$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa File: 8befeacb-b991-408b-912e-a5a744fc13df.roa (raw, json) Hash identifier: 0+7rr4x13eT372TLAyAKXxpsdbMJ3ylYWu37JOfY6Vc= Subject key identifier: D8:8E:77:6F:83:E7:4E:0A:94:0D:71:5B:86:EE:9A:FA:40:38:DD:32 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 46FDA3763875952F46D68D3EE842857D301957C8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa Signing time: Mon 06 Oct 2025 17:38:13 +0000 ROA not before: Mon 06 Oct 2025 17:38:13 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:fd:a3:76:38:75:95:2f:46:d6:8d:3e:e8:42:85:7d:30:19:57:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:38:13 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=7535d651038ad17d29a0df6326b6c584a6211381a0715bd3e6a38e95534111ba, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6a:0d:a0:5d:c8:de:f2:37:61:05:09:c6:c2: bf:d3:33:71:e2:b3:f1:c9:86:46:5d:3e:49:a0:4a: db:42:31:a0:9b:4b:39:32:cd:64:3e:f7:f6:be:a5: 9d:ab:ea:02:76:c8:ea:1e:c6:2f:cd:e8:6a:92:48: 49:b9:51:a9:78:37:4a:3c:f2:f8:57:44:d7:a3:5d: da:8d:56:2d:0e:d8:0b:c5:58:5f:df:6f:c4:b0:9e: 8d:30:40:fb:54:00:49:e7:54:b0:62:98:12:b2:82: 68:47:01:ac:c5:38:f7:87:11:90:82:92:52:74:70: 0f:f9:56:51:4b:32:06:07:64:24:0c:f1:28:80:f6: 35:3d:0e:e4:19:12:0e:4a:e2:be:62:46:a8:da:3e: 82:f5:c0:98:44:36:30:62:72:a5:90:d6:ff:cf:4b: c4:e0:85:f4:99:36:2e:77:e8:c2:8c:1b:ee:31:c9: 25:a7:f5:b9:88:7c:13:f4:27:10:60:7b:ff:7f:3b: ba:d9:8c:bb:94:40:06:2b:81:0d:f0:88:ed:36:b2: 3a:58:d7:dd:82:99:ba:8e:c6:7e:f1:07:f7:1e:75: 0e:4e:03:0b:d1:da:90:82:9b:a2:b5:74:2a:ec:51: e2:63:51:fd:01:cb:0f:1d:7a:43:b0:e5:32:17:30: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8E:77:6F:83:E7:4E:0A:94:0D:71:5B:86:EE:9A:FA:40:38:DD:32 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6106::/48 Signature Algorithm: sha256WithRSAEncryption 2f:90:4b:47:b9:85:42:5d:9c:dc:66:66:5c:92:e1:22:6e:5e: 7c:7b:77:30:f7:1e:fe:78:5e:c3:62:c8:d6:55:d4:ed:78:f6: c9:ff:cc:63:9f:04:d2:42:ab:96:b9:f4:fc:6e:aa:c0:f9:8f: a5:4e:e4:de:d2:50:ad:cc:b8:8d:be:c5:ad:ce:f7:02:6b:b8: 1b:48:40:7c:d2:cf:78:49:df:fa:b5:83:62:ab:1d:63:99:ac: 51:4a:bc:7c:8b:4c:75:98:b5:46:50:89:33:97:e3:9f:16:ce: ce:a1:7a:cb:24:c0:cc:27:90:6d:59:dd:05:ea:68:7d:e0:0a: c4:1b:39:98:e4:f3:bf:a0:f1:89:9f:71:cd:f3:e1:d1:35:c7: 1f:51:3e:c2:cc:4a:cf:19:6a:13:2f:0f:e9:e7:20:cc:3b:9c: 94:3a:01:2b:59:73:65:e0:20:a8:59:64:d0:ca:dd:33:e9:aa: b9:7b:47:f3:60:63:82:50:0b:83:38:3e:0b:e4:58:27:9c:a1: 6d:49:4e:3b:ae:00:4c:47:14:ee:8f:e1:81:c2:20:28:eb:9a: 7a:b8:bc:25:75:2a:39:14:5d:f6:37:54:4c:72:1f:8a:15:da: 88:ec:64:32:2d:c5:87:d4:0d:58:86:42:0d:99:05:59:a2:0a: 2d:06:dd:99 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURv2jdjh1lS9G1o0+6EKFfTAZV8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTczODEzWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTM1ZDY1MTAzOGFkMTdkMjlhMGRmNjMyNmI2YzU4NGE2 MjExMzgxYTA3MTViZDNlNmEzOGU5NTUzNDExMWJhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaag2gXcje8jdhBQnGwr/TM3His/HJhkZdPkmgSttCMaCb SzkyzWQ+9/a+pZ2r6gJ2yOoexi/N6GqSSEm5Ual4N0o88vhXRNejXdqNVi0O2AvF WF/fb8Swno0wQPtUAEnnVLBimBKygmhHAazFOPeHEZCCklJ0cA/5VlFLMgYHZCQM 8SiA9jU9DuQZEg5K4r5iRqjaPoL1wJhENjBicqWQ1v/PS8TghfSZNi536MKMG+4x ySWn9bmIfBP0JxBge/9/O7rZjLuUQAYrgQ3wiO02sjpY192CmbqOxn7xB/cedQ5O AwvR2pCCm6K1dCrsUeJjUf0Byw8dekOw5TIXMEfZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2I53b4PnTgqUDXFbhu6a+kA43TIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhiZWZlYWNiLWI5OTEtNDA4Yi05MTJlLWE1YTc0NGZjMTNkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQYwDQYJKoZIhvcNAQELBQADggEBAC+QS0e5hUJdnNxmZlyS4SJu Xnx7dzD3Hv54XsNiyNZV1O149sn/zGOfBNJCq5a59PxuqsD5j6VO5N7SUK3MuI2+ xa3O9wJruBtIQHzSz3hJ3/q1g2KrHWOZrFFKvHyLTHWYtUZQiTOX458Wzs6hessk wMwnkG1Z3QXqaH3gCsQbOZjk87+g8Ymfcc3z4dE1xx9RPsLMSs8ZahMvD+nnIMw7 nJQ6AStZc2XgIKhZZNDK3TPpqrl7R/NgY4JQC4M4PgvkWCecoW1JTjuuAExHFO6P 4YHCICjrmnq4vCV1KjkUXfY3VExyH4oV2ojsZDItxYfUDViGQg2ZBVmiCi0G3Zk= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:21 2025 by rpki-client