$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9e5bf8b2-1676-4558-af40-c2c9c9e99086.roa File: 9e5bf8b2-1676-4558-af40-c2c9c9e99086.roa (raw, json) Hash identifier: J80BIdDEDwJ34lRqctP3CaQ2mmVINXSd8adfoDUmjOE= Subject key identifier: AF:65:E6:B8:82:26:79:65:A1:F0:B4:E5:6A:2F:E7:0D:34:00:90:85 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 4081E290E3B109DA233EC62FB35ADA5B03D58DD3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9e5bf8b2-1676-4558-af40-c2c9c9e99086.roa Signing time: Sat 27 Sep 2025 00:52:22 +0000 ROA not before: Sat 27 Sep 2025 00:52:22 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:81:e2:90:e3:b1:09:da:23:3e:c6:2f:b3:5a:da:5b:03:d5:8d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:52:22 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=eed53f0fdb725ac1e71c10b7cc64e65810d318865a6a66c623b3a53eccad3aae, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:49:13:1c:8c:0a:a1:19:70:ac:b1:87:7c: 26:4d:8e:3b:c9:86:e7:09:b2:81:14:e8:0d:2b:bd: 9c:f2:63:b6:17:97:99:1b:f0:54:f4:fa:a9:f6:24: 07:68:39:ce:ef:aa:28:e9:24:aa:31:b2:ff:1d:e3: b5:9d:fb:82:60:82:55:d0:cb:e0:ae:e8:bd:5a:2e: 78:3d:57:27:2a:bd:2b:5b:e8:9a:c9:c6:fe:28:92: 03:34:ef:1e:96:00:37:ef:df:5f:cd:f8:ff:ad:e6: 56:85:78:42:32:c0:ce:cd:5e:ed:ed:d8:4a:f8:83: fd:d0:5b:d2:ba:62:d1:ab:6f:fa:d2:f4:80:30:9a: 94:96:fb:6e:00:4d:16:85:5c:97:88:75:34:db:38: 0d:56:ff:08:f1:8f:f7:21:ac:35:39:d3:19:a0:94: a9:74:af:55:3c:52:47:c7:60:92:58:c1:39:c9:0a: b8:c5:60:32:4f:56:20:c3:ca:96:ee:c6:ff:84:7d: 24:0e:20:18:1d:96:59:22:bd:a8:e4:e0:50:37:bf: 57:3f:9e:b8:eb:ae:5f:64:09:df:79:1c:39:1d:2e: 9b:3c:53:fd:18:97:a8:8f:69:8b:b5:c5:e1:6c:af: 58:a6:6e:3a:c3:a4:8a:c1:4f:e2:87:b8:5d:42:73: 62:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:65:E6:B8:82:26:79:65:A1:F0:B4:E5:6A:2F:E7:0D:34:00:90:85 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9e5bf8b2-1676-4558-af40-c2c9c9e99086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f111::/48 Signature Algorithm: sha256WithRSAEncryption a6:64:69:82:16:aa:7c:e5:5a:3d:06:99:b7:58:8d:1a:2c:1d: ff:39:73:4c:29:c1:4f:2c:1d:67:6b:a1:b4:57:e3:ff:6f:15: 10:50:06:35:19:91:f4:73:86:a4:c4:1d:cc:af:03:81:bd:9f: b6:f3:c0:c7:28:a0:99:b6:03:cd:7a:3c:c3:98:ed:40:10:a7: 67:30:f5:10:b9:ef:0b:91:aa:59:e9:50:63:4a:e5:bd:d9:66: f5:6d:e5:00:ae:63:dd:c5:89:59:0c:d7:da:92:e1:f2:d0:41: 8f:c0:6f:03:07:c1:bf:5e:c4:dd:5a:ff:a5:71:1a:93:c6:89: c5:16:17:33:0e:c0:43:bf:9a:de:27:9b:6d:ed:cd:e7:67:25: 23:22:2e:97:44:db:58:b0:f1:17:07:6b:33:f5:f0:b1:69:d8: 41:40:7d:6e:94:fb:06:dc:ed:67:01:9e:b0:d1:d0:ac:2a:2e: ee:0f:5e:49:ee:30:59:bb:28:cf:c5:3b:d6:d3:fd:f1:d3:c9: 6f:94:c7:c7:14:74:b6:50:57:75:e2:40:d7:29:48:86:2c:39: 2a:6c:7a:a9:41:a5:9f:67:6c:41:00:a7:ef:90:a8:25:88:d8: 57:62:8d:93:11:d4:78:f1:c6:98:96:34:57:06:bf:d2:79:f1: a1:ac:9b:26 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQIHikOOxCdojPsYvs1raWwPVjdMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MjIyWhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWQ1M2YwZmRiNzI1YWMxZTcxYzEwYjdjYzY0ZTY1ODEw ZDMxODg2NWE2YTY2YzYyM2IzYTUzZWNjYWQzYWFlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5wUkTHIwKoRlwrLGHfCZNjjvJhucJsoEU6A0rvZzyY7YX l5kb8FT0+qn2JAdoOc7vqijpJKoxsv8d47Wd+4JgglXQy+Cu6L1aLng9VycqvStb 6JrJxv4okgM07x6WADfv31/N+P+t5laFeEIywM7NXu3t2Er4g/3QW9K6YtGrb/rS 9IAwmpSW+24ATRaFXJeIdTTbOA1W/wjxj/chrDU50xmglKl0r1U8UkfHYJJYwTnJ CrjFYDJPViDDypbuxv+EfSQOIBgdllkivajk4FA3v1c/nrjrrl9kCd95HDkdLps8 U/0Yl6iPaYu1xeFsr1imbjrDpIrBT+KHuF1Cc2JPAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUr2XmuIImeWWh8LTlai/nDTQAkIUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzllNWJmOGIyLTE2NzYtNDU1OC1hZjQwLWMyYzljOWU5OTA4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78REwDQYJKoZIhvcNAQELBQADggEBAKZkaYIWqnzlWj0GmbdYjRos Hf85c0wpwU8sHWdrobRX4/9vFRBQBjUZkfRzhqTEHcyvA4G9n7bzwMcooJm2A816 PMOY7UAQp2cw9RC57wuRqlnpUGNK5b3ZZvVt5QCuY93FiVkM19qS4fLQQY/AbwMH wb9exN1a/6VxGpPGicUWFzMOwEO/mt4nm23tzednJSMiLpdE21iw8RcHazP18LFp 2EFAfW6U+wbc7WcBnrDR0KwqLu4PXknuMFm7KM/FO9bT/fHTyW+Ux8cUdLZQV3Xi QNcpSIYsOSpseqlBpZ9nbEEAp++QqCWI2FdijZMR1HjxxpiWNFcGv9J58aGsmyY= -----END CERTIFICATE-----Generated at Mon Oct 20 07:18:41 2025 by rpki-client