$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa File: 529e132d-0c8c-4ca3-bafc-0927932483fd.roa (raw, json) Hash identifier: KY4t7POrP2MpbMSHMz0DfgdQ15VLY5uNSQdNvyanUuE= Subject key identifier: 7D:2E:8A:F0:52:50:7A:81:96:70:4D:17:64:41:6B:E0:8B:86:46:E2 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 59C36BBF778DA7E6488C0230694AD7416901FDBD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa Signing time: Fri 26 Sep 2025 18:20:07 +0000 ROA not before: Fri 26 Sep 2025 18:20:07 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c3:6b:bf:77:8d:a7:e6:48:8c:02:30:69:4a:d7:41:69:01:fd:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:20:07 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=83897daae5a5ab5387eb3ca1efd9362426171dcab2bebd0a2ec79db13f762c62, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:cc:7f:7e:08:62:12:ec:ae:85:e9:e2:54: d1:45:9f:0c:b1:4a:67:af:42:8d:63:06:8c:e3:6c: 8a:fd:66:fe:48:b5:cb:7b:12:c6:d6:d4:17:fb:55: c3:b4:a3:3b:81:56:4d:a0:b5:1f:c7:89:76:8e:a5: 7c:f7:84:34:79:2e:bd:16:75:f0:a0:ea:bc:3f:f3: e6:11:22:86:de:15:ea:40:e6:f1:9e:50:c4:64:84: 14:5d:e7:f9:ba:7b:6c:3b:bf:9f:90:e9:35:ff:d4: bf:dc:1a:94:a6:48:1d:bd:80:83:a8:25:b7:a0:bc: f3:0b:e9:01:56:66:8e:17:47:64:e9:7b:12:30:b7: 9f:0e:42:2b:01:9e:33:99:ba:7f:77:dc:6b:71:06: de:16:56:31:fc:b7:c3:3b:dd:54:06:47:36:03:d3: 8d:e1:18:83:31:2b:5c:6d:f4:3c:c9:72:40:a2:8f: 52:e0:f3:be:3a:3b:cb:2b:2e:6d:97:d7:4d:a7:53: ee:7c:f3:36:e6:02:fd:73:7a:e1:50:89:4a:64:e8: 2c:0f:f5:49:f7:e7:de:36:15:40:fe:3b:66:bc:f5: e9:c6:0f:b7:1d:4f:28:b4:38:70:4a:84:66:8f:e6: 02:df:4b:50:f5:f8:a0:bb:71:03:f2:a1:d2:a2:8e: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2E:8A:F0:52:50:7A:81:96:70:4D:17:64:41:6B:E0:8B:86:46:E2 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e000::/36 Signature Algorithm: sha256WithRSAEncryption 23:ba:24:1c:73:03:47:60:fb:43:18:9f:e0:c3:7c:59:c4:c6: e2:08:1f:4b:56:36:14:fb:f9:83:2a:71:be:4f:72:df:ff:7b: 0b:cf:08:4f:08:e7:24:8f:d1:5d:d5:4d:f0:f8:60:a1:fa:40: 6d:02:4a:dd:24:9d:98:a2:d4:90:9f:be:eb:0f:02:56:7a:1d: de:68:f5:88:d9:ad:29:85:fc:bc:42:88:ab:10:70:39:d2:e0: 9c:bf:80:b9:36:8d:72:e4:57:ac:6e:94:5b:81:07:89:89:a2: 0f:63:b1:aa:a7:d7:a7:93:6c:5b:cb:5b:90:e0:18:96:da:c3: 81:42:05:7d:7c:2e:d7:24:56:bd:6e:15:0e:b4:8b:b4:c7:00: 84:d6:73:48:e0:2d:55:a6:5c:a3:61:f4:30:37:33:45:04:ed: 61:7f:49:03:4d:b1:b3:34:6c:4d:db:a4:96:ab:6a:52:af:af: 85:9e:fb:96:6c:84:31:8a:0e:ad:94:fb:92:07:4f:86:01:ae: f5:d9:84:9b:4d:4f:49:b9:fd:a8:99:e0:1b:55:e8:b5:66:eb: 70:3b:1e:87:f8:23:bd:97:1e:5c:fb:61:57:24:eb:a9:e4:06: 57:6a:46:8d:fc:84:ce:62:1c:c1:18:84:35:13:50:d4:3b:ad: b1:40:1c:5e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUWcNrv3eNp+ZIjAIwaUrXQWkB/b0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgyMDA3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Mzg5N2RhYWU1YTVhYjUzODdlYjNjYTFlZmQ5MzYyNDI2 MTcxZGNhYjJiZWJkMGEyZWM3OWRiMTNmNzYyYzYyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI18x/fghiEuyuheniVNFFnwyxSmevQo1jBozjbIr9Zv5I tct7EsbW1Bf7VcO0ozuBVk2gtR/HiXaOpXz3hDR5Lr0WdfCg6rw/8+YRIobeFepA 5vGeUMRkhBRd5/m6e2w7v5+Q6TX/1L/cGpSmSB29gIOoJbegvPML6QFWZo4XR2Tp exIwt58OQisBnjOZun933GtxBt4WVjH8t8M73VQGRzYD043hGIMxK1xt9DzJckCi j1Lg8746O8srLm2X102nU+588zbmAv1zeuFQiUpk6CwP9Un35942FUD+O2a89enG D7cdTyi0OHBKhGaP5gLfS1D1+KC7cQPyodKiju/3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUfS6K8FJQeoGWcE0XZEFr4IuGRuIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzUyOWUxMzJkLTBjOGMtNGNhMy1iYWZjLTA5Mjc5MzI0ODNmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgQmAPD74DANBgkqhkiG9w0BAQsFAAOCAQEAI7okHHMDR2D7Qxif4MN8WcTG 4ggfS1Y2FPv5gypxvk9y3/97C88ITwjnJI/RXdVN8PhgofpAbQJK3SSdmKLUkJ++ 6w8CVnod3mj1iNmtKYX8vEKIqxBwOdLgnL+AuTaNcuRXrG6UW4EHiYmiD2OxqqfX p5NsW8tbkOAYltrDgUIFfXwu1yRWvW4VDrSLtMcAhNZzSOAtVaZco2H0MDczRQTt YX9JA02xszRsTduklqtqUq+vhZ77lmyEMYoOrZT7kgdPhgGu9dmEm01PSbn9qJng G1XotWbrcDseh/gjvZceXPthVyTrqeQGV2pGjfyEzmIcwRiENRNQ1DutsUAcXg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:24 2025 by rpki-client