$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa File: bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa (raw, json) Hash identifier: QkSGeXnodyVTCTO5u7ksP0bIb43zcs7EN5SWDBsZ3BM= Subject key identifier: 16:C4:A8:A7:09:F6:31:DE:56:5A:91:C6:60:79:29:FF:7C:19:97:6D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2598F8C5DE012BD82D7B2CACFEBD835C5DE5A0BE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa Signing time: Fri 26 Sep 2025 18:10:13 +0000 ROA not before: Fri 26 Sep 2025 18:10:13 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e400::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:98:f8:c5:de:01:2b:d8:2d:7b:2c:ac:fe:bd:83:5c:5d:e5:a0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:10:13 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=a580118dda7204f3a2262ca7411692feac3233bab5157247cd9a5ab637f4b912, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4e:e3:f9:96:6f:d0:15:ac:fc:6c:bc:1c:f6: 37:fd:79:c6:e5:2f:df:a8:9f:a9:82:d5:71:ad:7d: 6b:ae:83:24:72:f5:63:0e:5d:8c:22:c8:31:14:a2: b9:49:ca:8a:18:b9:aa:54:15:23:12:3a:ac:62:99: bf:d9:bf:21:c1:a1:eb:48:f5:ed:31:d0:df:5b:03: c1:ab:e4:28:63:a9:b7:39:e0:06:8f:40:b1:ce:9c: d3:1e:e3:2d:93:f2:4a:31:0b:48:bf:3c:b9:d1:01: 4a:f9:0f:9a:9f:cf:cb:f1:35:5b:c9:c1:59:0b:cf: 7c:c9:65:da:fc:43:72:10:35:a1:82:50:8a:8d:86: cb:96:a8:56:5c:8a:f1:08:97:03:0f:0b:08:7c:24: db:99:02:95:fa:ea:a2:5e:6a:ca:d2:1b:4f:8e:e6: 67:a7:ad:69:e2:82:29:e3:58:68:1e:6e:74:06:1a: b5:61:ff:54:cf:1b:37:bb:20:83:16:44:a7:5f:39: b4:82:3c:4d:2e:9d:7f:6a:ca:a7:bb:15:dc:70:be: 76:35:b0:0f:da:52:cc:a7:37:b3:b2:b2:e1:40:89: 03:d0:20:bf:3d:2d:28:ea:69:67:62:ed:5b:63:23: a5:51:92:85:3c:11:d8:86:99:aa:98:c8:11:6f:37: a8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C4:A8:A7:09:F6:31:DE:56:5A:91:C6:60:79:29:FF:7C:19:97:6D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bf27fdb7-84bf-40d2-906a-7b4c1ff405b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e400::/42 Signature Algorithm: sha256WithRSAEncryption 78:44:d1:84:0e:43:4c:36:52:f5:1e:0b:e3:7b:70:de:05:4e: 66:3e:1d:ea:95:78:60:c6:d1:3b:f4:e9:e1:1d:ab:a8:2c:54: 57:0c:e8:ba:3f:60:87:f3:b3:69:19:c7:e2:a3:c1:51:de:17: 25:38:ca:a7:da:e2:ff:db:5c:95:26:27:ce:41:e4:1b:46:88: 60:83:7a:57:36:92:51:d4:40:28:d1:32:37:9c:b9:7e:bb:d8: 4e:9c:0f:fa:70:05:ca:db:f2:8a:c8:b3:ca:7a:ed:61:53:c5: e9:34:02:2b:b5:6b:74:26:0a:41:e5:66:2b:67:23:71:38:f9: 70:58:fb:88:62:c9:fb:e0:5b:52:79:3e:ef:01:b5:ec:34:db: 9c:e2:6d:8b:2c:31:36:73:d3:b0:70:4f:59:e6:e3:ea:a1:78: cf:76:26:42:c3:69:2a:98:95:1d:d7:f3:26:fc:a2:d1:bb:8c: d3:11:63:2f:bf:3d:dc:78:f9:91:f9:eb:34:5c:88:a6:46:b7: 8d:13:ed:fd:5e:e0:12:87:a1:36:56:c8:19:06:fe:f2:16:6e: dc:fb:d8:01:7f:65:1e:46:87:41:71:ef:d2:1d:cc:06:cc:2e: d6:57:17:a8:c3:db:d7:3e:61:9c:c1:b7:ce:8b:94:7f:35:db: f7:30:3a:33 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUJZj4xd4BK9gteyys/r2DXF3loL4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMDEzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTgwMTE4ZGRhNzIwNGYzYTIyNjJjYTc0MTE2OTJmZWFj MzIzM2JhYjUxNTcyNDdjZDlhNWFiNjM3ZjRiOTEyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSTuP5lm/QFaz8bLwc9jf9ecblL9+on6mC1XGtfWuugyRy 9WMOXYwiyDEUorlJyooYuapUFSMSOqximb/ZvyHBoetI9e0x0N9bA8Gr5Chjqbc5 4AaPQLHOnNMe4y2T8koxC0i/PLnRAUr5D5qfz8vxNVvJwVkLz3zJZdr8Q3IQNaGC UIqNhsuWqFZcivEIlwMPCwh8JNuZApX66qJeasrSG0+O5menrWniginjWGgebnQG GrVh/1TPGze7IIMWRKdfObSCPE0unX9qyqe7FdxwvnY1sA/aUsynN7OysuFAiQPQ IL89LSjqaWdi7VtjI6VRkoU8EdiGmaqYyBFvN6jlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFsSopwn2Md5WWpHGYHkp/3wZl20wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2JmMjdmZGI3LTg0YmYtNDBkMi05MDZhLTdiNGMxZmY0MDViMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75AAwDQYJKoZIhvcNAQELBQADggEBAHhE0YQOQ0w2UvUeC+N7cN4F TmY+HeqVeGDG0Tv06eEdq6gsVFcM6Lo/YIfzs2kZx+KjwVHeFyU4yqfa4v/bXJUm J85B5BtGiGCDelc2klHUQCjRMjecuX672E6cD/pwBcrb8orIs8p67WFTxek0Aiu1 a3QmCkHlZitnI3E4+XBY+4hiyfvgW1J5Pu8Btew025zibYssMTZz07BwT1nm4+qh eM92JkLDaSqYlR3X8yb8otG7jNMRYy+/Pdx4+ZH56zRciKZGt40T7f1e4BKHoTZW yBkG/vIWbtz72AF/ZR5Gh0Fx79IdzAbMLtZXF6jD29c+YZzBt86LlH812/cwOjM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:41:32 2025 by rpki-client