$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b863f23f-4426-4c77-a614-689e722bb8c6.roa File: b863f23f-4426-4c77-a614-689e722bb8c6.roa (raw, json) Hash identifier: +XSQJNzxhLJPVaDOfXB4E2tm+f5yXgw4YiLbU23r+G8= Subject key identifier: E8:B0:9F:3E:DC:F1:67:61:D5:EE:3A:94:CB:38:FD:97:CF:8E:02:3F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 27F4ED1E12545886438FB83D6A8F2E400D914769 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b863f23f-4426-4c77-a614-689e722bb8c6.roa Signing time: Mon 06 Oct 2025 17:37:44 +0000 ROA not before: Mon 06 Oct 2025 17:37:44 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f4:ed:1e:12:54:58:86:43:8f:b8:3d:6a:8f:2e:40:0d:91:47:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:37:44 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=5881ad6608795fc5d5c159ecbca5408492ce4954c54245f014a4b0e0db6c07d6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:88:8b:1e:6f:86:90:a5:a4:fb:5a:71:ac: 98:bd:61:62:42:de:10:15:72:7c:f4:e4:e3:54:48: 1a:99:00:f9:48:90:6d:09:42:c2:7b:7d:30:2e:5e: 30:b3:7e:d8:be:22:41:23:76:74:5f:8f:15:50:ce: 0a:af:da:b9:7c:00:18:4c:b6:c6:da:7d:5d:73:16: 4c:a6:4d:a6:ce:05:fe:38:57:d9:43:ac:24:b4:24: 2a:61:80:0a:67:78:b6:8f:69:1a:8d:09:f4:55:f6: c6:7e:09:8e:48:28:c6:29:99:54:27:91:2a:db:e2: 77:9d:07:2b:b1:5c:6f:1c:cc:70:2f:98:02:9d:71: 14:14:77:53:fa:f3:18:c0:05:66:60:90:18:80:f0: 2c:25:56:27:8b:bd:35:b6:db:12:8b:e1:55:d3:e1: 08:b4:0c:00:fc:b2:f1:35:e5:6f:78:5a:80:fa:05: 5f:72:16:89:57:ed:ad:6f:d3:7a:a3:db:53:d1:9f: ef:05:84:f3:ca:ea:c7:0e:fe:47:90:15:c8:f5:51: 31:2f:5a:03:17:21:48:dd:bb:2e:58:04:dd:a5:47: 7f:d6:2e:19:85:ae:2e:a0:0b:fd:8d:aa:de:2a:57: dc:35:aa:93:af:32:ee:ca:d0:95:d1:f2:9b:25:a2: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B0:9F:3E:DC:F1:67:61:D5:EE:3A:94:CB:38:FD:97:CF:8E:02:3F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b863f23f-4426-4c77-a614-689e722bb8c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6121::/48 Signature Algorithm: sha256WithRSAEncryption 63:0d:27:94:10:7b:69:bf:93:c7:85:0a:86:a4:60:9c:1a:6d: 43:10:21:53:02:b0:88:3b:b2:a1:2b:d3:bd:6f:e0:ae:f0:ad: 6d:05:8c:a3:27:c4:f0:46:04:4a:63:8e:09:48:23:44:86:3f: 6d:9c:b9:ed:66:16:61:cd:3a:21:f7:9c:f5:b2:d0:12:a7:30: c9:e4:99:6e:23:b1:02:26:f4:38:dd:44:eb:ef:b4:50:66:c5: 02:84:b7:3e:1f:00:47:d0:3f:71:a0:d8:1f:cf:9e:63:74:a8: 63:9c:f3:ae:3e:46:04:f3:c7:b3:c0:ca:d8:5e:51:18:4b:d2: fa:69:af:e3:2c:8f:b2:20:c6:d9:11:59:2e:4a:78:88:4a:05: 77:89:5d:40:55:c6:95:99:74:b2:2f:db:2e:ae:83:66:fe:ca: fa:60:85:a1:f8:9e:8b:79:a3:aa:40:e2:62:a3:ee:63:07:1a: fc:03:ad:0c:3c:20:aa:b7:8e:99:4a:fc:55:4a:c2:21:f0:fe: 9d:f7:8f:b7:35:31:a6:fc:b2:75:32:7a:16:91:f5:2f:3b:22: 99:79:ce:02:a7:3f:e3:f8:03:2f:26:f1:19:de:7e:65:e3:3d: a2:e7:fd:5c:12:30:28:d8:a8:55:04:6b:24:b0:d6:9b:8a:d2: c2:2a:08:a7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJ/TtHhJUWIZDj7g9ao8uQA2RR2kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTczNzQ0WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODgxYWQ2NjA4Nzk1ZmM1ZDVjMTU5ZWNiY2E1NDA4NDky Y2U0OTU0YzU0MjQ1ZjAxNGE0YjBlMGRiNmMwN2Q2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdsYiLHm+GkKWk+1pxrJi9YWJC3hAVcnz05ONUSBqZAPlI kG0JQsJ7fTAuXjCzfti+IkEjdnRfjxVQzgqv2rl8ABhMtsbafV1zFkymTabOBf44 V9lDrCS0JCphgApneLaPaRqNCfRV9sZ+CY5IKMYpmVQnkSrb4nedByuxXG8czHAv mAKdcRQUd1P68xjABWZgkBiA8CwlVieLvTW22xKL4VXT4Qi0DAD8svE15W94WoD6 BV9yFolX7a1v03qj21PRn+8FhPPK6scO/keQFcj1UTEvWgMXIUjduy5YBN2lR3/W LhmFri6gC/2Nqt4qV9w1qpOvMu7K0JXR8pslorl5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6LCfPtzxZ2HV7jqUyzj9l8+OAj8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I4NjNmMjNmLTQ0MjYtNGM3Ny1hNjE0LTY4OWU3MjJiYjhjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSEwDQYJKoZIhvcNAQELBQADggEBAGMNJ5QQe2m/k8eFCoakYJwa bUMQIVMCsIg7sqEr071v4K7wrW0FjKMnxPBGBEpjjglII0SGP22cue1mFmHNOiH3 nPWy0BKnMMnkmW4jsQIm9DjdROvvtFBmxQKEtz4fAEfQP3Gg2B/PnmN0qGOc864+ RgTzx7PAytheURhL0vppr+Msj7IgxtkRWS5KeIhKBXeJXUBVxpWZdLIv2y6ug2b+ yvpghaH4not5o6pA4mKj7mMHGvwDrQw8IKq3jplK/FVKwiHw/p33j7c1Mab8snUy ehaR9S87Ipl5zgKnP+P4Ay8m8RnefmXjPaLn/VwSMCjYqFUEaySw1puK0sIqCKc= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:13 2025 by rpki-client