$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6a919a63-0d22-4f29-acd1-5dd71f681c7a.roa File: 6a919a63-0d22-4f29-acd1-5dd71f681c7a.roa (raw, json) Hash identifier: WJRFU3In+AE0essxUu6qV1RKLUKSYb6K/1hp9Gj4I1o= Subject key identifier: 37:F3:3B:EA:37:CC:B9:58:04:01:DF:F5:BE:7B:70:D3:6F:00:84:E3 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3A2BFE2CF44036E18E6084D3E69FC2515B62D018 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6a919a63-0d22-4f29-acd1-5dd71f681c7a.roa Signing time: Sat 27 Sep 2025 00:53:29 +0000 ROA not before: Sat 27 Sep 2025 00:53:29 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2b:fe:2c:f4:40:36:e1:8e:60:84:d3:e6:9f:c2:51:5b:62:d0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:53:29 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=badce9847023d31ccf39a1e82b05895932834504999e97c6e2b9639d1a01c442, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:78:e5:97:98:d7:e6:6e:36:1b:18:86:2c: f3:57:5d:05:78:df:9e:7f:59:d0:49:56:94:d1:9d: 47:2d:3b:24:88:bb:6f:fd:ab:55:d1:f3:a6:d6:d4: 0d:bf:d6:59:fe:05:2d:05:16:5e:03:ef:5c:3b:42: 79:4b:17:12:3c:ec:25:4f:c1:87:b1:cf:69:6c:bf: 1f:2e:6c:cf:37:cf:17:1b:a1:09:81:2f:b3:db:bc: 79:2c:e9:0b:3d:fe:b5:53:ec:4a:cc:30:79:1b:b8: 1e:d2:ad:ea:18:24:ea:a5:3e:8d:f5:00:9d:6c:1f: 5a:9f:1f:32:63:b7:db:2f:b8:cb:6d:ad:0d:c0:2a: 46:c5:5b:b3:bb:ef:ef:a8:9d:b7:71:69:b7:bf:7a: 8b:1c:b0:1f:34:7a:a5:ae:01:a7:cb:c6:b8:8a:a6: e9:1d:f5:d7:c3:d3:0d:ea:9f:25:7b:50:6f:b6:ad: c6:71:38:76:f0:4d:62:ba:23:3a:d5:ab:cf:0d:ef: 7e:dd:2e:c7:98:2d:fb:ad:26:07:02:52:fd:8c:6d: db:fa:92:3d:54:88:6d:33:7c:2c:39:da:27:4f:2f: 07:f1:5f:02:2a:21:ec:0e:ec:05:c2:27:5b:d9:ca: 61:59:0a:bd:33:54:4c:34:e9:88:ac:53:87:e7:42: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F3:3B:EA:37:CC:B9:58:04:01:DF:F5:BE:7B:70:D3:6F:00:84:E3 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6a919a63-0d22-4f29-acd1-5dd71f681c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f108::/48 Signature Algorithm: sha256WithRSAEncryption 18:e0:a9:43:aa:e2:eb:8a:0d:2a:20:f2:7a:85:e2:36:62:2d: e8:a5:d1:27:bf:c1:d2:ad:43:31:7f:3b:99:b2:47:8f:1b:97: af:ca:fe:d5:7b:09:ea:16:10:f0:c5:40:36:cb:6b:70:00:63: fe:ca:12:e2:a5:16:54:cc:bd:7b:f0:ee:b6:e5:eb:ae:b3:71: 85:f6:07:18:80:cd:c7:3a:32:37:a5:f8:a4:23:50:e2:5a:8f: c5:66:63:0e:aa:f9:e5:ef:82:f6:03:cf:44:07:4b:e2:b2:c4: 3d:47:e1:5b:4e:73:f6:83:3a:36:38:d3:ce:d6:f0:ad:d7:e5: 0f:b9:31:65:e9:a5:07:07:24:97:88:25:c1:44:b6:28:64:48: 02:7d:fb:4a:3c:b6:74:23:38:12:bd:db:75:8c:9b:fe:96:6d: e2:51:c6:e4:db:6c:88:34:e9:11:ac:58:63:6e:d3:db:19:01: 8f:f9:ba:2b:90:02:8e:15:df:62:b9:06:c9:65:86:a7:e6:4f: d4:e4:8a:fc:9d:d4:36:f9:17:36:e4:6d:9b:25:60:01:7a:54: 4a:a8:94:7d:9a:f2:d1:a8:94:ed:55:06:d3:23:a8:99:3c:7c: 0a:f4:cf:be:04:3a:59:7d:5d:78:4a:7d:41:a8:57:d0:14:4c: 6b:b1:18:8d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOiv+LPRANuGOYITT5p/CUVti0BgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MzI5WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWRjZTk4NDcwMjNkMzFjY2YzOWExZTgyYjA1ODk1OTMy ODM0NTA0OTk5ZTk3YzZlMmI5NjM5ZDFhMDFjNDQyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+XXjll5jX5m42GxiGLPNXXQV4355/WdBJVpTRnUctOySI u2/9q1XR86bW1A2/1ln+BS0FFl4D71w7QnlLFxI87CVPwYexz2lsvx8ubM83zxcb oQmBL7PbvHks6Qs9/rVT7ErMMHkbuB7SreoYJOqlPo31AJ1sH1qfHzJjt9svuMtt rQ3AKkbFW7O77++onbdxabe/eoscsB80eqWuAafLxriKpukd9dfD0w3qnyV7UG+2 rcZxOHbwTWK6IzrVq88N737dLseYLfutJgcCUv2Mbdv6kj1UiG0zfCw52idPLwfx XwIqIewO7AXCJ1vZymFZCr0zVEw06YisU4fnQi+jAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUN/M76jfMuVgEAd/1vntw028AhOMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZhOTE5YTYzLTBkMjItNGYyOS1hY2QxLTVkZDcxZjY4MWM3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QgwDQYJKoZIhvcNAQELBQADggEBABjgqUOq4uuKDSog8nqF4jZi Leil0Se/wdKtQzF/O5myR48bl6/K/tV7CeoWEPDFQDbLa3AAY/7KEuKlFlTMvXvw 7rbl666zcYX2BxiAzcc6Mjel+KQjUOJaj8VmYw6q+eXvgvYDz0QHS+KyxD1H4VtO c/aDOjY4087W8K3X5Q+5MWXppQcHJJeIJcFEtihkSAJ9+0o8tnQjOBK923WMm/6W beJRxuTbbIg06RGsWGNu09sZAY/5uiuQAo4V32K5BsllhqfmT9Tkivyd1Db5Fzbk bZslYAF6VEqolH2a8tGolO1VBtMjqJk8fAr0z74EOll9XXhKfUGoV9AUTGuxGI0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:00 2025 by rpki-client