$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa File: 6912c7e5-41f4-4b82-9db8-51bac2912f50.roa (raw, json) Hash identifier: joT21mE8fPHmsKV/9kIsRiCzpqYrHWYvG0uwvEuIX20= Subject key identifier: 3A:3E:1C:D1:E9:A9:35:67:1A:8E:EA:1F:9C:1C:6F:9F:1F:68:CF:89 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 711BDC176A8025FB66B86D702004F817112531DD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa Signing time: Sat 27 Sep 2025 00:52:46 +0000 ROA not before: Sat 27 Sep 2025 00:52:46 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:1b:dc:17:6a:80:25:fb:66:b8:6d:70:20:04:f8:17:11:25:31:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:52:46 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=687faed5a6b1c5eb507439c7f47ca26896a8280724ef33997eb01aacd67f334d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:33:c5:b8:73:2e:18:1e:39:4a:ca:10:62: 55:19:24:35:87:54:58:68:d6:53:59:5a:54:60:00: e4:96:36:10:57:c4:ab:b9:a3:ff:2b:18:0e:93:57: f3:0a:01:c7:cd:91:55:7f:e1:11:18:21:ee:f6:86: f4:fa:6d:2f:2b:cc:ca:98:ee:52:8e:09:c6:97:bb: f7:8f:2c:38:ba:f6:83:ed:00:3b:46:a8:17:33:ec: fa:11:1e:df:ea:da:bc:70:d3:9c:e0:78:d3:9e:9d: 81:f9:ff:99:18:45:f0:af:24:1b:a3:13:4a:4e:32: 70:0e:77:f2:91:8a:1f:a1:d4:dd:a2:61:ee:3e:d2: ff:cd:78:db:e9:cc:6c:e4:73:fc:00:c1:b5:8f:5c: b7:27:f2:43:2a:8a:72:3b:d7:1d:33:ab:0b:90:71: a9:30:e4:4b:62:58:5b:22:09:6b:5b:76:b6:d4:d1: 66:f2:db:7a:da:b5:b5:56:4a:05:d7:fb:e1:2a:32: 9e:31:ce:75:ca:0f:45:63:7a:ca:07:0a:59:34:de: c9:a9:fe:2f:3f:9b:d4:99:88:33:e2:ae:41:20:fc: 92:e9:66:0c:4e:b7:dd:68:12:a9:91:6c:6e:27:cb: 0f:ab:2e:bc:d2:14:fc:a9:98:0a:20:19:63:f6:f5: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3E:1C:D1:E9:A9:35:67:1A:8E:EA:1F:9C:1C:6F:9F:1F:68:CF:89 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6912c7e5-41f4-4b82-9db8-51bac2912f50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:400::/44 Signature Algorithm: sha256WithRSAEncryption 5a:e3:34:6f:a2:0b:d8:ef:49:66:f0:82:1a:16:3c:49:5f:28: 29:87:47:90:d8:0d:36:de:1f:a3:9f:9a:e7:b4:1c:a4:c1:70: 34:ba:bc:a5:07:05:03:1e:15:a2:c9:f3:f9:c8:a6:f3:84:e1: 46:1d:19:e1:1d:a5:1c:0f:72:a9:2a:98:64:b0:08:fe:74:1c: 4e:ad:7c:f1:a9:c9:f5:cf:58:c9:34:4e:9b:b6:4c:f7:31:f5: be:cc:e1:46:8d:d3:55:c8:e5:47:6e:da:ec:38:3f:d2:16:b6: 94:13:94:01:6e:31:04:fd:be:da:f8:6c:51:4a:5b:ee:5c:c2: cc:d0:18:0f:ca:df:1d:37:fb:fd:93:97:ed:6e:51:ce:00:68: 02:b9:f6:59:16:12:28:87:a2:07:05:ad:ea:da:83:60:46:f3: a2:78:94:56:d7:5d:87:d6:36:89:38:aa:98:8d:26:c3:0d:3d: 7a:c1:87:58:08:58:c2:44:e1:81:f2:79:5d:db:e1:7b:a7:28: b4:5f:3d:40:89:53:b1:0f:ba:86:d4:bd:2b:84:74:39:e6:06: 74:e7:57:39:92:51:10:31:9c:28:08:1a:1a:d6:c9:ef:e7:b9: 40:d4:e9:6a:b1:14:c0:31:75:f2:d3:94:fe:1d:de:a0:39:8e: 43:de:3f:80 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcRvcF2qAJftmuG1wIAT4FxElMd0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MjQ2WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ODdmYWVkNWE2YjFjNWViNTA3NDM5YzdmNDdjYTI2ODk2 YTgyODA3MjRlZjMzOTk3ZWIwMWFhY2Q2N2YzMzRkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnnjPFuHMuGB45SsoQYlUZJDWHVFho1lNZWlRgAOSWNhBX xKu5o/8rGA6TV/MKAcfNkVV/4REYIe72hvT6bS8rzMqY7lKOCcaXu/ePLDi69oPt ADtGqBcz7PoRHt/q2rxw05zgeNOenYH5/5kYRfCvJBujE0pOMnAOd/KRih+h1N2i Ye4+0v/NeNvpzGzkc/wAwbWPXLcn8kMqinI71x0zqwuQcakw5EtiWFsiCWtbdrbU 0Wby23ratbVWSgXX++EqMp4xznXKD0VjesoHClk03smp/i8/m9SZiDPirkEg/JLp ZgxOt91oEqmRbG4nyw+rLrzSFPypmAogGWP29a2zAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOj4c0empNWcajuofnBxvnx9oz4kwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY5MTJjN2U1LTQxZjQtNGI4Mi05ZGI4LTUxYmFjMjkxMmY1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBAFrjNG+iC9jvSWbwghoWPElf KCmHR5DYDTbeH6Ofmue0HKTBcDS6vKUHBQMeFaLJ8/nIpvOE4UYdGeEdpRwPcqkq mGSwCP50HE6tfPGpyfXPWMk0Tpu2TPcx9b7M4UaN01XI5Udu2uw4P9IWtpQTlAFu MQT9vtr4bFFKW+5cwszQGA/K3x03+/2Tl+1uUc4AaAK59lkWEiiHogcFrerag2BG 86J4lFbXXYfWNok4qpiNJsMNPXrBh1gIWMJE4YHyeV3b4XunKLRfPUCJU7EPuobU vSuEdDnmBnTnVzmSURAxnCgIGhrWye/nuUDU6WqxFMAxdfLTlP4d3qA5jkPeP4A= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:09 2025 by rpki-client