$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a48ca006-b4f2-49da-b519-80bf4857d7e9.roa File: a48ca006-b4f2-49da-b519-80bf4857d7e9.roa (raw, json) Hash identifier: xDgx96PriJ+61rand00IV9xiZ28DZ6QxQktXPqeKeZY= Subject key identifier: 39:CD:EC:76:A0:82:1B:15:E8:C6:CD:85:9E:D8:3E:2C:3B:5C:3B:18 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5A6AAC6838DEBC1C91E645F9367CD6A6F6351981 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a48ca006-b4f2-49da-b519-80bf4857d7e9.roa Signing time: Tue 30 Sep 2025 00:45:56 +0000 ROA not before: Tue 30 Sep 2025 00:45:56 +0000 ROA not after: Tue 04 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f2:7140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6a:ac:68:38:de:bc:1c:91:e6:45:f9:36:7c:d6:a6:f6:35:19:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 30 00:45:56 2025 GMT Not After : Nov 4 23:59:59 2025 GMT Subject: serialNumber=9294551569bf0fc21256d23b8ad5f8be04768b8fe8e6c3b35fb54870b440601b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:3e:aa:e5:c4:ac:84:2b:fd:a8:f6:b4:22: 19:8e:3f:73:b2:2b:84:d8:81:f2:79:3d:cd:6c:72: f0:fa:2f:6c:a8:ca:bd:02:ca:2a:28:4f:3a:e7:cd: e3:cc:7d:cd:db:02:62:fc:7a:82:b6:fe:98:87:e3: d1:58:a7:19:58:f1:2a:db:d5:f0:6e:fd:b0:e3:da: d6:d1:f6:87:33:b4:07:30:63:f9:0c:e0:06:9e:92: 00:73:6a:fd:08:07:0d:c3:b4:80:2e:2a:d2:62:72: d5:c0:d8:0e:3b:cd:1c:c6:11:22:10:97:08:db:8c: 14:a7:ba:3a:3c:3c:43:c0:bb:3f:b0:73:5b:6c:92: 74:fd:b6:62:c4:ea:a2:ad:a6:b5:0f:6d:7e:b4:d6: 0c:24:ee:67:b6:45:b3:9f:6c:9b:13:3a:1f:fd:35: 66:7b:4c:98:4f:74:14:f5:c9:9f:c5:b0:01:83:97: f5:d6:25:ad:61:56:3c:80:bc:0d:4e:e4:1c:8d:f3: d4:e6:89:10:53:17:e1:9d:2c:86:bb:00:e3:b9:6d: 8f:f0:5a:13:d8:51:ef:31:2a:34:2e:dd:93:6d:47: 32:16:30:72:8c:af:d0:c5:f8:0a:86:1e:0f:e0:72: 34:47:90:d0:c9:0d:94:5e:a8:5e:9e:56:14:24:85: c7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CD:EC:76:A0:82:1B:15:E8:C6:CD:85:9E:D8:3E:2C:3B:5C:3B:18 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a48ca006-b4f2-49da-b519-80bf4857d7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7140::/48 Signature Algorithm: sha256WithRSAEncryption a4:31:82:1e:61:95:e9:4a:14:de:fd:1c:04:9d:7a:c3:5b:ab: b5:7c:7e:31:14:d4:c9:8f:5b:d2:4b:59:eb:52:fe:bf:3a:31: a0:fd:8b:5a:95:da:7d:22:2a:a2:1b:bc:6c:17:d9:6e:1d:e9: e8:43:5f:75:ce:52:b7:bc:e0:c4:43:cd:a0:74:e4:09:19:25: 4c:fd:cb:a6:27:a2:a9:48:1f:20:d5:e9:c6:67:f2:f3:94:84: 2a:55:4c:a4:5f:f2:2e:64:b1:6d:25:63:74:b8:5d:26:25:2e: 6b:12:a3:27:17:94:13:6e:a8:71:3d:d0:de:67:cb:f6:fb:8c: 8f:de:32:31:4b:fb:7f:a1:ca:c7:50:10:c5:fa:31:08:5e:92: 4e:9e:a9:a5:38:e7:24:63:e9:36:d5:4e:a4:c0:bb:24:d3:f4: cc:10:e6:cd:0e:1c:d3:dd:19:6a:d6:50:ef:73:b9:ac:2b:98: fc:43:3c:aa:ae:48:21:c7:57:34:5f:24:37:b7:59:45:3b:00: 5c:c3:6a:90:b0:aa:fe:cd:5e:2e:24:7e:ca:4d:f7:50:f9:be: a3:db:1d:cc:21:fb:c0:d1:5e:9d:93:c4:ab:54:0b:bc:59:b9: 7b:7b:43:73:06:c3:e0:90:93:93:d9:e2:b0:f4:c5:97:5e:29: f0:a9:79:54 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWmqsaDjevByR5kX5NnzWpvY1GYEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTMwMDA0NTU2WhcNMjUxMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Mjk0NTUxNTY5YmYwZmMyMTI1NmQyM2I4YWQ1ZjhiZTA0 NzY4YjhmZThlNmMzYjM1ZmI1NDg3MGI0NDA2MDFiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbPT6q5cSshCv9qPa0IhmOP3OyK4TYgfJ5Pc1scvD6L2yo yr0CyiooTzrnzePMfc3bAmL8eoK2/piH49FYpxlY8Srb1fBu/bDj2tbR9ocztAcw Y/kM4AaekgBzav0IBw3DtIAuKtJictXA2A47zRzGESIQlwjbjBSnujo8PEPAuz+w c1tsknT9tmLE6qKtprUPbX601gwk7me2RbOfbJsTOh/9NWZ7TJhPdBT1yZ/FsAGD l/XWJa1hVjyAvA1O5ByN89TmiRBTF+GdLIa7AOO5bY/wWhPYUe8xKjQu3ZNtRzIW MHKMr9DF+AqGHg/gcjRHkNDJDZReqF6eVhQkhce7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOc3sdqCCGxXoxs2Fntg+LDtcOxgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E0OGNhMDA2LWI0ZjItNDlkYS1iNTE5LTgwYmY0ODU3ZDdlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycUAwDQYJKoZIhvcNAQELBQADggEBAKQxgh5hlelKFN79HASdesNb q7V8fjEU1MmPW9JLWetS/r86MaD9i1qV2n0iKqIbvGwX2W4d6ehDX3XOUre84MRD zaB05AkZJUz9y6YnoqlIHyDV6cZn8vOUhCpVTKRf8i5ksW0lY3S4XSYlLmsSoycX lBNuqHE90N5ny/b7jI/eMjFL+3+hysdQEMX6MQhekk6eqaU45yRj6TbVTqTAuyTT 9MwQ5s0OHNPdGWrWUO9zuawrmPxDPKquSCHHVzRfJDe3WUU7AFzDapCwqv7NXi4k fspN91D5vqPbHcwh+8DRXp2TxKtUC7xZuXt7Q3MGw+CQk5PZ4rD0xZdeKfCpeVQ= -----END CERTIFICATE-----Generated at Mon Oct 20 04:40:46 2025 by rpki-client