$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c0b0b880-e632-4ca7-8b61-0658e8846f8b.roa File: c0b0b880-e632-4ca7-8b61-0658e8846f8b.roa (raw, json) Hash identifier: gygGbf8+7d2Q9Jq/WvEvecjyRXhNXkZptsZRKVcytFY= Subject key identifier: D8:59:3C:2F:D2:68:21:19:6F:E6:84:69:01:60:87:29:5A:C5:C5:63 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 69001B5860F3EF583C3A5188E49132341CF13C80 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c0b0b880-e632-4ca7-8b61-0658e8846f8b.roa Signing time: Mon 06 Oct 2025 17:40:23 +0000 ROA not before: Mon 06 Oct 2025 17:40:23 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:00:1b:58:60:f3:ef:58:3c:3a:51:88:e4:91:32:34:1c:f1:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:40:23 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=8496c5767aeb517874bb9cc68fe235ed6737ce3137b413afb0ae2a8c06c9fd25, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a3:28:d6:2d:a3:74:00:a6:81:7a:71:44:85: a0:33:66:ff:2c:e9:31:5b:8d:7b:f7:c9:04:d9:d9: 93:b8:47:f4:38:ab:07:92:92:3c:b4:b3:4a:e7:62: c0:55:8a:8f:a0:72:1f:93:ea:d0:81:6a:e6:a4:1f: cc:81:86:4e:89:b1:6f:65:d8:bd:85:3f:33:f1:4a: 2e:b0:e1:2c:48:c6:c2:14:6b:9b:7b:7c:a6:b5:5a: b7:ce:4f:42:a9:e9:4d:8e:a3:e4:7d:2d:55:41:53: 1f:0c:8e:c2:ea:ad:14:69:51:c6:ec:09:09:aa:73: b9:0c:7c:8f:85:b9:ec:36:20:a7:5e:fc:49:66:02: a4:49:c9:6c:b6:fc:23:72:f6:e8:60:eb:8e:2a:2d: 03:c4:8d:b9:3e:ba:13:6c:b1:91:08:1c:be:62:dc: 0c:c2:35:2c:7f:05:61:6d:a2:9e:da:a1:56:76:7d: fc:a3:7e:e2:d4:b7:61:e5:31:76:5f:57:1e:60:ed: e0:2a:40:4b:94:c9:2b:69:c2:db:93:c0:24:5e:46: 1e:02:0a:9d:5d:05:38:1d:38:cb:c7:94:3e:56:40: 7d:f7:68:69:60:1c:f0:f6:59:d7:10:92:3d:7f:23: 5b:a1:fe:57:73:38:81:c5:31:cb:e1:f3:4d:56:b8: b3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:59:3C:2F:D2:68:21:19:6F:E6:84:69:01:60:87:29:5A:C5:C5:63 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c0b0b880-e632-4ca7-8b61-0658e8846f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6109::/48 Signature Algorithm: sha256WithRSAEncryption 71:7e:fd:8c:bf:d0:65:61:48:ce:a7:5c:73:56:f5:5c:7b:e9: 9e:8c:b1:cd:44:ad:d5:9c:06:68:d8:3f:45:4b:0a:f7:7b:f5: d6:41:40:44:d5:41:6c:d0:66:92:01:eb:64:94:f6:70:60:0a: e3:13:e8:eb:66:3c:3e:9a:62:26:da:14:d0:69:74:c4:28:e8: b5:cd:74:f4:c6:0b:ad:f6:d3:6c:5e:d4:91:d5:4e:fa:ed:e2: a6:ff:da:a0:de:05:c5:e6:4a:c0:a5:23:39:14:41:20:eb:fb: da:76:b3:db:3a:63:e8:5f:00:39:ad:e0:d7:0b:d3:d7:19:ea: 8a:28:df:03:60:b5:14:4a:76:6b:a1:55:0a:a0:d0:47:1e:f6: 73:24:0a:c9:5d:63:b8:3b:5a:95:d7:9f:36:a7:ad:10:ae:66: e5:f0:20:17:a9:e8:ec:3f:94:4f:bd:a4:9b:b9:7a:39:78:8d: 65:cc:a7:3b:39:26:ac:99:d0:b9:58:5e:7d:75:fc:9a:63:b6: fe:21:84:b9:85:71:ad:73:c1:9a:e8:2c:be:05:33:3a:31:59: 6b:97:31:0c:dd:8c:8c:a7:1a:e2:00:5e:6d:68:1c:46:3d:0c: 89:11:37:50:9e:42:44:7d:ec:56:45:00:61:d7:90:48:22:1e: 78:4c:a1:d3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaQAbWGDz71g8OlGI5JEyNBzxPIAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTc0MDIzWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDk2YzU3NjdhZWI1MTc4NzRiYjljYzY4ZmUyMzVlZDY3 MzdjZTMxMzdiNDEzYWZiMGFlMmE4YzA2YzlmZDI1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvoyjWLaN0AKaBenFEhaAzZv8s6TFbjXv3yQTZ2ZO4R/Q4 qweSkjy0s0rnYsBVio+gch+T6tCBauakH8yBhk6JsW9l2L2FPzPxSi6w4SxIxsIU a5t7fKa1WrfOT0Kp6U2Oo+R9LVVBUx8MjsLqrRRpUcbsCQmqc7kMfI+Fuew2IKde /ElmAqRJyWy2/CNy9uhg644qLQPEjbk+uhNssZEIHL5i3AzCNSx/BWFtop7aoVZ2 ffyjfuLUt2HlMXZfVx5g7eAqQEuUyStpwtuTwCReRh4CCp1dBTgdOMvHlD5WQH33 aGlgHPD2WdcQkj1/I1uh/ldzOIHFMcvh801WuLNfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2Fk8L9JoIRlv5oRpAWCHKVrFxWMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2MwYjBiODgwLWU2MzItNGNhNy04YjYxLTA2NThlODg0NmY4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQkwDQYJKoZIhvcNAQELBQADggEBAHF+/Yy/0GVhSM6nXHNW9Vx7 6Z6Msc1ErdWcBmjYP0VLCvd79dZBQETVQWzQZpIB62SU9nBgCuMT6OtmPD6aYiba FNBpdMQo6LXNdPTGC63202xe1JHVTvrt4qb/2qDeBcXmSsClIzkUQSDr+9p2s9s6 Y+hfADmt4NcL09cZ6ooo3wNgtRRKdmuhVQqg0Ece9nMkCsldY7g7WpXXnzanrRCu ZuXwIBep6Ow/lE+9pJu5ejl4jWXMpzs5JqyZ0LlYXn11/Jpjtv4hhLmFca1zwZro LL4FMzoxWWuXMQzdjIynGuIAXm1oHEY9DIkRN1CeQkR97FZFAGHXkEgiHnhModM= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:22 2025 by rpki-client