$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa File: af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa (raw, json) Hash identifier: jprqsB+qMYWbtVgNP2nPxjwtDhbH9Iy9rp2akBZDxjw= Subject key identifier: D2:E3:DE:F1:90:CC:3D:F6:4A:47:92:2F:6F:ED:76:EA:ED:B2:7D:47 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 752AA3E86E10E5478D7CDFC6447C0FDB41438D7A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa Signing time: Mon 15 Sep 2025 17:50:10 +0000 ROA not before: Mon 15 Sep 2025 17:50:10 +0000 ROA not after: Mon 20 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2a:a3:e8:6e:10:e5:47:8d:7c:df:c6:44:7c:0f:db:41:43:8d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 15 17:50:10 2025 GMT Not After : Oct 20 23:59:59 2025 GMT Subject: serialNumber=4d63388e71f6c97d4eaa6c20fbaf26af68a8eb7f46f067d0c65440109157bf3c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2a:4c:46:73:41:d0:a4:1d:37:11:a7:9d:fd: 3e:dc:76:4e:fa:a9:cd:ac:09:bb:2f:6b:06:fc:90: aa:82:a9:bb:d8:1e:f1:da:9c:46:f2:aa:c4:d0:9c: 2f:71:18:b4:04:55:fc:13:53:b5:44:b6:28:dd:72: 0e:39:e3:89:34:45:f5:ea:35:70:52:ab:1f:c6:a4: cf:54:89:ee:6c:f3:5f:f2:57:d4:6d:a1:e1:26:d7: c4:4d:29:80:7c:cf:74:67:85:12:11:18:0c:39:83: ab:df:2c:63:89:a3:72:6e:69:11:d1:5e:11:12:f7: 00:c9:b6:50:b9:76:32:38:18:82:27:b3:47:47:bf: e9:e0:da:0e:df:18:a1:bc:78:a2:85:72:19:9d:5a: 50:5c:3b:ed:e6:d3:ec:08:7b:fc:15:9a:a9:3d:3c: 6d:c2:b6:ce:1b:c7:41:c7:5d:9b:23:18:2a:05:0e: c4:80:2c:ff:90:d3:03:fe:f8:79:46:6b:87:26:71: 07:05:a2:ca:1c:1e:2e:5b:86:5b:d8:77:44:e6:e7: 2d:bd:b5:79:bd:2b:f3:ec:ab:14:83:ad:3d:8b:fa: ea:07:56:34:74:0e:66:c5:c5:6f:c3:9c:3e:0d:3e: e6:dc:d4:8e:51:85:33:f9:37:2e:5f:f3:39:ce:7f: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E3:DE:F1:90:CC:3D:F6:4A:47:92:2F:6F:ED:76:EA:ED:B2:7D:47 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6122::/48 Signature Algorithm: sha256WithRSAEncryption 9b:83:0b:55:21:64:7a:d8:94:34:a2:50:f9:d3:38:dc:dc:82: b0:71:2e:cb:4c:88:ed:34:f9:8c:f0:b2:bd:d9:d0:ef:28:23: 0d:96:48:c9:c8:59:eb:b9:db:97:68:50:f0:54:f8:e3:db:83: 2b:8b:37:a2:be:30:9b:84:b9:6e:01:67:34:ad:0f:3c:45:1f: 45:68:fd:e2:7c:9c:0f:4c:b7:f2:f7:c6:4e:cb:87:85:01:f5: 4e:87:3f:74:7a:3f:5f:47:39:24:91:72:ba:0a:d4:53:71:ee: 79:5a:a1:7a:3f:7f:1b:89:f1:e2:de:a2:f3:69:d7:94:a8:b1: 0b:a1:f6:d1:08:f2:58:35:1d:e9:0f:c8:6a:fc:d2:10:f0:2b: fb:eb:7d:fc:ea:fa:43:ec:02:82:4d:0a:5e:10:83:dd:c3:ee: 02:d2:ac:ef:fd:29:15:05:d0:9f:70:be:31:7c:3b:35:58:e7: 87:32:2b:09:fa:56:fe:c1:36:fc:ec:7c:e6:2f:8a:80:f1:21: bd:41:31:45:d4:f7:28:73:b8:22:f9:ca:8e:3a:eb:e2:57:8a: 13:af:e4:8b:ae:05:95:ca:a6:a4:de:c1:49:f7:06:32:84:9b: 7f:56:5d:74:f7:4b:d6:3c:2c:71:ad:70:3a:f7:eb:86:85:ef: e3:60:40:74 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdSqj6G4Q5UeNfN/GRHwP20FDjXowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTE1MTc1MDEwWhcNMjUxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDYzMzg4ZTcxZjZjOTdkNGVhYTZjMjBmYmFmMjZhZjY4 YThlYjdmNDZmMDY3ZDBjNjU0NDAxMDkxNTdiZjNjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPKkxGc0HQpB03Eaed/T7cdk76qc2sCbsvawb8kKqCqbvY HvHanEbyqsTQnC9xGLQEVfwTU7VEtijdcg4544k0RfXqNXBSqx/GpM9Uie5s81/y V9RtoeEm18RNKYB8z3RnhRIRGAw5g6vfLGOJo3JuaRHRXhES9wDJtlC5djI4GIIn s0dHv+ng2g7fGKG8eKKFchmdWlBcO+3m0+wIe/wVmqk9PG3Cts4bx0HHXZsjGCoF DsSALP+Q0wP++HlGa4cmcQcFosocHi5bhlvYd0Tm5y29tXm9K/PsqxSDrT2L+uoH VjR0DmbFxW/DnD4NPubc1I5RhTP5Ny5f8znOf3VDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0uPe8ZDMPfZKR5Ivb+126u2yfUcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FmNmQwY2ExLWRkNzctNDI0OS1hNWNmLWRkNzU3NGRiMzRmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSIwDQYJKoZIhvcNAQELBQADggEBAJuDC1UhZHrYlDSiUPnTONzc grBxLstMiO00+Yzwsr3Z0O8oIw2WSMnIWeu525doUPBU+OPbgyuLN6K+MJuEuW4B ZzStDzxFH0Vo/eJ8nA9Mt/L3xk7Lh4UB9U6HP3R6P19HOSSRcroK1FNx7nlaoXo/ fxuJ8eLeovNp15SosQuh9tEI8lg1HekPyGr80hDwK/vrffzq+kPsAoJNCl4Qg93D 7gLSrO/9KRUF0J9wvjF8OzVY54cyKwn6Vv7BNvzsfOYvioDxIb1BMUXU9yhzuCL5 yo466+JXihOv5IuuBZXKpqTewUn3BjKEm39WXXT3S9Y8LHGtcDr364aF7+NgQHQ= -----END CERTIFICATE-----Generated at Fri Sep 19 08:03:58 2025 by rpki-client