$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/91b85db6-7428-422a-85f4-a3d6732ec01e.roa File: 91b85db6-7428-422a-85f4-a3d6732ec01e.roa (raw, json) Hash identifier: fmuiwgHaq+J4SJwoyzaU+tlS7yXhorho5TAjBIMlsjo= Subject key identifier: 10:6B:10:D9:A5:4A:87:E9:83:C0:C4:AD:B9:29:9D:4B:9C:DE:80:1A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5A636A6B15E4B7D48B43867CB7CA63AD02FD0B95 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/91b85db6-7428-422a-85f4-a3d6732ec01e.roa Signing time: Sat 27 Sep 2025 00:53:24 +0000 ROA not before: Sat 27 Sep 2025 00:53:24 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f10e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:63:6a:6b:15:e4:b7:d4:8b:43:86:7c:b7:ca:63:ad:02:fd:0b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:53:24 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=4058aea211a8ea826cb92f8ac98d4a1adb0fd5561842fab3cf13b526a8af1217, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:7d:9c:83:5f:9a:08:ab:dc:ac:2e:30:82: 0d:f5:40:cd:10:62:6d:cf:d7:7e:2c:30:f4:17:2a: a4:90:a4:74:d1:9d:34:d2:14:23:bd:8a:96:df:97: 17:89:57:57:a8:97:66:b1:f5:2b:a2:eb:33:44:01: 9a:a9:c5:48:58:c2:bb:5d:8a:72:86:5b:09:c1:d0: 33:e7:7b:90:28:c7:2d:f0:3d:27:bb:d3:ec:c6:6b: 8c:1a:f6:5a:cd:5d:fd:86:b8:a5:ed:03:a6:bc:8d: 3c:e0:d9:8b:d8:e5:3d:f2:71:e7:75:fd:22:30:9f: d2:25:71:bf:f1:b9:1e:a0:50:c1:42:df:52:41:80: bc:ec:93:ed:d3:cc:be:88:65:5b:45:d9:5c:15:a4: 93:36:5b:a5:99:52:75:8a:ac:2d:93:91:20:16:23: e1:ac:18:ca:de:94:5f:84:74:90:12:1e:cb:79:eb: a6:e1:a3:4f:fd:8f:1b:da:c2:b8:f5:90:31:8f:19: 29:0e:82:a8:76:06:39:d3:32:e0:b5:6e:51:31:8f: fc:7f:8e:50:e9:ab:9f:f6:f0:dd:f3:9b:9f:a5:5d: 31:86:52:a0:0f:c4:22:18:68:4d:4e:39:19:37:de: e3:26:47:17:ae:ea:cb:af:ae:ea:9f:74:7d:47:82: 8d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6B:10:D9:A5:4A:87:E9:83:C0:C4:AD:B9:29:9D:4B:9C:DE:80:1A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/91b85db6-7428-422a-85f4-a3d6732ec01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10e::/48 Signature Algorithm: sha256WithRSAEncryption 14:1c:36:37:93:88:d5:a5:37:1d:bc:8e:85:a1:8b:e4:be:53: 38:3a:2f:b8:8f:02:10:40:1d:3c:cf:80:7f:1c:e4:bf:6c:ca: af:7f:55:e4:a7:af:43:46:b9:e6:f4:40:f8:1d:a4:40:82:d6: 40:f3:a4:d1:dc:27:14:5e:11:d6:dc:55:19:56:b3:d5:06:99: fe:a8:fd:a2:63:0a:c8:bd:89:a3:3d:38:44:e4:cc:ad:fc:5b: 3f:f4:90:b9:b7:b1:87:2a:d7:e7:c2:52:36:78:3d:3e:4e:1d: 58:ab:37:5a:d2:b5:d4:87:d1:d0:a6:9b:52:60:28:83:f4:86: bb:28:80:08:1b:aa:ae:fb:39:b1:13:58:ee:4e:44:c3:70:49: 4a:cc:5e:7f:a2:23:84:a9:6d:3a:96:79:d9:80:74:c2:0f:5c: 73:8e:1f:53:c1:c1:a2:15:f8:3d:5f:36:35:09:4b:8b:82:7d: 9c:cd:39:14:01:c2:e4:d3:f8:33:41:68:1f:5a:01:cb:9a:f9: 6c:eb:86:b3:60:4b:23:3b:82:60:80:39:1b:85:dc:3d:71:24: b8:a1:e0:74:bb:b7:30:b3:f8:b7:a4:20:2b:2f:ac:e5:a5:b1: 18:49:9d:2d:81:2b:24:9a:d9:ed:ff:c2:7d:a8:3e:9d:a8:62: 87:31:2b:ba -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWmNqaxXkt9SLQ4Z8t8pjrQL9C5UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MzI0WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDU4YWVhMjExYThlYTgyNmNiOTJmOGFjOThkNGExYWRi MGZkNTU2MTg0MmZhYjNjZjEzYjUyNmE4YWYxMjE3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCb3X2cg1+aCKvcrC4wgg31QM0QYm3P134sMPQXKqSQpHTR nTTSFCO9ipbflxeJV1eol2ax9Sui6zNEAZqpxUhYwrtdinKGWwnB0DPne5Aoxy3w PSe70+zGa4wa9lrNXf2GuKXtA6a8jTzg2YvY5T3yced1/SIwn9Ilcb/xuR6gUMFC 31JBgLzsk+3TzL6IZVtF2VwVpJM2W6WZUnWKrC2TkSAWI+GsGMrelF+EdJASHst5 66bho0/9jxvawrj1kDGPGSkOgqh2BjnTMuC1blExj/x/jlDpq5/28N3zm5+lXTGG UqAPxCIYaE1OORk33uMmRxeu6suvruqfdH1Hgo2ZAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEGsQ2aVKh+mDwMStuSmdS5zegBowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzkxYjg1ZGI2LTc0MjgtNDIyYS04NWY0LWEzZDY3MzJlYzAxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78Q4wDQYJKoZIhvcNAQELBQADggEBABQcNjeTiNWlNx28joWhi+S+ Uzg6L7iPAhBAHTzPgH8c5L9syq9/VeSnr0NGueb0QPgdpECC1kDzpNHcJxReEdbc VRlWs9UGmf6o/aJjCsi9iaM9OETkzK38Wz/0kLm3sYcq1+fCUjZ4PT5OHVirN1rS tdSH0dCmm1JgKIP0hrsogAgbqq77ObETWO5ORMNwSUrMXn+iI4SpbTqWedmAdMIP XHOOH1PBwaIV+D1fNjUJS4uCfZzNORQBwuTT+DNBaB9aAcua+WzrhrNgSyM7gmCA ORuF3D1xJLih4HS7tzCz+LekICsvrOWlsRhJnS2BKySa2e3/wn2oPp2oYocxK7o= -----END CERTIFICATE-----Generated at Mon Oct 20 09:58:23 2025 by rpki-client