$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa File: 644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa (raw, json) Hash identifier: XkPt8/5YQIlIK6VnzFmgHXSEUsB7KHSV9I02hJk0Ifs= Subject key identifier: AB:C5:98:B4:D3:B7:C1:D7:D5:9E:63:77:0C:A4:DD:C9:85:5F:DC:A1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 52FDDF7E73B087679AA458326980E187D466A967 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa Signing time: Mon 08 Sep 2025 18:37:23 +0000 ROA not before: Mon 08 Sep 2025 18:37:23 +0000 ROA not after: Mon 13 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:fd:df:7e:73:b0:87:67:9a:a4:58:32:69:80:e1:87:d4:66:a9:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 8 18:37:23 2025 GMT Not After : Oct 13 23:59:59 2025 GMT Subject: serialNumber=2b0258d51ab5449ed023fc32c2d3938fcff71d8091148a6bd9c112882b3f988c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cb:ed:e7:a6:1a:5f:ae:1d:8a:e0:c0:ff:57: 08:00:81:fc:b8:fe:34:3c:7c:38:ac:4e:a5:fa:a8: cd:1f:89:3e:db:cb:38:1c:87:06:eb:ed:c6:07:31: ea:13:eb:f0:33:9e:d7:66:88:48:88:19:70:c9:cf: 52:0d:c4:ad:b8:13:c9:49:4b:fd:fe:ab:f8:13:ee: 40:14:88:13:62:29:66:b9:24:ec:f1:dd:96:31:00: b1:a2:29:13:84:c8:86:a1:71:2f:fc:d0:ef:ba:10: 7a:f5:02:26:3b:92:d9:10:a8:30:b7:11:0e:f4:ce: 69:cc:0d:84:ac:0d:1a:42:0a:e8:ff:fc:84:fb:f0: 52:6c:58:38:07:3a:f9:a5:48:62:4b:0c:b9:dc:f5: c6:6b:4e:51:ba:79:79:46:db:86:46:50:c2:3c:b3: 0b:eb:1f:57:b0:e1:62:9c:77:26:19:af:82:c4:01: f4:49:2a:de:83:40:a7:1c:30:1a:d3:84:74:0a:b9: 06:98:45:52:2e:d9:05:16:27:ab:24:a3:df:6b:22: 79:65:75:c9:eb:82:5b:56:f3:c1:c9:b6:53:14:6d: de:6e:04:3b:9b:e7:16:89:88:24:1c:92:d0:60:bd: 8d:77:d1:5f:14:4a:7a:66:28:84:5b:e9:c1:3a:93: 2f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C5:98:B4:D3:B7:C1:D7:D5:9E:63:77:0C:A4:DD:C9:85:5F:DC:A1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f111::/48 Signature Algorithm: sha256WithRSAEncryption 2d:05:a2:fe:5a:ef:97:59:12:34:41:a4:dc:d1:b3:30:aa:d7: 3e:dc:ab:2b:f0:ec:99:6c:b2:8c:5c:61:a8:32:d5:29:3f:28: 49:3e:f8:69:76:9e:14:94:91:f3:8e:b5:7b:44:41:9a:e2:c6: 0f:d9:08:c5:78:8e:88:29:6e:2b:89:83:4d:a3:32:c7:92:8c: 02:c5:5b:0c:59:1b:6d:f0:5b:57:d0:e2:c5:ca:57:49:bb:08: 0f:5b:6f:de:53:d8:a7:9c:03:95:11:aa:a2:2e:7d:c1:ee:35: 22:85:d1:ac:27:a7:75:7d:0e:52:a1:ae:49:b3:9e:94:d3:1b: f7:53:d5:aa:0f:6d:dc:3c:dd:ed:80:70:a3:0d:40:80:c3:de: 95:f0:da:e8:b4:cd:de:07:a3:a9:59:ef:a7:b6:a3:57:91:a1: ab:4d:58:8e:43:4b:ed:b8:bc:2f:b0:1d:5a:dc:28:95:29:ad: c5:9c:2f:a9:4c:3d:3f:2c:6e:c6:89:61:30:a3:02:97:b2:01: 58:4d:f5:c9:3a:3b:c4:3c:46:20:b8:09:fc:a5:2f:7e:89:a1: 69:96:ad:12:f2:17:de:20:fa:c0:14:f9:c9:52:15:f9:49:b9: 4a:ac:55:cf:1a:12:81:b6:98:a0:eb:0b:c7:bf:b6:05:63:0f: 9f:17:12:96 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUv3ffnOwh2eapFgyaYDhh9RmqWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTA4MTgzNzIzWhcNMjUxMDEzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjAyNThkNTFhYjU0NDllZDAyM2ZjMzJjMmQzOTM4ZmNm ZjcxZDgwOTExNDhhNmJkOWMxMTI4ODJiM2Y5ODhjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDay+3nphpfrh2K4MD/VwgAgfy4/jQ8fDisTqX6qM0fiT7b yzgchwbr7cYHMeoT6/AzntdmiEiIGXDJz1INxK24E8lJS/3+q/gT7kAUiBNiKWa5 JOzx3ZYxALGiKROEyIahcS/80O+6EHr1AiY7ktkQqDC3EQ70zmnMDYSsDRpCCuj/ /IT78FJsWDgHOvmlSGJLDLnc9cZrTlG6eXlG24ZGUMI8swvrH1ew4WKcdyYZr4LE AfRJKt6DQKccMBrThHQKuQaYRVIu2QUWJ6sko99rInlldcnrgltW88HJtlMUbd5u BDub5xaJiCQcktBgvY130V8USnpmKIRb6cE6ky+rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUq8WYtNO3wdfVnmN3DKTdyYVf3KEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY0NGMxMjQ5LWU2NTEtNDBmMy1hZTZjLTVhN2I2ZDhhMzc2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78REwDQYJKoZIhvcNAQELBQADggEBAC0Fov5a75dZEjRBpNzRszCq 1z7cqyvw7JlssoxcYagy1Sk/KEk++Gl2nhSUkfOOtXtEQZrixg/ZCMV4jogpbiuJ g02jMseSjALFWwxZG23wW1fQ4sXKV0m7CA9bb95T2KecA5URqqIufcHuNSKF0awn p3V9DlKhrkmznpTTG/dT1aoPbdw83e2AcKMNQIDD3pXw2ui0zd4Ho6lZ76e2o1eR oatNWI5DS+24vC+wHVrcKJUprcWcL6lMPT8sbsaJYTCjApeyAVhN9ck6O8Q8RiC4 CfylL36JoWmWrRLyF94g+sAU+clSFflJuUqsVc8aEoG2mKDrC8e/tgVjD58XEpY= -----END CERTIFICATE-----Generated at Fri Sep 19 18:09:58 2025 by rpki-client