$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f933dc9a-6cb0-4836-9711-454fb0e2e364.roa File: f933dc9a-6cb0-4836-9711-454fb0e2e364.roa (raw, json) Hash identifier: BBLa9lomsA+LgdF5NJRNelyuI2/LGRKVdfdQyNaVrWA= Subject key identifier: C8:DA:87:30:53:34:F6:C6:15:80:F9:78:3A:C8:11:34:0E:AF:09:87 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5F24CD998DC09613A74DF786103DBF1EEEA414CC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f933dc9a-6cb0-4836-9711-454fb0e2e364.roa Signing time: Mon 08 Sep 2025 18:37:12 +0000 ROA not before: Mon 08 Sep 2025 18:37:12 +0000 ROA not after: Mon 13 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:24:cd:99:8d:c0:96:13:a7:4d:f7:86:10:3d:bf:1e:ee:a4:14:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 8 18:37:12 2025 GMT Not After : Oct 13 23:59:59 2025 GMT Subject: serialNumber=cf6dfaea25e8d911383b582142a77bb67a25365b41670c2b1617e6396e794ee6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:cf:16:ff:a9:fd:94:ba:8d:9f:38:e3:ba: 25:c8:b4:48:ab:f2:ce:94:ae:c0:46:e5:c9:ac:0c: ad:ed:dd:23:e9:b3:cf:90:25:b7:c9:7c:df:53:39: 3c:78:85:f0:26:e2:03:e5:e3:7d:dc:75:b1:6c:d1: 61:9f:16:6b:26:4b:7d:14:20:56:97:e2:62:be:31: 8f:10:88:9c:18:8a:68:16:c0:2e:83:37:54:dd:e5: d1:6a:dd:16:d9:89:6f:96:85:b1:fc:84:9f:fd:2e: 5d:a9:d4:7e:a6:c8:98:ee:2c:f1:25:ca:a6:b8:53: 88:2b:6e:0c:c7:6c:20:db:a3:37:b4:1d:cb:bc:58: 56:ec:2d:99:5a:27:b6:e0:8b:b5:52:bf:15:a7:41: 0b:f7:a3:31:87:d6:3e:9a:aa:84:65:c0:29:d1:79: 21:7d:8e:b6:e1:e9:8e:c9:37:b0:4a:62:cd:09:eb: c7:78:6d:59:86:73:09:e1:2f:a4:5e:d0:7f:6a:d9: 8f:76:c5:ce:f4:e1:bb:74:f8:61:8e:0f:13:74:ac: b6:2e:4f:41:2e:64:fd:2b:b3:02:54:80:3a:ee:a6: af:67:10:d0:d1:ed:65:ca:0b:5c:37:80:d7:e4:35: 41:49:a2:8d:48:e6:9a:10:65:69:17:95:86:a5:d5: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DA:87:30:53:34:F6:C6:15:80:F9:78:3A:C8:11:34:0E:AF:09:87 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f933dc9a-6cb0-4836-9711-454fb0e2e364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f104::/48 Signature Algorithm: sha256WithRSAEncryption a1:dd:0b:9e:a3:e0:d2:5d:3d:cd:b4:46:43:6a:03:6e:9c:34: 35:93:7d:9e:54:bb:f7:b4:36:25:c4:48:4f:8c:c6:9e:83:30: a7:10:e1:0a:bb:73:2b:79:f7:b3:c3:c5:c8:18:c5:6a:19:66: ab:af:b0:5a:de:c5:57:22:80:9a:8e:06:f5:33:70:83:c5:ed: 17:cf:47:10:bf:d0:34:c3:48:03:0b:d9:66:6f:78:73:fe:32: 46:ac:5f:40:d9:a5:5f:a6:83:76:76:43:94:9d:f0:ed:87:d3: 32:e8:6d:f5:ab:95:c1:c9:9d:a9:6d:a6:ba:3e:d7:71:38:7d: 73:c4:77:ac:8d:db:21:bb:57:dd:7d:b3:c1:e2:65:34:75:4b: 58:88:5d:18:37:ac:f3:a9:fd:b3:53:9b:43:d3:5b:b6:1c:a4: ee:40:57:5d:c0:e1:ca:3c:c5:74:d5:02:50:c0:a8:17:ac:80: 88:44:72:ec:17:91:a6:f3:69:46:3d:96:8b:39:53:f0:39:f8: b7:03:67:49:30:b5:70:a6:51:06:f5:e1:32:85:db:27:d2:b3: aa:eb:67:49:88:f9:5a:83:29:24:dc:7c:61:64:a9:3d:98:5f: de:ce:d1:ae:6f:70:82:5d:27:16:9e:99:b4:ec:74:df:3a:59: 34:e8:1a:a3 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXyTNmY3AlhOnTfeGED2/Hu6kFMwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTA4MTgzNzEyWhcNMjUxMDEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZjZkZmFlYTI1ZThkOTExMzgzYjU4MjE0MmE3N2JiNjdh MjUzNjViNDE2NzBjMmIxNjE3ZTYzOTZlNzk0ZWU2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRc88W/6n9lLqNnzjjuiXItEir8s6UrsBG5cmsDK3t3SPp s8+QJbfJfN9TOTx4hfAm4gPl433cdbFs0WGfFmsmS30UIFaX4mK+MY8QiJwYimgW wC6DN1Td5dFq3RbZiW+WhbH8hJ/9Ll2p1H6myJjuLPElyqa4U4grbgzHbCDboze0 Hcu8WFbsLZlaJ7bgi7VSvxWnQQv3ozGH1j6aqoRlwCnReSF9jrbh6Y7JN7BKYs0J 68d4bVmGcwnhL6Re0H9q2Y92xc704bt0+GGODxN0rLYuT0EuZP0rswJUgDrupq9n ENDR7WXKC1w3gNfkNUFJoo1I5poQZWkXlYal1boFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUyNqHMFM09sYVgPl4OsgRNA6vCYcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y5MzNkYzlhLTZjYjAtNDgzNi05NzExLTQ1NGZiMGUyZTM2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QQwDQYJKoZIhvcNAQELBQADggEBAKHdC56j4NJdPc20RkNqA26c NDWTfZ5Uu/e0NiXESE+Mxp6DMKcQ4Qq7cyt597PDxcgYxWoZZquvsFrexVcigJqO BvUzcIPF7RfPRxC/0DTDSAML2WZveHP+MkasX0DZpV+mg3Z2Q5Sd8O2H0zLobfWr lcHJnaltpro+13E4fXPEd6yN2yG7V919s8HiZTR1S1iIXRg3rPOp/bNTm0PTW7Yc pO5AV13A4co8xXTVAlDAqBesgIhEcuwXkabzaUY9los5U/A5+LcDZ0kwtXCmUQb1 4TKF2yfSs6rrZ0mI+VqDKSTcfGFkqT2YX97O0a5vcIJdJxaembTsdN86WTToGqM= -----END CERTIFICATE-----Generated at Fri Sep 19 11:25:37 2025 by rpki-client