$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa File: 6ccba569-7caf-468c-b996-e7a0034a48e4.roa (raw, json) Hash identifier: fQOvQkOq6LYB3yM6yuYEAYtrPSjRfpdE6NAK9Tno+pc= Subject key identifier: 00:0D:49:54:E2:01:D0:DB:E5:3C:BB:24:89:16:90:4C:E5:0B:0F:40 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 74331D945F3F4B3490CA74C577CF0D93B716447D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa Signing time: Mon 06 Oct 2025 17:37:45 +0000 ROA not before: Mon 06 Oct 2025 17:37:45 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:33:1d:94:5f:3f:4b:34:90:ca:74:c5:77:cf:0d:93:b7:16:44:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:37:45 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=ee4d43bc16ddabbbe93c71dd4a6abb138311ed9e1b7b89f111927244e4d82374, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ef:5d:67:d1:be:0e:91:c6:96:c7:59:9e:3c: 61:6d:2c:d5:f6:3d:60:56:21:2b:c3:94:69:a1:96: 0e:3d:15:ec:cf:d6:24:50:f3:db:1f:ca:a0:1b:f4: f6:65:c2:1c:5a:c0:c1:6e:15:56:1b:2c:35:42:00: 5e:91:34:96:62:97:a6:9b:1c:21:18:40:2d:ed:db: a0:79:d2:93:6b:d0:65:c0:52:e4:99:0d:9e:0c:cc: 02:29:14:fa:6f:03:7e:ba:7c:4e:ff:b9:1c:c8:39: a8:cf:70:9e:e9:b6:0d:9d:60:53:4f:5c:3d:fc:96: 21:8d:a2:06:a5:16:63:71:d3:4b:3d:00:b4:35:0d: a1:b7:d4:fd:3e:65:2e:6a:3e:e4:41:0d:3c:c3:1d: 93:95:cb:15:1f:22:26:d0:75:0d:92:de:6b:ea:d6: b5:52:bb:ad:2b:c5:1f:c7:06:b6:e0:bc:3f:6f:c2: a9:6d:24:c6:64:77:0d:32:37:21:80:80:fa:03:be: 3d:75:43:a8:11:af:33:54:1f:76:1e:b4:c1:f6:e5: 87:a9:56:85:09:a3:6a:3f:87:34:6c:0d:da:83:87: 91:f8:f9:a0:6e:1a:2c:d2:39:61:96:ce:eb:d2:ef: 3b:28:40:94:96:9c:c8:ce:8e:4d:72:a2:e5:ba:6e: e9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0D:49:54:E2:01:D0:DB:E5:3C:BB:24:89:16:90:4C:E5:0B:0F:40 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6ccba569-7caf-468c-b996-e7a0034a48e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6107::/48 Signature Algorithm: sha256WithRSAEncryption 5e:01:15:3f:f3:9a:73:14:3a:70:c9:8b:93:8b:0c:d1:96:87: ae:51:da:fb:6e:b1:dd:d7:75:d9:d8:8d:94:a3:e3:cd:3d:ed: e1:ee:7d:6a:f2:4d:80:4a:bf:22:7f:16:16:c2:03:a0:9e:e0: 98:a3:41:d8:2a:9a:ee:84:b1:ed:c8:8b:6b:4e:93:8d:81:d5: a9:b2:ce:94:1c:7d:d0:7b:43:d3:8e:b1:f5:bb:47:ac:4d:05: 99:13:1d:2e:99:e8:6c:15:ba:c3:6b:d3:fa:91:4d:03:c0:4b: 3d:80:a4:60:65:4d:42:33:83:2e:61:80:26:51:10:7d:4a:17: a5:af:c0:4b:5d:91:1b:50:26:92:f6:a0:94:58:ca:6e:50:f2: bd:33:69:91:c0:20:a2:39:5d:de:81:ca:3f:1d:63:91:02:2c: eb:40:dd:68:f9:4c:7d:88:51:2d:ba:2b:18:df:23:60:c3:c7: fb:a6:09:31:b7:ee:30:d3:0a:fd:bd:c6:56:1b:df:3b:f3:03: 36:6e:37:6b:74:94:23:49:f7:36:00:58:a9:b9:f1:ce:17:e9: 23:21:37:fb:a7:21:65:22:76:03:03:6d:71:a8:9f:87:4d:5a: da:d7:53:2d:92:0d:a0:2b:ff:77:55:3c:31:9c:3a:55:97:31: 1f:d8:ab:18 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdDMdlF8/SzSQynTFd88Nk7cWRH0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTczNzQ1WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTRkNDNiYzE2ZGRhYmJiZTkzYzcxZGQ0YTZhYmIxMzgz MTFlZDllMWI3Yjg5ZjExMTkyNzI0NGU0ZDgyMzc0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg711n0b4OkcaWx1mePGFtLNX2PWBWISvDlGmhlg49FezP 1iRQ89sfyqAb9PZlwhxawMFuFVYbLDVCAF6RNJZil6abHCEYQC3t26B50pNr0GXA UuSZDZ4MzAIpFPpvA366fE7/uRzIOajPcJ7ptg2dYFNPXD38liGNogalFmNx00s9 ALQ1DaG31P0+ZS5qPuRBDTzDHZOVyxUfIibQdQ2S3mvq1rVSu60rxR/HBrbgvD9v wqltJMZkdw0yNyGAgPoDvj11Q6gRrzNUH3YetMH25YepVoUJo2o/hzRsDdqDh5H4 +aBuGizSOWGWzuvS7zsoQJSWnMjOjk1youW6bukJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUAA1JVOIB0NvlPLskiRaQTOULD0AwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZjY2JhNTY5LTdjYWYtNDY4Yy1iOTk2LWU3YTAwMzRhNDhlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQcwDQYJKoZIhvcNAQELBQADggEBAF4BFT/zmnMUOnDJi5OLDNGW h65R2vtusd3XddnYjZSj48097eHufWryTYBKvyJ/FhbCA6Ce4JijQdgqmu6Ese3I i2tOk42B1amyzpQcfdB7Q9OOsfW7R6xNBZkTHS6Z6GwVusNr0/qRTQPASz2ApGBl TUIzgy5hgCZREH1KF6WvwEtdkRtQJpL2oJRYym5Q8r0zaZHAIKI5Xd6Byj8dY5EC LOtA3Wj5TH2IUS26KxjfI2DDx/umCTG37jDTCv29xlYb3zvzAzZuN2t0lCNJ9zYA WKm58c4X6SMhN/unIWUidgMDbXGon4dNWtrXUy2SDaAr/3dVPDGcOlWXMR/Yqxg= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:23 2025 by rpki-client