$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa File: 0b456d9a-b78d-45ba-9949-b00a9581f118.roa (raw, json) Hash identifier: CiiVWAVdgH5wbX7i0Fe4sgax6BUUTcPvsC1+1G1zsnw= Subject key identifier: DB:37:11:A6:0C:22:3D:3A:95:1F:F2:B1:C3:D7:E1:4C:CA:A1:9B:10 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1ACA7A16740BEFECADC2A5B1FDEA08EB42CFA5AF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa Signing time: Fri 26 Sep 2025 18:10:15 +0000 ROA not before: Fri 26 Sep 2025 18:10:15 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ec00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ca:7a:16:74:0b:ef:ec:ad:c2:a5:b1:fd:ea:08:eb:42:cf:a5:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:10:15 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=80984b21f5d7e74e9cd035252070bb83e5620a535a57b118ba7c4ec9a90cfecf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:3f:2c:69:b1:6d:d7:99:b7:fe:d8:c7:91: 39:7d:79:fb:ed:e7:df:a0:7a:12:25:8d:c3:c6:09: b2:a5:64:7e:62:b5:02:01:06:7b:e9:5a:a1:ee:02: 92:82:66:b2:99:8c:3c:16:08:f6:4f:56:03:48:5e: ac:ba:7b:84:0a:62:ba:3b:bb:80:45:98:73:8e:13: aa:df:0d:01:c8:fc:2b:fc:62:a8:ca:b3:fb:2d:10: ca:23:5b:d6:75:b5:8f:52:54:af:75:24:cc:2f:0e: 11:d9:fa:38:4f:13:7a:cb:8f:8d:5e:44:f0:e9:3a: 43:c5:7f:c5:7d:a3:55:3e:9b:1e:34:df:a8:a3:4e: ac:bb:61:29:f8:f9:e0:8f:14:28:3b:a8:62:54:f5: c5:72:13:04:58:44:1e:23:d1:30:28:4c:59:68:1b: 08:aa:69:c3:e9:cd:74:0a:8d:7d:4a:a8:85:c7:a3: d7:f6:6f:83:bf:9f:b9:b2:09:1d:7f:be:93:1b:16: d9:87:04:0c:8e:f8:c7:c2:75:56:af:91:c5:9b:9d: d1:50:22:d2:a3:1f:89:85:ec:9b:db:c2:8f:b9:fd: f5:b3:99:b8:61:a9:c4:13:17:f0:61:f1:e5:e1:2f: d9:15:0e:ae:bd:c3:ae:84:50:4e:83:24:c8:f0:a6: 35:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:37:11:A6:0C:22:3D:3A:95:1F:F2:B1:C3:D7:E1:4C:CA:A1:9B:10 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/42 Signature Algorithm: sha256WithRSAEncryption 42:44:07:81:64:01:72:6e:63:c7:35:70:75:12:38:44:05:06: a1:ff:a2:68:63:ba:24:77:83:08:c4:5d:b6:35:28:1e:49:88: 7c:a4:a1:b8:0b:85:fc:99:42:30:41:e7:82:87:c1:a2:ab:96: f8:47:ff:5b:0c:ae:24:6b:9a:5d:83:d2:c2:9f:41:d6:d2:2f: c7:c0:a6:2c:9f:b7:8b:15:c7:c5:2e:3f:2c:4d:13:fb:56:2d: 95:e3:21:ae:0e:e0:b4:b4:e6:b9:69:44:dd:65:dc:42:ee:20: 1a:49:86:06:2e:56:ff:8d:38:5f:7d:5c:c1:66:82:b9:18:35: 83:57:ee:f1:44:f4:b8:38:bb:4b:cd:42:52:73:1f:7c:6f:95: 60:7d:3e:54:33:ff:b2:c4:90:d3:21:ba:9b:cd:39:ec:d5:0e: 50:32:cd:2a:e4:2a:f4:d5:48:87:de:ec:28:5d:4b:59:ef:14: bb:46:fb:11:e7:13:7b:44:bc:5e:0a:f1:57:ae:ef:40:52:3c: d3:37:27:ad:71:c3:59:d6:00:33:7b:25:46:85:0a:35:59:d7: c8:bc:45:31:a3:6a:19:33:e3:07:3d:03:cd:c8:67:42:91:06: 27:09:4d:94:c3:d5:a8:13:d5:c8:d6:7a:d2:2b:00:7c:51:92: 47:2c:1d:1d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGsp6FnQL7+ytwqWx/eoI60LPpa8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMDE1WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDk4NGIyMWY1ZDdlNzRlOWNkMDM1MjUyMDcwYmI4M2U1 NjIwYTUzNWE1N2IxMThiYTdjNGVjOWE5MGNmZWNmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/Cz8sabFt15m3/tjHkTl9efvt59+gehIljcPGCbKlZH5i tQIBBnvpWqHuApKCZrKZjDwWCPZPVgNIXqy6e4QKYro7u4BFmHOOE6rfDQHI/Cv8 YqjKs/stEMojW9Z1tY9SVK91JMwvDhHZ+jhPE3rLj41eRPDpOkPFf8V9o1U+mx40 36ijTqy7YSn4+eCPFCg7qGJU9cVyEwRYRB4j0TAoTFloGwiqacPpzXQKjX1KqIXH o9f2b4O/n7myCR1/vpMbFtmHBAyO+MfCdVavkcWbndFQItKjH4mF7Jvbwo+5/fWz mbhhqcQTF/Bh8eXhL9kVDq69w66EUE6DJMjwpjXdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2zcRpgwiPTqVH/Kxw9fhTMqhmxAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBiNDU2ZDlhLWI3OGQtNDViYS05OTQ5LWIwMGE5NTgxZjExOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD77AAwDQYJKoZIhvcNAQELBQADggEBAEJEB4FkAXJuY8c1cHUSOEQF BqH/omhjuiR3gwjEXbY1KB5JiHykobgLhfyZQjBB54KHwaKrlvhH/1sMriRrml2D 0sKfQdbSL8fApiyft4sVx8UuPyxNE/tWLZXjIa4O4LS05rlpRN1l3ELuIBpJhgYu Vv+NOF99XMFmgrkYNYNX7vFE9Lg4u0vNQlJzH3xvlWB9PlQz/7LEkNMhupvNOezV DlAyzSrkKvTVSIfe7ChdS1nvFLtG+xHnE3tEvF4K8Veu70BSPNM3J61xw1nWADN7 JUaFCjVZ18i8RTGjahkz4wc9A83IZ0KRBicJTZTD1agT1cjWetIrAHxRkkcsHR0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:02:36 2025 by rpki-client