$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f94a5fae-d0a5-450a-95d7-7dca4b33ba7d.roa File: f94a5fae-d0a5-450a-95d7-7dca4b33ba7d.roa (raw, json) Hash identifier: VxOU9fqb30bui17xjOUhH4GbzfzZniWk3Vs4SUfIwyY= Subject key identifier: 66:8E:79:B6:73:55:10:24:B4:4A:ED:C0:99:72:64:1C:90:E2:8D:A1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1981FB258AF61EEF3426177024F0C8882A6E4153 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f94a5fae-d0a5-450a-95d7-7dca4b33ba7d.roa Signing time: Mon 06 Oct 2025 17:40:44 +0000 ROA not before: Mon 06 Oct 2025 17:40:44 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6118::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:81:fb:25:8a:f6:1e:ef:34:26:17:70:24:f0:c8:88:2a:6e:41:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:40:44 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=d4e9dd50e0bd0757555e577477e89b0ad840ceba6f3dad23e46144be48f53330, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2b:7b:64:44:b0:0c:f4:ac:a4:e0:c9:5b:a2: 63:59:96:47:e7:21:ec:91:2f:20:bc:3f:9e:cf:2c: 7b:9d:6f:29:58:3e:00:a0:60:fa:fb:7b:02:b2:89: 6d:3c:d5:96:29:b8:da:1b:20:66:6d:22:03:dd:6d: 6d:de:db:e4:59:60:48:00:27:58:40:eb:f2:53:00: f5:4c:9f:f9:0f:d8:75:95:c2:b6:26:f8:3c:4c:17: ed:b0:bd:c6:05:0b:30:54:54:4b:1a:2a:e3:2d:8c: 13:9d:eb:38:51:08:de:ae:c0:b9:7a:25:2d:38:eb: 0b:e0:33:d1:ea:d4:87:d9:10:07:c9:d1:f5:52:60: 97:d9:35:f5:8a:5a:06:2f:ea:9f:ec:62:6a:04:73: 95:4b:7e:f5:94:1d:bb:24:3f:d0:0e:88:4c:ac:93: 8d:e2:7f:63:90:ee:6a:40:20:64:f2:b3:1d:be:7b: d4:22:ac:8f:69:d0:f1:42:4e:8b:f3:ca:47:2e:6e: d9:47:d4:65:74:ae:94:64:83:e4:3d:52:9a:a6:28: 54:df:eb:62:eb:93:ac:66:c4:12:3d:f0:b1:7a:be: 26:31:aa:d8:77:9b:e5:0c:a2:07:35:86:65:94:0c: c7:f9:e4:a1:4d:49:66:1c:93:27:6c:a0:9e:3b:86: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8E:79:B6:73:55:10:24:B4:4A:ED:C0:99:72:64:1C:90:E2:8D:A1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f94a5fae-d0a5-450a-95d7-7dca4b33ba7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6118::/48 Signature Algorithm: sha256WithRSAEncryption 4b:0c:6e:60:d6:3c:cf:dd:2e:e1:99:b1:04:91:54:b4:cb:e3: 11:66:5e:9c:35:d1:aa:b5:02:74:44:f5:87:54:da:89:6c:f6: 26:ae:d7:f2:44:d8:27:9a:b5:ff:41:8c:e7:96:51:6a:56:5d: 7f:8c:f0:d7:50:e3:46:7f:67:49:ea:af:93:bb:10:57:8e:59: 59:c0:a4:ab:40:f4:61:02:2f:3c:bb:ea:43:34:4a:82:ad:41: 32:be:b8:3d:1d:f2:8f:b2:c0:a4:26:32:f4:4b:96:ce:4b:39: 3c:e5:19:38:f5:e7:23:f0:c1:01:f6:25:6e:f9:35:82:1c:ef: ee:01:cb:31:98:1d:89:53:36:93:21:55:8e:42:58:5b:94:8c: 9c:31:0b:92:77:e6:ba:6e:6e:ec:fc:8c:86:99:88:32:ee:10: 95:1f:fc:8a:10:21:02:be:f5:fc:2c:a2:68:3e:99:1c:23:4b: db:a0:c3:6b:46:b5:78:d9:9d:54:1e:b0:4e:65:0a:21:89:3a: 7d:4f:14:1c:04:36:02:21:e5:af:99:52:3b:fb:29:84:98:eb: d2:58:a8:ad:1c:d1:a8:46:91:e8:5c:fd:5a:07:dc:8e:e8:75: 35:98:0f:f7:f5:f4:ef:d5:f3:4e:3f:4b:38:19:e8:0e:c7:08: 5e:49:5e:72 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGYH7JYr2Hu80JhdwJPDIiCpuQVMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTc0MDQ0WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGU5ZGQ1MGUwYmQwNzU3NTU1ZTU3NzQ3N2U4OWIwYWQ4 NDBjZWJhNmYzZGFkMjNlNDYxNDRiZTQ4ZjUzMzMwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcK3tkRLAM9Kyk4MlbomNZlkfnIeyRLyC8P57PLHudbylY PgCgYPr7ewKyiW081ZYpuNobIGZtIgPdbW3e2+RZYEgAJ1hA6/JTAPVMn/kP2HWV wrYm+DxMF+2wvcYFCzBUVEsaKuMtjBOd6zhRCN6uwLl6JS046wvgM9Hq1IfZEAfJ 0fVSYJfZNfWKWgYv6p/sYmoEc5VLfvWUHbskP9AOiEysk43if2OQ7mpAIGTysx2+ e9QirI9p0PFCTovzykcubtlH1GV0rpRkg+Q9UpqmKFTf62Lrk6xmxBI98LF6viYx qth3m+UMogc1hmWUDMf55KFNSWYckydsoJ47hm9NAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZo55tnNVECS0Su3AmXJkHJDijaEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y5NGE1ZmFlLWQwYTUtNDUwYS05NWQ3LTdkY2E0YjMzYmE3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRgwDQYJKoZIhvcNAQELBQADggEBAEsMbmDWPM/dLuGZsQSRVLTL 4xFmXpw10aq1AnRE9YdU2ols9iau1/JE2Ceatf9BjOeWUWpWXX+M8NdQ40Z/Z0nq r5O7EFeOWVnApKtA9GECLzy76kM0SoKtQTK+uD0d8o+ywKQmMvRLls5LOTzlGTj1 5yPwwQH2JW75NYIc7+4ByzGYHYlTNpMhVY5CWFuUjJwxC5J35rpubuz8jIaZiDLu EJUf/IoQIQK+9fwsomg+mRwjS9ugw2tGtXjZnVQesE5lCiGJOn1PFBwENgIh5a+Z Ujv7KYSY69JYqK0c0ahGkehc/VoH3I7odTWYD/f19O/V804/SzgZ6A7HCF5JXnI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:24 2025 by rpki-client