$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa File: 06e0a97e-b500-434c-94b4-3eadd34e5d34.roa (raw, json) Hash identifier: ImxmfPT6cJa9oIeCqG9Bhm5VjcCg29a3pZq6KdkXa9c= Subject key identifier: CF:5D:8E:D5:52:92:28:25:F7:1D:3A:97:EA:8A:4A:76:FA:F6:51:78 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 45BAA7E9CA0AE38400E9C1C4B5932E175CF582CE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa Signing time: Sat 27 Sep 2025 00:53:27 +0000 ROA not before: Sat 27 Sep 2025 00:53:27 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ba:a7:e9:ca:0a:e3:84:00:e9:c1:c4:b5:93:2e:17:5c:f5:82:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:53:27 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=9fe60ae1dec4fabab785a6d24c0a7410bd2beafa0cfe16c5bac4dafbe3a8378f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:e8:f9:1d:20:1f:ee:27:99:6d:15:ad:2e: ab:96:74:9a:cf:d5:6e:e3:cb:6b:d0:7f:ec:43:e5: c2:2c:50:1c:ae:52:52:6c:57:a5:7f:e1:ca:17:cf: de:ae:1a:cd:96:98:a3:d3:11:17:4e:1b:9b:4b:93: 32:77:80:4f:2b:68:0c:dd:b0:90:e0:4f:a3:e6:fa: 07:af:83:be:50:1e:eb:cf:e6:97:d7:44:c0:b6:f7: 14:16:6a:52:dc:eb:84:5c:bb:4c:da:71:64:86:6a: db:2d:03:5b:16:19:72:3b:cf:8a:4d:50:79:19:cc: bf:47:87:af:9b:89:23:d1:f5:18:46:93:d2:2a:56: b3:f7:f5:5f:0f:32:d4:20:ec:83:a0:7a:95:7d:7d: 64:93:bc:64:14:f4:03:d0:94:03:e4:c2:c9:78:14: 4a:d2:88:07:ab:8c:f9:98:72:8e:ff:b9:2f:1f:82: 83:88:98:22:73:7c:d2:2d:24:c1:1a:61:d8:8c:00: ba:f0:2f:65:c8:6b:bd:a3:0a:7b:ff:c3:94:9a:61: 38:0e:1d:5d:f6:62:39:c7:5c:28:c4:1e:9d:82:22: f8:4a:09:52:3c:8b:12:2e:c7:e8:60:98:94:9f:95: d3:38:be:e8:5d:c4:5d:1c:19:08:f6:85:37:de:ca: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5D:8E:D5:52:92:28:25:F7:1D:3A:97:EA:8A:4A:76:FA:F6:51:78 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f103::/48 Signature Algorithm: sha256WithRSAEncryption 66:4b:4e:b1:57:50:ba:94:b2:c0:16:84:10:a2:1b:f8:23:8e: 80:50:56:72:1f:97:ad:d9:b5:eb:e7:27:3b:00:c7:9c:6d:f0: e0:a0:0c:dd:42:ab:72:a2:ac:50:b0:8f:5b:02:9e:d6:c4:ee: 2a:7a:ad:18:fe:84:df:d4:8e:f7:fa:af:20:50:89:ff:ca:c2: 88:ad:5d:71:15:59:ae:4f:70:82:aa:91:0f:b0:54:13:98:cd: 50:27:67:48:1c:30:14:59:9f:2e:65:45:ea:63:c2:69:c2:f8: 87:b3:ae:5c:7c:0d:b3:ca:3a:10:09:cf:e2:06:4d:93:d4:82: 33:e8:91:63:eb:d5:ff:9d:ca:13:7a:2e:81:c2:d5:fb:a6:ca: ff:6b:7f:6d:51:77:87:98:a6:09:8e:2f:b7:c1:90:a3:cf:0b: 6a:91:84:52:1f:93:f9:64:a1:3c:61:cc:61:b8:36:b4:09:f4: ee:be:13:13:d9:c4:42:74:0b:0f:d2:26:df:82:65:58:b0:06: 7f:b5:62:49:f9:86:91:90:aa:24:2f:6d:7d:5e:94:a8:52:15: 23:ed:7b:f7:1b:75:14:12:c7:88:b4:8a:57:85:12:35:a4:18: 8d:02:e1:7c:e2:da:c9:db:06:64:70:9a:f9:79:88:8e:30:91: 4f:35:d3:54 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURbqn6coK44QA6cHEtZMuF1z1gs4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MzI3WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZmU2MGFlMWRlYzRmYWJhYjc4NWE2ZDI0YzBhNzQxMGJk MmJlYWZhMGNmZTE2YzViYWM0ZGFmYmUzYTgzNzhmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6mej5HSAf7ieZbRWtLquWdJrP1W7jy2vQf+xD5cIsUByu UlJsV6V/4coXz96uGs2WmKPTERdOG5tLkzJ3gE8raAzdsJDgT6Pm+gevg75QHuvP 5pfXRMC29xQWalLc64Rcu0zacWSGatstA1sWGXI7z4pNUHkZzL9Hh6+biSPR9RhG k9IqVrP39V8PMtQg7IOgepV9fWSTvGQU9APQlAPkwsl4FErSiAerjPmYco7/uS8f goOImCJzfNItJMEaYdiMALrwL2XIa72jCnv/w5SaYTgOHV32YjnHXCjEHp2CIvhK CVI8ixIux+hgmJSfldM4vuhdxF0cGQj2hTfeys+dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUz12O1VKSKCX3HTqX6opKdvr2UXgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzA2ZTBhOTdlLWI1MDAtNDM0Yy05NGI0LTNlYWRkMzRlNWQzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QMwDQYJKoZIhvcNAQELBQADggEBAGZLTrFXULqUssAWhBCiG/gj joBQVnIfl63ZtevnJzsAx5xt8OCgDN1Cq3KirFCwj1sCntbE7ip6rRj+hN/Ujvf6 ryBQif/KwoitXXEVWa5PcIKqkQ+wVBOYzVAnZ0gcMBRZny5lRepjwmnC+Iezrlx8 DbPKOhAJz+IGTZPUgjPokWPr1f+dyhN6LoHC1fumyv9rf21Rd4eYpgmOL7fBkKPP C2qRhFIfk/lkoTxhzGG4NrQJ9O6+ExPZxEJ0Cw/SJt+CZViwBn+1Ykn5hpGQqiQv bX1elKhSFSPte/cbdRQSx4i0ileFEjWkGI0C4Xzi2snbBmRwmvl5iI4wkU8101Q= -----END CERTIFICATE-----Generated at Sun Oct 19 22:55:56 2025 by rpki-client