$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f5d9525-0193-4993-b222-48d2585ae7fa.roa File: 4f5d9525-0193-4993-b222-48d2585ae7fa.roa (raw, json) Hash identifier: 4zcKMp88/KAXuqCn2YTT9L6bcupdFnM0CNo9DgdTV40= Subject key identifier: 19:11:D2:8F:8F:25:34:27:B1:C6:4C:15:B8:EB:8A:C3:D9:67:32:7F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5AAC24C17A3B10A2E780A63BDE1F6F643DF07B8D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f5d9525-0193-4993-b222-48d2585ae7fa.roa Signing time: Mon 29 Sep 2025 15:23:44 +0000 ROA not before: Mon 29 Sep 2025 15:23:44 +0000 ROA not after: Mon 03 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0fb:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ac:24:c1:7a:3b:10:a2:e7:80:a6:3b:de:1f:6f:64:3d:f0:7b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 29 15:23:44 2025 GMT Not After : Nov 3 23:59:59 2025 GMT Subject: serialNumber=20228e77b3316517a4ef9e104f853baa6fe29beae15f1332979988734e3c8611, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7b:39:da:d1:a5:21:8f:3c:c7:ce:88:2d:81: 02:1c:1a:66:28:47:82:46:c1:2c:86:a3:9a:19:a9: 6d:43:62:eb:52:19:48:b7:35:54:86:55:19:0d:b9: a1:e9:3e:99:5e:48:f5:15:3a:17:fc:53:a1:09:0a: 9e:f5:7e:d8:6d:69:c5:24:22:e9:ed:b7:76:f6:e0: 7f:d8:0c:ea:84:ed:0b:24:4d:ec:59:73:c7:bb:90: e7:4a:01:75:c4:6b:43:1e:6c:27:0e:92:14:43:c3: f2:3d:7d:91:82:3b:fa:2d:68:1f:52:ca:fc:01:b4: 09:f7:b2:46:2b:0f:95:3a:00:d0:2a:21:de:e1:73: b5:29:e3:e0:83:07:90:fd:df:48:ad:57:da:24:5d: d5:f8:7a:7f:3e:9c:b5:62:0d:69:60:d5:b6:b7:3a: 45:af:eb:76:67:8f:fa:0b:87:69:4a:6e:87:63:d4: bb:84:81:3f:9d:b1:57:40:dc:73:06:18:09:68:76: ce:19:ed:d0:03:38:55:0d:c9:e8:7b:20:c5:ff:d7: eb:13:9f:a3:e0:69:58:0f:e4:0d:53:cc:32:c0:a9: 5c:77:53:fe:5a:00:70:b7:96:9b:7c:f1:a4:80:dc: 41:3f:31:2b:2c:a3:92:dd:f3:10:db:a6:e4:14:51: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:11:D2:8F:8F:25:34:27:B1:C6:4C:15:B8:EB:8A:C3:D9:67:32:7F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f5d9525-0193-4993-b222-48d2585ae7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f000::/44 Signature Algorithm: sha256WithRSAEncryption 02:87:c6:b2:ef:07:97:c0:35:79:2d:e2:3c:2e:f9:ee:b0:98: 92:09:2a:ac:2d:d0:63:ee:40:14:de:e9:e0:b1:b8:26:bf:30: 8a:21:f7:40:fa:c9:a4:05:a7:fb:53:b3:85:5e:1b:66:8b:8d: 57:32:46:9f:ce:11:4f:4a:4c:63:d7:2e:7d:8c:be:6f:af:03: 95:80:44:f0:8e:85:0d:15:5a:b6:5d:3c:16:68:ac:d1:83:bc: 29:43:4f:10:88:51:4d:04:e5:40:3b:ff:84:9f:79:52:be:ee: d7:d4:c7:25:c8:c4:27:38:8e:3d:be:c6:b4:22:69:c2:5f:00: 96:87:ed:d8:57:1c:fd:db:59:77:f2:ad:ca:b5:2f:1a:b9:52: ea:f5:e8:eb:dd:39:c6:13:70:9e:c6:8a:c1:3c:0c:e3:75:e6: 8b:72:7e:88:c5:63:d6:12:cd:e2:62:4b:95:67:e1:04:07:21: b8:96:f4:c2:3f:86:17:9c:9b:0b:6d:ed:c9:4b:e8:c1:b2:a1: f8:7d:e8:fc:a4:96:75:09:ac:0e:7e:38:90:a5:bb:f0:99:58: 71:3a:73:52:bf:c8:2a:9d:f0:66:23:f8:48:22:7c:89:4d:6b: 5b:d8:d0:fb:61:36:98:f7:2c:11:ab:a1:db:79:12:6a:18:15: aa:c5:43:2d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWqwkwXo7EKLngKY73h9vZD3we40wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI5MTUyMzQ0WhcNMjUxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDIyOGU3N2IzMzE2NTE3YTRlZjllMTA0Zjg1M2JhYTZm ZTI5YmVhZTE1ZjEzMzI5Nzk5ODg3MzRlM2M4NjExMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNezna0aUhjzzHzogtgQIcGmYoR4JGwSyGo5oZqW1DYutS GUi3NVSGVRkNuaHpPpleSPUVOhf8U6EJCp71fthtacUkIuntt3b24H/YDOqE7Qsk TexZc8e7kOdKAXXEa0MebCcOkhRDw/I9fZGCO/otaB9SyvwBtAn3skYrD5U6ANAq Id7hc7Up4+CDB5D930itV9okXdX4en8+nLViDWlg1ba3OkWv63Znj/oLh2lKbodj 1LuEgT+dsVdA3HMGGAlods4Z7dADOFUNyeh7IMX/1+sTn6PgaVgP5A1TzDLAqVx3 U/5aAHC3lpt88aSA3EE/MSsso5Ld8xDbpuQUUT9PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGRHSj48lNCexxkwVuOuKw9lnMn8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRmNWQ5NTI1LTAxOTMtNDk5My1iMjIyLTQ4ZDI1ODVhZTdmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPD78AAwDQYJKoZIhvcNAQELBQADggEBAAKHxrLvB5fANXkt4jwu+e6w mJIJKqwt0GPuQBTe6eCxuCa/MIoh90D6yaQFp/tTs4VeG2aLjVcyRp/OEU9KTGPX Ln2Mvm+vA5WARPCOhQ0VWrZdPBZorNGDvClDTxCIUU0E5UA7/4SfeVK+7tfUxyXI xCc4jj2+xrQiacJfAJaH7dhXHP3bWXfyrcq1Lxq5Uur16OvdOcYTcJ7GisE8DON1 5otyfojFY9YSzeJiS5Vn4QQHIbiW9MI/hhecmwtt7clL6MGyofh96PyklnUJrA5+ OJClu/CZWHE6c1K/yCqd8GYj+EgifIlNa1vY0PthNpj3LBGrodt5EmoYFarFQy0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:16 2025 by rpki-client