$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa File: 973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa (raw, json) Hash identifier: RHsghgKJSN8Ro3YxHDkkqhUuAR5EyaOvdNia37mH+vU= Subject key identifier: 2A:5E:88:D7:1D:DF:2B:0C:48:BD:99:36:4F:BA:74:89:35:99:7E:9E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 162222F2ED6C0167DEEC2C37392397BBB91EAD45 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa Signing time: Mon 06 Oct 2025 17:37:47 +0000 ROA not before: Mon 06 Oct 2025 17:37:47 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:22:22:f2:ed:6c:01:67:de:ec:2c:37:39:23:97:bb:b9:1e:ad:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:37:47 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=961a0805391e41cdb659afa2844dcf71a143b189fde699800e484776e1d9a55c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bd:14:5e:72:68:16:11:5a:00:d7:a6:90:c4: 9b:52:23:0e:65:a7:5e:56:99:1e:9b:13:83:c9:3c: c1:3f:6f:0a:89:c9:fa:bd:02:1c:a8:62:7d:e6:2a: 0e:ed:fd:92:52:d6:39:f1:ce:c4:ec:93:be:55:e5: b1:32:88:31:41:37:f1:18:30:17:e9:26:84:4f:8b: 93:51:d4:23:42:4e:47:8b:71:6d:4b:f9:ed:90:c7: a6:64:e4:4d:52:c9:61:c6:5d:ca:65:86:b2:7e:63: 87:90:a1:1a:58:83:ec:27:15:d7:4e:70:39:67:97: 01:68:12:c5:b9:c7:b5:e0:60:df:99:8b:2e:d8:dd: a0:72:3c:6e:cf:1a:c0:e3:5a:16:b0:08:d9:72:e1: 0c:e8:40:ba:a4:e3:9d:c9:a0:e8:b5:38:f1:f6:15: 83:3a:d6:53:2b:bb:1b:e1:1a:9f:bf:b3:14:d7:b1: 4d:ca:17:3d:0f:64:d7:8b:15:5a:b0:94:b6:11:87: f3:eb:48:1c:64:6e:fc:a3:09:a2:f7:b1:ca:d8:30: cb:e0:ff:f6:10:a2:c6:fd:92:84:2b:3d:bb:84:76: 64:2e:c5:0c:fb:5e:0a:18:d2:23:5f:2b:87:79:3a: fe:07:e3:c9:24:2b:c7:7c:5c:e4:6f:28:9e:02:af: 06:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5E:88:D7:1D:DF:2B:0C:48:BD:99:36:4F:BA:74:89:35:99:7E:9E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/973e821c-8b2c-4c2b-93fc-2e00ef721fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6120::/48 Signature Algorithm: sha256WithRSAEncryption 14:be:9c:a7:ab:dd:15:70:1d:5e:5b:ad:ca:52:b4:03:68:e9: 9c:f4:db:4f:09:ac:88:1c:9d:a0:94:fe:88:4b:07:ba:09:a4: 7c:d9:6c:34:2e:e0:bc:f2:30:5d:5f:dc:1c:90:b8:e8:8e:34: 13:a9:c7:1e:82:fe:01:9a:ea:3c:79:6f:5f:e9:9b:70:67:34: 8a:7a:a4:2c:8e:67:4c:52:9d:9f:db:6a:6d:49:86:c2:d7:73: 6d:d9:1b:1c:75:a5:8b:bc:db:ff:4e:40:c1:dc:6a:b9:b1:31: a1:7e:f1:cf:ff:a1:3c:15:9f:67:74:22:7a:f2:47:8e:a9:4b: 18:b1:c8:cf:01:02:80:1f:72:50:91:f8:4d:c5:e2:fd:bf:84: 48:b6:a2:f3:00:8c:32:4b:d3:52:43:e8:ce:1a:9c:7a:95:66: 83:9c:b8:5b:15:ad:d5:7c:e2:82:ed:d1:b4:a8:28:c8:ad:a8: 49:2b:35:f0:44:14:32:e4:b5:1f:26:4f:35:71:f0:29:d1:db: 92:ad:a0:6b:fb:64:df:1c:3e:d7:37:2c:75:c5:27:06:c6:d1: 3a:a9:22:61:7b:35:9a:ab:11:c4:75:c7:64:2c:00:52:63:4d: 97:5c:4d:83:25:35:5c:aa:41:cb:63:2a:df:1c:e8:77:14:2b: a5:3f:3f:29 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFiIi8u1sAWfe7Cw3OSOXu7kerUUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTczNzQ3WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjFhMDgwNTM5MWU0MWNkYjY1OWFmYTI4NDRkY2Y3MWEx NDNiMTg5ZmRlNjk5ODAwZTQ4NDc3NmUxZDlhNTVjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWvRRecmgWEVoA16aQxJtSIw5lp15WmR6bE4PJPME/bwqJ yfq9AhyoYn3mKg7t/ZJS1jnxzsTsk75V5bEyiDFBN/EYMBfpJoRPi5NR1CNCTkeL cW1L+e2Qx6Zk5E1SyWHGXcplhrJ+Y4eQoRpYg+wnFddOcDlnlwFoEsW5x7XgYN+Z iy7Y3aByPG7PGsDjWhawCNly4QzoQLqk453JoOi1OPH2FYM61lMruxvhGp+/sxTX sU3KFz0PZNeLFVqwlLYRh/PrSBxkbvyjCaL3scrYMMvg//YQosb9koQrPbuEdmQu xQz7XgoY0iNfK4d5Ov4H48kkK8d8XORvKJ4CrwZRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKl6I1x3fKwxIvZk2T7p0iTWZfp4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzk3M2U4MjFjLThiMmMtNGMyYi05M2ZjLTJlMDBlZjcyMWZkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSAwDQYJKoZIhvcNAQELBQADggEBABS+nKer3RVwHV5brcpStANo 6Zz0208JrIgcnaCU/ohLB7oJpHzZbDQu4LzyMF1f3ByQuOiONBOpxx6C/gGa6jx5 b1/pm3BnNIp6pCyOZ0xSnZ/bam1JhsLXc23ZGxx1pYu82/9OQMHcarmxMaF+8c// oTwVn2d0InryR46pSxixyM8BAoAfclCR+E3F4v2/hEi2ovMAjDJL01JD6M4anHqV ZoOcuFsVrdV84oLt0bSoKMitqEkrNfBEFDLktR8mTzVx8CnR25KtoGv7ZN8cPtc3 LHXFJwbG0TqpImF7NZqrEcR1x2QsAFJjTZdcTYMlNVyqQctjKt8c6HcUK6U/Pyk= -----END CERTIFICATE-----Generated at Wed Oct 8 23:10:25 2025 by rpki-client