$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa File: 71a2a2c0-b8db-4847-a756-b7515aa42b07.roa (raw, json) Hash identifier: m10aeZgolnn4O9+sJXt2kmDSvzLhyhSvHBAVw2o1mys= Subject key identifier: D8:9C:4C:A5:02:2B:E9:81:87:69:AA:A8:AF:FC:F1:17:35:2A:60:13 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 050ECB7BFFA9373AAB0DDAFB3E0C5631F8007563 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa Signing time: Fri 26 Sep 2025 18:00:48 +0000 ROA not before: Fri 26 Sep 2025 18:00:48 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5510::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0e:cb:7b:ff:a9:37:3a:ab:0d:da:fb:3e:0c:56:31:f8:00:75:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:00:48 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=db1c4035be9cee9d9eb8604eb70d4f7860622c710eb03bf1e15006555243973e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:bf:9b:28:b5:fd:e1:84:2b:79:64:23:7b: 15:77:ef:c2:da:ef:05:d8:20:42:d1:c7:be:c2:5b: 7d:22:c2:ef:15:95:bb:12:72:10:c6:54:4d:98:b5: 4e:30:bd:c5:ec:48:da:ef:30:30:f7:86:a2:e6:86: 4d:46:fa:2d:a7:fb:4c:6f:00:5b:8e:39:aa:9c:e5: 8b:05:48:d5:f1:cd:e8:b2:cd:2d:c9:5f:e5:27:ea: 16:37:37:e6:3b:d7:10:32:84:d8:7d:91:fc:a5:07: fe:ef:37:d5:d9:09:96:32:9e:75:ae:c4:53:bd:9d: d4:ab:f9:15:21:8f:ad:cc:3c:5e:e9:a4:ef:25:9e: b9:56:bc:f8:99:5b:7c:60:88:e8:c1:52:c3:d2:bd: 59:14:a9:76:b3:d8:1f:b9:80:f6:46:1f:45:01:f8: 3e:44:86:79:36:11:b2:8a:12:00:3b:30:09:57:8f: 08:07:26:95:97:90:a8:49:10:fd:16:c9:cd:d1:92: d9:f8:a0:20:0d:0e:98:4c:95:2c:31:68:95:74:23: 74:11:c6:53:90:4c:5f:89:f5:93:e6:e0:58:74:81: 93:8d:3a:e4:c4:cc:cf:da:3f:45:37:6c:0f:f7:1b: 0a:63:36:2c:02:13:d8:a5:ac:ae:99:cf:61:85:5e: 2b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9C:4C:A5:02:2B:E9:81:87:69:AA:A8:AF:FC:F1:17:35:2A:60:13 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5510::/44 Signature Algorithm: sha256WithRSAEncryption a1:28:af:51:e2:8c:ea:eb:82:d9:da:de:9f:f1:3f:4b:78:ae: b8:c4:2d:b8:4a:f9:f7:42:0a:5a:d5:5a:95:a2:96:2e:f0:29: 7e:df:93:4c:e7:5c:d1:d4:1f:c0:6b:de:d5:89:31:c3:64:a1: 0a:07:07:33:9e:ce:35:e1:32:2a:20:49:5b:32:e2:60:e4:a0: bc:9d:23:3b:dc:01:57:47:c5:3a:1b:0d:ea:a5:99:22:25:fe: 72:55:24:0a:6b:d5:1b:03:c9:f4:f2:4c:53:3b:8e:7b:92:d4: 81:c5:22:b2:43:3e:05:e9:31:97:09:6c:a3:99:d0:8c:83:1f: 8c:bb:98:85:d4:16:55:ff:c3:8f:66:2b:49:4e:10:db:6e:1c: 64:1c:25:e4:17:00:17:6d:33:44:9d:92:f1:20:3b:35:a4:48: 21:f8:b4:42:a7:6f:38:f7:8d:e0:a1:6e:fa:d5:07:81:de:87: 12:f1:fe:f4:18:bd:45:3c:6e:e9:16:48:a0:89:76:90:f5:75: fb:90:82:2e:dd:dd:78:b9:81:0e:0a:71:5d:6b:a9:1e:0c:77: cf:ce:ff:d1:75:28:21:6d:98:11:c2:01:19:71:d2:e1:c7:2f: 40:8b:d7:d8:e4:07:45:2d:e3:d3:9b:a7:dc:53:28:d7:e7:bc: 7f:fe:2f:3b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUBQ7Le/+pNzqrDdr7PgxWMfgAdWMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgwMDQ4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjFjNDAzNWJlOWNlZTlkOWViODYwNGViNzBkNGY3ODYw NjIyYzcxMGViMDNiZjFlMTUwMDY1NTUyNDM5NzNlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyM7+bKLX94YQreWQjexV378La7wXYIELRx77CW30iwu8V lbsSchDGVE2YtU4wvcXsSNrvMDD3hqLmhk1G+i2n+0xvAFuOOaqc5YsFSNXxzeiy zS3JX+Un6hY3N+Y71xAyhNh9kfylB/7vN9XZCZYynnWuxFO9ndSr+RUhj63MPF7p pO8lnrlWvPiZW3xgiOjBUsPSvVkUqXaz2B+5gPZGH0UB+D5Ehnk2EbKKEgA7MAlX jwgHJpWXkKhJEP0Wyc3Rktn4oCANDphMlSwxaJV0I3QRxlOQTF+J9ZPm4Fh0gZON OuTEzM/aP0U3bA/3GwpjNiwCE9ilrK6Zz2GFXisRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2JxMpQIr6YGHaaqor/zxFzUqYBMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcxYTJhMmMwLWI4ZGItNDg0Ny1hNzU2LWI3NTE1YWE0MmIwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwVRAwDQYJKoZIhvcNAQELBQADggEBAKEor1HijOrrgtna3p/xP0t4 rrjELbhK+fdCClrVWpWili7wKX7fk0znXNHUH8Br3tWJMcNkoQoHBzOezjXhMiog SVsy4mDkoLydIzvcAVdHxTobDeqlmSIl/nJVJApr1RsDyfTyTFM7jnuS1IHFIrJD PgXpMZcJbKOZ0IyDH4y7mIXUFlX/w49mK0lOENtuHGQcJeQXABdtM0SdkvEgOzWk SCH4tEKnbzj3jeChbvrVB4HehxLx/vQYvUU8bukWSKCJdpD1dfuQgi7d3Xi5gQ4K cV1rqR4Md8/O/9F1KCFtmBHCARlx0uHHL0CL19jkB0Ut49Obp9xTKNfnvH/+Lzs= -----END CERTIFICATE-----Generated at Mon Oct 20 09:55:48 2025 by rpki-client