$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa File: a7be9120-e9b3-488c-b7e4-818fad18a69e.roa (raw, json) Hash identifier: gbMcCte8xjhAQmnRXy5s8OYU38SuR8c87Dzozz1loSw= Subject key identifier: 05:8E:95:8C:22:B6:40:D5:49:7D:56:5B:7F:7B:7C:D9:39:EB:6B:17 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 62A2DF1C6941F4BF7BB8B0369F2696740E853E3E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa Signing time: Fri 03 Oct 2025 15:18:19 +0000 ROA not before: Fri 03 Oct 2025 15:18:19 +0000 ROA not after: Fri 07 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a2:df:1c:69:41:f4:bf:7b:b8:b0:36:9f:26:96:74:0e:85:3e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 3 15:18:19 2025 GMT Not After : Nov 7 23:59:59 2025 GMT Subject: serialNumber=796d2f76cdf44424adc4c45f6bbdb2230be19bce6aa86073adce8b9ddc304686, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5b:86:90:da:71:6e:4a:26:87:ce:2c:57:00: 98:af:35:5f:d5:de:7b:be:f0:5d:70:41:6a:14:00: 12:82:ca:b6:3c:6d:1b:61:06:63:bf:0f:37:7e:c9: 37:50:f0:51:73:08:a4:69:5c:eb:06:e8:80:07:a2: a3:f9:19:fd:d9:04:39:78:84:65:a4:70:f0:3b:28: dc:be:11:8c:f2:1b:df:99:6a:80:eb:b7:7c:59:30: ac:de:59:10:e0:4c:9a:96:10:5c:4c:14:b5:63:6e: 82:e0:a7:fd:c9:2c:c5:d1:e2:20:dd:cf:ba:1d:22: 4e:35:78:ab:12:4a:58:ed:29:bb:91:3d:b5:71:b4: a7:7f:a2:ae:fd:94:82:ba:6e:c0:27:34:a8:d6:80: f1:e7:24:16:5a:9d:33:2d:31:01:8f:3e:f9:2f:23: 43:85:b6:f4:4a:2d:69:0b:da:15:12:e2:80:9b:4f: a0:14:82:a0:55:d7:57:d3:2d:0f:cf:0f:5e:46:33: 87:a8:8c:76:26:0f:75:55:b0:f5:9d:2a:14:b7:b5: b1:22:94:00:30:59:83:89:bf:ad:ec:40:5a:14:f5: a3:2f:0d:b6:d3:c6:26:e6:65:8d:a4:b4:db:fb:0a: ab:e5:5b:26:fe:1d:fd:36:6d:b0:ea:98:f3:12:ad: a9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8E:95:8C:22:B6:40:D5:49:7D:56:5B:7F:7B:7C:D9:39:EB:6B:17 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a7be9120-e9b3-488c-b7e4-818fad18a69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7100::/40 Signature Algorithm: sha256WithRSAEncryption 5f:96:e7:4f:71:55:e2:f2:d9:2d:2e:a9:fb:9a:d2:80:1b:37: 00:14:f1:8d:1f:30:4f:9d:95:6e:89:1b:86:ae:35:38:d0:54: ab:6d:fb:00:94:15:d1:75:aa:00:d1:c4:af:e0:25:90:9e:7a: 7e:0a:4b:06:b9:43:6c:42:bc:64:46:34:be:f4:fa:b0:2f:5e: 30:94:27:13:9a:0e:7d:7f:e9:28:29:8d:0e:77:66:2e:3c:fc: 41:5f:e2:93:2e:a2:f2:0e:36:f7:a3:b2:87:65:df:69:fb:06: 0d:b9:2d:76:b2:c3:83:93:ba:0f:5e:4a:2a:cc:3a:f3:7c:9e: c1:30:85:a4:a3:7b:aa:b1:bf:ee:bb:2d:11:0d:46:a5:c5:f4: cb:8e:ca:15:a8:44:fe:67:38:70:84:4e:73:7d:19:ea:cc:48: 56:61:27:52:f2:16:90:15:dc:e3:e1:bc:cd:2c:40:bf:8b:30: e0:86:ca:06:29:54:09:c2:86:16:04:88:f7:c4:18:29:77:b3: df:49:86:0d:e3:6e:1c:41:b3:57:48:5f:a7:e4:11:de:e0:2e: a4:d5:8c:89:16:d0:3d:ba:df:88:d8:49:27:fe:0b:3d:35:76: 51:78:ac:f9:d1:8d:c1:54:c8:10:5e:93:44:a4:39:56:b1:87: 9d:4b:3d:82 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYqLfHGlB9L97uLA2nyaWdA6FPj4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDAzMTUxODE5WhcNMjUxMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTZkMmY3NmNkZjQ0NDI0YWRjNGM0NWY2YmJkYjIyMzBi ZTE5YmNlNmFhODYwNzNhZGNlOGI5ZGRjMzA0Njg2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiW4aQ2nFuSiaHzixXAJivNV/V3nu+8F1wQWoUABKCyrY8 bRthBmO/Dzd+yTdQ8FFzCKRpXOsG6IAHoqP5Gf3ZBDl4hGWkcPA7KNy+EYzyG9+Z aoDrt3xZMKzeWRDgTJqWEFxMFLVjboLgp/3JLMXR4iDdz7odIk41eKsSSljtKbuR PbVxtKd/oq79lIK6bsAnNKjWgPHnJBZanTMtMQGPPvkvI0OFtvRKLWkL2hUS4oCb T6AUgqBV11fTLQ/PD15GM4eojHYmD3VVsPWdKhS3tbEilAAwWYOJv63sQFoU9aMv DbbTxibmZY2ktNv7CqvlWyb+Hf02bbDqmPMSramTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUBY6VjCK2QNVJfVZbf3t82TnraxcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E3YmU5MTIwLWU5YjMtNDg4Yy1iN2U0LTgxOGZhZDE4YTY5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDycTANBgkqhkiG9w0BAQsFAAOCAQEAX5bnT3FV4vLZLS6p+5rSgBs3 ABTxjR8wT52Vbokbhq41ONBUq237AJQV0XWqANHEr+AlkJ56fgpLBrlDbEK8ZEY0 vvT6sC9eMJQnE5oOfX/pKCmNDndmLjz8QV/iky6i8g4296Oyh2XfafsGDbktdrLD g5O6D15KKsw683yewTCFpKN7qrG/7rstEQ1GpcX0y47KFahE/mc4cIROc30Z6sxI VmEnUvIWkBXc4+G8zSxAv4sw4IbKBilUCcKGFgSI98QYKXez30mGDeNuHEGzV0hf p+QR3uAupNWMiRbQPbrfiNhJJ/4LPTV2UXis+dGNwVTIEF6TRKQ5VrGHnUs9gg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:53 2025 by rpki-client