$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd7e745-5408-4105-a459-c277ba9e6931.roa File: ffd7e745-5408-4105-a459-c277ba9e6931.roa (raw, json) Hash identifier: 5yNcZ2+eLshuI1CGbq+2hcQ90e1oKkPXW0rARFq5d1o= Subject key identifier: 39:A9:42:A9:92:F7:52:06:01:1F:84:45:87:3B:9F:BC:1E:19:1E:88 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 48121D15356CFEA207D543B73F17FD2FD17F683D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd7e745-5408-4105-a459-c277ba9e6931.roa Signing time: Mon 06 Oct 2025 17:37:43 +0000 ROA not before: Mon 06 Oct 2025 17:37:43 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6119::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:12:1d:15:35:6c:fe:a2:07:d5:43:b7:3f:17:fd:2f:d1:7f:68:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:37:43 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=d5e080ca08395a6d8cd072ddb512d4009d4e4658bb0907cc3d9b3d0fd9b3b612, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:20:21:b1:dd:cd:f9:3a:33:06:9b:7b:fd: 7c:e5:0f:11:37:69:3c:e8:97:b4:d4:82:25:87:77: aa:7e:e2:46:53:54:cc:25:28:82:24:cc:58:b6:09: 13:cc:39:56:2e:c2:dc:ef:65:54:67:f7:b7:25:e2: dd:39:9c:90:33:cf:82:5b:6a:c9:14:dc:5d:b6:f7: cf:10:f5:8a:dc:b5:e1:39:79:ed:d0:32:92:92:a9: b2:8c:b4:d8:6a:46:0a:58:bd:b5:4a:b5:99:d7:0a: 43:20:24:0a:7d:66:05:41:d0:aa:0d:a5:e5:34:30: ad:2f:a1:08:ae:9f:54:e1:de:77:09:6a:97:f3:93: 44:f5:0c:af:b5:1d:0e:9e:dc:11:14:4a:3e:17:7a: b2:b6:09:f1:fa:0d:e6:3f:f7:97:a5:96:d1:26:ef: 01:6d:8b:0f:f9:7c:35:00:4d:87:a9:e5:b1:dd:db: d7:ea:b9:d9:3f:1a:d2:1c:8c:61:64:18:ea:46:c3: cb:4d:1e:a1:f6:7d:04:de:ee:f5:42:1f:21:6a:22: e1:c4:2c:23:82:99:80:1a:25:9a:35:5f:07:56:8f: d5:69:ab:ce:30:e7:c4:1d:a4:ed:2b:6a:4f:b7:b0: a1:8c:c0:86:8c:77:16:94:cb:b6:9e:85:fb:4b:68: 2f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A9:42:A9:92:F7:52:06:01:1F:84:45:87:3B:9F:BC:1E:19:1E:88 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd7e745-5408-4105-a459-c277ba9e6931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6119::/48 Signature Algorithm: sha256WithRSAEncryption 22:58:f6:1b:09:e3:47:fd:60:5b:1c:68:2a:03:de:86:a3:a2: 86:b0:5c:38:19:62:3b:2a:67:4b:50:0b:0c:bf:83:5c:70:83: 0c:1c:23:ee:d1:40:50:de:e4:9e:4c:55:bf:e3:d2:3b:38:6e: cf:36:6e:2b:84:9b:14:f2:48:a2:3c:93:ad:7d:82:43:48:a7: 0d:33:7f:b8:37:23:92:95:6f:10:a5:49:a8:5e:eb:0d:38:fc: 6c:3b:2d:22:7f:ef:3a:67:7d:45:b2:18:cd:be:c9:0f:0d:94: 5e:47:75:6f:d9:ab:c3:61:e7:2b:71:47:d6:8f:80:37:a0:e2: 24:2a:15:b2:70:eb:e2:05:5c:7e:40:71:05:26:9c:96:10:4b: d7:d8:a5:43:c4:97:79:c0:65:30:ce:5e:62:bb:d6:b9:0a:ca: d3:71:6e:c5:14:8f:f3:7f:af:98:b7:83:de:c7:6f:7a:18:a5: 21:6e:02:90:a0:51:2c:5c:69:1a:65:8d:57:26:c5:e5:a0:da: d9:c4:d9:41:c5:6b:5d:df:cb:a8:4c:8f:40:ae:41:0b:c3:61: 04:f6:2d:1d:12:0f:3f:50:da:cd:91:cb:4f:49:87:cb:40:6e: 95:ef:3a:9a:65:0a:5d:fa:1d:f0:b9:cb:3e:e9:bf:fd:ae:ec: 09:27:62:ba -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSBIdFTVs/qIH1UO3Pxf9L9F/aD0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTczNzQzWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWUwODBjYTA4Mzk1YTZkOGNkMDcyZGRiNTEyZDQwMDlk NGU0NjU4YmIwOTA3Y2MzZDliM2QwZmQ5YjNiNjEyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgFiAhsd3N+TozBpt7/XzlDxE3aTzol7TUgiWHd6p+4kZT VMwlKIIkzFi2CRPMOVYuwtzvZVRn97cl4t05nJAzz4JbaskU3F22988Q9YrcteE5 ee3QMpKSqbKMtNhqRgpYvbVKtZnXCkMgJAp9ZgVB0KoNpeU0MK0voQiun1Th3ncJ apfzk0T1DK+1HQ6e3BEUSj4XerK2CfH6DeY/95elltEm7wFtiw/5fDUATYep5bHd 29fqudk/GtIcjGFkGOpGw8tNHqH2fQTe7vVCHyFqIuHELCOCmYAaJZo1XwdWj9Vp q84w58QdpO0rak+3sKGMwIaMdxaUy7aehftLaC9HAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOalCqZL3UgYBH4RFhzufvB4ZHogwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2ZmZDdlNzQ1LTU0MDgtNDEwNS1hNDU5LWMyNzdiYTllNjkzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRkwDQYJKoZIhvcNAQELBQADggEBACJY9hsJ40f9YFscaCoD3oaj ooawXDgZYjsqZ0tQCwy/g1xwgwwcI+7RQFDe5J5MVb/j0js4bs82biuEmxTySKI8 k619gkNIpw0zf7g3I5KVbxClSahe6w04/Gw7LSJ/7zpnfUWyGM2+yQ8NlF5HdW/Z q8Nh5ytxR9aPgDeg4iQqFbJw6+IFXH5AcQUmnJYQS9fYpUPEl3nAZTDOXmK71rkK ytNxbsUUj/N/r5i3g97Hb3oYpSFuApCgUSxcaRpljVcmxeWg2tnE2UHFa13fy6hM j0CuQQvDYQT2LR0SDz9Q2s2Ry09Jh8tAbpXvOpplCl36HfC5yz7pv/2u7AknYro= -----END CERTIFICATE-----Generated at Mon Oct 20 14:02:44 2025 by rpki-client