$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa File: 8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa (raw, json) Hash identifier: mUq9YjgfG5g339f+KIkyDdkS//Iixk50RZtBKGryLRo= Subject key identifier: C6:DD:27:5F:94:65:B3:71:25:66:7F:24:36:BB:18:6E:2C:CA:53:90 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7FB197F12D1CA2D0FD2D11D5E22C8A994C51C540 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa Signing time: Fri 26 Sep 2025 18:10:47 +0000 ROA not before: Fri 26 Sep 2025 18:10:47 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b1:97:f1:2d:1c:a2:d0:fd:2d:11:d5:e2:2c:8a:99:4c:51:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:10:47 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=e75a4943795d725619ca7f25ff8319197cc0695f19f68a70a526f1da806737b4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:60:e8:96:af:8a:a9:c5:9d:4a:cf:a7:ca:41: 64:12:bc:7d:a2:cb:28:e4:9e:74:e5:21:d7:63:d1: af:67:0a:fd:e4:f5:c9:17:33:20:a3:d1:17:cc:17: 8c:22:ed:a6:90:b4:3a:5f:32:c9:86:50:5d:93:a4: 02:24:88:c0:fc:81:66:35:7f:76:e8:19:f1:70:27: aa:78:ed:eb:3b:cf:4e:79:63:82:2e:05:70:fe:53: 94:3f:a7:99:83:11:02:63:63:64:d5:ff:cc:63:1f: a1:8c:1f:1b:36:04:36:58:67:5b:87:4a:dd:e3:91: c5:9e:8b:2e:a5:2e:93:35:99:0e:34:57:92:cd:80: 7a:21:61:6f:3d:78:5d:d4:f5:bc:07:87:22:6b:90: c8:d3:36:84:13:96:e2:a7:2e:79:0c:b5:1f:88:3b: 4f:20:ef:f8:f4:ef:d5:20:6f:7e:0b:a8:bb:22:14: b5:9e:c4:d1:01:f4:25:0d:92:a7:d9:39:a7:54:a4: dc:6e:3c:29:4a:5a:88:72:91:21:f8:53:cf:9e:d3: 99:a7:fe:21:a5:4c:a8:8f:e8:be:ea:18:96:bc:21: 57:ea:bc:80:e2:c3:34:78:4f:74:de:e8:8d:21:98: 3b:cf:55:32:a5:c9:32:16:13:41:e4:fd:74:ea:44: 18:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DD:27:5F:94:65:B3:71:25:66:7F:24:36:BB:18:6E:2C:CA:53:90 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8f13536f-25a3-4ff1-9141-9b85d7e40b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:a0::/48 Signature Algorithm: sha256WithRSAEncryption 7b:e8:5a:62:55:93:01:7a:d5:f7:9c:f6:a8:50:3c:37:e9:1f: 52:b8:e0:8a:f6:4a:88:11:f0:ef:8d:48:45:f4:96:d5:9b:f4: 04:0c:eb:53:31:13:e0:b6:a8:e3:7d:02:23:e2:70:c3:29:22: f9:a9:b6:ff:fe:09:83:bc:a7:78:64:36:4f:2b:a9:4e:5d:dd: 00:e8:ac:13:05:34:a4:4a:f6:72:7e:be:17:78:cb:cf:e2:e6: 10:a7:02:88:8d:10:81:a5:fa:c7:26:1b:ae:b5:1e:7c:a6:0b: d3:b6:25:c2:d2:c0:94:be:88:fd:cb:33:d4:c2:57:88:4a:75: ad:2e:19:de:7c:27:19:95:23:d9:45:98:c2:97:36:e2:3b:f0: f5:92:74:67:2d:87:cb:d5:e1:31:7f:90:47:ed:ba:74:f4:41: f0:ec:d2:64:15:ec:a3:8a:06:2d:cf:fa:4b:80:24:57:53:5f: 5f:bb:01:58:54:c9:37:98:00:51:83:7e:ea:6b:96:c4:d5:a0: 90:bf:35:71:fd:3d:80:21:b0:6e:d0:76:59:f5:90:80:dc:f5: d5:64:f9:5f:83:d3:34:be:59:2f:e6:45:3d:56:ad:e0:6d:ea: a2:09:3d:e4:04:ce:9e:e0:e2:8b:cd:81:6f:b9:dc:6d:54:36: 80:2d:38:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUf7GX8S0cotD9LRHV4iyKmUxRxUAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMDQ3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzVhNDk0Mzc5NWQ3MjU2MTljYTdmMjVmZjgzMTkxOTdj YzA2OTVmMTlmNjhhNzBhNTI2ZjFkYTgwNjczN2I0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYYOiWr4qpxZ1Kz6fKQWQSvH2iyyjknnTlIddj0a9nCv3k 9ckXMyCj0RfMF4wi7aaQtDpfMsmGUF2TpAIkiMD8gWY1f3boGfFwJ6p47es7z055 Y4IuBXD+U5Q/p5mDEQJjY2TV/8xjH6GMHxs2BDZYZ1uHSt3jkcWeiy6lLpM1mQ40 V5LNgHohYW89eF3U9bwHhyJrkMjTNoQTluKnLnkMtR+IO08g7/j079Ugb34LqLsi FLWexNEB9CUNkqfZOadUpNxuPClKWohykSH4U8+e05mn/iGlTKiP6L7qGJa8IVfq vIDiwzR4T3Te6I0hmDvPVTKlyTIWE0Hk/XTqRBj7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxt0nX5Rls3ElZn8kNrsYbizKU5AwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhmMTM1MzZmLTI1YTMtNGZmMS05MTQxLTliODVkN2U0MGI4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAKAwDQYJKoZIhvcNAQELBQADggEBAHvoWmJVkwF61fec9qhQPDfp H1K44Ir2SogR8O+NSEX0ltWb9AQM61MxE+C2qON9AiPicMMpIvmptv/+CYO8p3hk Nk8rqU5d3QDorBMFNKRK9nJ+vhd4y8/i5hCnAoiNEIGl+scmG661HnymC9O2JcLS wJS+iP3LM9TCV4hKda0uGd58JxmVI9lFmMKXNuI78PWSdGcth8vV4TF/kEftunT0 QfDs0mQV7KOKBi3P+kuAJFdTX1+7AVhUyTeYAFGDfuprlsTVoJC/NXH9PYAhsG7Q dln1kIDc9dVk+V+D0zS+WS/mRT1WreBt6qIJPeQEzp7g4ovNgW+53G1UNoAtOCA= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:49 2025 by rpki-client