$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74ecd40c-8365-49b4-a27b-066578cec1cc.roa File: 74ecd40c-8365-49b4-a27b-066578cec1cc.roa (raw, json) Hash identifier: TgEsURlUeqJReg34Rf/aeRTK5m6EE3flmCYWCkbQgWM= Subject key identifier: 5E:D8:7B:14:04:38:3C:CA:84:24:55:AC:D6:26:92:0D:7A:7E:05:B6 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4ECA216C6E4F330A2889855ADE55B5686E7F5E69 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74ecd40c-8365-49b4-a27b-066578cec1cc.roa Signing time: Sat 27 Sep 2025 00:52:36 +0000 ROA not before: Sat 27 Sep 2025 00:52:36 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f10c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ca:21:6c:6e:4f:33:0a:28:89:85:5a:de:55:b5:68:6e:7f:5e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:52:36 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=b1fcbc0ea7a9620b75fb924d2b85482fc9584fd1501e12c7b8089c0e235f4b2a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:a2:2e:ac:1c:a7:c1:1a:4f:35:6c:31:62: 63:ce:5c:b4:aa:19:46:a2:95:d1:2b:a6:44:66:2a: 14:d5:60:b5:d3:52:b4:ae:88:5a:56:fc:bc:17:36: ff:04:3b:8d:82:ba:ec:8d:68:ac:85:81:89:c5:0d: 00:c2:1f:7e:b4:f8:93:5c:6a:9a:c4:d4:96:34:0a: ab:56:38:fa:9d:cb:83:1c:b4:24:f3:a3:8e:63:ff: 32:e1:bc:8e:0c:3e:a5:12:aa:7e:61:e1:26:d2:d5: c9:d7:42:38:e5:06:87:c0:14:59:af:6d:c7:f7:8a: 0a:27:53:8c:5a:31:27:47:16:ca:31:2d:06:7d:4a: 98:0a:97:6d:83:9c:0a:7b:39:8e:f1:a2:64:7a:7f: d5:c7:aa:da:63:3e:8d:48:de:8b:47:4f:73:d0:9b: ff:69:48:0a:b4:36:90:b3:5e:05:5b:87:ee:3e:59: 5f:bd:c8:4a:2d:d6:3f:ef:93:38:ea:8b:71:ae:51: 6d:8e:80:46:6f:6b:41:2b:5e:df:db:13:f7:f7:c7: bd:8c:75:9c:92:21:f0:46:a2:67:fc:1e:fd:c5:c0: 8f:bd:14:06:71:1a:ca:1a:7a:d3:21:2f:e7:27:f7: a1:64:fd:50:0b:25:46:e1:ba:16:09:5a:a3:68:ce: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D8:7B:14:04:38:3C:CA:84:24:55:AC:D6:26:92:0D:7A:7E:05:B6 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74ecd40c-8365-49b4-a27b-066578cec1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10c::/48 Signature Algorithm: sha256WithRSAEncryption 60:27:08:5c:f2:96:c0:9a:80:4e:d3:f0:14:43:ae:08:58:ce: 88:f9:bc:bc:6c:dc:24:f7:22:77:96:c8:5e:90:4f:9f:b9:4e: d6:2f:57:60:8f:ac:1e:3b:73:fa:d9:3c:ab:31:09:b2:32:2a: d3:0b:67:e1:69:72:29:74:94:b6:65:1c:36:42:c7:8f:d6:ea: 21:6f:b6:76:20:f6:e3:04:25:97:8f:ba:16:51:ed:bd:16:3c: b4:ec:af:e3:6a:71:db:59:5f:c5:40:8e:b8:41:c0:71:8f:81: cb:28:6d:c4:ab:45:46:d3:e5:0d:61:2b:92:1c:af:69:27:02: 4a:1b:79:7b:83:1e:44:52:78:34:a5:48:35:d3:c7:d4:0a:c9: b8:11:87:17:9e:6e:15:6b:2f:51:18:8b:1e:65:6b:85:93:e1: 9a:14:af:4d:f6:90:d2:64:29:e4:f1:4b:b2:66:9f:6d:ab:91: f3:73:bd:6b:b1:f7:69:67:a8:48:76:89:d2:d0:7b:ad:ed:f3: 29:f6:05:b7:6a:0c:6c:e6:32:9a:8d:da:a4:e9:69:1d:4a:fe: 2a:62:dc:1f:da:e2:ac:13:80:08:d7:bb:2d:56:88:69:36:a4: 24:76:a1:63:89:07:16:17:0a:2b:1a:66:8e:27:09:29:be:35: 65:91:56:b4 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUTsohbG5PMwooiYVa3lW1aG5/XmkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MjM2WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWZjYmMwZWE3YTk2MjBiNzVmYjkyNGQyYjg1NDgyZmM5 NTg0ZmQxNTAxZTEyYzdiODA4OWMwZTIzNWY0YjJhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjaKIurBynwRpPNWwxYmPOXLSqGUaildErpkRmKhTVYLXT UrSuiFpW/LwXNv8EO42CuuyNaKyFgYnFDQDCH360+JNcaprE1JY0CqtWOPqdy4Mc tCTzo45j/zLhvI4MPqUSqn5h4SbS1cnXQjjlBofAFFmvbcf3igonU4xaMSdHFsox LQZ9SpgKl22DnAp7OY7xomR6f9XHqtpjPo1I3otHT3PQm/9pSAq0NpCzXgVbh+4+ WV+9yEot1j/vkzjqi3GuUW2OgEZva0ErXt/bE/f3x72MdZySIfBGomf8Hv3FwI+9 FAZxGsoaetMhL+cn96Fk/VALJUbhuhYJWqNozrxZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXth7FAQ4PMqEJFWs1iaSDXp+BbYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzc0ZWNkNDBjLTgzNjUtNDliNC1hMjdiLTA2NjU3OGNlYzFjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QwwDQYJKoZIhvcNAQELBQADggEBAGAnCFzylsCagE7T8BRDrghY zoj5vLxs3CT3IneWyF6QT5+5TtYvV2CPrB47c/rZPKsxCbIyKtMLZ+Fpcil0lLZl HDZCx4/W6iFvtnYg9uMEJZePuhZR7b0WPLTsr+NqcdtZX8VAjrhBwHGPgcsobcSr RUbT5Q1hK5Icr2knAkobeXuDHkRSeDSlSDXTx9QKybgRhxeebhVrL1EYix5la4WT 4ZoUr032kNJkKeTxS7Jmn22rkfNzvWux92lnqEh2idLQe63t8yn2BbdqDGzmMpqN 2qTpaR1K/ipi3B/a4qwTgAjXuy1WiGk2pCR2oWOJBxYXCisaZo4nCSm+NWWRVrQ= -----END CERTIFICATE-----Generated at Sun Oct 19 22:55:50 2025 by rpki-client