$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/18a81d27-7f1e-4a83-80cc-8b089f18a344.roa File: 18a81d27-7f1e-4a83-80cc-8b089f18a344.roa (raw, json) Hash identifier: hKlXa/G7WogC7waQ2JZGcF1/zltQwxCi7/83cgZuZ+0= Subject key identifier: B9:86:3F:99:79:70:C8:63:1F:C7:25:68:9F:3F:5B:EE:71:23:03:0A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7A489EFA419DD9CE91F0811DC015E8F003D1DC18 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/18a81d27-7f1e-4a83-80cc-8b089f18a344.roa Signing time: Mon 08 Sep 2025 18:37:15 +0000 ROA not before: Mon 08 Sep 2025 18:37:15 +0000 ROA not after: Mon 13 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:48:9e:fa:41:9d:d9:ce:91:f0:81:1d:c0:15:e8:f0:03:d1:dc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 8 18:37:15 2025 GMT Not After : Oct 13 23:59:59 2025 GMT Subject: serialNumber=7cdff3c0eda49ab3e4b299bd52b2100816c6225b54a05eb12bbf18c641c7dbf7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7f:71:92:b9:da:8e:cd:ac:91:0f:15:2d:fd: 7a:58:e4:2a:bc:36:b6:75:18:e2:26:27:b0:22:8e: 68:df:05:f6:e5:23:92:42:a5:dd:ab:03:b8:13:04: dd:21:ee:20:67:55:f4:49:74:ea:52:c3:3a:fb:bf: ca:9f:87:37:f4:a7:84:4f:bb:ed:80:df:78:65:a1: 2f:76:f2:33:6b:2b:aa:d9:4b:4e:b2:1d:fc:c7:0b: 22:4c:45:c6:94:f5:b7:03:61:84:76:11:de:4a:46: 5d:5e:f0:e3:b9:ff:48:1c:74:ed:bf:3b:14:7b:22: f3:c7:f7:7f:83:1a:14:83:fb:6a:31:13:79:0a:d5: 95:f1:16:7d:7e:0f:8b:69:2d:3d:15:3a:ea:45:f2: b8:4f:69:eb:e2:62:c7:d4:e8:a9:c6:89:dd:1b:ec: 95:4a:1a:54:99:90:6f:23:b7:62:53:0a:b2:72:30: 73:49:ce:cd:bc:2b:05:04:df:16:88:4f:7c:b7:a3: 7b:68:ff:49:dc:d2:12:ed:ae:9f:f3:48:dd:e0:85: ae:08:80:36:6f:7c:a0:ba:61:68:b5:b5:9a:f1:0c: d3:4e:7d:64:ba:a1:5a:ed:d6:98:18:28:0c:f3:8c: e3:87:81:6d:d4:ff:0c:04:79:32:af:2a:40:ec:b9: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:86:3F:99:79:70:C8:63:1F:C7:25:68:9F:3F:5B:EE:71:23:03:0A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/18a81d27-7f1e-4a83-80cc-8b089f18a344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f107::/48 Signature Algorithm: sha256WithRSAEncryption 73:28:83:e6:cf:2f:27:21:62:fa:f6:aa:f8:ad:a4:90:10:ef: 0c:e7:c8:91:4b:bc:e7:1d:50:1f:e3:89:68:94:00:dd:da:85: b1:3b:da:91:12:f3:54:87:d9:67:ce:95:93:63:83:51:42:7b: 0f:9f:6b:c7:0b:7e:f3:d3:1d:c8:08:d5:b7:f6:bc:b4:8c:35: 65:97:bf:06:bb:ef:b7:78:a2:5a:da:a3:3b:25:bc:0c:55:8c: 8c:d1:a4:0a:cf:45:b3:51:b2:78:42:4d:8d:5b:22:06:42:22: 43:61:b8:de:e2:82:ec:a7:41:c0:ac:06:d6:ec:e4:0d:a4:87: 51:ef:ba:51:81:ce:3d:03:eb:f9:6a:52:83:15:95:f7:88:09: 94:f8:d7:60:b7:50:cc:e9:13:a6:6e:5d:ea:b7:d7:92:62:d6: 82:00:ba:71:22:71:23:7c:59:2b:8c:08:81:7c:60:4b:ab:21: b6:4d:f9:a5:94:d0:55:52:ce:d3:2d:2a:5e:69:65:d7:7f:31: 25:77:5d:08:83:f5:87:d3:a2:a2:b4:4a:12:a3:47:13:4b:79: 80:db:55:86:94:65:31:3d:76:70:4e:45:88:bd:10:c1:d7:ba: a2:b3:22:f4:1f:e3:c6:de:2e:b0:e0:d2:fb:ea:52:18:ce:b3: 07:03:c5:bf -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUekie+kGd2c6R8IEdwBXo8APR3BgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTA4MTgzNzE1WhcNMjUxMDEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2RmZjNjMGVkYTQ5YWIzZTRiMjk5YmQ1MmIyMTAwODE2 YzYyMjViNTRhMDVlYjEyYmJmMThjNjQxYzdkYmY3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdf3GSudqOzayRDxUt/XpY5Cq8NrZ1GOImJ7AijmjfBfbl I5JCpd2rA7gTBN0h7iBnVfRJdOpSwzr7v8qfhzf0p4RPu+2A33hloS928jNrK6rZ S06yHfzHCyJMRcaU9bcDYYR2Ed5KRl1e8OO5/0gcdO2/OxR7IvPH93+DGhSD+2ox E3kK1ZXxFn1+D4tpLT0VOupF8rhPaeviYsfU6KnGid0b7JVKGlSZkG8jt2JTCrJy MHNJzs28KwUE3xaIT3y3o3to/0nc0hLtrp/zSN3gha4IgDZvfKC6YWi1tZrxDNNO fWS6oVrt1pgYKAzzjOOHgW3U/wwEeTKvKkDsub0jAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuYY/mXlwyGMfxyVonz9b7nEjAwowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE4YTgxZDI3LTdmMWUtNGE4My04MGNjLThiMDg5ZjE4YTM0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QcwDQYJKoZIhvcNAQELBQADggEBAHMog+bPLychYvr2qvitpJAQ 7wznyJFLvOcdUB/jiWiUAN3ahbE72pES81SH2WfOlZNjg1FCew+fa8cLfvPTHcgI 1bf2vLSMNWWXvwa777d4olraozslvAxVjIzRpArPRbNRsnhCTY1bIgZCIkNhuN7i guynQcCsBtbs5A2kh1HvulGBzj0D6/lqUoMVlfeICZT412C3UMzpE6ZuXeq315Ji 1oIAunEicSN8WSuMCIF8YEurIbZN+aWU0FVSztMtKl5pZdd/MSV3XQiD9YfToqK0 ShKjRxNLeYDbVYaUZTE9dnBORYi9EMHXuqKzIvQf48beLrDg0vvqUhjOswcDxb8= -----END CERTIFICATE-----Generated at Fri Sep 19 08:04:06 2025 by rpki-client