$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5463f2e9-c071-45ba-a891-46817c1759f6.roa File: 5463f2e9-c071-45ba-a891-46817c1759f6.roa (raw, json) Hash identifier: f3tAL0GaNiPuSYOQ1Nnc7Hu4ruVTRVdsiucbbz3xjD0= Subject key identifier: 4E:08:0C:6C:41:C4:E5:34:D9:13:98:47:21:6A:AC:83:F1:CC:B7:03 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6DF67B2E7D688AFF18F74DEF9842A38AF8C1F758 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5463f2e9-c071-45ba-a891-46817c1759f6.roa Signing time: Mon 06 Oct 2025 17:38:09 +0000 ROA not before: Mon 06 Oct 2025 17:38:09 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:611a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f6:7b:2e:7d:68:8a:ff:18:f7:4d:ef:98:42:a3:8a:f8:c1:f7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:38:09 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=e8f5f143f5eb57fad732b860b5fd9203ecb3ed4f5bd596e17c3b48ea133fe7da, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:e0:a2:08:59:fd:ef:1a:69:e0:79:0d:2b: e7:54:3d:0c:c6:01:f6:f3:db:11:9c:85:59:53:c3: 48:ae:1e:22:9d:5e:69:7b:50:d1:7d:26:0a:8b:32: e8:8d:76:65:0d:f2:d1:f9:b6:6d:be:29:93:10:3c: 45:5d:2b:f5:8e:dd:d5:96:0a:e1:74:9a:d0:d4:36: d5:84:61:5a:7f:7b:89:e7:15:df:d3:07:e7:5d:0d: 77:92:f0:04:5c:5f:fe:81:54:19:f1:58:4c:07:81: 6e:93:f8:c1:16:38:7d:de:9e:ee:6a:0c:ea:69:61: b8:a6:72:ad:c3:2d:30:0d:2d:ba:b9:21:d9:96:ce: 39:5c:75:9e:59:a5:01:f7:17:60:f0:86:24:7b:93: c0:f1:2a:d0:79:db:2f:6a:28:8b:31:b5:44:c8:d0: 43:71:dd:25:91:02:52:36:30:69:bd:d0:8f:8f:06: 5a:de:93:05:ee:9f:b7:44:aa:ab:ec:9f:87:94:27: a5:2a:24:46:2a:3b:88:6e:14:c2:df:ea:9f:50:16: fa:26:e7:dd:75:ae:4c:11:85:74:1e:41:3c:05:48: c0:2d:a6:bb:1b:f6:2a:af:46:7c:80:ca:ae:2c:9a: 94:7b:06:eb:fa:84:89:bf:6c:4c:01:d5:9f:9d:6d: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:08:0C:6C:41:C4:E5:34:D9:13:98:47:21:6A:AC:83:F1:CC:B7:03 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5463f2e9-c071-45ba-a891-46817c1759f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611a::/48 Signature Algorithm: sha256WithRSAEncryption 63:74:b0:c0:ca:00:57:04:14:f6:fe:0a:b5:f1:34:77:30:1d: da:47:c0:d0:e6:ee:82:68:40:1c:4c:4a:62:00:7a:70:77:13: 61:cf:05:fd:2d:86:ba:1f:39:cd:dc:ef:85:4c:f9:f2:9e:f3: b4:fc:47:50:02:4f:03:1d:96:ec:5a:de:31:9d:11:d3:e4:35: d8:11:a9:fb:4c:27:7b:be:91:aa:94:3b:f1:2d:62:82:89:77: 10:4c:12:6f:b8:a9:c2:56:be:57:22:7d:af:ac:39:82:61:56: 8a:68:de:5a:d3:c4:86:b6:a4:c4:38:36:87:eb:97:5d:96:a1: 5b:25:a7:32:de:66:f6:0c:32:fa:be:dc:67:90:97:60:08:cb: 3f:0b:76:f8:2e:0e:d6:a5:e0:eb:8a:43:ac:3a:aa:a1:89:18: 4d:f5:86:bd:34:10:65:3a:dc:83:9c:f5:46:c0:65:56:ec:c9: 47:96:3b:81:e5:12:e9:b9:0c:23:ea:12:a7:ee:d4:39:8b:bc: 8e:c2:a9:0e:29:4b:72:84:00:47:93:08:40:22:fd:36:61:59: bc:1b:44:4a:86:38:fb:7b:7d:22:a8:24:77:f3:ba:5c:49:32: 70:ed:13:40:dd:8e:c7:d0:6c:32:e1:d2:df:79:6e:de:2a:f1: e3:88:5b:e1 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbfZ7Ln1oiv8Y903vmEKjivjB91gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTczODA5WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOGY1ZjE0M2Y1ZWI1N2ZhZDczMmI4NjBiNWZkOTIwM2Vj YjNlZDRmNWJkNTk2ZTE3YzNiNDhlYTEzM2ZlN2RhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJqeCiCFn97xpp4HkNK+dUPQzGAfbz2xGchVlTw0iuHiKd Xml7UNF9JgqLMuiNdmUN8tH5tm2+KZMQPEVdK/WO3dWWCuF0mtDUNtWEYVp/e4nn Fd/TB+ddDXeS8ARcX/6BVBnxWEwHgW6T+MEWOH3enu5qDOppYbimcq3DLTANLbq5 IdmWzjlcdZ5ZpQH3F2DwhiR7k8DxKtB52y9qKIsxtUTI0ENx3SWRAlI2MGm90I+P BlrekwXun7dEqqvsn4eUJ6UqJEYqO4huFMLf6p9QFvom5911rkwRhXQeQTwFSMAt prsb9iqvRnyAyq4smpR7Buv6hIm/bEwB1Z+dbUmRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTggMbEHE5TTZE5hHIWqsg/HMtwMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU0NjNmMmU5LWMwNzEtNDViYS1hODkxLTQ2ODE3YzE3NTlmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRowDQYJKoZIhvcNAQELBQADggEBAGN0sMDKAFcEFPb+CrXxNHcw HdpHwNDm7oJoQBxMSmIAenB3E2HPBf0throfOc3c74VM+fKe87T8R1ACTwMdluxa 3jGdEdPkNdgRqftMJ3u+kaqUO/EtYoKJdxBMEm+4qcJWvlcifa+sOYJhVopo3lrT xIa2pMQ4Nofrl12WoVslpzLeZvYMMvq+3GeQl2AIyz8LdvguDtal4OuKQ6w6qqGJ GE31hr00EGU63IOc9UbAZVbsyUeWO4HlEum5DCPqEqfu1DmLvI7CqQ4pS3KEAEeT CEAi/TZhWbwbREqGOPt7fSKoJHfzulxJMnDtE0DdjsfQbDLh0t95bt4q8eOIW+E= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:19 2025 by rpki-client