$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa File: 2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa (raw, json) Hash identifier: qXJiljbkt9qZ/g5wTZ1eo5FDOKm8JNTd6KWbo0ntKPQ= Subject key identifier: 2F:FE:94:45:88:BC:AD:AC:B4:CE:CA:BD:79:01:7E:C5:81:82:36:2E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 46B65C4A81658E20E2A132535E0B114DB1CC314D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa Signing time: Wed 17 Sep 2025 21:51:54 +0000 ROA not before: Wed 17 Sep 2025 21:51:54 +0000 ROA not after: Wed 22 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1:80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b6:5c:4a:81:65:8e:20:e2:a1:32:53:5e:0b:11:4d:b1:cc:31:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 17 21:51:54 2025 GMT Not After : Oct 22 23:59:59 2025 GMT Subject: serialNumber=213c054ce9767b4d040e5c9748c9ea5997e6e5c6c47f7a29fd767cf781942bbb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:25:67:46:5b:17:a2:94:16:38:8f:33:92:a7: c7:ac:02:31:6a:d3:cb:ca:1c:42:2f:97:99:3f:33: 44:0f:61:a6:35:97:c9:fa:9d:b7:57:b4:bb:bc:de: 57:7a:22:81:a1:45:61:a7:65:9b:4e:c4:cd:7a:3c: bc:a4:b3:05:16:10:f6:32:9f:03:23:b7:ed:f5:27: a7:44:a3:b6:2d:5b:ed:6c:a6:6b:5e:5b:ec:d8:bc: 75:de:87:69:64:b9:72:de:3c:69:2c:28:91:65:2b: a5:07:7a:b3:40:97:bc:ae:9f:bc:93:d8:06:96:75: 5d:46:63:4d:e4:b2:28:1f:0c:0f:d4:02:cb:9e:a6: c8:cc:b4:82:4d:58:ce:61:ac:1a:a4:b1:14:02:9e: 66:15:96:28:3e:41:5f:ce:0a:45:23:8b:95:e9:2b: 32:f2:37:9a:d4:0c:6e:65:28:18:ea:6e:90:c1:69: f8:29:6d:44:9b:f7:42:c8:d2:30:8a:2d:9b:72:85: bc:71:7c:e1:f6:35:a0:65:15:b9:6b:2b:ac:56:45: 9d:12:e4:62:22:e3:a5:fe:ab:ef:a8:a0:3b:fb:40: 5e:ea:84:23:f3:f5:cf:a8:b8:b3:ee:02:b0:1a:09: 51:de:80:55:61:c8:94:08:c1:3d:9b:6c:1c:cc:bb: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FE:94:45:88:BC:AD:AC:B4:CE:CA:BD:79:01:7E:C5:81:82:36:2E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:80::/44 Signature Algorithm: sha256WithRSAEncryption 43:e5:46:1f:21:01:d0:de:f1:d3:f2:2d:2a:9c:a2:20:40:cb: a6:c2:19:14:52:9d:60:72:dd:e8:7b:e9:55:7e:18:0c:87:c9: 6f:83:75:10:ad:6c:55:4c:72:3e:49:24:47:8a:85:69:a4:21: f5:d1:a4:dd:2d:8e:4c:70:17:5e:dd:b4:bb:21:8d:60:76:e2: 1b:50:7b:fe:77:cc:8e:b2:9d:e2:b2:1f:80:ba:00:cb:42:64: 53:06:a7:59:f2:17:72:d3:aa:da:bc:a5:1a:4f:48:22:cf:3d: 77:e6:b7:3e:86:02:df:be:6d:07:fe:13:23:72:cf:df:72:2d: b2:f4:88:8d:de:d7:cd:c5:9b:56:d9:97:c3:a9:44:c1:dd:bf: 38:65:60:3d:85:ae:3e:5c:ef:37:ea:31:c7:cd:0c:df:de:35: 8a:23:51:91:bf:75:9a:4c:49:92:9d:24:65:c8:88:e0:b9:d1: 1d:1c:a2:15:7b:2b:c4:f4:0a:3e:f4:d9:f8:32:d1:e6:16:6c: 37:fb:c8:77:29:38:81:55:c7:d0:6a:63:b3:7e:2d:4b:f3:3f: 75:5f:68:de:bf:96:5e:a9:61:ff:65:93:f1:8e:a8:64:82:32: 27:dd:7e:6f:03:f3:19:fe:e0:04:b0:cc:dc:54:62:8e:56:bb: 3b:fc:fa:dc -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURrZcSoFljiDioTJTXgsRTbHMMU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTE3MjE1MTU0WhcNMjUxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTNjMDU0Y2U5NzY3YjRkMDQwZTVjOTc0OGM5ZWE1OTk3 ZTZlNWM2YzQ3ZjdhMjlmZDc2N2NmNzgxOTQyYmJiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPJWdGWxeilBY4jzOSp8esAjFq08vKHEIvl5k/M0QPYaY1 l8n6nbdXtLu83ld6IoGhRWGnZZtOxM16PLykswUWEPYynwMjt+31J6dEo7YtW+1s pmteW+zYvHXeh2lkuXLePGksKJFlK6UHerNAl7yun7yT2AaWdV1GY03ksigfDA/U AsuepsjMtIJNWM5hrBqksRQCnmYVlig+QV/OCkUji5XpKzLyN5rUDG5lKBjqbpDB afgpbUSb90LI0jCKLZtyhbxxfOH2NaBlFblrK6xWRZ0S5GIi46X+q++ooDv7QF7q hCPz9c+ouLPuArAaCVHegFVhyJQIwT2bbBzMu2HpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUL/6URYi8ray0zsq9eQF+xYGCNi4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzJiODk2MjFhLTZjMjktNGNiZi04OTc2LTM5MzBjNGU1ZDkxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxAIAwDQYJKoZIhvcNAQELBQADggEBAEPlRh8hAdDe8dPyLSqcoiBA y6bCGRRSnWBy3eh76VV+GAyHyW+DdRCtbFVMcj5JJEeKhWmkIfXRpN0tjkxwF17d tLshjWB24htQe/53zI6yneKyH4C6AMtCZFMGp1nyF3LTqtq8pRpPSCLPPXfmtz6G At++bQf+EyNyz99yLbL0iI3e183Fm1bZl8OpRMHdvzhlYD2Frj5c7zfqMcfNDN/e NYojUZG/dZpMSZKdJGXIiOC50R0cohV7K8T0Cj702fgy0eYWbDf7yHcpOIFVx9Bq Y7N+LUvzP3VfaN6/ll6pYf9lk/GOqGSCMifdfm8D8xn+4ASwzNxUYo5Wuzv8+tw= -----END CERTIFICATE-----Generated at Fri Sep 19 13:08:04 2025 by rpki-client