$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d258d57d-021e-4cb2-93b0-750fadc6ca66.roa File: d258d57d-021e-4cb2-93b0-750fadc6ca66.roa (raw, json) Hash identifier: eJR1FoYaENeoSmhupFDF4Q+we74yQB1P6Mma7xKV418= Subject key identifier: 52:BE:9E:F1:FF:B4:E8:D9:30:00:8E:E3:D0:37:CE:81:5D:D0:49:15 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 71EAEEDDB9AD8C3ECF485A7DC129B66029C3AA60 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d258d57d-021e-4cb2-93b0-750fadc6ca66.roa Signing time: Mon 06 Oct 2025 17:37:43 +0000 ROA not before: Mon 06 Oct 2025 17:37:43 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:611f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ea:ee:dd:b9:ad:8c:3e:cf:48:5a:7d:c1:29:b6:60:29:c3:aa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:37:43 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=b7f0b400d8ba15bc22cbaf43ce583bc8248decfaee13231c49b763ac8c1fc859, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:99:b5:8b:07:80:74:db:93:dc:d6:3f:02: 3d:b2:70:99:77:f9:95:fb:f4:76:6e:4d:5e:e9:aa: 44:91:1f:59:97:b6:7a:52:10:6e:75:36:f7:ec:a5: 65:51:28:e0:8d:7d:bc:b1:ce:8a:f7:9a:fb:36:ba: 22:e6:5a:a5:cb:20:dd:04:b1:d9:2d:ee:c8:43:b1: a4:46:9e:cf:8b:5c:70:6b:92:21:a8:a1:22:a6:e2: 9c:42:f5:1d:8f:ca:90:2d:ac:e1:0d:b5:34:fa:25: f8:b1:61:b9:86:d8:83:5a:ea:82:9e:e1:8e:e5:0b: a6:22:58:16:47:42:a6:73:5e:37:dc:06:46:a4:3e: 11:50:01:c5:e7:3b:bf:94:43:81:70:f6:38:a2:95: d9:c0:1c:c4:0f:e1:44:bd:73:ba:eb:06:39:15:de: b7:c1:2c:e2:ff:7b:ca:c2:11:99:4b:95:bf:aa:14: a4:40:43:f5:e9:33:7d:4d:f5:15:e5:a8:3e:c5:f0: 97:59:98:8c:b2:ab:64:99:29:fb:73:9a:43:f3:40: 05:5a:97:ab:e9:25:43:a0:c3:50:87:cb:bd:07:11: d7:ca:d9:c1:ab:c4:47:4b:47:3b:48:be:b4:b3:76: 62:59:dd:0f:8f:f5:1d:9a:08:f7:db:0c:7e:0c:c7: cb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BE:9E:F1:FF:B4:E8:D9:30:00:8E:E3:D0:37:CE:81:5D:D0:49:15 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d258d57d-021e-4cb2-93b0-750fadc6ca66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611f::/48 Signature Algorithm: sha256WithRSAEncryption 68:16:8c:1a:03:bc:4c:81:fe:ec:5a:b1:3f:ee:d7:16:fb:36: 0c:0e:47:ba:d3:83:38:fa:7f:e3:c0:71:e2:ff:71:83:8c:28: cd:15:cc:ed:ef:e6:6e:dc:04:6f:70:86:bb:6b:e5:a3:f0:e3: 44:37:e1:82:a4:b1:88:8f:17:0d:36:f0:d6:b2:f0:c5:f6:ae: b5:07:03:3f:76:a2:9e:80:6e:fc:e3:c3:a6:89:1c:5a:12:4d: 0a:2c:d2:f8:e0:91:8f:ff:61:2c:a5:89:aa:7f:8f:8c:c6:92: 0f:34:e4:9d:95:7a:bb:89:63:db:15:61:68:fd:87:97:48:23: dd:18:df:58:0e:4e:f8:33:5d:92:49:5e:f7:9e:bf:40:28:3d: ff:85:8c:56:21:43:d7:db:01:f3:92:51:41:48:24:94:c2:a3: 57:62:04:15:c9:9e:8d:8f:ba:be:a2:87:d5:9d:0a:48:ba:54: 38:0e:4e:7a:11:c7:c3:fe:77:5c:b6:1c:c4:a8:d9:43:f2:1b: f3:e5:89:ee:ee:06:97:1c:8e:da:42:39:84:f0:9b:5c:eb:6b: 2e:60:f2:44:75:e9:7e:3d:22:f9:99:f7:5c:81:68:31:bb:9b: 1a:20:6e:23:16:ea:81:ac:1a:d3:14:9f:ab:98:08:ba:f6:5a: b4:f4:1c:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUceru3bmtjD7PSFp9wSm2YCnDqmAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTczNzQzWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2YwYjQwMGQ4YmExNWJjMjJjYmFmNDNjZTU4M2JjODI0 OGRlY2ZhZWUxMzIzMWM0OWI3NjNhYzhjMWZjODU5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkBpm1iweAdNuT3NY/Aj2ycJl3+ZX79HZuTV7pqkSRH1mX tnpSEG51NvfspWVRKOCNfbyxzor3mvs2uiLmWqXLIN0Esdkt7shDsaRGns+LXHBr kiGooSKm4pxC9R2PypAtrOENtTT6JfixYbmG2INa6oKe4Y7lC6YiWBZHQqZzXjfc BkakPhFQAcXnO7+UQ4Fw9jiildnAHMQP4US9c7rrBjkV3rfBLOL/e8rCEZlLlb+q FKRAQ/XpM31N9RXlqD7F8JdZmIyyq2SZKftzmkPzQAVal6vpJUOgw1CHy70HEdfK 2cGrxEdLRztIvrSzdmJZ3Q+P9R2aCPfbDH4Mx8vXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUr6e8f+06NkwAI7j0DfOgV3QSRUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyNThkNTdkLTAyMWUtNGNiMi05M2IwLTc1MGZhZGM2Y2E2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR8wDQYJKoZIhvcNAQELBQADggEBAGgWjBoDvEyB/uxasT/u1xb7 NgwOR7rTgzj6f+PAceL/cYOMKM0VzO3v5m7cBG9whrtr5aPw40Q34YKksYiPFw02 8Nay8MX2rrUHAz92op6Abvzjw6aJHFoSTQos0vjgkY//YSyliap/j4zGkg805J2V eruJY9sVYWj9h5dII90Y31gOTvgzXZJJXveev0AoPf+FjFYhQ9fbAfOSUUFIJJTC o1diBBXJno2Pur6ih9WdCki6VDgOTnoRx8P+d1y2HMSo2UPyG/Plie7uBpccjtpC OYTwm1zray5g8kR16X49IvmZ91yBaDG7mxogbiMW6oGsGtMUn6uYCLr2WrT0HEY= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:32 2025 by rpki-client