$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa File: 8a8b863b-298e-48a9-bced-202e80d98f01.roa (raw, json) Hash identifier: N+hLPrxxvhrUdPXZFBfS3oQXkDIxobBw/hmGqBGUOYM= Subject key identifier: 8C:44:9E:62:20:02:2D:B2:62:B2:28:86:A8:07:0B:B2:38:BB:B2:DE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5D81DFAE448BF21C11354CCB4EB590CC294CF6CB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa Signing time: Fri 26 Sep 2025 18:10:08 +0000 ROA not before: Fri 26 Sep 2025 18:10:08 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ee00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:81:df:ae:44:8b:f2:1c:11:35:4c:cb:4e:b5:90:cc:29:4c:f6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:10:08 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=c72644951d45843ea0c5627f991c708de811aaf08e6c38fd372e37c371651178, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:80:fe:73:da:df:c0:f3:6a:e1:b5:af:c6:26: c0:d9:47:55:3a:93:80:57:f4:c2:5e:89:e3:ce:48: 99:87:8d:9b:5c:d1:32:47:92:bc:78:f1:5a:81:52: 43:5b:7b:41:e5:bc:ae:3a:1e:72:ed:f2:b7:f1:f0: e3:75:3c:96:72:2d:57:34:26:0b:94:64:56:cf:c5: 45:ee:20:fd:6a:47:ce:cc:fb:eb:16:39:83:e7:10: 3d:63:18:38:3b:f7:23:01:25:fc:59:79:44:fe:09: 81:d2:ec:09:fe:ed:5f:32:28:c4:6b:c5:27:14:8f: e7:87:20:a1:56:0a:d2:5f:13:ca:58:2e:9b:5c:6b: 77:02:48:5b:a0:9f:87:d5:7b:11:e8:63:b3:a4:34: 4e:91:c1:ae:6e:0a:ab:86:51:b6:e2:a6:aa:d8:1b: 01:5a:57:ab:ea:04:a3:9b:60:4c:22:c3:43:1c:a9: 5e:be:9a:fd:ab:3e:97:3f:db:7d:47:d6:9c:bc:0b: 16:0d:2a:44:b7:2c:ee:49:08:2a:51:13:e1:79:f3: d1:53:5b:87:76:62:e0:51:3d:26:23:37:af:b0:96: 1a:17:f9:5e:3a:16:5b:d7:ea:90:a2:6c:23:ca:85: 52:47:4e:28:55:39:43:9a:46:57:a0:37:f9:40:6f: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:44:9E:62:20:02:2D:B2:62:B2:28:86:A8:07:0B:B2:38:BB:B2:DE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8a8b863b-298e-48a9-bced-202e80d98f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ee00::/40 Signature Algorithm: sha256WithRSAEncryption 12:21:94:5f:b5:f7:10:25:49:19:e5:42:b3:f2:03:b7:1c:b1: 60:34:97:93:7e:a9:ad:67:63:fc:f7:ba:ed:77:0a:ea:ab:af: 29:47:cd:7d:d2:b3:17:68:a5:82:44:2a:c1:aa:81:01:4c:1b: f7:77:ac:e8:62:68:65:bb:41:fb:05:dc:e9:61:8d:c5:38:de: 3b:2c:b0:e2:3d:35:0a:a9:c5:75:cc:ab:7b:5b:ce:9a:fa:72: b5:64:9a:73:79:fb:8f:16:ac:1f:13:b8:5f:de:d4:7b:08:71: fd:7f:a7:a8:ef:e3:4c:87:0e:a6:7e:fe:4f:5a:b7:82:da:88: 89:01:48:e4:fb:b7:06:35:84:34:11:ae:11:d3:ad:c7:4d:c5: 14:8a:c3:89:85:1b:08:02:d3:4f:2a:94:6f:5f:35:e8:3c:bb: 7f:76:ee:64:e5:87:94:29:04:ac:af:c4:cd:70:9a:4c:bb:81: e8:f9:a4:3a:9e:dd:b9:a8:a4:81:f6:db:32:bf:08:27:d6:c6: 9c:63:46:76:b0:d4:5e:a9:36:8d:ab:a2:34:87:7c:dd:94:5b: 71:ac:f6:c9:5e:87:55:6c:b7:2b:05:d8:01:b2:82:1e:30:c1: 42:58:f2:e9:86:bc:91:f5:47:87:8b:d1:76:ee:0a:aa:6d:bf: 8a:43:ce:c5 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXYHfrkSL8hwRNUzLTrWQzClM9sswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMDA4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzI2NDQ5NTFkNDU4NDNlYTBjNTYyN2Y5OTFjNzA4ZGU4 MTFhYWYwOGU2YzM4ZmQzNzJlMzdjMzcxNjUxMTc4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClgP5z2t/A82rhta/GJsDZR1U6k4BX9MJeiePOSJmHjZtc 0TJHkrx48VqBUkNbe0HlvK46HnLt8rfx8ON1PJZyLVc0JguUZFbPxUXuIP1qR87M ++sWOYPnED1jGDg79yMBJfxZeUT+CYHS7An+7V8yKMRrxScUj+eHIKFWCtJfE8pY Lptca3cCSFugn4fVexHoY7OkNE6Rwa5uCquGUbbipqrYGwFaV6vqBKObYEwiw0Mc qV6+mv2rPpc/231H1py8CxYNKkS3LO5JCCpRE+F589FTW4d2YuBRPSYjN6+wlhoX +V46FlvX6pCibCPKhVJHTihVOUOaRlegN/lAb0o1AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUjESeYiACLbJisiiGqAcLsji7st4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzhhOGI4NjNiLTI5OGUtNDhhOS1iY2VkLTIwMmU4MGQ5OGYwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD77jANBgkqhkiG9w0BAQsFAAOCAQEAEiGUX7X3ECVJGeVCs/IDtxyx YDSXk36prWdj/Pe67XcK6quvKUfNfdKzF2ilgkQqwaqBAUwb93es6GJoZbtB+wXc 6WGNxTjeOyyw4j01CqnFdcyre1vOmvpytWSac3n7jxasHxO4X97Uewhx/X+nqO/j TIcOpn7+T1q3gtqIiQFI5Pu3BjWENBGuEdOtx03FFIrDiYUbCALTTyqUb1816Dy7 f3buZOWHlCkErK/EzXCaTLuB6PmkOp7duaikgfbbMr8IJ9bGnGNGdrDUXqk2jaui NId83ZRbcaz2yV6HVWy3KwXYAbKCHjDBQljy6Ya8kfVHh4vRdu4Kqm2/ikPOxQ== -----END CERTIFICATE-----Generated at Mon Oct 20 07:33:39 2025 by rpki-client