$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa File: c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa (raw, json) Hash identifier: 3P4i24qcdxC7OAjac4WqqPHRLFGCRHy2XgN5LINGvus= Subject key identifier: 06:70:3C:B6:27:73:FC:60:CE:7F:46:33:63:D0:92:23:ED:46:30:20 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 040A6CB935818EC7071A3DFF9A4BF8D8EA13F2CE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa Signing time: Fri 26 Sep 2025 18:11:28 +0000 ROA not before: Fri 26 Sep 2025 18:11:28 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e600::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0a:6c:b9:35:81:8e:c7:07:1a:3d:ff:9a:4b:f8:d8:ea:13:f2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:11:28 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=1007618e1099649a977574ba30bb01d92aa67da97d8ffd2aa773e58bc8125928, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:ea:d1:64:2c:ed:06:8d:7c:97:3b:8d:34: 7d:48:89:3d:8f:72:1a:48:25:34:6d:96:f7:a5:30: 65:1a:cf:0f:2e:43:98:a7:17:ea:fd:4d:ac:04:14: fd:41:bb:78:2c:37:d8:bb:17:e0:3c:d7:40:42:45: e1:81:62:82:ba:32:4c:68:62:95:da:48:41:5b:0c: e1:6d:23:d4:05:e6:a6:09:92:33:c6:af:3f:b5:b9: 11:50:ef:c0:40:de:f3:88:65:41:c7:37:6f:68:53: 1a:dc:3a:e9:d1:e5:a1:5e:76:94:7f:98:89:3c:b6: 8c:30:62:48:21:53:9d:e0:45:c0:35:bb:a8:79:f9: 22:1d:0b:37:33:eb:73:0b:8b:00:ee:47:5c:f5:72: 8d:fe:1f:67:38:99:69:47:ee:5e:0f:45:4e:06:d7: c8:9b:a2:bc:95:af:d3:87:35:fa:c5:8c:d6:41:b6: 33:30:46:04:c1:db:1b:ac:b3:80:de:4e:2f:40:f3: ce:ad:e0:47:c6:1a:d5:a0:a9:d9:04:69:c0:28:e3: 6d:f7:87:40:8d:3c:9b:c8:23:aa:df:66:75:8a:32: 60:90:3a:a3:46:62:38:32:6b:8c:40:29:bc:12:6d: 9e:72:71:5a:75:e8:e1:fd:b0:a2:87:93:25:2b:cd: fa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:70:3C:B6:27:73:FC:60:CE:7F:46:33:63:D0:92:23:ED:46:30:20 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4e52abf-4d7e-4707-bd4e-1ceba64e18cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e600::/42 Signature Algorithm: sha256WithRSAEncryption 55:b0:5b:f7:14:3c:90:2d:97:82:bd:0a:b1:5e:5a:e9:93:bb: 08:47:84:75:19:93:ee:a8:15:e9:c4:0e:63:c5:4b:6e:04:f7: a5:22:7f:1f:eb:b8:3d:ce:09:9d:67:66:3c:f8:32:6e:18:fa: 52:e5:56:c3:c6:ea:a3:0b:11:d9:41:36:7f:4f:27:6f:9a:11: 11:c0:3b:aa:b1:50:69:86:36:40:59:9c:5e:df:26:30:8f:b3: de:e3:2b:85:24:42:82:95:25:ac:a4:57:64:e8:3a:15:d3:fb: 65:ba:da:03:6a:68:65:fd:8e:83:36:f2:75:21:09:28:52:76: 45:06:46:28:6b:c9:1e:83:7d:d7:64:a4:25:c1:13:7b:0a:23: ef:17:dc:3c:74:fc:e3:36:5d:a1:0b:5a:63:33:b2:50:f4:fb: 3d:f1:c6:ad:e7:c8:ef:f2:a7:ef:f9:7f:1a:73:d3:0f:3b:48: e4:53:af:22:43:05:da:29:77:e5:d9:2b:5b:f6:62:1a:65:1e: 38:4d:ad:16:07:49:5f:0f:61:b1:17:e8:46:7f:1d:b8:f8:92: 75:fc:73:4b:d1:a3:d3:d1:db:c8:79:63:42:54:e8:b5:00:7c: 33:0a:de:4d:0d:ba:0a:72:80:cd:3a:c0:9e:cd:63:ad:71:65: 5f:3e:b3:dd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBApsuTWBjscHGj3/mkv42OoT8s4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMTI4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDA3NjE4ZTEwOTk2NDlhOTc3NTc0YmEzMGJiMDFkOTJh YTY3ZGE5N2Q4ZmZkMmFhNzczZTU4YmM4MTI1OTI4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCti+rRZCztBo18lzuNNH1IiT2PchpIJTRtlvelMGUazw8u Q5inF+r9TawEFP1Bu3gsN9i7F+A810BCReGBYoK6MkxoYpXaSEFbDOFtI9QF5qYJ kjPGrz+1uRFQ78BA3vOIZUHHN29oUxrcOunR5aFedpR/mIk8towwYkghU53gRcA1 u6h5+SIdCzcz63MLiwDuR1z1co3+H2c4mWlH7l4PRU4G18iboryVr9OHNfrFjNZB tjMwRgTB2xuss4DeTi9A886t4EfGGtWgqdkEacAo4233h0CNPJvII6rfZnWKMmCQ OqNGYjgya4xAKbwSbZ5ycVp16OH9sKKHkyUrzfoRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBnA8tidz/GDOf0YzY9CSI+1GMCAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M0ZTUyYWJmLTRkN2UtNDcwNy1iZDRlLTFjZWJhNjRlMThjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75gAwDQYJKoZIhvcNAQELBQADggEBAFWwW/cUPJAtl4K9CrFeWumT uwhHhHUZk+6oFenEDmPFS24E96Uifx/ruD3OCZ1nZjz4Mm4Y+lLlVsPG6qMLEdlB Nn9PJ2+aERHAO6qxUGmGNkBZnF7fJjCPs97jK4UkQoKVJaykV2ToOhXT+2W62gNq aGX9joM28nUhCShSdkUGRihryR6DfddkpCXBE3sKI+8X3Dx0/OM2XaELWmMzslD0 +z3xxq3nyO/yp+/5fxpz0w87SORTryJDBdopd+XZK1v2YhplHjhNrRYHSV8PYbEX 6EZ/Hbj4knX8c0vRo9PR28h5Y0JU6LUAfDMK3k0NugpygM06wJ7NY61xZV8+s90= -----END CERTIFICATE-----Generated at Wed Oct 8 19:48:42 2025 by rpki-client