$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa File: 4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa (raw, json) Hash identifier: knhx74MRbQL7cDJJWe2jpvgZuQIIMJv8czOHiBBFOmw= Subject key identifier: 0F:55:B4:8C:28:3D:8A:0A:CB:19:0D:4B:C8:53:1B:6E:B8:92:69:BF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 242609BF16F9A1A0968039DD39D386A52E05BE4B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa Signing time: Wed 22 Oct 2025 00:50:02 +0000 ROA not before: Wed 22 Oct 2025 00:50:02 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:26:09:bf:16:f9:a1:a0:96:80:39:dd:39:d3:86:a5:2e:05:be:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:50:02 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=0ac81b402b17cc4ad4da73e104fbb6fea3b0c07970c4e4071e4d22194a9ef044, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:0b:f3:2f:5d:14:b1:d4:c5:41:09:4c:02: 69:57:1f:27:d7:08:2b:c0:bf:95:a6:17:c2:e3:23: 03:1b:1b:74:79:0f:be:85:8b:01:d6:18:7b:3b:c7: 69:b5:03:10:5c:9f:1d:6f:2a:67:32:13:3d:9c:da: cd:21:3c:06:26:e4:d7:a3:39:01:78:07:e8:87:63: e4:a6:a0:10:e0:93:ee:30:bc:3c:12:99:36:54:70: fb:fb:ff:2c:ca:d2:f9:f3:30:61:32:77:6b:73:52: 09:71:76:d3:38:75:af:63:0b:cd:b4:1e:a1:d1:e4: 61:27:21:93:e6:ea:97:bc:53:6c:f0:aa:fe:32:8a: f7:e9:b9:47:7b:25:ad:6d:14:50:a0:a8:1e:e5:46: 33:5a:f1:8c:8f:6d:14:f4:c0:06:a3:54:ec:0b:d5: fa:8a:fa:59:79:73:f2:48:2b:e0:fc:fc:81:a2:1e: 1a:d0:12:70:b1:d1:b5:aa:8d:cc:ee:7d:41:ad:19: e1:b8:84:9c:ca:16:d9:c1:10:0d:e8:f4:4f:2f:1b: 6f:75:ab:ba:5a:73:f3:10:f0:6d:75:f8:78:c2:19: 94:fc:de:16:f3:a5:f5:1d:8f:8b:f8:59:dd:7c:28: 10:d7:df:a4:7a:1d:7f:29:00:00:b1:bf:f1:17:f1: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:55:B4:8C:28:3D:8A:0A:CB:19:0D:4B:C8:53:1B:6E:B8:92:69:BF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:400::/44 Signature Algorithm: sha256WithRSAEncryption 8b:b2:29:a8:47:59:bb:03:ad:30:37:5e:73:f1:f5:b6:64:f5: ac:b8:0c:6a:73:af:29:44:3c:4f:e3:ec:9a:49:b5:11:df:92: cf:ee:f1:a9:13:ac:68:87:41:08:ce:51:64:03:e1:69:6a:09: a6:ee:16:21:fd:d0:6d:74:4a:5d:bc:cb:7a:6d:42:2a:04:20: c3:17:99:90:43:70:83:8b:e7:32:0b:a0:a4:62:2e:cb:c1:96: 63:4a:2f:b0:31:96:4c:a9:d0:2a:cb:40:49:06:b6:77:d6:60: 6a:5a:28:1b:68:8d:d9:89:1e:43:1f:6b:ef:23:5a:e4:b5:c1: f7:c5:62:33:04:19:ac:84:1f:55:99:1d:2f:f0:1f:4e:7c:25: fd:fa:05:08:1b:93:e4:dd:74:87:64:e1:a2:ce:77:33:d5:08: 81:ad:aa:c2:22:7b:65:b9:10:4a:23:1e:97:59:8e:dd:bd:6c: a4:5d:5e:c7:50:84:83:94:21:7c:66:ec:8e:cd:2d:53:4a:7f: d1:c5:a5:f6:77:ed:93:df:60:d0:f8:aa:f2:ed:c6:18:56:d8: 8e:2c:9e:4a:09:85:95:85:d0:52:31:3a:b3:23:bd:42:60:82: 02:f8:7d:7b:2b:52:06:60:64:ba:ab:86:7b:fa:dc:aa:83:91: 4c:3c:2d:05 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJCYJvxb5oaCWgDndOdOGpS4FvkswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA1MDAyWhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWM4MWI0MDJiMTdjYzRhZDRkYTczZTEwNGZiYjZmZWEz YjBjMDc5NzBjNGU0MDcxZTRkMjIxOTRhOWVmMDQ0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjMQvzL10UsdTFQQlMAmlXHyfXCCvAv5WmF8LjIwMbG3R5 D76FiwHWGHs7x2m1AxBcnx1vKmcyEz2c2s0hPAYm5NejOQF4B+iHY+SmoBDgk+4w vDwSmTZUcPv7/yzK0vnzMGEyd2tzUglxdtM4da9jC820HqHR5GEnIZPm6pe8U2zw qv4yivfpuUd7Ja1tFFCgqB7lRjNa8YyPbRT0wAajVOwL1fqK+ll5c/JIK+D8/IGi HhrQEnCx0bWqjczufUGtGeG4hJzKFtnBEA3o9E8vG291q7pac/MQ8G11+HjCGZT8 3hbzpfUdj4v4Wd18KBDX36R6HX8pAACxv/EX8STzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUD1W0jCg9igrLGQ1LyFMbbriSab8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRmNDYyN2E3LWRkY2ItNDQwMi1iZjExLTNlNzQ2M2I0M2ZhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBAIuyKahHWbsDrTA3XnPx9bZk 9ay4DGpzrylEPE/j7JpJtRHfks/u8akTrGiHQQjOUWQD4WlqCabuFiH90G10Sl28 y3ptQioEIMMXmZBDcIOL5zILoKRiLsvBlmNKL7Axlkyp0CrLQEkGtnfWYGpaKBto jdmJHkMfa+8jWuS1wffFYjMEGayEH1WZHS/wH058Jf36BQgbk+TddIdk4aLOdzPV CIGtqsIie2W5EEojHpdZjt29bKRdXsdQhIOUIXxm7I7NLVNKf9HFpfZ37ZPfYND4 qvLtxhhW2I4snkoJhZWF0FIxOrMjvUJgggL4fXsrUgZgZLqrhnv63KqDkUw8LQU= -----END CERTIFICATE-----Generated at Sat Oct 25 20:39:28 2025 by rpki-client