$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3026e026-f5e8-46be-927e-d13ed27dd55c.roa File: 3026e026-f5e8-46be-927e-d13ed27dd55c.roa (raw, json) Hash identifier: 5rJhAGQRK/Xw1t0709PWsRMGuq0cR4IijhUZMFuWb5o= Subject key identifier: 15:EB:FC:51:97:FE:9C:A1:5F:F1:EF:4B:9A:45:4B:89:CF:03:97:28 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 563B51CF887CD26AA5C43033C044E15C3BFEE86D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3026e026-f5e8-46be-927e-d13ed27dd55c.roa Signing time: Sat 27 Sep 2025 00:53:28 +0000 ROA not before: Sat 27 Sep 2025 00:53:28 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3b:51:cf:88:7c:d2:6a:a5:c4:30:33:c0:44:e1:5c:3b:fe:e8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:53:28 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=51cd2766299593c0694e86158207f671cf96adf49267367fa8c84560a69edf4b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:79:b4:ee:30:6c:27:0a:a3:92:fc:0e:0c:39: 90:ba:95:11:b5:fe:df:bd:69:4e:3a:2f:c9:b6:0c: 76:cd:d1:ca:89:cb:04:c7:b9:97:de:81:6f:64:4b: 65:07:da:5e:2a:99:ff:e7:86:ad:ae:77:95:56:d1: 86:98:53:63:45:87:1d:11:65:d5:da:2e:0e:67:38: 51:d0:a7:c7:47:5e:45:a9:2b:f5:52:b0:55:f3:c3: a7:7c:64:c5:d1:91:96:0e:6a:98:42:8c:75:7a:1a: 77:00:9e:ee:87:e7:b2:e7:df:76:c4:08:74:44:9d: a3:ae:b8:44:8e:5b:83:d4:e5:5b:e0:59:b4:35:07: 76:c9:38:a4:60:79:30:02:e7:15:b2:4f:ab:17:fa: b3:78:ff:8c:bb:8c:77:a7:76:3c:3d:6e:6f:17:5c: 52:bc:c4:31:5b:76:e3:30:9c:88:e4:a4:8f:74:ad: c3:a8:fc:f9:89:87:29:c6:db:79:6f:5c:cf:15:bc: 75:49:ec:ae:48:44:77:05:c8:44:33:f6:8f:67:af: d1:ba:c5:ec:e2:2f:48:31:42:20:a0:a0:0d:a4:ce: 35:fd:17:32:61:dd:11:65:65:1d:1d:ac:d6:56:c9: b7:9e:fa:b0:73:92:09:09:26:51:4f:db:0f:31:dc: ed:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EB:FC:51:97:FE:9C:A1:5F:F1:EF:4B:9A:45:4B:89:CF:03:97:28 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3026e026-f5e8-46be-927e-d13ed27dd55c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f108::/48 Signature Algorithm: sha256WithRSAEncryption 4a:d9:68:55:c1:05:e8:bf:49:0b:01:9f:8c:9c:cc:d5:9e:66: 65:10:e6:46:14:7d:d1:87:a1:e0:0b:25:ac:e1:70:37:ee:b7: 96:ab:ab:f0:6a:4f:41:07:e5:4c:d7:90:65:20:74:58:61:81: 68:e9:78:dc:05:44:74:9f:e0:f8:38:af:88:4a:f5:ac:4b:d0: b9:94:89:27:a4:e0:34:43:02:89:89:6d:4e:59:77:6f:33:93: 82:67:62:83:01:1b:94:4d:d6:86:0f:4b:e7:c7:80:6e:a1:45: 94:9d:0c:f9:1a:54:6d:10:bf:60:4d:4c:d1:22:1d:3e:3f:9b: 8d:2e:79:7b:ef:50:f0:89:0f:fb:87:90:62:d0:8e:be:2d:ab: a0:17:4d:cf:35:b4:b1:e7:f6:9e:1e:99:b2:0a:24:b7:13:8e: 06:0c:a0:bf:b9:09:1e:38:c8:2a:60:3a:cc:6b:b5:1a:5d:e8: 7b:c1:de:fa:e6:5b:a8:8f:a5:19:98:c0:c3:ec:b8:02:b5:4c: f4:87:1e:0a:8c:45:cf:12:c9:e0:8e:b0:2d:4b:c2:19:98:0d: 8b:f8:d1:74:1f:ba:7b:03:48:31:1f:dd:eb:9d:62:1a:fa:e2: 37:3d:ba:6e:43:59:f2:fa:e7:f1:80:95:c5:4e:7c:a8:bb:63: 77:31:63:5a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUVjtRz4h80mqlxDAzwEThXDv+6G0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MzI4WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWNkMjc2NjI5OTU5M2MwNjk0ZTg2MTU4MjA3ZjY3MWNm OTZhZGY0OTI2NzM2N2ZhOGM4NDU2MGE2OWVkZjRiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhebTuMGwnCqOS/A4MOZC6lRG1/t+9aU46L8m2DHbN0cqJ ywTHuZfegW9kS2UH2l4qmf/nhq2ud5VW0YaYU2NFhx0RZdXaLg5nOFHQp8dHXkWp K/VSsFXzw6d8ZMXRkZYOaphCjHV6GncAnu6H57Ln33bECHREnaOuuESOW4PU5Vvg WbQ1B3bJOKRgeTAC5xWyT6sX+rN4/4y7jHendjw9bm8XXFK8xDFbduMwnIjkpI90 rcOo/PmJhynG23lvXM8VvHVJ7K5IRHcFyEQz9o9nr9G6xeziL0gxQiCgoA2kzjX9 FzJh3RFlZR0drNZWybee+rBzkgkJJlFP2w8x3O2RAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFev8UZf+nKFf8e9LmkVLic8DlygwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzMwMjZlMDI2LWY1ZTgtNDZiZS05MjdlLWQxM2VkMjdkZDU1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QgwDQYJKoZIhvcNAQELBQADggEBAErZaFXBBei/SQsBn4yczNWe ZmUQ5kYUfdGHoeALJazhcDfut5arq/BqT0EH5UzXkGUgdFhhgWjpeNwFRHSf4Pg4 r4hK9axL0LmUiSek4DRDAomJbU5Zd28zk4JnYoMBG5RN1oYPS+fHgG6hRZSdDPka VG0Qv2BNTNEiHT4/m40ueXvvUPCJD/uHkGLQjr4tq6AXTc81tLHn9p4embIKJLcT jgYMoL+5CR44yCpgOsxrtRpd6HvB3vrmW6iPpRmYwMPsuAK1TPSHHgqMRc8SyeCO sC1LwhmYDYv40XQfunsDSDEf3eudYhr64jc9um5DWfL65/GAlcVOfKi7Y3cxY1o= -----END CERTIFICATE-----Generated at Sun Oct 19 22:59:01 2025 by rpki-client