$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e0ccd54-23cc-4939-b5be-1cf1c8ab6154.roa File: 1e0ccd54-23cc-4939-b5be-1cf1c8ab6154.roa (raw, json) Hash identifier: BByLTj7f8way6l3ETA3oHSiwzt+dauCmT59QuvSX6/g= Subject key identifier: 8A:39:57:0C:84:88:AF:E4:DD:06:F2:CC:06:B5:BA:19:0D:3B:DF:AB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5942D8BE6B9B447724F0E96FF81A1383B5CE89C0 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e0ccd54-23cc-4939-b5be-1cf1c8ab6154.roa Signing time: Fri 03 Oct 2025 15:18:21 +0000 ROA not before: Fri 03 Oct 2025 15:18:21 +0000 ROA not after: Fri 07 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:42:d8:be:6b:9b:44:77:24:f0:e9:6f:f8:1a:13:83:b5:ce:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 3 15:18:21 2025 GMT Not After : Nov 7 23:59:59 2025 GMT Subject: serialNumber=f85c1d973df309bfb8c8a4b4606b4dd685d73a2bd0d008832ce185f8d40fbf2a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4e:4c:e8:c3:54:85:c3:03:98:44:82:f8:ee: 56:1b:f7:88:3f:83:fb:23:0f:01:b6:b5:ae:ba:8e: 7e:63:5b:76:1f:38:b7:28:9e:02:87:d2:3c:22:e2: 1d:8c:c2:0f:74:55:52:87:d3:6b:36:df:52:0e:97: 02:07:fd:4f:e3:c7:25:e8:eb:19:5c:d3:fd:38:e7: 96:52:1c:88:75:d0:57:71:48:86:7f:42:d2:d5:39: e6:52:d0:56:81:38:ba:3b:bb:9d:0f:4c:dc:b9:c6: ec:c5:c3:e2:ec:2f:28:24:e4:33:b9:2f:64:aa:59: d4:28:a5:bd:ac:f9:81:c6:18:6c:69:10:26:00:8c: 0a:64:2c:05:3a:4f:78:4e:df:c5:4c:12:8e:87:7a: b8:24:c2:94:ed:03:ed:91:7a:bc:7e:32:5b:ed:6e: 81:25:8e:fa:bb:26:16:da:6c:61:2e:db:69:9f:a3: a2:3c:1e:dd:fb:85:8e:1d:e7:95:c4:12:10:6b:ae: a3:4c:ea:0f:d2:e6:d9:be:d6:e1:12:68:8a:f9:72: 8b:f2:7e:d2:b3:4e:77:81:15:f5:5e:d0:57:5b:8d: dd:f7:f5:dd:ce:90:70:3e:89:28:da:ce:55:f7:bd: 82:ea:a2:72:9a:15:02:45:5e:43:5e:f9:12:9d:21: 4f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:39:57:0C:84:88:AF:E4:DD:06:F2:CC:06:B5:BA:19:0D:3B:DF:AB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e0ccd54-23cc-4939-b5be-1cf1c8ab6154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6102::/48 Signature Algorithm: sha256WithRSAEncryption 81:0d:55:7f:c7:18:5c:06:9c:8e:5b:43:64:9f:44:89:69:c7: 48:d4:2b:fa:f4:d0:6f:e8:d7:62:3e:bf:7b:83:3d:c3:3d:c7: 1e:a5:3e:3e:38:4c:8c:98:ea:31:e2:1e:68:e9:9c:b1:b3:a2: de:d7:12:36:65:1f:fe:04:a0:5b:a0:2e:5a:84:3a:a5:88:f7: 21:77:f0:cb:49:35:fa:2a:a3:00:d5:89:60:e8:a7:3a:48:91: 04:6a:c6:df:4a:f4:64:cb:d9:25:5f:44:49:06:ad:c0:bb:32: 32:21:16:48:be:c8:be:c0:d9:b8:2a:12:1d:86:b7:15:e4:9d: d3:8d:06:f0:25:29:1d:08:77:c3:da:de:21:72:3f:b1:7b:3e: ae:4f:df:b8:7a:d5:0e:9e:d0:4d:0c:f3:e4:ec:6a:c2:ab:c6: d6:e1:a6:55:2f:05:0c:23:f4:11:e5:ef:ba:d9:a6:75:b6:3a: 89:31:f2:03:99:23:de:02:7e:1d:f5:3e:30:26:92:56:a4:7e: 12:d6:63:39:10:57:ad:9c:9d:fd:8e:8d:b0:80:69:43:ef:41: 69:ad:76:60:64:31:63:cf:c4:77:6d:91:9d:2b:16:aa:cc:99: dd:f1:e9:db:41:d2:4b:9c:a1:28:74:58:5a:d5:c2:68:99:c0: 6d:f6:1f:40 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWULYvmubRHck8Olv+BoTg7XOicAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDAzMTUxODIxWhcNMjUxMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmODVjMWQ5NzNkZjMwOWJmYjhjOGE0YjQ2MDZiNGRkNjg1 ZDczYTJiZDBkMDA4ODMyY2UxODVmOGQ0MGZiZjJhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpTkzow1SFwwOYRIL47lYb94g/g/sjDwG2ta66jn5jW3Yf OLcongKH0jwi4h2Mwg90VVKH02s231IOlwIH/U/jxyXo6xlc0/0455ZSHIh10Fdx SIZ/QtLVOeZS0FaBOLo7u50PTNy5xuzFw+LsLygk5DO5L2SqWdQopb2s+YHGGGxp ECYAjApkLAU6T3hO38VMEo6HergkwpTtA+2Rerx+MlvtboEljvq7JhbabGEu22mf o6I8Ht37hY4d55XEEhBrrqNM6g/S5tm+1uESaIr5covyftKzTneBFfVe0Fdbjd33 9d3OkHA+iSjazlX3vYLqonKaFQJFXkNe+RKdIU+FAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUijlXDISIr+TdBvLMBrW6GQ0736swHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFlMGNjZDU0LTIzY2MtNDkzOS1iNWJlLTFjZjFjOGFiNjE1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQIwDQYJKoZIhvcNAQELBQADggEBAIENVX/HGFwGnI5bQ2SfRIlp x0jUK/r00G/o12I+v3uDPcM9xx6lPj44TIyY6jHiHmjpnLGzot7XEjZlH/4EoFug LlqEOqWI9yF38MtJNfoqowDViWDopzpIkQRqxt9K9GTL2SVfREkGrcC7MjIhFki+ yL7A2bgqEh2GtxXkndONBvAlKR0Id8Pa3iFyP7F7Pq5P37h61Q6e0E0M8+TsasKr xtbhplUvBQwj9BHl77rZpnW2Ookx8gOZI94Cfh31PjAmklakfhLWYzkQV62cnf2O jbCAaUPvQWmtdmBkMWPPxHdtkZ0rFqrMmd3x6dtB0kucoSh0WFrVwmiZwG32H0A= -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:47 2025 by rpki-client