$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ddabe105-17a8-4460-a8c9-18b7474ee13f.roa File: ddabe105-17a8-4460-a8c9-18b7474ee13f.roa (raw, json) Hash identifier: FqcOZGdBxGKOv/Mdf7/w3BBu9ku5jq5NCrAQZUeEwy8= Subject key identifier: 10:E7:A4:8B:5C:82:D2:46:43:29:2E:C8:40:88:11:83:C0:A6:E7:B8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 271F5760C40E6CDA88839F4C5EA3FE7F5D2969A8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ddabe105-17a8-4460-a8c9-18b7474ee13f.roa Signing time: Tue 02 Sep 2025 00:40:16 +0000 ROA not before: Tue 02 Sep 2025 00:40:16 +0000 ROA not after: Tue 07 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f0:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1f:57:60:c4:0e:6c:da:88:83:9f:4c:5e:a3:fe:7f:5d:29:69:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 2 00:40:16 2025 GMT Not After : Oct 7 23:59:59 2025 GMT Subject: serialNumber=a0519a0f30b7200bd889fba5f082f50c3b3444bddd33083127007f2261773eac, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:a2:94:b3:c5:d6:52:07:5b:e7:77:2c:41: dc:85:ed:6d:bc:3b:51:e0:42:c4:01:aa:ca:e3:90: 5b:4b:f4:95:f0:b8:27:27:0a:3c:65:dc:55:b3:d2: 9b:0a:8c:41:59:8a:4d:58:72:da:54:6e:72:72:c6: 33:7f:18:42:c2:9d:3d:e8:ef:f7:1a:22:4c:19:6a: 47:7c:20:53:25:35:43:61:a6:10:f7:1a:dd:16:18: 8f:4e:14:f6:f7:cf:0f:38:a2:c0:99:e4:5e:bd:2a: 0f:dd:88:4a:57:cd:33:8d:19:dd:e5:26:c9:21:2d: 4d:58:89:4c:e9:5c:6e:dd:fb:48:93:8a:65:1f:79: 00:eb:c1:1a:55:a4:ba:0a:ed:9e:04:29:db:9d:73: 5b:ec:ec:40:dd:d8:d7:eb:0a:81:22:7e:e7:3b:4d: 24:75:7f:16:34:ca:62:c2:9f:36:f5:02:5a:79:8f: fb:07:10:48:c3:57:b6:b8:1d:66:3b:74:8e:82:b3: 2e:0b:25:bf:3b:a1:03:53:1c:8f:8f:f1:32:aa:0e: f6:3a:1d:95:48:f0:64:dd:ff:62:6e:ad:d1:ea:df: 33:49:56:a8:17:c1:59:68:a2:8c:73:87:24:77:34: 43:27:05:0b:6c:65:64:2f:62:79:c0:83:f2:c3:33: 7b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E7:A4:8B:5C:82:D2:46:43:29:2E:C8:40:88:11:83:C0:A6:E7:B8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ddabe105-17a8-4460-a8c9-18b7474ee13f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:400::/44 Signature Algorithm: sha256WithRSAEncryption 08:da:19:5d:93:4d:a0:d1:62:a6:5a:b5:14:5d:16:a0:85:57: ba:2b:d8:d8:d6:a9:b7:e3:ec:22:37:79:6d:2e:33:58:45:04: b2:e5:2e:ae:5c:a4:92:e4:d1:f5:61:9f:d5:51:22:b0:c0:8e: bc:9d:ff:cf:6f:48:b6:63:03:3d:f3:ba:f7:ea:42:db:79:66: be:27:9c:60:41:8b:38:8e:13:33:78:97:4d:eb:03:3d:61:8c: e8:21:20:aa:01:09:ed:eb:cb:a0:bc:a7:fe:24:e5:f2:b7:2b: 8c:c0:be:81:21:18:fd:53:8e:43:fe:34:ee:e6:5b:a4:25:d7: 5e:2b:ce:4d:5b:c1:05:d5:64:c9:60:8d:5e:9a:a0:8b:23:cf: 4c:86:0c:3c:97:35:d8:34:82:d7:55:77:24:c7:07:40:1f:98: 2b:f5:96:d7:0f:5b:7e:a4:b4:bf:c3:d4:a9:01:3d:c5:77:72: 1d:5e:21:94:b6:41:a3:2a:2e:61:7e:3d:87:85:56:67:38:02: 4c:b5:2f:f1:e6:4f:49:6f:5c:e6:1b:10:c7:09:f2:26:95:7c: ee:fe:fa:64:d3:72:78:07:a5:f1:ae:5e:13:e2:ca:06:c5:5c: 47:60:5a:30:36:1a:bf:c1:a8:58:aa:65:37:f3:32:0a:85:aa: 96:75:54:5b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJx9XYMQObNqIg59MXqP+f10paagwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTAyMDA0MDE2WhcNMjUxMDA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDUxOWEwZjMwYjcyMDBiZDg4OWZiYTVmMDgyZjUwYzNi MzQ0NGJkZGQzMzA4MzEyNzAwN2YyMjYxNzczZWFjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCisaKUs8XWUgdb53csQdyF7W28O1HgQsQBqsrjkFtL9JXw uCcnCjxl3FWz0psKjEFZik1YctpUbnJyxjN/GELCnT3o7/caIkwZakd8IFMlNUNh phD3Gt0WGI9OFPb3zw84osCZ5F69Kg/diEpXzTONGd3lJskhLU1YiUzpXG7d+0iT imUfeQDrwRpVpLoK7Z4EKdudc1vs7EDd2NfrCoEifuc7TSR1fxY0ymLCnzb1Alp5 j/sHEEjDV7a4HWY7dI6Csy4LJb87oQNTHI+P8TKqDvY6HZVI8GTd/2JurdHq3zNJ VqgXwVloooxzhyR3NEMnBQtsZWQvYnnAg/LDM3s5AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEOeki1yC0kZDKS7IQIgRg8Cm57gwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RkYWJlMTA1LTE3YTgtNDQ2MC1hOGM5LTE4Yjc0NzRlZTEzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBAAjaGV2TTaDRYqZatRRdFqCF V7or2NjWqbfj7CI3eW0uM1hFBLLlLq5cpJLk0fVhn9VRIrDAjryd/89vSLZjAz3z uvfqQtt5Zr4nnGBBiziOEzN4l03rAz1hjOghIKoBCe3ry6C8p/4k5fK3K4zAvoEh GP1TjkP+NO7mW6Ql114rzk1bwQXVZMlgjV6aoIsjz0yGDDyXNdg0gtdVdyTHB0Af mCv1ltcPW36ktL/D1KkBPcV3ch1eIZS2QaMqLmF+PYeFVmc4Aky1L/HmT0lvXOYb EMcJ8iaVfO7++mTTcngHpfGuXhPiygbFXEdgWjA2Gr/BqFiqZTfzMgqFqpZ1VFs= -----END CERTIFICATE-----Generated at Sun Sep 7 13:52:44 2025 by rpki-client