$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8098420f-108f-4bc5-8d8c-6d62621f83e9.roa File: 8098420f-108f-4bc5-8d8c-6d62621f83e9.roa (raw, json) Hash identifier: 4P5JuSANaAu7hMWCmQvaeDzb+AJMaXHv9OTCTdnuh5M= Subject key identifier: ED:D6:47:6F:86:60:DF:EC:32:92:1C:1E:05:99:E3:13:F4:1D:21:D7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 09E5D67239390204D3A1966EA6EFE997D14C5E33 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8098420f-108f-4bc5-8d8c-6d62621f83e9.roa Signing time: Mon 13 Oct 2025 17:55:17 +0000 ROA not before: Mon 13 Oct 2025 17:55:17 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7012::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e5:d6:72:39:39:02:04:d3:a1:96:6e:a6:ef:e9:97:d1:4c:5e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 13 17:55:17 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=91ddbe2560a48a4bfa762daf5d9847852a15c487b5d4e68bd62e89a15eb33356, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:0e:7e:9e:99:4a:03:6f:e9:93:a4:f2:4d: 0d:82:8e:af:57:ac:6a:e4:de:61:8a:a0:a3:fb:19: c2:20:a4:c2:43:b7:44:c9:d2:6f:b8:9e:ee:06:58: 29:9f:67:47:fd:fa:31:cb:a5:bc:a4:16:9e:13:35: d2:0b:a4:e9:60:b8:01:d8:3a:bd:bb:57:f2:db:6e: 08:f5:8a:9a:ec:14:00:76:39:66:9d:03:3f:8b:78: 06:30:38:71:c3:36:c9:4a:a8:f2:1d:ce:e9:56:b0: d6:92:a1:c7:27:f2:35:10:c5:61:e3:5c:90:7b:99: ad:d6:ea:8a:ec:75:af:f3:ac:42:b7:91:3b:00:bd: 2b:c0:19:4d:fd:12:da:94:50:cf:30:c0:f4:cb:91: 0d:64:4f:05:b9:01:11:7d:db:e9:41:a5:a8:81:99: a8:bc:02:55:6f:f6:33:f9:be:c2:e5:f8:64:d0:c1: 92:21:cd:f7:6e:87:15:7b:26:5f:73:d1:58:3a:ca: 82:3f:f0:61:44:45:03:a7:fb:8a:aa:79:4a:ba:92: 73:54:3a:34:1b:82:c3:95:ae:08:f2:e7:9e:4c:74: 68:b0:37:e3:3d:a1:27:a8:dd:56:44:b6:2f:37:62: 76:71:af:84:f4:e6:43:42:a7:ee:71:a7:d6:7f:ef: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D6:47:6F:86:60:DF:EC:32:92:1C:1E:05:99:E3:13:F4:1D:21:D7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8098420f-108f-4bc5-8d8c-6d62621f83e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7012::/48 Signature Algorithm: sha256WithRSAEncryption 8a:e0:5d:d7:26:68:1d:82:b8:be:9b:c0:d1:84:11:b2:1f:d2: f6:e9:3f:bd:c0:e2:b2:40:b0:dd:89:df:8b:27:69:07:d9:1f: eb:c5:0f:aa:fb:e9:0b:ff:90:45:9b:0c:56:65:b6:08:29:e9: 54:11:62:f4:01:39:df:ef:7a:ad:e7:e2:a6:2d:3b:d1:c4:59: e0:f6:97:56:90:30:44:53:c7:c3:24:a1:0b:43:64:43:26:28: 77:ca:42:e5:e6:6f:8f:38:6c:77:7c:2a:cc:2a:44:84:d8:af: e1:fa:b6:cc:c6:81:58:71:65:8e:c6:a5:66:2f:f2:5c:ad:4b: 33:f5:12:47:e9:dc:0b:e6:fa:0f:7b:21:6d:c1:f2:fe:00:ec: 2b:26:73:8b:c4:e1:27:ee:c6:14:cc:d8:71:40:f3:c6:50:3e: 0b:ee:ab:61:05:72:b4:6f:b2:04:19:11:1f:13:4c:5f:f7:e1: e7:6a:d9:dd:6e:45:f0:f7:61:14:1e:99:eb:d7:8e:77:9a:84: 4a:50:db:77:d6:dd:a3:27:dc:04:6c:26:59:47:e3:14:ff:93: 8d:79:d3:76:f2:56:06:08:6f:47:02:d7:f2:e5:54:c7:8b:f0: 15:10:f6:65:fc:d2:d1:f7:7b:a5:2a:e3:71:d8:1b:23:a1:d4: d7:71:e7:60 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCeXWcjk5AgTToZZupu/pl9FMXjMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDEzMTc1NTE3WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWRkYmUyNTYwYTQ4YTRiZmE3NjJkYWY1ZDk4NDc4NTJh MTVjNDg3YjVkNGU2OGJkNjJlODlhMTVlYjMzMzU2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/Aw5+nplKA2/pk6TyTQ2Cjq9XrGrk3mGKoKP7GcIgpMJD t0TJ0m+4nu4GWCmfZ0f9+jHLpbykFp4TNdILpOlguAHYOr27V/Lbbgj1iprsFAB2 OWadAz+LeAYwOHHDNslKqPIdzulWsNaSoccn8jUQxWHjXJB7ma3W6orsda/zrEK3 kTsAvSvAGU39EtqUUM8wwPTLkQ1kTwW5ARF92+lBpaiBmai8AlVv9jP5vsLl+GTQ wZIhzfduhxV7Jl9z0Vg6yoI/8GFERQOn+4qqeUq6knNUOjQbgsOVrgjy555MdGiw N+M9oSeo3VZEti83YnZxr4T05kNCp+5xp9Z/7w7LAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7dZHb4Zg3+wykhweBZnjE/QdIdcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzgwOTg0MjBmLTEwOGYtNGJjNS04ZDhjLTZkNjI2MjFmODNlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBIwDQYJKoZIhvcNAQELBQADggEBAIrgXdcmaB2CuL6bwNGEEbIf 0vbpP73A4rJAsN2J34snaQfZH+vFD6r76Qv/kEWbDFZltggp6VQRYvQBOd/veq3n 4qYtO9HEWeD2l1aQMERTx8MkoQtDZEMmKHfKQuXmb484bHd8KswqRITYr+H6tszG gVhxZY7GpWYv8lytSzP1Ekfp3Avm+g97IW3B8v4A7Csmc4vE4SfuxhTM2HFA88ZQ Pgvuq2EFcrRvsgQZER8TTF/34edq2d1uRfD3YRQemevXjneahEpQ23fW3aMn3ARs JllH4xT/k41503byVgYIb0cC1/LlVMeL8BUQ9mX80tH3e6Uq43HYGyOh1Ndx52A= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:13 2025 by rpki-client