$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60ba2726-e7de-4e0c-acfb-e096c701569c.roa File: 60ba2726-e7de-4e0c-acfb-e096c701569c.roa (raw, json) Hash identifier: yVJJ7FFg2QMnEYJGLp+VORsxQPIJwULx9B/PosmX1L8= Subject key identifier: A2:65:57:31:93:81:98:EF:DF:BC:DB:F6:16:C5:26:EC:D3:73:5E:54 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5D31E18752EA025AC1CF9F09DF28CB30E8436A9F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60ba2726-e7de-4e0c-acfb-e096c701569c.roa Signing time: Fri 26 Sep 2025 18:00:13 +0000 ROA not before: Fri 26 Sep 2025 18:00:13 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 7224 IP address blocks: 2600:f0f0:5501::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:31:e1:87:52:ea:02:5a:c1:cf:9f:09:df:28:cb:30:e8:43:6a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:00:13 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=b11849b9d58e81a51e8c26cde7c054fc41b4583c74e37a4a1f2e2973dbafa0dd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:ad:a4:90:e8:3a:9e:8d:b6:41:1f:d9:95: c8:c0:45:2c:c9:c0:25:77:e7:5a:94:ce:be:ef:d6: 3a:2f:78:46:9c:56:f4:21:59:16:f8:bd:7c:c5:72: d1:d2:fd:f3:55:a3:67:5f:7f:4d:12:ff:4f:58:31: 68:c4:56:8c:08:fa:89:dd:96:60:e1:62:74:82:20: 48:1a:b1:5a:8e:29:f3:5f:54:4c:21:85:7b:3d:73: a6:51:21:c7:1a:43:82:14:8d:fd:3e:09:ea:af:16: 99:a4:0a:74:ec:13:ef:99:ce:de:b6:5a:1a:42:b5: b3:58:ca:3c:70:a1:41:22:e6:01:b5:f3:8a:3c:d7: a2:ef:28:17:cf:a4:5b:56:0d:de:70:49:16:83:83: 80:5b:05:35:0e:a8:f5:ed:5d:de:b5:6e:b2:c2:9a: d1:3d:c7:38:10:07:b5:19:62:63:51:72:a5:0c:2e: 4c:d1:6a:96:8b:de:48:c0:71:98:07:b4:88:0d:ab: 49:a3:fa:e7:d0:c1:e8:50:d7:e4:dc:a9:d4:4c:ed: 1a:07:9a:4f:fc:27:97:8a:18:5c:c1:45:9a:3c:ee: 5c:ea:93:b7:ea:02:8d:cf:39:27:ba:50:59:c1:55: a3:73:46:75:4e:4d:b8:f3:03:4c:02:dc:bb:d2:e7: 34:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:65:57:31:93:81:98:EF:DF:BC:DB:F6:16:C5:26:EC:D3:73:5E:54 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60ba2726-e7de-4e0c-acfb-e096c701569c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5501::/48 Signature Algorithm: sha256WithRSAEncryption 01:c5:36:fe:97:36:d4:e9:c0:f9:81:66:9e:f1:42:76:b8:91: 5b:2c:39:04:29:35:64:3f:38:ad:50:4a:74:c8:82:25:08:b0: 53:dc:88:60:14:5c:30:44:57:53:94:4c:07:e5:58:45:f1:d2: 3c:da:3e:2e:fb:2c:2c:1d:61:b5:90:dc:84:21:70:43:5f:26: e0:a5:1c:9a:30:06:90:a4:93:af:50:04:51:1c:00:90:db:9b: 62:3c:48:0e:f0:60:c8:4e:72:50:bc:7e:84:3d:24:7d:8a:4f: a3:8b:43:84:ae:3d:64:92:5a:92:a2:73:7e:91:dd:d6:19:8d: ed:a8:78:69:6f:f5:9b:e9:ca:57:fb:7b:28:3d:10:e0:b1:05: 6e:bb:ab:84:06:bb:00:83:3e:92:0e:a2:20:84:6d:5c:c9:64: 6a:77:c1:66:5c:34:fb:f7:e2:91:3a:2e:93:73:88:8c:6d:80: 63:7d:32:37:f7:86:07:99:e5:97:c3:e6:ac:c3:2a:77:01:0a: 0b:c3:56:62:79:5c:a7:b0:e3:ae:98:f9:8e:bf:31:5f:bd:15: 3b:12:55:ce:ac:d8:11:e3:00:dd:66:a2:e7:d2:45:5e:c1:21: ce:6c:0d:85:e2:b2:3d:29:f8:8d:92:fc:ca:9e:77:42:7d:69: 87:ec:d1:16 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXTHhh1LqAlrBz58J3yjLMOhDap8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgwMDEzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTE4NDliOWQ1OGU4MWE1MWU4YzI2Y2RlN2MwNTRmYzQx YjQ1ODNjNzRlMzdhNGExZjJlMjk3M2RiYWZhMGRkMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDik62kkOg6no22QR/ZlcjARSzJwCV351qUzr7v1joveEac VvQhWRb4vXzFctHS/fNVo2dff00S/09YMWjEVowI+ondlmDhYnSCIEgasVqOKfNf VEwhhXs9c6ZRIccaQ4IUjf0+CeqvFpmkCnTsE++Zzt62WhpCtbNYyjxwoUEi5gG1 84o816LvKBfPpFtWDd5wSRaDg4BbBTUOqPXtXd61brLCmtE9xzgQB7UZYmNRcqUM LkzRapaL3kjAcZgHtIgNq0mj+ufQwehQ1+TcqdRM7RoHmk/8J5eKGFzBRZo87lzq k7fqAo3POSe6UFnBVaNzRnVOTbjzA0wC3LvS5zQrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUomVXMZOBmO/fvNv2FsUm7NNzXlQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzYwYmEyNzI2LWU3ZGUtNGUwYy1hY2ZiLWUwOTZjNzAxNTY5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQEwDQYJKoZIhvcNAQELBQADggEBAAHFNv6XNtTpwPmBZp7xQna4 kVssOQQpNWQ/OK1QSnTIgiUIsFPciGAUXDBEV1OUTAflWEXx0jzaPi77LCwdYbWQ 3IQhcENfJuClHJowBpCkk69QBFEcAJDbm2I8SA7wYMhOclC8foQ9JH2KT6OLQ4Su PWSSWpKic36R3dYZje2oeGlv9Zvpylf7eyg9EOCxBW67q4QGuwCDPpIOoiCEbVzJ ZGp3wWZcNPv34pE6LpNziIxtgGN9Mjf3hgeZ5ZfD5qzDKncBCgvDVmJ5XKew466Y +Y6/MV+9FTsSVc6s2BHjAN1moufSRV7BIc5sDYXisj0p+I2S/Mqed0J9aYfs0RY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:15:33 2025 by rpki-client