$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1ad26571-c674-4a73-b205-77cb32fe83bd.roa File: 1ad26571-c674-4a73-b205-77cb32fe83bd.roa (raw, json) Hash identifier: 3J22lYccjZaNjGqVGIXCpw3RxAh+BSCtURU/oTXyzQA= Subject key identifier: 51:36:1D:D5:AC:2E:41:87:68:D8:17:62:98:3F:10:26:ED:01:69:8F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4096F303E156EBA24AC83BC3A829288A8D983398 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1ad26571-c674-4a73-b205-77cb32fe83bd.roa Signing time: Fri 26 Sep 2025 18:00:51 +0000 ROA not before: Fri 26 Sep 2025 18:00:51 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:96:f3:03:e1:56:eb:a2:4a:c8:3b:c3:a8:29:28:8a:8d:98:33:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:00:51 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=17ee9e5bb462d2b59c6b01f4096adc06d187c4527500cd1155a00aad86b99e66, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:53:d6:82:de:26:bf:20:de:1f:ba:c0:79:69: ff:76:7f:84:66:14:ab:b3:98:2a:82:4a:5d:61:b3: 77:c9:85:7d:96:ed:dc:7e:6a:78:e4:cd:e7:57:5f: 2c:23:d0:02:33:24:77:c5:64:9c:78:4b:be:33:9b: ef:4d:45:8d:52:56:73:80:93:d8:f5:a7:61:9c:5b: 77:0a:a0:b9:3d:a5:dd:e1:ff:69:e5:bf:52:93:79: 42:19:95:c7:3d:11:01:24:5d:9f:6d:ff:62:87:c6: 51:09:11:2a:d6:ac:4a:88:6c:19:fd:0c:c0:6a:16: ab:4d:75:b1:28:b7:cb:88:19:a4:01:5e:39:96:65: a1:6b:ad:e2:e9:5d:9d:ff:2d:95:28:77:71:c1:31: ba:45:d3:16:36:19:60:0f:e8:a3:35:5a:a9:89:cd: da:b9:12:6f:d2:de:64:04:cb:6a:e8:cf:8e:39:d8: c2:cc:28:51:39:ff:3c:0e:ed:b4:7d:63:27:d8:37: 7b:ee:b4:07:b0:95:ad:89:d3:94:18:f5:ac:0f:1b: e3:28:44:74:9d:14:b5:43:b4:33:8e:26:3a:ed:34: e8:68:7e:71:c2:60:e1:03:43:41:e4:d1:4d:ec:aa: 69:fb:c8:b3:b3:29:b6:dc:a4:c9:aa:bc:ef:79:e0: 3a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:36:1D:D5:AC:2E:41:87:68:D8:17:62:98:3F:10:26:ED:01:69:8F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1ad26571-c674-4a73-b205-77cb32fe83bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:10::/48 Signature Algorithm: sha256WithRSAEncryption 67:e7:42:0c:0b:0f:f7:aa:54:71:eb:dc:40:e6:a3:ca:61:3d: 52:4c:34:a0:05:73:c1:05:41:b5:be:9c:f1:1f:49:e6:db:3f: 49:5d:18:98:53:da:fa:d9:e9:42:93:c6:e2:e2:f5:fe:1f:a2: 42:17:e5:3e:2a:c6:7e:28:6c:64:84:64:97:35:38:11:67:7b: 78:a9:ee:38:24:8a:2c:10:81:93:58:6e:e4:55:b3:0c:be:39: 50:bd:49:49:14:6b:d3:3d:88:a2:f6:fa:ac:75:5e:bc:66:04: 7f:87:f7:1a:07:c8:6f:22:a6:b1:70:40:52:8f:43:28:72:30: 09:2a:01:f7:58:b3:8c:16:21:f6:7b:ff:5a:2a:f3:86:68:98: 3d:0b:16:c9:91:75:8c:ad:19:1c:bb:62:c6:ae:29:6f:8f:a0: 5b:8e:9e:c4:68:aa:c1:4a:42:cf:6e:10:ab:01:8c:f3:9d:f4: eb:f0:79:9f:e8:8f:46:a7:cc:75:79:82:98:ee:19:6d:97:31: 6c:b0:3c:a9:af:83:f7:60:6a:cb:db:e0:e4:60:c6:85:29:bd: 45:2b:0c:9c:9f:30:1b:be:18:37:f5:b6:11:60:0a:44:cc:b3: 6f:f6:ca:7f:fe:83:9a:16:f6:fb:33:e9:92:2f:1d:2f:d9:5a: c2:2c:b0:50 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQJbzA+FW66JKyDvDqCkoio2YM5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgwMDUxWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2VlOWU1YmI0NjJkMmI1OWM2YjAxZjQwOTZhZGMwNmQx ODdjNDUyNzUwMGNkMTE1NWEwMGFhZDg2Yjk5ZTY2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQU9aC3ia/IN4fusB5af92f4RmFKuzmCqCSl1hs3fJhX2W 7dx+anjkzedXXywj0AIzJHfFZJx4S74zm+9NRY1SVnOAk9j1p2GcW3cKoLk9pd3h /2nlv1KTeUIZlcc9EQEkXZ9t/2KHxlEJESrWrEqIbBn9DMBqFqtNdbEot8uIGaQB XjmWZaFrreLpXZ3/LZUod3HBMbpF0xY2GWAP6KM1WqmJzdq5Em/S3mQEy2roz445 2MLMKFE5/zwO7bR9YyfYN3vutAewla2J05QY9awPG+MoRHSdFLVDtDOOJjrtNOho fnHCYOEDQ0Hk0U3sqmn7yLOzKbbcpMmqvO954DqJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUTYd1awuQYdo2BdimD8QJu0BaY8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFhZDI2NTcxLWM2NzQtNGE3My1iMjA1LTc3Y2IzMmZlODNiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwABAwDQYJKoZIhvcNAQELBQADggEBAGfnQgwLD/eqVHHr3EDmo8ph PVJMNKAFc8EFQbW+nPEfSebbP0ldGJhT2vrZ6UKTxuLi9f4fokIX5T4qxn4obGSE ZJc1OBFne3ip7jgkiiwQgZNYbuRVswy+OVC9SUkUa9M9iKL2+qx1XrxmBH+H9xoH yG8iprFwQFKPQyhyMAkqAfdYs4wWIfZ7/1oq84ZomD0LFsmRdYytGRy7YsauKW+P oFuOnsRoqsFKQs9uEKsBjPOd9OvweZ/oj0anzHV5gpjuGW2XMWywPKmvg/dgasvb 4ORgxoUpvUUrDJyfMBu+GDf1thFgCkTMs2/2yn/+g5oW9vsz6ZIvHS/ZWsIssFA= -----END CERTIFICATE-----Generated at Mon Oct 20 11:31:47 2025 by rpki-client