$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa File: 644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa (raw, json) Hash identifier: 7g/Fc80mAL2oVr6FJcGhHs+i/4JsRNuOLpdJBf6eNQA= Subject key identifier: 84:EF:88:FE:F5:22:DF:80:D7:28:B6:78:1E:4F:4B:DC:31:98:84:12 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 52EBFA83BE5D7103B58B2DAD287B4018227AD3D4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa Signing time: Sat 27 Sep 2025 00:52:20 +0000 ROA not before: Sat 27 Sep 2025 00:52:20 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:eb:fa:83:be:5d:71:03:b5:8b:2d:ad:28:7b:40:18:22:7a:d3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:52:20 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=b384586b3822608b6d6f0893e42f7cb46c4af9da442153a4c35869588630dfc5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:55:91:e2:ab:29:9a:b7:e2:40:69:8c:09: d7:85:c2:e4:7c:92:59:5f:83:89:59:9a:69:86:0c: d2:eb:e9:cf:0a:2e:4f:6c:05:7a:f8:66:b9:05:12: 3f:37:6f:07:13:f5:a5:90:d3:7f:2a:df:21:2a:e6: 1d:3f:4a:70:ee:ba:68:b9:b4:52:f7:75:7f:20:04: 31:9d:e6:2b:be:82:02:f3:54:7e:8a:64:8d:76:1b: 0c:7f:30:0b:d6:e7:ed:f4:dd:07:e1:de:59:8c:0b: 92:0a:91:d6:da:b1:d7:e3:ef:72:fc:09:1f:68:a7: 3d:9e:aa:df:d4:54:17:f1:f2:2c:4e:da:4d:4a:6a: 29:ae:2d:8a:fd:54:37:91:a5:be:ec:30:5e:fd:c5: 6d:23:d9:42:1b:f2:7e:50:b8:ef:03:b2:2c:d0:62: 66:24:83:cf:cb:73:8e:5e:fc:a3:91:56:e4:60:a8: 3a:72:24:b3:a1:69:5f:28:72:4a:33:b8:69:43:4d: f6:92:a6:91:ec:cb:12:15:fc:4d:26:97:c6:32:9a: 5e:2f:cb:53:1d:ce:51:5a:19:9e:6a:cc:c9:38:50: 27:45:51:fd:4e:11:d8:ed:cb:74:91:97:4b:c2:e4: fc:d2:7c:4a:39:6f:33:e0:fa:11:c0:ed:7f:9e:2d: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EF:88:FE:F5:22:DF:80:D7:28:B6:78:1E:4F:4B:DC:31:98:84:12 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f111::/48 Signature Algorithm: sha256WithRSAEncryption 66:a0:60:88:9f:5d:9d:1d:21:36:a4:bf:66:e9:01:40:6b:18: d2:db:4d:1f:b6:6a:47:6b:6f:5c:d5:73:8f:74:d3:d4:79:68: 40:a5:bf:21:b3:59:60:ef:a8:15:a3:27:c1:f6:06:05:55:99: 0d:85:0d:6f:32:1a:8e:84:6a:c8:79:a7:0a:95:8c:3e:ae:f7: 3d:d8:f6:bc:ff:d4:0f:0f:25:44:7d:a9:7b:1d:95:7a:0f:75: 07:c3:78:4a:09:62:e2:fd:b2:80:24:5f:87:8d:3a:9e:b8:2e: 27:4d:93:9b:d0:b6:a5:a0:39:e9:94:59:e4:32:ea:0f:59:a5: a2:42:7d:d6:a2:4a:57:7a:5a:39:3a:52:c1:54:16:17:e2:80: cc:51:52:f4:f2:54:ea:c8:bf:35:70:bb:7c:b9:51:cd:c0:f9: fe:4a:8a:d0:2a:9f:0b:44:06:ae:11:a2:76:c0:f9:f3:7e:33: ce:5e:c4:67:c4:4d:01:17:f2:be:5e:62:2e:a9:aa:cb:c4:e3: c4:0b:d4:40:7d:b9:c9:4e:be:ca:30:38:37:c2:ff:c8:a4:95: c9:cc:08:bf:28:63:19:dd:24:a4:b5:83:3c:7c:2c:cf:a5:f9: 8b:e3:71:88:e4:49:42:a1:63:cf:99:65:3a:85:71:23:13:25: db:5f:1f:d0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUuv6g75dcQO1iy2tKHtAGCJ609QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MjIwWhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzg0NTg2YjM4MjI2MDhiNmQ2ZjA4OTNlNDJmN2NiNDZj NGFmOWRhNDQyMTUzYTRjMzU4Njk1ODg2MzBkZmM1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYxlWR4qspmrfiQGmMCdeFwuR8kllfg4lZmmmGDNLr6c8K Lk9sBXr4ZrkFEj83bwcT9aWQ038q3yEq5h0/SnDuumi5tFL3dX8gBDGd5iu+ggLz VH6KZI12Gwx/MAvW5+303Qfh3lmMC5IKkdbasdfj73L8CR9opz2eqt/UVBfx8ixO 2k1KaimuLYr9VDeRpb7sMF79xW0j2UIb8n5QuO8DsizQYmYkg8/Lc45e/KORVuRg qDpyJLOhaV8ockozuGlDTfaSppHsyxIV/E0ml8Yyml4vy1MdzlFaGZ5qzMk4UCdF Uf1OEdjty3SRl0vC5PzSfEo5bzPg+hHA7X+eLb4nAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhO+I/vUi34DXKLZ4Hk9L3DGYhBIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY0NGMxMjQ5LWU2NTEtNDBmMy1hZTZjLTVhN2I2ZDhhMzc2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78REwDQYJKoZIhvcNAQELBQADggEBAGagYIifXZ0dITakv2bpAUBr GNLbTR+2akdrb1zVc49009R5aEClvyGzWWDvqBWjJ8H2BgVVmQ2FDW8yGo6Eash5 pwqVjD6u9z3Y9rz/1A8PJUR9qXsdlXoPdQfDeEoJYuL9soAkX4eNOp64LidNk5vQ tqWgOemUWeQy6g9ZpaJCfdaiSld6Wjk6UsFUFhfigMxRUvTyVOrIvzVwu3y5Uc3A +f5KitAqnwtEBq4RonbA+fN+M85exGfETQEX8r5eYi6pqsvE48QL1EB9uclOvsow ODfC/8iklcnMCL8oYxndJKS1gzx8LM+l+YvjcYjkSUKhY8+ZZTqFcSMTJdtfH9A= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:26 2025 by rpki-client