$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/460ed500-f45c-40ef-9062-2ca31b8c1dec.roa File: 460ed500-f45c-40ef-9062-2ca31b8c1dec.roa (raw, json) Hash identifier: mYZHxVI+AQQ6Kd1nl7+nks8rudrZy5KwVjLR283fG+4= Subject key identifier: BC:8F:66:11:EE:E5:A9:31:91:BB:FB:54:C3:9B:2A:A0:CB:80:BD:A0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 095A99446C35965FA5D22EF0F896D79D7FA1BD7C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/460ed500-f45c-40ef-9062-2ca31b8c1dec.roa Signing time: Fri 17 Oct 2025 20:10:16 +0000 ROA not before: Fri 17 Oct 2025 20:10:16 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5a:99:44:6c:35:96:5f:a5:d2:2e:f0:f8:96:d7:9d:7f:a1:bd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 17 20:10:16 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=2aa2ea80b3cd4366701a9222f67dfd0e8a5a000064542c23873532f6d4557760, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:29:19:cc:38:57:db:56:fc:08:27:7a:25: 45:1e:3c:26:b6:6a:f3:02:8d:c5:8c:6e:b5:f5:52: a2:7f:54:a9:54:5a:3e:04:81:52:60:e9:05:9b:14: 95:23:df:59:c0:f3:cd:a3:35:ce:e7:07:5e:97:d7: b4:70:60:06:f4:f3:ac:a5:95:74:13:40:08:f0:a9: d1:96:65:8c:dd:e5:ee:6a:79:d8:56:9b:04:38:89: 8b:aa:50:05:1e:ab:12:a5:a9:f8:f8:d8:23:a1:22: 16:9d:33:1f:f0:be:63:53:27:f4:51:6d:4d:61:b2: 7b:6e:85:17:4a:ee:67:af:9f:8e:9a:06:d0:9a:59: f1:81:b2:19:41:fc:f5:67:29:1e:11:8d:15:65:d7: fc:f0:34:4f:40:44:55:a5:54:f7:5a:c7:46:86:48: 5d:66:f7:b0:ac:9f:c9:d1:72:3f:f4:3a:b9:ac:8e: 7f:d8:50:45:1f:97:52:28:c0:95:50:74:ac:0c:4b: 4e:49:c8:80:4f:d5:d2:cd:0f:5c:b4:11:26:c0:8f: 9d:a7:3d:dc:b8:af:23:1d:f7:3e:aa:7f:7b:24:44: 37:80:76:97:b6:7a:c8:17:c9:02:a4:4c:b2:c7:f6: 9c:13:34:a5:b3:d5:63:db:02:9e:55:a4:df:01:84: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8F:66:11:EE:E5:A9:31:91:BB:FB:54:C3:9B:2A:A0:CB:80:BD:A0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/460ed500-f45c-40ef-9062-2ca31b8c1dec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:b0::/44 Signature Algorithm: sha256WithRSAEncryption 75:aa:0b:8a:4c:9a:f3:e1:85:a4:72:b4:6d:af:1a:5c:2c:fa: 59:54:cb:93:78:b9:95:16:99:24:86:d4:eb:80:e1:02:6f:da: 94:08:9b:b0:a7:ff:35:a4:84:92:bf:85:09:2f:f2:d0:2a:cd: c7:7f:3f:ca:0c:d4:4a:f9:53:27:19:99:1d:55:7b:a6:bf:f4: 7d:e8:9a:f6:7c:1e:8d:0d:f3:63:85:81:c6:5a:17:9e:87:c8: 48:ab:86:ef:0a:f3:da:db:3b:d5:13:0d:46:28:4d:e2:0e:7c: ba:f0:80:e3:9a:f3:5c:1d:44:0e:ea:c7:14:6a:a1:7e:d3:11: 05:2c:95:45:a8:12:89:a4:5e:13:0b:cb:72:f6:21:bc:67:cf: af:05:4b:cc:47:b6:8a:45:26:93:14:52:2c:5c:94:59:f1:02: c8:d3:bc:aa:1d:07:73:5a:28:f5:a2:c4:27:c2:ee:ff:85:a8: 44:ba:4b:5c:f4:5c:8e:c2:0a:8b:8c:07:d1:6e:35:8a:a9:76: 65:76:71:77:7b:f0:4b:4a:34:f0:e2:97:e9:6c:22:a1:ae:40: e4:8b:4e:22:4c:e7:fa:a9:44:ab:58:e1:a6:ac:c4:5f:7a:55: 69:7b:48:6d:90:ef:00:71:5b:09:10:4d:77:6d:b3:84:41:21: 22:e3:37:ee -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCVqZRGw1ll+l0i7w+JbXnX+hvXwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDE3MjAxMDE2WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYWEyZWE4MGIzY2Q0MzY2NzAxYTkyMjJmNjdkZmQwZThh NWEwMDAwNjQ1NDJjMjM4NzM1MzJmNmQ0NTU3NzYwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV6SkZzDhX21b8CCd6JUUePCa2avMCjcWMbrX1UqJ/VKlU Wj4EgVJg6QWbFJUj31nA882jNc7nB16X17RwYAb086yllXQTQAjwqdGWZYzd5e5q edhWmwQ4iYuqUAUeqxKlqfj42COhIhadMx/wvmNTJ/RRbU1hsntuhRdK7mevn46a BtCaWfGBshlB/PVnKR4RjRVl1/zwNE9ARFWlVPdax0aGSF1m97Csn8nRcj/0Orms jn/YUEUfl1IowJVQdKwMS05JyIBP1dLND1y0ESbAj52nPdy4ryMd9z6qf3skRDeA dpe2esgXyQKkTLLH9pwTNKWz1WPbAp5VpN8BhELvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUvI9mEe7lqTGRu/tUw5sqoMuAvaAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ2MGVkNTAwLWY0NWMtNDBlZi05MDYyLTJjYTMxYjhjMWRlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwALAwDQYJKoZIhvcNAQELBQADggEBAHWqC4pMmvPhhaRytG2vGlws +llUy5N4uZUWmSSG1OuA4QJv2pQIm7Cn/zWkhJK/hQkv8tAqzcd/P8oM1Er5UycZ mR1Ve6a/9H3omvZ8Ho0N82OFgcZaF56HyEirhu8K89rbO9UTDUYoTeIOfLrwgOOa 81wdRA7qxxRqoX7TEQUslUWoEomkXhMLy3L2Ibxnz68FS8xHtopFJpMUUixclFnx AsjTvKodB3NaKPWixCfC7v+FqES6S1z0XI7CCouMB9FuNYqpdmV2cXd78EtKNPDi l+lsIqGuQOSLTiJM5/qpRKtY4aasxF96VWl7SG2Q7wBxWwkQTXdts4RBISLjN+4= -----END CERTIFICATE-----Generated at Sun Oct 19 22:55:31 2025 by rpki-client