDNiNTU1 ZDIyZDQ2NjY0YTYxNGM4NmJjMGM1MzU2MWYyNzE2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbCBSRgpE05M5diwmSMt1svbeEAAQB32nXOIz85/rOwmYB TP74VfX70X1KrlRfgRIYsU5UoGR3YV+xuGQvSrMsTSNDG0rR0nJ6RDDxWhzXt2MT sTuOo+9wG/7ag/1va9nXgR7e+IucIg8KXEm0PPVoY4L2x56Y/G9eViNEjEqIEoL0 AK/3SOIpQF7tfMbt9ILKwc9E8uuB/4ykc0ozHQuMpXVJhH/urfCPn+JftBSLO55f VCRCJqnhztddIIb5Ekk3X+90D3oQvjnIOGHPVISDBDGPOmAx0Li7v2z3JqU7S75g IDmP5zvqmfjcDL4F9xhrorVtAYM11QaK4FPATP+XAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+6RpgA978c0WM0QzABa3w6tGn/swHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQzZGU1YWZmLTFhYmMtNGJhNC1hYzc2LTE5NDM5NWY2YmU4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDxiwAwDQYJKoZIhvcNAQELBQADggEBACDw2I71iSdwfsRxF6Qx+BJ0 +NK6Rc7LRsRyZKtUkgkiQfN8P5l+i+PGh+HJ+VW6mYd1ZBiNgd5hVvwV2NHMAHhf kCUvtmnu64mziUrG1QYYi605cwmIgGj4RUX4+JQZTkuPZXgdHFDQQ3F2rK+5MRz3 IpTHC5mNllGmPKbC3JzfwQJCW4PTaP+VTSgnoawgmmi5TOjpukRCIRwj6ygWlJ8f hHcyeqzbE1hfaeEGgmX+wu48aygUUAWiwjTjmk//WYWdRVkNT4qHS0paXPWbAk5Y 1ny81qzD1hnw9H0cKP/8lsNDu68hdPdtLABwjWwoV5oMc/33pMeffz+vOSBxJ0s= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:33 2025 by rpki-client