$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa File: 6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa (raw, json) Hash identifier: VjcRA8REPQsg7XmwXSjK/RgDZFhWlFbEhDuwVPE6lK4= Subject key identifier: 9A:C7:78:FB:7F:6C:56:02:9C:2B:2F:58:3C:F7:A4:28:D9:25:EF:76 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 066CD5385287A8AEE7A359D26F10CDD9646DEC84 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa Signing time: Fri 10 Oct 2025 17:04:22 +0000 ROA not before: Fri 10 Oct 2025 17:04:22 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:6c:d5:38:52:87:a8:ae:e7:a3:59:d2:6f:10:cd:d9:64:6d:ec:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 10 17:04:22 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=ff816776a515d1e3be30c3b6a9c3417d413f0a4d09cd2c5dae38d741c710d33a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:35:e1:d6:22:61:84:1f:9f:61:8c:a3:7f: f4:c9:41:80:34:cc:f9:57:b2:24:75:67:38:1b:6b: bc:48:e3:28:58:55:7e:cc:9c:f2:08:63:64:4a:0b: ca:5d:d0:0c:b0:cf:5f:6f:3f:c4:7d:c6:b0:d4:ff: b1:43:6d:85:3f:25:50:5b:8b:4b:1c:1e:bd:80:c7: da:f4:fb:b8:76:da:26:45:68:d1:e5:e6:41:e0:42: ae:e2:b2:2c:21:5f:e6:74:cc:84:cb:94:ac:c6:1d: 40:06:5a:aa:75:29:35:82:c8:c8:fc:c1:77:03:81: 8a:6c:b7:dc:ca:f8:16:65:8d:5a:d3:89:11:d8:19: e7:30:23:4e:ed:58:ad:d2:d3:4a:2c:88:d1:d6:95: a8:8e:ce:08:5e:40:62:d5:ce:f6:12:d6:49:49:7a: 7e:14:9e:38:76:21:a6:d4:32:d8:ce:c9:bb:0b:82: 9b:86:5b:94:10:0c:18:5b:6a:a3:47:6a:e6:75:59: 6b:0a:ff:76:cb:63:47:e8:18:ad:91:14:3a:59:f6: 36:04:c3:be:fa:84:01:15:2e:4d:ee:d9:f5:a0:0a: 36:66:1d:fc:21:e9:4d:5f:98:ea:75:83:ba:37:ef: 23:2b:e9:4f:f1:9d:43:d8:08:ee:2e:5c:c5:8b:44: 84:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C7:78:FB:7F:6C:56:02:9C:2B:2F:58:3C:F7:A4:28:D9:25:EF:76 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:1100::/40 Signature Algorithm: sha256WithRSAEncryption 53:0d:12:13:94:bf:03:a9:a5:e1:8a:b2:ab:25:b1:92:5e:a0: 4c:45:7b:8f:3c:25:ef:1b:e3:d8:76:1f:02:98:a0:19:15:56: ff:4c:87:eb:33:f7:ca:31:86:e6:98:da:81:52:22:a0:ef:2d: 0f:b1:7a:e3:c0:04:7b:9e:f1:32:62:0a:16:3c:3c:59:7a:63: f7:04:ae:86:a9:cb:f8:a4:4b:10:17:3a:cb:0f:ba:4c:20:f1: d6:c8:c3:63:41:0a:09:40:f4:50:11:5a:e9:e3:ed:8b:ee:b1: d7:ab:ab:9c:71:af:62:81:3f:37:9f:3f:0e:b0:bc:60:df:cc: 97:bd:a7:5a:a4:af:c4:16:89:b8:a8:d4:1a:f2:4f:1c:24:b5: 94:db:01:67:97:2a:e2:b3:d1:c8:10:f8:59:4e:50:e6:46:1c: 4a:ff:30:f0:7a:aa:8c:70:41:7b:b6:73:e2:ad:34:b6:91:05: fc:f4:a0:1e:36:77:cd:49:0e:ef:80:11:85:7d:b3:0f:ff:f2: 0e:39:ec:56:ce:84:f1:aa:3b:7f:b2:e9:46:b1:b6:ad:ff:ab: 72:fe:98:80:cc:dd:1f:b6:14:b1:29:68:dd:fb:bd:6e:f7:1b: 3b:a8:88:d6:74:1b:d2:bd:ad:7d:3a:5e:8a:68:73:32:a5:69: de:39:a4:34 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUBmzVOFKHqK7no1nSbxDN2WRt7IQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDEwMTcwNDIyWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjgxNjc3NmE1MTVkMWUzYmUzMGMzYjZhOWMzNDE3ZDQx M2YwYTRkMDljZDJjNWRhZTM4ZDc0MWM3MTBkMzNhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMNzXh1iJhhB+fYYyjf/TJQYA0zPlXsiR1Zzgba7xI4yhY VX7MnPIIY2RKC8pd0Aywz19vP8R9xrDU/7FDbYU/JVBbi0scHr2Ax9r0+7h22iZF aNHl5kHgQq7isiwhX+Z0zITLlKzGHUAGWqp1KTWCyMj8wXcDgYpst9zK+BZljVrT iRHYGecwI07tWK3S00osiNHWlaiOzgheQGLVzvYS1klJen4Unjh2IabUMtjOybsL gpuGW5QQDBhbaqNHauZ1WWsK/3bLY0foGK2RFDpZ9jYEw776hAEVLk3u2fWgCjZm Hfwh6U1fmOp1g7o37yMr6U/xnUPYCO4uXMWLRITvAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUmsd4+39sVgKcKy9YPPekKNkl73YwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZlYWY5YWI1LWVjOGItNDJlYi1hZGU5LTc4MWJmMTIyMTJhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwETANBgkqhkiG9w0BAQsFAAOCAQEAUw0SE5S/A6ml4YqyqyWxkl6g TEV7jzwl7xvj2HYfApigGRVW/0yH6zP3yjGG5pjagVIioO8tD7F648AEe57xMmIK Fjw8WXpj9wSuhqnL+KRLEBc6yw+6TCDx1sjDY0EKCUD0UBFa6ePti+6x16urnHGv YoE/N58/DrC8YN/Ml72nWqSvxBaJuKjUGvJPHCS1lNsBZ5cq4rPRyBD4WU5Q5kYc Sv8w8HqqjHBBe7Zz4q00tpEF/PSgHjZ3zUkO74ARhX2zD//yDjnsVs6E8ao7f7Lp RrG2rf+rcv6YgMzdH7YUsSlo3fu9bvcbO6iI1nQb0r2tfTpeimhzMqVp3jmkNA== -----END CERTIFICATE-----Generated at Mon Oct 20 18:18:54 2025 by rpki-client