$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa File: 22382750-431d-4ab9-aa08-e0f973e067f8.roa (raw, json) Hash identifier: SnMxObb3wLyBRGDoK30ORoJKmxcwDk796kO1lu4AMk0= Subject key identifier: 4B:12:5C:50:96:BA:EC:2A:68:00:CB:2D:3E:A8:56:7C:3D:23:E9:79 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 43D66715F4E2AB1F59C336429D716A04E8461A54 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa Signing time: Fri 26 Sep 2025 18:20:19 +0000 ROA not before: Fri 26 Sep 2025 18:20:19 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f00c::/39 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d6:67:15:f4:e2:ab:1f:59:c3:36:42:9d:71:6a:04:e8:46:1a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:20:19 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=89e4e5643942dfddec654310cd8431824ee3b4040cd41524106e341f2384c0ee, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f7:dd:14:80:27:c4:e2:92:b9:f4:b8:fe:9d: 7f:70:e8:b2:2d:bb:28:04:33:08:73:97:63:48:0f: 77:b7:c1:33:eb:1b:0c:31:6d:bb:9d:00:f1:25:76: 64:84:f8:8a:a0:80:07:70:ce:e2:63:35:e0:5a:5b: 2d:6a:e5:eb:c9:16:a8:8d:eb:1c:ec:69:d0:82:a7: d9:6c:62:4c:30:ee:39:27:f1:25:61:62:bb:51:ca: 0d:99:37:71:51:02:de:74:aa:4e:d6:45:02:17:78: ac:9d:c4:31:0e:43:96:74:8a:5b:98:7b:d2:67:39: af:94:a5:ed:03:a3:89:92:74:cf:5f:f4:c4:0e:6f: 36:42:48:fa:74:d9:d1:d4:b0:7f:d5:0b:74:61:65: 41:61:0f:97:ad:79:27:cf:c3:4f:27:8c:c4:dd:e2: b5:49:24:a1:e7:e8:11:68:98:6e:c9:96:5b:60:56: c0:24:b0:5b:e9:05:61:ec:7e:12:b0:2b:72:29:fd: e3:2f:3d:de:06:bb:8e:ce:02:f3:90:4c:3e:a6:b2: d0:39:e0:29:74:95:8d:4d:12:e0:96:a8:4e:e1:ae: 04:f6:35:c3:5f:32:a8:6f:66:7d:95:05:14:ad:1e: 01:ee:dd:bc:f2:dd:01:e3:00:bd:3f:c9:40:c5:1d: 78:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:12:5C:50:96:BA:EC:2A:68:00:CB:2D:3E:A8:56:7C:3D:23:E9:79 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f00c::/39 Signature Algorithm: sha256WithRSAEncryption 5e:9d:d7:ac:bd:90:a9:24:b8:b6:9c:23:4a:19:4b:bb:19:5a: 3a:b0:e0:74:7d:50:6c:9d:61:18:a9:d0:57:b2:2c:0c:7f:71: ef:4d:66:22:81:df:fa:96:ea:32:8e:3d:7f:99:6a:d9:b8:43: 3f:fe:be:63:56:89:31:d8:56:0e:e3:e7:ba:3e:3e:ce:1f:c1: 96:7c:54:4d:78:0f:0f:d7:5d:f3:c1:b1:99:9f:0e:6f:ae:19: 0f:26:10:76:83:d1:8f:08:f2:8c:6e:f8:3d:19:3e:52:29:8e: a4:90:b4:7e:3f:4a:a9:92:f1:fe:b1:ba:ca:d7:bf:a8:29:63: cc:9d:df:97:c8:89:9f:76:69:f8:e3:9d:8f:e2:e6:4d:3b:3c: ea:1d:bb:63:54:13:23:84:b2:1a:0c:b5:a9:e3:a2:0b:ee:49: c5:d0:5f:a7:07:4e:52:9a:16:e8:f2:06:4b:aa:79:62:8a:c8: d8:8a:94:3d:b4:e3:c9:7b:0d:9d:96:d3:e0:9a:91:e4:b9:db: 75:45:9e:c8:29:4f:4a:ee:0d:a4:dd:f1:23:b5:9e:3e:6f:31: b7:18:7a:a6:52:f0:17:77:62:25:34:7f:88:78:54:b7:b6:de: 84:13:ec:e5:73:59:76:ec:1a:a7:63:df:12:2c:95:c4:aa:e1: eb:9c:3e:34 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUQ9ZnFfTiqx9ZwzZCnXFqBOhGGlQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgyMDE5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OWU0ZTU2NDM5NDJkZmRkZWM2NTQzMTBjZDg0MzE4MjRl ZTNiNDA0MGNkNDE1MjQxMDZlMzQxZjIzODRjMGVlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDl990UgCfE4pK59Lj+nX9w6LItuygEMwhzl2NID3e3wTPr GwwxbbudAPEldmSE+IqggAdwzuJjNeBaWy1q5evJFqiN6xzsadCCp9lsYkww7jkn 8SVhYrtRyg2ZN3FRAt50qk7WRQIXeKydxDEOQ5Z0iluYe9JnOa+Upe0Do4mSdM9f 9MQObzZCSPp02dHUsH/VC3RhZUFhD5eteSfPw08njMTd4rVJJKHn6BFomG7Jlltg VsAksFvpBWHsfhKwK3Ip/eMvPd4Gu47OAvOQTD6mstA54Cl0lY1NEuCWqE7hrgT2 NcNfMqhvZn2VBRStHgHu3bzy3QHjAL0/yUDFHXjHAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUSxJcUJa67CpoAMstPqhWfD0j6XkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIyMzgyNzUwLTQzMWQtNGFiOS1hYTA4LWUwZjk3M2UwNjdmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgEmAPAMADANBgkqhkiG9w0BAQsFAAOCAQEAXp3XrL2QqSS4tpwjShlLuxla OrDgdH1QbJ1hGKnQV7IsDH9x701mIoHf+pbqMo49f5lq2bhDP/6+Y1aJMdhWDuPn uj4+zh/BlnxUTXgPD9dd88GxmZ8Ob64ZDyYQdoPRjwjyjG74PRk+UimOpJC0fj9K qZLx/rG6yte/qCljzJ3fl8iJn3Zp+OOdj+LmTTs86h27Y1QTI4SyGgy1qeOiC+5J xdBfpwdOUpoW6PIGS6p5YorI2IqUPbTjyXsNnZbT4JqR5LnbdUWeyClPSu4NpN3x I7WePm8xtxh6plLwF3diJTR/iHhUt7behBPs5XNZduwap2PfEiyVxKrh65w+NA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:40 2025 by rpki-client