$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa File: a490dedf-dd95-4a09-9745-c4164e6d73ae.roa (raw, json) Hash identifier: ziCZcR7vtkRIM93cG8qpdw/YC30Zdtx5Z4O4ln8Dt94= Subject key identifier: FE:A9:7C:A5:56:A2:BD:C9:C2:8E:EE:E8:08:12:0D:FC:57:50:2B:04 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 02034D887C7B50DFD172ECD5527FC36C1F91EEDC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa Signing time: Sat 27 Sep 2025 00:52:08 +0000 ROA not before: Sat 27 Sep 2025 00:52:08 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:03:4d:88:7c:7b:50:df:d1:72:ec:d5:52:7f:c3:6c:1f:91:ee:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:52:08 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=8e7defd86d20f9a10285fc9d0dc6d0ce52a77f0447db79c2cd1111b9b7de506c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:78:a8:74:79:b2:7c:7f:36:fe:24:4c:0f:14: 9a:c3:8d:36:52:38:b2:ae:c6:2b:d5:34:62:e1:d8: f9:36:36:11:57:c5:91:2e:ae:c1:39:98:34:4b:a7: a7:cc:2c:5f:1f:24:bd:ff:6e:df:66:a3:a0:07:ee: f8:9a:fe:b6:ad:1a:e5:b0:02:21:64:7c:06:ac:70: d6:79:93:5f:54:f0:11:88:e5:48:a5:35:0c:0f:f1: de:c9:b0:c5:f9:76:e5:12:ff:82:15:5d:4d:cf:1b: 79:15:5a:68:99:88:87:8c:3a:d4:4c:b6:28:96:6f: 81:a5:c5:5a:47:12:2e:75:e8:3b:22:ca:ca:90:e2: d3:e5:02:ca:ea:fb:b4:e2:a3:07:2d:c3:39:0b:21: ad:0b:a1:73:5a:eb:d7:29:79:60:f9:27:7e:15:cb: af:5d:c6:ec:38:6b:29:42:71:0e:d5:ac:b9:e3:ac: a8:ed:87:0e:8c:8d:49:0d:81:0f:50:ca:04:b0:90: 59:71:7d:4a:14:71:33:aa:27:0c:69:d1:3b:8d:d2: 7f:fe:51:94:f6:88:f3:c1:de:d5:2e:3c:a7:3f:da: 5f:4d:dc:56:52:0e:2b:13:be:af:c7:6c:56:13:47: 75:76:68:31:8e:3e:df:5c:9a:de:f5:42:40:cc:d0: c0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A9:7C:A5:56:A2:BD:C9:C2:8E:EE:E8:08:12:0D:FC:57:50:2B:04 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a490dedf-dd95-4a09-9745-c4164e6d73ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f101::/48 Signature Algorithm: sha256WithRSAEncryption 09:ec:51:ef:ff:bb:ca:ab:20:4b:d2:ce:1a:a3:8f:8c:c0:23: 7a:f4:7a:98:2e:b1:b5:88:5e:50:84:65:9a:cb:e2:ea:26:a0: bb:6f:9a:7e:ee:77:27:d1:58:e5:8a:12:ec:7b:5b:84:83:a7: e9:d3:1b:6a:52:8f:0a:08:2a:1c:ee:25:46:31:c5:69:65:d1: 94:26:ed:0b:0e:31:7e:19:97:67:75:6f:a0:b8:01:df:14:89: 5e:5b:71:93:25:66:e4:89:92:b9:fb:49:d2:08:6c:76:5c:60: 74:85:e6:06:d6:ea:9c:06:11:c3:96:40:92:c8:e6:9a:3a:e9: 73:06:ba:ad:85:37:4d:63:38:42:44:af:8d:18:49:02:f8:a1: 30:19:be:f7:d5:5d:bb:f1:69:76:d6:7a:6c:01:dc:ef:da:80: de:fc:fb:1d:ad:40:d4:9b:1e:f3:ef:c1:21:39:49:dc:04:4d: be:e3:a8:b2:12:70:b9:20:8d:e8:1b:0a:df:de:ac:00:1b:21: c3:e6:30:90:16:71:6e:e5:6c:ce:dc:f9:e0:5e:a9:24:f8:63: 63:b0:0e:01:59:19:ec:da:4b:a3:f5:c8:3b:cd:ee:bb:f1:e1: 8c:e0:9d:dc:20:d7:70:e7:b4:2a:71:91:89:13:91:4f:a8:8b: 18:fb:71:1f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAgNNiHx7UN/RcuzVUn/DbB+R7twwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MjA4WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTdkZWZkODZkMjBmOWExMDI4NWZjOWQwZGM2ZDBjZTUy YTc3ZjA0NDdkYjc5YzJjZDExMTFiOWI3ZGU1MDZjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpeKh0ebJ8fzb+JEwPFJrDjTZSOLKuxivVNGLh2Pk2NhFX xZEursE5mDRLp6fMLF8fJL3/bt9mo6AH7via/ratGuWwAiFkfAascNZ5k19U8BGI 5UilNQwP8d7JsMX5duUS/4IVXU3PG3kVWmiZiIeMOtRMtiiWb4GlxVpHEi516Dsi ysqQ4tPlAsrq+7TiowctwzkLIa0LoXNa69cpeWD5J34Vy69dxuw4aylCcQ7VrLnj rKjthw6MjUkNgQ9QygSwkFlxfUoUcTOqJwxp0TuN0n/+UZT2iPPB3tUuPKc/2l9N 3FZSDisTvq/HbFYTR3V2aDGOPt9cmt71QkDM0MBfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU/ql8pVaivcnCju7oCBIN/FdQKwQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E0OTBkZWRmLWRkOTUtNGEwOS05NzQ1LWM0MTY0ZTZkNzNhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QEwDQYJKoZIhvcNAQELBQADggEBAAnsUe//u8qrIEvSzhqjj4zA I3r0epgusbWIXlCEZZrL4uomoLtvmn7udyfRWOWKEux7W4SDp+nTG2pSjwoIKhzu JUYxxWll0ZQm7QsOMX4Zl2d1b6C4Ad8UiV5bcZMlZuSJkrn7SdIIbHZcYHSF5gbW 6pwGEcOWQJLI5po66XMGuq2FN01jOEJEr40YSQL4oTAZvvfVXbvxaXbWemwB3O/a gN78+x2tQNSbHvPvwSE5SdwETb7jqLIScLkgjegbCt/erAAbIcPmMJAWcW7lbM7c +eBeqST4Y2OwDgFZGezaS6P1yDvN7rvx4Yzgndwg13DntCpxkYkTkU+oixj7cR8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:58:45 2025 by rpki-client