$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c95d920e-7e95-4907-9edf-29509d14ad36.roa File: c95d920e-7e95-4907-9edf-29509d14ad36.roa (raw, json) Hash identifier: O6apEUXgccWqPxmce8uBz4O90m3VJmmE3qnX88770Xo= Subject key identifier: F8:B4:9B:FA:03:47:D1:1A:25:39:74:2D:B5:C0:51:01:2B:EE:7D:C0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4D958B55E1F0F7EFCA3FCC4D0C92671DCBDA7ABD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c95d920e-7e95-4907-9edf-29509d14ad36.roa Signing time: Fri 26 Sep 2025 18:11:24 +0000 ROA not before: Fri 26 Sep 2025 18:11:24 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:eb00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:95:8b:55:e1:f0:f7:ef:ca:3f:cc:4d:0c:92:67:1d:cb:da:7a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:11:24 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=a0bb440c4cd12a5d57d3083c46ed3b19f108867066acb5ed8fcf46a4b15c2dd6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:df:8e:b4:44:f1:31:d8:02:34:59:2d:08: 12:60:4d:3d:0c:28:c4:2b:51:35:0b:96:40:db:ef: 76:89:5c:7e:f1:5e:30:66:f4:82:a1:22:1a:b2:79: db:43:76:57:6e:52:c1:d3:74:74:63:3c:b9:12:7a: 8b:2c:11:48:a2:84:07:74:06:c7:b5:42:40:86:cc: de:58:c9:62:05:0f:f4:ba:17:96:12:fa:77:ea:02: 0c:b9:1a:39:d6:92:10:11:e8:5a:c7:b8:be:94:22: 55:fe:ec:a8:02:8a:04:6d:e2:8b:ea:a5:b7:49:22: a5:1a:8a:ff:f5:61:4b:b4:89:f8:96:e0:ed:ef:89: fc:87:f2:03:f7:fa:7b:dd:c4:e7:44:8a:2f:dd:35: d0:3a:71:34:e4:87:2e:54:a0:df:16:2a:1d:51:d0: b8:d6:3b:5c:99:38:d5:72:68:33:bc:0d:6e:11:20: c2:97:e0:7f:35:c5:1d:72:39:65:67:e9:6b:3f:3e: 0b:a9:1a:02:08:99:a6:2e:63:47:8d:29:57:75:a0: 3b:32:04:c5:0f:5c:72:36:d9:d3:16:bd:3d:b6:e1: 1f:da:6a:af:8e:ee:25:9f:e7:62:a1:74:9f:cb:bb: 6c:7c:36:c8:92:99:0a:92:a2:82:44:58:68:c9:5f: 99:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B4:9B:FA:03:47:D1:1A:25:39:74:2D:B5:C0:51:01:2B:EE:7D:C0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c95d920e-7e95-4907-9edf-29509d14ad36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:eb00::/42 Signature Algorithm: sha256WithRSAEncryption 58:82:55:5a:eb:ef:9d:a8:b7:d4:f3:f2:df:08:ab:82:ad:72: e9:fd:d5:df:c3:4d:b2:2d:d1:9e:be:88:66:58:49:20:f7:06: 14:45:14:99:5c:25:39:87:3c:3f:e1:75:43:95:ca:9a:d3:26: dc:d2:da:dd:1d:97:61:14:88:3d:8b:b5:c2:be:ed:1f:9a:71: 64:f1:b9:00:2d:78:4d:c6:eb:8f:1f:a1:58:f3:23:dc:f6:18: d1:e5:bb:b6:94:c1:b1:66:aa:dc:5e:d1:20:cf:1e:36:55:43: d2:d7:b0:ca:42:3b:00:c5:92:ae:d3:4c:11:6e:72:5f:0a:9b: 83:f6:dc:df:7c:3a:5e:2a:03:f4:f1:23:bf:2d:37:92:88:59: 3b:b0:2e:e3:f4:4c:ed:b3:93:8c:81:06:57:53:4d:9b:4e:65: b4:b6:97:2d:fe:13:08:71:9b:24:4c:8d:b4:2a:d8:fe:7b:2b: 1e:47:77:3e:83:8a:a9:c9:93:3d:b6:a7:b9:ea:35:7d:fa:83: 52:85:b4:57:ff:24:76:73:52:4c:b8:b4:df:12:15:ce:90:3c: f0:e3:48:a9:8b:6f:e1:73:40:74:1e:71:d5:9e:4a:42:e1:35: 33:a1:37:96:35:5e:a8:2f:a6:9d:0e:33:d0:57:86:52:ec:24: 6d:a1:1c:fb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTZWLVeHw9+/KP8xNDJJnHcvaer0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMTI0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGJiNDQwYzRjZDEyYTVkNTdkMzA4M2M0NmVkM2IxOWYx MDg4NjcwNjZhY2I1ZWQ4ZmNmNDZhNGIxNWMyZGQ2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Ld+OtETxMdgCNFktCBJgTT0MKMQrUTULlkDb73aJXH7x XjBm9IKhIhqyedtDdlduUsHTdHRjPLkSeossEUiihAd0Bse1QkCGzN5YyWIFD/S6 F5YS+nfqAgy5GjnWkhAR6FrHuL6UIlX+7KgCigRt4ovqpbdJIqUaiv/1YUu0ifiW 4O3vifyH8gP3+nvdxOdEii/dNdA6cTTkhy5UoN8WKh1R0LjWO1yZONVyaDO8DW4R IMKX4H81xR1yOWVn6Ws/PgupGgIImaYuY0eNKVd1oDsyBMUPXHI22dMWvT224R/a aq+O7iWf52KhdJ/Lu2x8NsiSmQqSooJEWGjJX5lHAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+LSb+gNH0RolOXQttcBRASvufcAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M5NWQ5MjBlLTdlOTUtNDkwNy05ZWRmLTI5NTA5ZDE0YWQzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD76wAwDQYJKoZIhvcNAQELBQADggEBAFiCVVrr752ot9Tz8t8Iq4Kt cun91d/DTbIt0Z6+iGZYSSD3BhRFFJlcJTmHPD/hdUOVyprTJtzS2t0dl2EUiD2L tcK+7R+acWTxuQAteE3G648foVjzI9z2GNHlu7aUwbFmqtxe0SDPHjZVQ9LXsMpC OwDFkq7TTBFucl8Km4P23N98Ol4qA/TxI78tN5KIWTuwLuP0TO2zk4yBBldTTZtO ZbS2ly3+EwhxmyRMjbQq2P57Kx5Hdz6DiqnJkz22p7nqNX36g1KFtFf/JHZzUky4 tN8SFc6QPPDjSKmLb+FzQHQecdWeSkLhNTOhN5Y1Xqgvpp0OM9BXhlLsJG2hHPs= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:54 2025 by rpki-client