$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2bd076f-38fe-414c-adae-9c6f359542b7.roa File: b2bd076f-38fe-414c-adae-9c6f359542b7.roa (raw, json) Hash identifier: hJcxdUFXYlFai0lF/uQvZ3rf3JeMr+X5ItB2h5CHoT0= Subject key identifier: 94:38:35:41:02:4F:3F:1E:05:E9:E4:02:B4:6B:E4:51:ED:40:B2:A5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 31EC12296E956052695083FA02D4AFF20E30D5B1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2bd076f-38fe-414c-adae-9c6f359542b7.roa Signing time: Fri 26 Sep 2025 18:20:11 +0000 ROA not before: Fri 26 Sep 2025 18:20:11 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ec:12:29:6e:95:60:52:69:50:83:fa:02:d4:af:f2:0e:30:d5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:20:11 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=ff6b476a84454731866794dcb77a496daeb497fe4dfebf38dd2048b7effb699c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ca:71:0d:f7:fe:12:86:99:2c:97:95:ae:03: a5:77:33:59:93:35:3e:48:14:bd:cd:ac:4f:e9:91: 61:a1:c3:d6:62:ca:65:f9:83:88:cf:41:5f:85:44: f3:e9:b5:bd:f7:d9:77:d4:45:05:c1:6a:a9:b0:65: 39:70:7d:bc:c1:f4:17:27:e2:48:e0:44:28:41:28: 83:96:ae:8d:39:8f:bc:18:db:91:ba:a2:27:e1:06: b0:25:a2:59:b8:4e:f1:7e:ab:5d:cb:6e:41:0c:53: 8a:56:32:2f:5b:90:1e:94:6e:5f:36:d4:db:2d:b7: dd:19:d7:cb:9b:d1:98:80:b1:f8:8f:16:99:76:bb: 33:9b:68:d8:d6:2a:de:59:c4:8d:df:f0:e5:ef:2b: 2d:41:49:41:50:ce:06:e8:f6:6d:fd:94:0f:bb:46: 1f:a1:9d:13:81:60:ff:e1:20:06:d6:a7:23:97:ff: e2:ed:87:d8:89:50:3f:2b:95:93:2b:ad:41:a8:b0: ad:15:9b:d9:d8:ca:f1:18:ba:46:65:05:95:52:4c: 70:58:0d:3c:3f:f5:09:79:05:32:1e:a5:25:78:f5: 5f:86:d1:55:7f:dc:4c:35:ec:59:3f:62:51:eb:7b: 87:db:70:49:0c:e5:61:41:dc:24:64:b2:25:d9:f0: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:38:35:41:02:4F:3F:1E:05:E9:E4:02:B4:6B:E4:51:ED:40:B2:A5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b2bd076f-38fe-414c-adae-9c6f359542b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e300::/40 Signature Algorithm: sha256WithRSAEncryption a0:18:bc:d4:73:45:eb:b9:df:c6:c4:16:d8:be:5e:cf:0a:25: 9d:77:24:aa:3f:79:e0:3e:0b:3c:ed:eb:da:01:9f:df:1e:86: e9:78:98:22:24:c6:18:a7:96:4f:1e:02:c4:42:5c:09:90:c8: c8:7c:e9:f5:42:c6:1b:fb:a1:1c:21:54:4e:42:12:37:f3:40: e3:54:8d:f0:04:a9:5c:66:3b:da:a6:4a:26:e8:87:5d:23:eb: 16:9d:cc:80:8a:c4:54:b4:33:70:50:9f:98:e5:33:20:34:69: 73:5f:64:01:19:c8:e4:83:5a:9f:36:28:f5:2a:de:4b:82:c3: d8:7c:bf:53:47:29:ce:9a:13:b0:01:e7:6a:8b:2b:ca:6c:4a: 32:cb:07:d0:92:cb:42:e3:a6:06:b6:a5:df:23:73:c0:ae:ec: 1d:b4:a3:11:78:23:3d:ab:5f:8b:b0:61:41:84:9d:3b:aa:62: bb:48:0c:8e:71:25:eb:f1:b4:04:cf:c9:c1:c4:c0:a5:b7:ca: 13:c8:57:57:e6:07:fd:ef:5b:c2:cd:80:cf:9d:f9:85:6d:e5: 9b:ed:96:a3:9d:d2:87:0b:4e:35:4d:a8:84:be:e7:73:24:c5: 91:89:50:85:a3:1f:78:81:93:4d:a5:32:cf:3d:b9:18:77:ad: 0e:cd:4d:4b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUMewSKW6VYFJpUIP6AtSv8g4w1bEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgyMDExWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjZiNDc2YTg0NDU0NzMxODY2Nzk0ZGNiNzdhNDk2ZGFl YjQ5N2ZlNGRmZWJmMzhkZDIwNDhiN2VmZmI2OTljMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChynEN9/4Shpksl5WuA6V3M1mTNT5IFL3NrE/pkWGhw9Zi ymX5g4jPQV+FRPPptb332XfURQXBaqmwZTlwfbzB9Bcn4kjgRChBKIOWro05j7wY 25G6oifhBrAlolm4TvF+q13LbkEMU4pWMi9bkB6Ubl821Nstt90Z18ub0ZiAsfiP Fpl2uzObaNjWKt5ZxI3f8OXvKy1BSUFQzgbo9m39lA+7Rh+hnROBYP/hIAbWpyOX /+Lth9iJUD8rlZMrrUGosK0Vm9nYyvEYukZlBZVSTHBYDTw/9Ql5BTIepSV49V+G 0VV/3Ew17Fk/YlHre4fbcEkM5WFB3CRksiXZ8Dz5AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUlDg1QQJPPx4F6eQCtGvkUe1AsqUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2IyYmQwNzZmLTM4ZmUtNDE0Yy1hZGFlLTljNmYzNTk1NDJiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74zANBgkqhkiG9w0BAQsFAAOCAQEAoBi81HNF67nfxsQW2L5ezwol nXckqj954D4LPO3r2gGf3x6G6XiYIiTGGKeWTx4CxEJcCZDIyHzp9ULGG/uhHCFU TkISN/NA41SN8ASpXGY72qZKJuiHXSPrFp3MgIrEVLQzcFCfmOUzIDRpc19kARnI 5INanzYo9SreS4LD2Hy/U0cpzpoTsAHnaosrymxKMssH0JLLQuOmBral3yNzwK7s HbSjEXgjPatfi7BhQYSdO6piu0gMjnEl6/G0BM/JwcTApbfKE8hXV+YH/e9bws2A z535hW3lm+2Wo53ShwtONU2ohL7ncyTFkYlQhaMfeIGTTaUyzz25GHetDs1NSw== -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:38 2025 by rpki-client