$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3026e026-f5e8-46be-927e-d13ed27dd55c.roa File: 3026e026-f5e8-46be-927e-d13ed27dd55c.roa (raw, json) Hash identifier: vpl5n1gfbSWy8oZYUJhHaNx932jsMpYtBQz36tkfM9U= Subject key identifier: 46:FC:15:D4:D4:0B:F0:E5:B5:38:12:7E:B9:C4:80:3E:DC:AC:B5:9B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 02C2057F8E22903EF48E0B7F63FD63F04D4FB503 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3026e026-f5e8-46be-927e-d13ed27dd55c.roa Signing time: Mon 08 Sep 2025 18:37:16 +0000 ROA not before: Mon 08 Sep 2025 18:37:16 +0000 ROA not after: Mon 13 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c2:05:7f:8e:22:90:3e:f4:8e:0b:7f:63:fd:63:f0:4d:4f:b5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 8 18:37:16 2025 GMT Not After : Oct 13 23:59:59 2025 GMT Subject: serialNumber=143f9adb52051b164acd9c19391f569aadfe77dd99a64ee82c42cd336ed5ecc4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:2b:b4:58:fd:c4:af:a6:2b:ef:56:d1:75: e1:a8:ba:a0:85:d1:e2:a1:07:ff:ca:cc:d8:e1:29: a1:53:df:32:1b:48:67:0d:6e:a4:0f:54:53:29:92: 54:63:ff:bc:ab:fb:90:bb:78:43:82:30:f2:5c:24: 18:bc:4b:8a:70:6c:43:9e:03:67:d0:26:5b:e0:07: cd:36:2b:bf:69:b0:d0:58:b4:3b:19:51:36:69:fb: ca:ce:e9:11:27:d8:29:94:39:ac:e2:87:08:d6:0d: 75:96:f7:7c:6b:ff:f2:b3:a4:46:91:c5:8f:c1:5c: 5f:ec:6c:35:01:a2:d8:46:4a:46:6d:4a:74:86:6a: a1:ec:cc:46:ab:6f:c5:59:bc:e8:d5:76:fd:7e:46: 93:a6:b6:a1:fd:ef:bd:27:e2:3d:8f:94:b7:0c:bb: 87:fc:a3:a1:8f:1d:9e:72:99:e0:44:65:44:72:ff: 64:00:ca:68:9c:12:6a:00:80:8b:e8:f8:d2:a5:3a: 77:31:9e:73:04:ce:0f:26:8d:57:99:12:ed:37:35: a6:bc:cf:8b:d4:80:2b:2a:dc:0b:28:8a:1f:ce:16: 31:54:24:40:62:02:8c:d0:46:33:cf:e3:3d:2d:09: e2:fc:a3:91:3a:28:c4:08:6d:9b:7c:74:ff:73:37: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FC:15:D4:D4:0B:F0:E5:B5:38:12:7E:B9:C4:80:3E:DC:AC:B5:9B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3026e026-f5e8-46be-927e-d13ed27dd55c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f108::/48 Signature Algorithm: sha256WithRSAEncryption 5e:2f:a9:6d:2e:ad:66:d3:8a:45:c4:58:ef:8c:a3:b0:4e:f5: db:26:47:39:02:41:f6:e1:18:c9:80:eb:0f:dc:7b:4d:62:c0: fb:9b:dc:a6:2e:20:52:0d:de:92:3c:eb:6a:7f:25:b9:55:2c: cc:30:ce:48:82:c8:5b:73:bd:eb:99:83:c9:d4:b4:5d:a4:fd: cd:7e:51:95:bb:2b:24:36:ed:1b:fa:de:5e:14:37:d2:6f:21: db:fc:31:80:c1:db:3f:4e:46:e9:cd:91:98:8c:01:c7:72:fc: 19:16:e7:dc:61:b4:5c:18:92:8a:0c:dd:85:ec:a8:96:f9:eb: 04:07:ca:8f:0c:d4:e3:ce:0d:f6:91:5e:83:f6:2f:30:27:28: db:48:65:49:7b:f4:3d:80:52:6a:a0:18:78:64:c4:d4:e4:da: 24:b3:e0:03:36:6e:62:a2:52:9b:27:01:d8:53:6e:0d:8d:7b: 61:fa:98:45:32:df:53:af:5f:94:91:d7:d7:7a:de:66:08:ce: 5d:12:03:33:74:1c:4b:dd:61:e5:14:8d:1d:94:72:9d:1c:bd: c0:ad:ec:f0:aa:2e:62:3b:55:a7:88:ca:46:c9:a0:e4:d6:9b: 67:52:83:c5:15:0e:d1:0c:6c:71:4c:4f:40:17:12:d5:90:2a: a7:77:1f:1f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAsIFf44ikD70jgt/Y/1j8E1PtQMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTA4MTgzNzE2WhcNMjUxMDEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDNmOWFkYjUyMDUxYjE2NGFjZDljMTkzOTFmNTY5YWFk ZmU3N2RkOTlhNjRlZTgyYzQyY2QzMzZlZDVlY2M0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7zSu0WP3Er6Yr71bRdeGouqCF0eKhB//KzNjhKaFT3zIb SGcNbqQPVFMpklRj/7yr+5C7eEOCMPJcJBi8S4pwbEOeA2fQJlvgB802K79psNBY tDsZUTZp+8rO6REn2CmUOazihwjWDXWW93xr//KzpEaRxY/BXF/sbDUBothGSkZt SnSGaqHszEarb8VZvOjVdv1+RpOmtqH9770n4j2PlLcMu4f8o6GPHZ5ymeBEZURy /2QAymicEmoAgIvo+NKlOncxnnMEzg8mjVeZEu03Naa8z4vUgCsq3Asoih/OFjFU JEBiAozQRjPP4z0tCeL8o5E6KMQIbZt8dP9zNxJtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURvwV1NQL8OW1OBJ+ucSAPtystZswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMwMjZlMDI2LWY1ZTgtNDZiZS05MjdlLWQxM2VkMjdkZDU1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QgwDQYJKoZIhvcNAQELBQADggEBAF4vqW0urWbTikXEWO+Mo7BO 9dsmRzkCQfbhGMmA6w/ce01iwPub3KYuIFIN3pI862p/JblVLMwwzkiCyFtzveuZ g8nUtF2k/c1+UZW7KyQ27Rv63l4UN9JvIdv8MYDB2z9ORunNkZiMAcdy/BkW59xh tFwYkooM3YXsqJb56wQHyo8M1OPODfaRXoP2LzAnKNtIZUl79D2AUmqgGHhkxNTk 2iSz4AM2bmKiUpsnAdhTbg2Ne2H6mEUy31OvX5SR19d63mYIzl0SAzN0HEvdYeUU jR2Ucp0cvcCt7PCqLmI7VaeIykbJoOTWm2dSg8UVDtEMbHFMT0AXEtWQKqd3Hx8= -----END CERTIFICATE-----Generated at Fri Sep 19 16:04:39 2025 by rpki-client