$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa File: bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa (raw, json) Hash identifier: BTyiVW8u1wDFshsOKPvklPg1O1fPkuiCQ03cKjky7nU= Subject key identifier: 51:CC:76:34:C7:28:6B:D2:8B:B9:46:6A:CB:D8:99:05:A1:46:C5:A8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 21C0D618EB8C6CCE70CD7E7CD1C0344A0313DB02 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa Signing time: Fri 26 Sep 2025 18:00:41 +0000 ROA not before: Fri 26 Sep 2025 18:00:41 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:4100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c0:d6:18:eb:8c:6c:ce:70:cd:7e:7c:d1:c0:34:4a:03:13:db:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:00:41 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=d5967a6f9c12a6e57febb8ae35c90a9c352abbc312999dc0331076d3f58c3ab9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:db:99:69:64:14:ac:03:c2:98:40:ed:65: 97:f8:7a:e4:e9:b9:e3:d2:5c:48:1c:96:ec:1b:31: 17:4b:91:f2:dc:0b:82:03:1f:c9:8e:ec:ce:46:24: 0b:de:3f:3d:7f:95:91:54:04:9c:50:6e:6c:2f:a7: 5e:bf:5a:0b:d6:88:43:65:d3:95:4f:83:14:06:a5: f4:31:f2:0d:72:ea:ca:78:8e:92:b0:09:d1:0b:f1: f4:e4:e1:12:62:b4:92:98:ca:41:48:9c:26:64:1a: 39:1f:90:40:5d:a5:ec:25:0b:99:6d:67:02:16:95: 1c:dd:cf:b1:5b:37:3a:1e:68:6d:df:2c:f4:04:e2: 96:7c:e2:0d:4a:1a:0b:51:90:e1:e0:30:0e:c1:f2: 1f:30:4a:32:ae:ef:66:6c:00:67:cc:a1:bf:4d:8f: 08:10:ad:e3:9d:ab:f1:c5:a9:4f:fd:2e:d3:19:c0: 34:e3:a8:2d:c6:97:63:29:f8:97:bd:19:97:8d:19: b7:c3:23:86:ac:80:77:dd:76:15:d4:97:af:db:1e: 38:91:3e:8a:5f:55:2e:3d:41:6b:e9:2c:83:4d:96: 1e:52:8a:df:97:ff:6e:60:1b:e2:f2:9e:ba:61:4f: 89:64:e2:d7:88:c1:63:d4:86:2e:70:97:e6:b2:49: e8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CC:76:34:C7:28:6B:D2:8B:B9:46:6A:CB:D8:99:05:A1:46:C5:A8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf9a4532-326e-45c8-a0d7-d6008aa0ed8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:4100::/48 Signature Algorithm: sha256WithRSAEncryption 2a:8d:c7:26:fe:dc:b6:0b:0f:76:90:2b:06:92:28:49:f5:fb: d2:8e:c2:e3:33:30:96:25:22:59:a3:75:ba:9e:19:29:ff:c2: 52:42:cc:b9:33:c5:f3:a8:54:90:da:88:32:22:06:11:fa:0b: 35:3c:46:29:2c:20:07:a3:1a:8d:8a:a3:d7:74:4e:b9:85:be: 8b:9e:f3:cb:ce:3f:cc:d5:e6:fb:58:84:8a:66:da:49:3b:82: f4:ed:38:1f:da:12:3a:4e:95:0e:86:31:61:36:23:04:4e:80: f3:fc:a1:f2:ea:01:ef:9a:f6:1a:f5:9e:42:d7:f1:fd:ab:39: ab:01:30:9f:37:11:cd:5c:23:41:05:ae:96:a4:36:44:64:97: 8f:a5:ab:11:8c:13:39:ea:1a:3d:8e:dc:58:78:7a:e2:80:b1: 75:fb:f3:41:8f:1e:95:61:da:0c:9a:02:cb:d6:c4:c3:61:29: 6a:dd:bc:0f:3c:38:e8:80:e9:79:b9:b3:bc:25:17:02:f2:ec: 71:75:9a:58:ab:41:8d:64:cd:18:a5:ee:d5:63:40:c2:43:75: 3a:9f:9b:9f:c2:74:7f:b2:ff:b7:45:af:55:a0:0d:f1:86:8f: c0:1f:09:e1:55:3e:c3:af:de:50:01:c8:51:ff:8d:ea:36:46: 19:59:9c:81 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIcDWGOuMbM5wzX580cA0SgMT2wIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgwMDQxWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTk2N2E2ZjljMTJhNmU1N2ZlYmI4YWUzNWM5MGE5YzM1 MmFiYmMzMTI5OTlkYzAzMzEwNzZkM2Y1OGMzYWI5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCy9uZaWQUrAPCmEDtZZf4euTpuePSXEgcluwbMRdLkfLc C4IDH8mO7M5GJAvePz1/lZFUBJxQbmwvp16/WgvWiENl05VPgxQGpfQx8g1y6sp4 jpKwCdEL8fTk4RJitJKYykFInCZkGjkfkEBdpewlC5ltZwIWlRzdz7FbNzoeaG3f LPQE4pZ84g1KGgtRkOHgMA7B8h8wSjKu72ZsAGfMob9NjwgQreOdq/HFqU/9LtMZ wDTjqC3Gl2Mp+Je9GZeNGbfDI4asgHfddhXUl6/bHjiRPopfVS49QWvpLINNlh5S it+X/25gG+LynrphT4lk4teIwWPUhi5wl+aySejdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUcx2NMcoa9KLuUZqy9iZBaFGxagwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmOWE0NTMyLTMyNmUtNDVjOC1hMGQ3LWQ2MDA4YWEwZWQ4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwQQAwDQYJKoZIhvcNAQELBQADggEBACqNxyb+3LYLD3aQKwaSKEn1 +9KOwuMzMJYlIlmjdbqeGSn/wlJCzLkzxfOoVJDaiDIiBhH6CzU8RiksIAejGo2K o9d0TrmFvoue88vOP8zV5vtYhIpm2kk7gvTtOB/aEjpOlQ6GMWE2IwROgPP8ofLq Ae+a9hr1nkLX8f2rOasBMJ83Ec1cI0EFrpakNkRkl4+lqxGMEznqGj2O3Fh4euKA sXX780GPHpVh2gyaAsvWxMNhKWrdvA88OOiA6Xm5s7wlFwLy7HF1mlirQY1kzRil 7tVjQMJDdTqfm5/CdH+y/7dFr1WgDfGGj8AfCeFVPsOv3lAByFH/jeo2RhlZnIE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:21 2025 by rpki-client