$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5839d967-961c-4062-bf2f-ef1c508fea8e.roa File: 5839d967-961c-4062-bf2f-ef1c508fea8e.roa (raw, json) Hash identifier: C0Qn/4Hv7YRXka6tNPpviUxm9lswcKJLarqFGWF0pPs= Subject key identifier: 36:0F:F1:25:64:64:42:35:02:77:F3:9F:BB:B2:8B:09:00:3B:44:26 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1D9515419C641310C20DEEF514943896425AC74D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5839d967-961c-4062-bf2f-ef1c508fea8e.roa Signing time: Mon 06 Oct 2025 17:38:15 +0000 ROA not before: Mon 06 Oct 2025 17:38:15 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:611e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:95:15:41:9c:64:13:10:c2:0d:ee:f5:14:94:38:96:42:5a:c7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:38:15 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=d8d5f173cc435fbe87184f51f8b829bfa32703341ab80849f4cff4fbad725033, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:62:91:fe:b9:c7:76:b6:3c:f9:66:31:59: 30:eb:5a:e9:88:3b:fd:f7:6e:c3:93:fb:bc:a5:44: 37:e8:ae:2f:99:18:81:f1:f1:97:41:8a:b5:8b:d3: 90:41:91:ed:51:da:10:91:41:c6:6b:6f:dd:08:06: 5a:6b:60:c3:a2:19:6b:7f:9b:eb:2d:24:1a:d2:fc: 01:f6:ed:f4:37:79:34:81:15:19:bf:c4:33:d5:2a: 85:31:83:e1:e5:2f:4e:b8:b9:7f:a4:c5:d5:c5:38: 13:08:15:f8:69:21:24:7c:b7:1d:83:07:f0:36:dd: ce:c3:75:b2:49:56:2f:87:f9:ed:ce:c1:30:01:9c: ca:28:5b:73:b8:e3:a7:48:f2:f2:00:a6:e0:a2:ae: c8:3a:3c:57:29:e9:96:96:fc:1c:67:5b:a1:07:0d: ce:a3:24:fc:d1:22:37:17:49:87:19:93:b2:4e:37: ba:4b:f5:ac:7f:f3:07:97:42:d5:27:4b:22:d9:fc: 5f:25:60:5b:1c:d4:54:58:ea:62:d1:a3:9f:36:14: 5d:a6:1c:08:55:5f:e6:af:b5:42:bf:42:9d:f8:32: 8c:24:53:52:d8:56:23:ba:93:ce:b3:91:65:0b:90: 1a:a5:d5:c6:b6:20:a4:c4:f6:66:19:50:a5:3a:14: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0F:F1:25:64:64:42:35:02:77:F3:9F:BB:B2:8B:09:00:3B:44:26 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5839d967-961c-4062-bf2f-ef1c508fea8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611e::/48 Signature Algorithm: sha256WithRSAEncryption 7c:d9:ad:32:d0:6c:f2:e3:89:a2:a6:be:ac:06:c0:e5:74:80: 8b:1c:cd:5e:0b:c5:af:b0:2f:0d:5c:f5:52:78:e8:5b:43:b2: 91:07:62:d4:78:28:0b:f7:ab:63:0f:30:55:2b:82:58:ba:3d: 12:99:b4:45:81:36:1c:c2:13:8d:ba:64:b2:af:47:61:a6:65: 46:1e:58:58:b0:f7:79:fe:c4:dc:95:20:e7:2f:25:45:c4:0a: 28:d9:80:6a:de:eb:4d:10:92:05:7f:fd:3e:53:84:ec:71:6a: 36:d9:67:50:ee:24:04:ea:d8:a7:37:d6:22:c3:c2:2b:98:4a: 6c:90:82:9b:a3:82:e6:e3:c1:a4:66:70:6f:49:42:6d:cb:e5: b1:9b:02:a9:16:9d:42:1b:85:17:44:7b:bf:14:ce:76:36:2e: 34:cc:a8:93:6a:37:37:41:0f:2e:2d:53:2d:8b:1e:8d:82:8c: 28:84:c7:51:4c:d5:7b:6a:ad:5a:69:6a:f2:8b:db:a4:82:d7: a4:3b:67:f2:7c:61:4b:dc:3e:d2:bb:38:cc:a4:49:6b:1c:c7: b7:b8:cb:e8:d9:cf:41:07:d8:49:b4:f3:43:4e:f8:0d:a4:0d: 63:6d:14:da:e7:74:33:46:2e:09:88:63:cd:90:da:bb:98:7d: 58:bc:73:a0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHZUVQZxkExDCDe71FJQ4lkJax00wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTczODE1WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOGQ1ZjE3M2NjNDM1ZmJlODcxODRmNTFmOGI4MjliZmEz MjcwMzM0MWFiODA4NDlmNGNmZjRmYmFkNzI1MDMzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ4GKR/rnHdrY8+WYxWTDrWumIO/33bsOT+7ylRDfori+Z GIHx8ZdBirWL05BBke1R2hCRQcZrb90IBlprYMOiGWt/m+stJBrS/AH27fQ3eTSB FRm/xDPVKoUxg+HlL064uX+kxdXFOBMIFfhpISR8tx2DB/A23c7DdbJJVi+H+e3O wTABnMooW3O446dI8vIApuCirsg6PFcp6ZaW/BxnW6EHDc6jJPzRIjcXSYcZk7JO N7pL9ax/8weXQtUnSyLZ/F8lYFsc1FRY6mLRo582FF2mHAhVX+avtUK/Qp34Mowk U1LYViO6k86zkWULkBql1ca2IKTE9mYZUKU6FIi3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNg/xJWRkQjUCd/Ofu7KLCQA7RCYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU4MzlkOTY3LTk2MWMtNDA2Mi1iZjJmLWVmMWM1MDhmZWE4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR4wDQYJKoZIhvcNAQELBQADggEBAHzZrTLQbPLjiaKmvqwGwOV0 gIsczV4Lxa+wLw1c9VJ46FtDspEHYtR4KAv3q2MPMFUrgli6PRKZtEWBNhzCE426 ZLKvR2GmZUYeWFiw93n+xNyVIOcvJUXECijZgGre600QkgV//T5ThOxxajbZZ1Du JATq2Kc31iLDwiuYSmyQgpujgubjwaRmcG9JQm3L5bGbAqkWnUIbhRdEe78UznY2 LjTMqJNqNzdBDy4tUy2LHo2CjCiEx1FM1XtqrVppavKL26SC16Q7Z/J8YUvcPtK7 OMykSWscx7e4y+jZz0EH2Em080NO+A2kDWNtFNrndDNGLgmIY82Q2ruYfVi8c6A= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:16 2025 by rpki-client