$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa File: 8638aa88-01e8-41ec-a10e-f2452ac701be.roa (raw, json) Hash identifier: tM2P/qX8YKRdVwkZh7GRGTxtrNiYCHfrLM9tbZxV2/M= Subject key identifier: B6:DC:C9:7A:B2:0C:04:63:CE:4C:C3:16:44:21:51:FE:8E:32:C8:63 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7D8199E7E6E3B99244FBCB7756B705DF3B3A6786 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa Signing time: Fri 26 Sep 2025 18:11:15 +0000 ROA not before: Fri 26 Sep 2025 18:11:15 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ed00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:81:99:e7:e6:e3:b9:92:44:fb:cb:77:56:b7:05:df:3b:3a:67:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:11:15 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=3189e23e681766dca6da000c93fc6ce19bb32bb6311860aa87a98d4b350f1ba1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:65:33:73:00:7f:2c:0b:ba:d4:ec:d9:c6:0c: f0:5c:fb:2c:f4:7f:b6:7e:ab:e2:83:bf:fd:92:b2: 9e:29:98:15:03:a3:27:d7:42:52:7d:27:e3:ff:01: 65:d0:ce:a5:21:1a:aa:f7:c6:99:23:76:de:f3:32: 35:fe:1f:ee:44:7a:84:a1:a7:c8:22:18:8b:a8:ea: a9:59:54:2f:ed:e4:5e:0f:d0:8e:be:58:36:e7:a5: 03:c4:1c:6a:be:2d:0b:48:0d:3a:12:b7:74:14:59: e2:31:f9:f0:d0:ef:a2:43:2a:09:cc:f5:b9:5a:af: 05:67:83:e9:88:31:3e:ef:b6:ae:fe:7e:27:dd:2d: 9f:0d:d5:cd:b5:1d:79:a1:83:52:f0:22:a0:cc:db: c4:68:f1:2e:c8:ed:8b:0b:07:50:5e:91:03:12:cc: 5a:a3:71:81:f8:1f:cd:8a:78:e9:f5:44:a7:73:15: d2:e8:eb:0f:84:35:e9:8b:c7:5d:22:bb:89:15:7e: 96:6c:17:b4:8e:91:52:76:6f:ab:83:2f:cb:54:ec: d7:47:eb:23:d9:24:39:ba:f8:65:5b:6a:49:71:56: 3a:a8:e3:4d:96:62:cb:56:3a:b0:07:a0:33:61:55: 0f:f0:24:61:39:93:09:c9:e2:3d:50:13:31:a7:bb: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DC:C9:7A:B2:0C:04:63:CE:4C:C3:16:44:21:51:FE:8E:32:C8:63 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8638aa88-01e8-41ec-a10e-f2452ac701be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ed00::/42 Signature Algorithm: sha256WithRSAEncryption 48:f6:41:89:35:a4:ea:e6:2c:76:ac:a1:f1:28:d9:a5:cb:db: 23:f5:76:2c:64:0c:9b:07:c0:6e:b4:8a:fc:de:f4:7a:ec:98: 62:70:84:47:20:82:5a:fc:d0:83:e4:07:08:55:93:99:3a:a2: 14:93:2d:d3:93:46:ca:22:55:06:a0:53:a1:6d:8c:f4:0f:b2: f0:31:0b:06:c3:a4:a9:1f:0d:2b:aa:5b:cb:e7:10:e5:9a:6e: 35:c5:8f:a2:da:57:0f:29:44:af:ee:53:59:76:da:bb:b8:9a: ef:13:57:94:1b:17:8a:0b:09:0d:25:de:49:22:f2:53:77:ca: bc:6a:38:0e:18:6c:be:69:6c:ab:be:f9:c2:26:f5:9a:12:da: 95:0c:d3:35:49:e2:65:59:24:0f:91:88:ac:b7:06:08:2e:d7: 49:08:36:7c:36:8b:74:85:51:53:8f:7d:2b:4d:7d:1b:4e:e7: 73:fe:de:d3:35:c3:2c:34:97:bc:7b:38:23:b2:2a:fd:f1:e6: 1f:24:46:d2:7f:3e:c0:03:a4:ab:eb:28:62:21:c3:5c:e5:bb: 4c:b0:06:e1:88:32:3e:b9:94:9c:40:d5:69:c9:54:bb:da:be: 74:90:64:9f:30:e7:ab:83:be:64:30:ab:3a:ec:bb:2d:f5:bb: d7:4b:80:b0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfYGZ5+bjuZJE+8t3VrcF3zs6Z4YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMTE1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTg5ZTIzZTY4MTc2NmRjYTZkYTAwMGM5M2ZjNmNlMTli YjMyYmI2MzExODYwYWE4N2E5OGQ0YjM1MGYxYmExMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlZTNzAH8sC7rU7NnGDPBc+yz0f7Z+q+KDv/2Ssp4pmBUD oyfXQlJ9J+P/AWXQzqUhGqr3xpkjdt7zMjX+H+5EeoShp8giGIuo6qlZVC/t5F4P 0I6+WDbnpQPEHGq+LQtIDToSt3QUWeIx+fDQ76JDKgnM9blarwVng+mIMT7vtq7+ fifdLZ8N1c21HXmhg1LwIqDM28Ro8S7I7YsLB1BekQMSzFqjcYH4H82KeOn1RKdz FdLo6w+ENemLx10iu4kVfpZsF7SOkVJ2b6uDL8tU7NdH6yPZJDm6+GVbaklxVjqo 402WYstWOrAHoDNhVQ/wJGE5kwnJ4j1QEzGnu7TxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUttzJerIMBGPOTMMWRCFR/o4yyGMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg2MzhhYTg4LTAxZTgtNDFlYy1hMTBlLWYyNDUyYWM3MDFiZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77QAwDQYJKoZIhvcNAQELBQADggEBAEj2QYk1pOrmLHasofEo2aXL 2yP1dixkDJsHwG60ivze9HrsmGJwhEcgglr80IPkBwhVk5k6ohSTLdOTRsoiVQag U6FtjPQPsvAxCwbDpKkfDSuqW8vnEOWabjXFj6LaVw8pRK/uU1l22ru4mu8TV5Qb F4oLCQ0l3kki8lN3yrxqOA4YbL5pbKu++cIm9ZoS2pUM0zVJ4mVZJA+RiKy3Bggu 10kINnw2i3SFUVOPfStNfRtO53P+3tM1wyw0l7x7OCOyKv3x5h8kRtJ/PsADpKvr KGIhw1zlu0ywBuGIMj65lJxA1WnJVLvavnSQZJ8w56uDvmQwqzrsuy31u9dLgLA= -----END CERTIFICATE-----Generated at Mon Oct 20 19:23:20 2025 by rpki-client