$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa File: 7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa (raw, json) Hash identifier: 5yZgwguF6wOfVWV+0UwzAvyZFFi9826LCzNoiMS1C3s= Subject key identifier: 26:0B:59:ED:56:51:69:6B:F3:18:83:42:00:5D:E2:65:C1:61:99:C6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 794C2DDD03F71BFC83BBC27FB3EAF344F38037CA Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa Signing time: Mon 06 Oct 2025 17:40:43 +0000 ROA not before: Mon 06 Oct 2025 17:40:43 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4c:2d:dd:03:f7:1b:fc:83:bb:c2:7f:b3:ea:f3:44:f3:80:37:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:40:43 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=3fbcece265e9dff097c6dd57bd86f994e69ee1dfbc2ef34279e26058b9a5caf8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:69:21:6e:ec:1f:2b:dc:30:34:e0:75:48: cf:e2:2a:80:15:89:ed:89:11:e2:d3:53:69:4f:47: 11:89:fb:9b:ab:63:df:98:14:8a:86:c3:ac:15:21: f7:31:40:48:01:f5:fe:3e:4b:dd:fe:f1:1e:33:84: db:c8:a9:d6:7c:51:a2:30:b3:d8:43:3f:8e:92:8e: ab:d7:fd:ab:64:41:d0:b8:cb:33:45:8b:ce:77:a5: fb:a2:e0:e8:9c:e9:ef:54:a7:93:11:d3:c4:33:87: f3:5d:0a:26:9e:55:a0:32:f6:b6:fc:96:2e:70:8e: 70:db:6a:91:1f:4e:33:b3:ca:91:85:ff:ec:c1:af: 82:ae:4f:46:4b:26:d2:30:78:6b:c9:f4:8f:06:cd: 40:c2:41:fa:dc:1f:55:e4:ff:bc:c4:04:58:ab:3c: b1:c7:c2:4a:a1:09:14:15:87:cf:65:c2:84:51:cc: 6d:d5:89:da:e7:ac:f4:2f:9b:89:1b:42:ff:b0:c3: 75:f8:8c:8c:bb:0d:7b:b6:b9:03:15:3a:cb:c6:3b: 95:e0:3f:97:a1:ff:2d:aa:3e:84:af:72:e8:69:c4: ce:b9:e1:23:f2:a6:b8:23:9d:a7:97:7f:f2:05:6e: 5e:02:fb:00:9d:e0:4c:c0:c7:f9:db:e4:dc:00:d5: 77:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0B:59:ED:56:51:69:6B:F3:18:83:42:00:5D:E2:65:C1:61:99:C6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6104::/48 Signature Algorithm: sha256WithRSAEncryption 48:d3:c6:f1:7c:ae:50:81:81:95:e6:66:04:4d:0a:54:8c:8e: 5c:36:81:bd:b9:db:3a:d3:7f:d8:db:bc:0c:a4:e0:54:9e:ee: 68:57:a6:9a:6e:8c:ad:80:89:14:07:3d:c6:34:a6:78:32:c3: 81:f0:24:9a:10:d8:0d:16:d0:f1:ee:ef:52:2c:0a:4f:c4:5d: 3c:49:36:05:13:e6:65:ae:42:af:73:5d:83:12:77:d0:80:c2: 5a:97:4f:8a:12:b3:94:05:71:6e:fc:c2:44:72:27:4d:c0:cb: cb:e5:13:43:a1:01:ef:ce:88:1c:b0:64:6b:80:1b:63:a3:06: 83:e7:16:3f:20:13:1b:07:14:53:16:24:49:a4:e4:2c:8b:01: 68:6f:02:cd:c4:7a:d3:36:5b:1c:fe:79:c5:82:53:9b:81:c2: ee:70:9f:20:0e:01:3b:98:85:a0:37:46:75:ee:0b:71:d3:41: 0b:3c:4e:bd:1f:e0:04:c0:45:9a:a5:a3:0d:a4:26:1d:9d:b1: 8c:81:3e:cc:55:59:76:b1:ef:a3:90:c8:0d:22:fb:72:71:7f: 68:bc:92:95:c8:0d:53:ee:e2:4d:ec:fb:bf:02:e8:4a:7f:fc: 70:f1:78:d4:84:fa:4e:2c:7b:13:87:43:9d:90:6f:0c:40:30: 69:e0:c9:e3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeUwt3QP3G/yDu8J/s+rzRPOAN8owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTc0MDQzWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmJjZWNlMjY1ZTlkZmYwOTdjNmRkNTdiZDg2Zjk5NGU2 OWVlMWRmYmMyZWYzNDI3OWUyNjA1OGI5YTVjYWY4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFWWkhbuwfK9wwNOB1SM/iKoAVie2JEeLTU2lPRxGJ+5ur Y9+YFIqGw6wVIfcxQEgB9f4+S93+8R4zhNvIqdZ8UaIws9hDP46SjqvX/atkQdC4 yzNFi853pfui4Oic6e9Up5MR08Qzh/NdCiaeVaAy9rb8li5wjnDbapEfTjOzypGF /+zBr4KuT0ZLJtIweGvJ9I8GzUDCQfrcH1Xk/7zEBFirPLHHwkqhCRQVh89lwoRR zG3VidrnrPQvm4kbQv+ww3X4jIy7DXu2uQMVOsvGO5XgP5eh/y2qPoSvcuhpxM65 4SPyprgjnaeXf/IFbl4C+wCd4EzAx/nb5NwA1XeTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJgtZ7VZRaWvzGINCAF3iZcFhmcYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzdkOWE4Y2E3LWIyZTgtNGQ5Mi04NDJkLWIzYjJhN2M5MmY2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQQwDQYJKoZIhvcNAQELBQADggEBAEjTxvF8rlCBgZXmZgRNClSM jlw2gb252zrTf9jbvAyk4FSe7mhXpppujK2AiRQHPcY0pngyw4HwJJoQ2A0W0PHu 71IsCk/EXTxJNgUT5mWuQq9zXYMSd9CAwlqXT4oSs5QFcW78wkRyJ03Ay8vlE0Oh Ae/OiBywZGuAG2OjBoPnFj8gExsHFFMWJEmk5CyLAWhvAs3EetM2Wxz+ecWCU5uB wu5wnyAOATuYhaA3RnXuC3HTQQs8Tr0f4ATARZqlow2kJh2dsYyBPsxVWXax76OQ yA0i+3Jxf2i8kpXIDVPu4k3s+78C6Ep//HDxeNSE+k4sexOHQ52QbwxAMGngyeM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:51 2025 by rpki-client