$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa File: bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa (raw, json) Hash identifier: T+MdPcghmoDqzUtWgMiFWOpotzrElXqOxIu+DyMUlFc= Subject key identifier: 74:BC:04:55:08:D7:24:8D:25:FD:2D:20:82:42:CE:B6:25:86:13:5C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1B8E88BB85A9860574B97A05E1CBA48657586873 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa Signing time: Sat 27 Sep 2025 00:52:52 +0000 ROA not before: Sat 27 Sep 2025 00:52:52 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2600:f0f2:7000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8e:88:bb:85:a9:86:05:74:b9:7a:05:e1:cb:a4:86:57:58:68:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:52:52 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=2c9916ff40b5fa240aab809aaec6c8ab9592faf61db6b56800e8fd3e354273af, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ee:7c:23:b8:a7:0b:d7:a3:2e:13:68:a1:e3: a7:f0:2c:b9:83:ff:6f:52:e0:d7:2a:0e:09:bb:98: 0e:39:42:50:9c:1d:a9:fc:8e:3f:28:17:19:b4:f6: fd:2d:c1:2c:45:ba:22:69:bf:8e:ba:41:f4:8a:2d: 1c:64:62:2c:dc:2e:8d:d4:6c:f7:9a:dc:9b:2d:43: 44:6a:02:1f:22:ba:9b:61:b3:c6:f6:1a:f9:06:64: f8:cd:78:ae:00:05:3c:a2:71:c3:ad:5b:dc:d2:d8: ba:cd:bb:6c:33:1c:97:9a:ed:ff:a1:f6:3f:ef:4f: 34:d8:33:79:db:7d:ee:72:e8:8c:a8:ca:69:b6:fd: 12:93:95:f2:ba:a8:89:03:8c:e6:16:8d:8e:8b:87: dd:cb:96:e2:be:21:64:01:6f:fb:27:22:51:48:96: 78:35:a2:d5:60:f9:40:84:02:4b:98:66:1e:e4:81: 98:5f:8f:d1:46:4a:a8:66:75:cd:84:03:66:50:b5: 3d:3f:82:5f:23:f8:c2:ad:2d:13:cb:25:75:9e:25: 56:77:73:17:da:ec:e9:c2:1d:ae:0b:02:8b:54:2e: 8b:d1:30:70:58:07:40:0b:fd:5a:18:61:eb:9e:53: 11:73:e1:9c:0d:ca:ae:f9:08:41:93:1b:03:4f:f7: b2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BC:04:55:08:D7:24:8D:25:FD:2D:20:82:42:CE:B6:25:86:13:5C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd7d2b15-718f-43fb-b91d-c0bc7f75e8dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7000::/44 Signature Algorithm: sha256WithRSAEncryption 3b:1c:fe:cd:66:0b:13:a2:2f:50:e7:02:d9:e8:76:90:86:0b: cc:fe:84:88:23:03:c7:73:61:6f:a8:26:df:3f:30:ea:80:4a: b6:f3:6f:e5:c7:ea:04:cf:de:e5:84:c4:1f:76:06:75:ff:44: ad:89:43:dd:6c:17:bf:72:0d:2d:18:86:b5:8e:59:00:48:4e: ae:57:8e:92:e3:0f:8e:4b:c8:cb:91:db:b6:b7:26:06:df:1b: f0:01:dd:d9:ae:9b:9d:4e:f2:e4:f2:94:12:70:60:96:0e:d1: 4b:54:5d:e3:dc:8b:5b:ec:81:5f:fd:a4:95:8a:e1:2d:0e:d9: cb:71:c0:23:8e:01:66:70:0b:62:17:80:70:93:eb:6a:04:13: a1:75:bd:1c:4d:d4:d9:44:66:b2:57:11:25:5c:61:25:70:52: b6:ed:b0:f7:d9:83:58:6c:6f:7d:c4:0c:92:b6:68:23:ae:6b: 8c:06:d4:b9:4f:8b:a7:d1:04:c2:06:9a:24:38:9f:f1:9e:bb: a5:b1:d3:f4:ee:ac:9d:21:eb:85:8e:a2:1d:33:b8:b9:70:8f: 11:ee:01:f6:7b:9e:68:ca:bc:dc:5a:46:da:32:28:8e:6e:73: b2:8c:65:c6:4d:e0:b4:11:ad:94:32:9a:4d:48:54:71:2d:8e: 44:34:34:7e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUG46Iu4WphgV0uXoF4cukhldYaHMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MjUyWhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzk5MTZmZjQwYjVmYTI0MGFhYjgwOWFhZWM2YzhhYjk1 OTJmYWY2MWRiNmI1NjgwMGU4ZmQzZTM1NDI3M2FmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCT7nwjuKcL16MuE2ih46fwLLmD/29S4NcqDgm7mA45QlCc Han8jj8oFxm09v0twSxFuiJpv466QfSKLRxkYizcLo3UbPea3JstQ0RqAh8iupth s8b2GvkGZPjNeK4ABTyiccOtW9zS2LrNu2wzHJea7f+h9j/vTzTYM3nbfe5y6Iyo ymm2/RKTlfK6qIkDjOYWjY6Lh93LluK+IWQBb/snIlFIlng1otVg+UCEAkuYZh7k gZhfj9FGSqhmdc2EA2ZQtT0/gl8j+MKtLRPLJXWeJVZ3cxfa7OnCHa4LAotULovR MHBYB0AL/VoYYeueUxFz4ZwNyq75CEGTGwNP97KrAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUdLwEVQjXJI0l/S0ggkLOtiWGE1wwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JkN2QyYjE1LTcxOGYtNDNmYi1iOTFkLWMwYmM3Zjc1ZThkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDycAAwDQYJKoZIhvcNAQELBQADggEBADsc/s1mCxOiL1DnAtnodpCG C8z+hIgjA8dzYW+oJt8/MOqASrbzb+XH6gTP3uWExB92BnX/RK2JQ91sF79yDS0Y hrWOWQBITq5XjpLjD45LyMuR27a3JgbfG/AB3dmum51O8uTylBJwYJYO0UtUXePc i1vsgV/9pJWK4S0O2ctxwCOOAWZwC2IXgHCT62oEE6F1vRxN1NlEZrJXESVcYSVw UrbtsPfZg1hsb33EDJK2aCOua4wG1LlPi6fRBMIGmiQ4n/Geu6Wx0/TurJ0h64WO oh0zuLlwjxHuAfZ7nmjKvNxaRtoyKI5uc7KMZcZN4LQRrZQymk1IVHEtjkQ0NH4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:32:27 2025 by rpki-client