$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa File: c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa (raw, json) Hash identifier: xCq6W+z40vlnbc0aXjfufmTk/Q0VIUhGUyJrmg1AXFI= Subject key identifier: 55:3A:8A:7E:BD:FB:75:49:48:ED:96:10:BB:B4:B0:51:D9:43:2C:63 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 31B60CD014AB112E4E8780DF8EE22365796D223D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa Signing time: Sat 27 Sep 2025 00:52:18 +0000 ROA not before: Sat 27 Sep 2025 00:52:18 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b6:0c:d0:14:ab:11:2e:4e:87:80:df:8e:e2:23:65:79:6d:22:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:52:18 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=c05cc50cb9880e153659a62efc703038586fde9e4cd1f613ecba385bc2f579c5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:70:7f:78:f5:c2:5b:28:58:9b:8d:27:7f: 68:08:0a:d5:fe:be:38:8e:45:8c:50:88:72:40:28: 6f:70:f9:e5:f7:cd:9e:9d:86:85:b7:a0:b0:5a:1a: 29:7e:90:b2:b3:72:0e:4b:40:bc:9b:46:df:a0:31: 76:59:64:1b:c4:a5:9b:e9:b9:f1:c4:b0:e1:98:41: ea:fc:ce:b1:70:56:7f:44:be:0e:7e:b7:76:c5:97: 3c:2d:cc:80:be:fe:43:93:f7:a1:a8:3e:8f:b8:40: 29:08:da:82:e1:8e:00:b1:8e:61:d0:e4:3a:3f:39: 7a:18:fe:d2:eb:47:96:a2:09:9c:db:00:59:35:34: 3b:73:ea:3a:07:eb:9c:b4:8c:c1:c9:a6:2b:b8:25: 50:0a:e9:ef:a7:5f:ac:da:fa:6c:c8:9f:f4:23:f2: cf:43:32:fd:59:fe:43:df:50:5e:d4:1e:a4:af:48: c4:29:e0:31:ce:41:b8:66:e8:c6:ff:eb:bd:c8:27: 71:7f:5d:8d:80:40:6c:42:3e:f5:13:cb:ac:d8:45: 0d:83:e3:74:de:54:72:a5:b9:70:40:0a:03:ba:72: ef:cd:d7:c0:f7:6b:f8:ac:60:f8:ca:2a:ae:64:d7: c2:88:09:ff:aa:83:7e:7b:76:9f:b2:d9:97:b2:91: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3A:8A:7E:BD:FB:75:49:48:ED:96:10:BB:B4:B0:51:D9:43:2C:63 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f109::/48 Signature Algorithm: sha256WithRSAEncryption 89:ce:79:c4:5e:f4:96:14:f8:21:62:ca:8e:4e:28:53:21:df: c6:03:9f:87:25:b5:c0:5d:e2:b6:95:32:68:9b:91:4b:84:45: f5:81:04:8b:4d:8f:51:2c:63:15:01:f3:7d:ba:77:f6:34:f0: cd:15:59:5c:58:ca:fc:a8:f2:aa:db:22:74:b4:82:46:92:a3: fe:c9:05:c4:fa:d2:d8:1e:5e:9a:ab:52:de:c9:9c:12:74:a6: f0:11:39:f9:0c:e7:fc:5b:f7:77:8b:cd:d6:e9:fb:7a:a1:22: 52:9a:6a:61:cc:7c:43:a4:93:ef:b2:53:00:83:ca:2a:09:90: 7d:ff:b9:aa:f4:15:0a:9f:2f:56:d7:f9:7a:e5:dd:5a:65:8f: df:7e:28:bc:3b:7a:57:67:a3:52:80:12:f5:61:58:21:d0:0a: a7:d5:34:53:39:11:71:a7:c1:f5:98:ba:a6:5a:d7:98:6a:6e: b9:e8:38:21:ce:76:2e:e6:01:d4:8a:b9:47:56:58:f3:df:bd: d3:24:bd:85:f3:fa:ab:8c:a5:44:8d:af:4e:9e:0d:09:73:97: 83:70:6f:d1:1d:d4:b5:ee:15:03:04:19:37:45:d2:38:9a:a3: 42:64:bf:bd:d6:80:6b:4b:f3:3e:47:08:79:48:1d:ef:9d:d2: 62:76:5f:0e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMbYM0BSrES5Oh4DfjuIjZXltIj0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MjE4WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDVjYzUwY2I5ODgwZTE1MzY1OWE2MmVmYzcwMzAzODU4 NmZkZTllNGNkMWY2MTNlY2JhMzg1YmMyZjU3OWM1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCflnB/ePXCWyhYm40nf2gICtX+vjiORYxQiHJAKG9w+eX3 zZ6dhoW3oLBaGil+kLKzcg5LQLybRt+gMXZZZBvEpZvpufHEsOGYQer8zrFwVn9E vg5+t3bFlzwtzIC+/kOT96GoPo+4QCkI2oLhjgCxjmHQ5Do/OXoY/tLrR5aiCZzb AFk1NDtz6joH65y0jMHJpiu4JVAK6e+nX6za+mzIn/Qj8s9DMv1Z/kPfUF7UHqSv SMQp4DHOQbhm6Mb/673IJ3F/XY2AQGxCPvUTy6zYRQ2D43TeVHKluXBACgO6cu/N 18D3a/isYPjKKq5k18KICf+qg357dp+y2ZeykSPtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVTqKfr37dUlI7ZYQu7SwUdlDLGMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M3ZGZiNmZjLWFiNTEtNDViNy1hYTFjLTcyM2I4YzI2M2U3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QkwDQYJKoZIhvcNAQELBQADggEBAInOecRe9JYU+CFiyo5OKFMh 38YDn4cltcBd4raVMmibkUuERfWBBItNj1EsYxUB8326d/Y08M0VWVxYyvyo8qrb InS0gkaSo/7JBcT60tgeXpqrUt7JnBJ0pvAROfkM5/xb93eLzdbp+3qhIlKaamHM fEOkk++yUwCDyioJkH3/uar0FQqfL1bX+Xrl3Vplj99+KLw7eldno1KAEvVhWCHQ CqfVNFM5EXGnwfWYuqZa15hqbrnoOCHOdi7mAdSKuUdWWPPfvdMkvYXz+quMpUSN r06eDQlzl4Nwb9Ed1LXuFQMEGTdF0jiao0Jkv73WgGtL8z5HCHlIHe+d0mJ2Xw4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:42:53 2025 by rpki-client