$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5711ca9f-54b1-42ca-be68-93036263a87f.roa File: 5711ca9f-54b1-42ca-be68-93036263a87f.roa (raw, json) Hash identifier: Q2Il0lc9d9k/U9zEEa40eX57umhzVDvOmLrEpgyVzqg= Subject key identifier: 51:69:C4:ED:4D:51:7C:CF:C9:0C:C1:26:8E:6D:D4:BB:6F:26:D6:37 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 22CB978F558F29E61A45D9B71B55960A894C26CC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5711ca9f-54b1-42ca-be68-93036263a87f.roa Signing time: Sat 27 Sep 2025 00:52:27 +0000 ROA not before: Sat 27 Sep 2025 00:52:27 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f10d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:cb:97:8f:55:8f:29:e6:1a:45:d9:b7:1b:55:96:0a:89:4c:26:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:52:27 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=ee91ad2fe6fdac2609ad0b611a90666a8df393165c41b6b03b7e93e2420e6046, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:ab:77:72:d5:24:cb:cb:0d:2b:06:ba:05: 9a:11:d1:0a:4a:9c:e8:f5:b3:88:a2:fb:db:d0:56: 3d:61:05:ca:e2:18:d6:6a:40:85:d3:5e:90:da:65: b5:6e:2f:32:de:38:f8:ca:0b:28:6a:61:22:ad:89: f4:5d:b6:85:f2:6d:74:41:85:39:8b:7f:2a:fe:7e: 20:e2:fb:9a:1a:f5:5a:ce:ab:c2:f7:8e:37:11:91: 6f:79:ca:bf:cd:b6:58:11:97:d3:38:a2:0a:6e:1f: 4e:5f:0d:75:b0:ca:e4:07:99:92:f6:e8:6d:a3:41: fa:54:9b:75:42:8f:63:41:11:42:f2:bf:c0:e2:19: 1b:af:74:58:2d:77:54:c4:0b:8b:2e:86:bd:a0:35: 54:9d:25:46:3c:29:27:b6:e1:b1:18:aa:d0:15:5c: 40:1c:e5:2b:c1:d1:e2:f1:21:ab:43:30:86:92:e5: 85:9a:15:74:86:57:bc:44:00:f7:19:2c:48:d9:76: b1:3c:c6:e3:ca:48:30:05:3a:06:16:e9:e2:7c:40: 50:de:fc:a5:32:8d:78:57:06:09:e8:87:c6:50:e5: b8:ba:26:ce:d2:72:99:aa:f7:27:d2:ac:45:0b:4b: 15:ab:cf:9e:00:6f:26:80:53:4e:57:a9:5e:7a:b4: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:69:C4:ED:4D:51:7C:CF:C9:0C:C1:26:8E:6D:D4:BB:6F:26:D6:37 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5711ca9f-54b1-42ca-be68-93036263a87f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10d::/48 Signature Algorithm: sha256WithRSAEncryption 89:36:d1:0d:fe:65:1c:f8:48:95:b2:45:6e:96:94:d6:59:e6: 9b:c5:e0:3c:c6:a4:1e:9d:c3:04:b5:27:b8:97:2a:bc:29:06: b5:5e:a9:f9:ff:9c:0d:27:63:2d:18:fd:07:18:23:ff:13:1e: f4:2c:66:59:61:9f:f3:00:41:af:84:9c:65:ec:df:ba:39:79: 61:29:ee:71:e2:06:c4:b4:c2:0e:05:7c:92:8a:e3:d1:1b:cc: 5a:4a:1a:4c:76:92:e8:4c:59:4e:49:4f:af:ec:9b:4e:4d:0d: 85:01:d7:e4:65:83:6e:8d:63:af:f1:84:58:c4:34:8a:bc:77: a3:cf:13:6f:ca:e4:84:94:3a:9c:95:90:c0:ac:4b:2c:db:96: f0:be:8c:f3:2d:e8:c6:2e:06:bb:9c:23:fd:fa:19:24:49:32: 24:1d:33:94:ab:44:c0:f4:b9:73:ae:ad:40:1b:dc:36:01:33: a4:90:9e:d2:e4:d6:b2:06:98:61:88:c1:78:dd:01:c2:89:a7: 05:80:47:90:ba:54:99:71:69:f9:76:f0:d3:db:ce:fd:50:c6: 13:91:38:eb:0f:60:6b:70:f8:c3:2d:c0:cd:6c:65:d7:02:d4: d1:42:5c:82:99:e5:58:be:64:3c:ed:e6:98:7c:53:1e:ef:bf: 1e:a8:2c:93 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIsuXj1WPKeYaRdm3G1WWColMJswwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MjI3WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTkxYWQyZmU2ZmRhYzI2MDlhZDBiNjExYTkwNjY2YThk ZjM5MzE2NWM0MWI2YjAzYjdlOTNlMjQyMGU2MDQ2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqtqt3ctUky8sNKwa6BZoR0QpKnOj1s4ii+9vQVj1hBcri GNZqQIXTXpDaZbVuLzLeOPjKCyhqYSKtifRdtoXybXRBhTmLfyr+fiDi+5oa9VrO q8L3jjcRkW95yr/NtlgRl9M4ogpuH05fDXWwyuQHmZL26G2jQfpUm3VCj2NBEULy v8DiGRuvdFgtd1TEC4suhr2gNVSdJUY8KSe24bEYqtAVXEAc5SvB0eLxIatDMIaS 5YWaFXSGV7xEAPcZLEjZdrE8xuPKSDAFOgYW6eJ8QFDe/KUyjXhXBgnoh8ZQ5bi6 Js7Scpmq9yfSrEULSxWrz54AbyaAU05XqV56tPMBAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUWnE7U1RfM/JDMEmjm3Uu28m1jcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzU3MTFjYTlmLTU0YjEtNDJjYS1iZTY4LTkzMDM2MjYzYTg3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78Q0wDQYJKoZIhvcNAQELBQADggEBAIk20Q3+ZRz4SJWyRW6WlNZZ 5pvF4DzGpB6dwwS1J7iXKrwpBrVeqfn/nA0nYy0Y/QcYI/8THvQsZllhn/MAQa+E nGXs37o5eWEp7nHiBsS0wg4FfJKK49EbzFpKGkx2kuhMWU5JT6/sm05NDYUB1+Rl g26NY6/xhFjENIq8d6PPE2/K5ISUOpyVkMCsSyzblvC+jPMt6MYuBrucI/36GSRJ MiQdM5SrRMD0uXOurUAb3DYBM6SQntLk1rIGmGGIwXjdAcKJpwWAR5C6VJlxafl2 8NPbzv1QxhOROOsPYGtw+MMtwM1sZdcC1NFCXIKZ5Vi+ZDzt5ph8Ux7vvx6oLJM= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:16 2025 by rpki-client