$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa File: 6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa (raw, json) Hash identifier: WHJnoC/bYniQXVslbG52maLFa6E/eCHyJuuMaDRdQ18= Subject key identifier: C9:94:73:2A:50:A2:99:EA:14:EB:7D:33:88:68:D7:4D:17:2E:B2:6F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 38EBF6954BB54AE405FE1F04DFF237D2A9441A40 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa Signing time: Tue 02 Sep 2025 17:09:03 +0000 ROA not before: Tue 02 Sep 2025 17:09:03 +0000 ROA not after: Tue 07 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:eb:f6:95:4b:b5:4a:e4:05:fe:1f:04:df:f2:37:d2:a9:44:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 2 17:09:03 2025 GMT Not After : Oct 7 23:59:59 2025 GMT Subject: serialNumber=3f1d57242f8f5287554b6fda04cb9d76dde5b54b46f44081aa9553f27513a354, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:37:4f:70:93:cf:29:0a:81:e9:41:14:74: 44:f8:89:81:c8:8f:71:0d:f4:aa:58:24:ee:10:78: b9:2d:09:58:5e:2a:61:d0:f2:94:13:7b:19:8c:8a: 86:58:d9:95:3d:38:be:59:fb:7f:b3:c3:54:0b:b2: 1a:95:ca:fd:bc:ad:47:65:b6:4f:0c:bf:e9:0c:f0: 6d:ce:25:e6:b5:e7:64:0c:4b:87:76:df:9d:90:51: 61:99:33:e0:79:9e:44:01:66:50:c0:12:f1:a9:91: 25:c3:d2:aa:fc:8a:9e:70:44:71:fc:0c:ef:40:b7: 76:c7:1f:7a:1c:66:f0:24:10:32:8d:28:ac:59:9c: f7:07:19:86:fd:8c:35:a4:68:a7:56:26:35:5c:2c: c7:3f:8e:25:61:ee:5a:39:f3:40:ff:68:70:e1:cb: 8d:72:51:e9:43:0c:d6:5e:ad:19:ce:f9:24:0c:55: 6f:3c:83:09:db:88:e0:92:54:fc:f9:66:8f:d4:65: f7:30:20:87:5c:3f:7d:36:eb:e9:24:fe:ee:7f:d9: 6a:b6:0d:79:39:dc:d2:74:2b:b8:d3:22:d1:26:b8: 59:e9:e2:75:7d:01:2a:22:85:1e:90:5c:9f:28:7c: 50:72:f7:d7:41:c1:61:b1:6e:bd:04:83:21:81:6b: 5b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:94:73:2A:50:A2:99:EA:14:EB:7D:33:88:68:D7:4D:17:2E:B2:6F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f100::/48 Signature Algorithm: sha256WithRSAEncryption 50:9c:eb:bb:7f:3f:8c:5a:59:b6:f4:13:26:10:2b:c1:84:2a: bb:4e:74:2e:94:c9:fa:d4:b8:4d:8f:ad:f1:95:80:c9:8d:90: 41:7c:f3:79:36:a1:de:9a:cb:33:d3:8b:65:4d:9a:ae:53:ff: 15:40:ca:c6:38:48:d0:e3:50:35:75:16:86:4b:ce:93:4e:2e: d7:f0:ee:e4:eb:e3:51:e2:43:7c:a6:68:87:54:df:8f:d6:2f: 21:17:2e:e2:2f:75:56:44:45:cf:8d:a0:56:ec:23:b3:09:f6: 51:61:5c:92:97:aa:90:1d:5a:66:58:5b:63:94:c9:39:44:f5: fb:f0:db:03:f6:fe:4a:ea:13:e7:dd:8c:84:09:b9:70:f5:c2: 17:bf:49:95:c8:4c:ea:3a:11:c1:a8:b6:af:13:37:4d:e1:a6: 36:66:f1:4f:ef:cb:69:85:1e:66:0a:a6:bd:36:01:37:8d:36: 9c:52:7f:42:d9:3f:55:e0:ee:7e:93:57:c9:d8:6c:ea:01:3a: 89:25:e5:ef:bf:78:cb:a8:af:49:28:2a:29:c0:9b:29:89:bd: d7:06:66:34:53:3f:f0:78:06:14:76:d0:4d:31:2e:df:41:e7: 51:9d:a9:92:07:de:5d:4c:06:3d:e7:2f:c5:87:3d:8e:a2:a0: 37:b7:de:eb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOOv2lUu1SuQF/h8E3/I30qlEGkAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTAyMTcwOTAzWhcNMjUxMDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjFkNTcyNDJmOGY1Mjg3NTU0YjZmZGEwNGNiOWQ3NmRk ZTViNTRiNDZmNDQwODFhYTk1NTNmMjc1MTNhMzU0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsHzdPcJPPKQqB6UEUdET4iYHIj3EN9KpYJO4QeLktCVhe KmHQ8pQTexmMioZY2ZU9OL5Z+3+zw1QLshqVyv28rUdltk8Mv+kM8G3OJea152QM S4d2352QUWGZM+B5nkQBZlDAEvGpkSXD0qr8ip5wRHH8DO9At3bHH3ocZvAkEDKN KKxZnPcHGYb9jDWkaKdWJjVcLMc/jiVh7lo580D/aHDhy41yUelDDNZerRnO+SQM VW88gwnbiOCSVPz5Zo/UZfcwIIdcP3026+kk/u5/2Wq2DXk53NJ0K7jTItEmuFnp 4nV9ASoihR6QXJ8ofFBy99dBwWGxbr0EgyGBa1vLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyZRzKlCimeoU630ziGjXTRcusm8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZkYWQ4NDhjLWVjZjYtNDBlMi04NWIwLTAxNGE2MGRkOTZlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QAwDQYJKoZIhvcNAQELBQADggEBAFCc67t/P4xaWbb0EyYQK8GE KrtOdC6UyfrUuE2PrfGVgMmNkEF883k2od6ayzPTi2VNmq5T/xVAysY4SNDjUDV1 FoZLzpNOLtfw7uTr41HiQ3ymaIdU34/WLyEXLuIvdVZERc+NoFbsI7MJ9lFhXJKX qpAdWmZYW2OUyTlE9fvw2wP2/krqE+fdjIQJuXD1whe/SZXITOo6EcGotq8TN03h pjZm8U/vy2mFHmYKpr02ATeNNpxSf0LZP1Xg7n6TV8nYbOoBOokl5e+/eMuor0ko KinAmymJvdcGZjRTP/B4BhR20E0xLt9B51GdqZIH3l1MBj3nL8WHPY6ioDe33us= -----END CERTIFICATE-----Generated at Fri Sep 19 09:37:49 2025 by rpki-client