$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d00edb39-49a5-44cb-9037-ad814c177b6a.roa File: d00edb39-49a5-44cb-9037-ad814c177b6a.roa (raw, json) Hash identifier: cc/uHpvNNUxjXGehpWEzNEiX0O/5eMSMuACOpAa/N1Q= Subject key identifier: DC:CD:F4:DC:29:43:15:4B:67:66:AB:2C:7F:E8:8D:28:17:40:49:25 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 41F2DF35811C41652EDAC544867A345C4F807CDF Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d00edb39-49a5-44cb-9037-ad814c177b6a.roa Signing time: Sat 27 Sep 2025 00:53:21 +0000 ROA not before: Sat 27 Sep 2025 00:53:21 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f10e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f2:df:35:81:1c:41:65:2e:da:c5:44:86:7a:34:5c:4f:80:7c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:53:21 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=c6cfe9fb21f463f28acbc691a8d01799b867da26c594b53ff7737634eac55e46, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:af:77:36:a6:43:71:92:6b:62:92:c3:d9: bc:e7:a7:0a:80:5f:8f:6c:b1:cd:d2:5f:eb:1a:09: 3f:cf:a8:01:e4:37:a1:16:b5:1e:55:f8:5f:22:48: fd:bd:2c:0f:b4:f9:17:f0:6e:f1:37:95:e3:0e:17: 24:a7:6a:12:f5:e4:ac:b6:d6:be:c5:d0:e7:31:39: 47:29:22:10:30:7a:af:b9:f5:d7:9b:d1:61:2f:18: 17:67:31:f9:8e:bb:da:ba:5a:b1:b5:ba:e7:1a:64: 14:b8:a3:1d:36:07:84:06:3b:70:1d:8d:4a:c6:75: 4e:de:6f:9e:48:b6:20:f5:ef:13:b9:32:32:d1:58: 65:e3:15:51:4a:82:12:6c:a6:2d:c0:cf:a8:dd:00: 16:50:2b:c8:9c:ee:d8:c6:d1:97:6a:51:5b:5a:57: fc:80:3c:90:b3:e3:58:ce:ab:8e:14:33:af:40:c3: fc:59:6e:f2:f8:4a:1d:90:bb:f0:3f:04:2a:08:9f: b7:ef:f4:50:33:27:17:1e:e8:5b:66:f9:aa:a1:d1: e8:ad:ba:79:3b:cc:a1:1b:8c:78:39:05:7d:9a:f2: 84:4a:f2:32:f0:54:74:30:0f:d2:3a:15:09:8b:57: 61:e4:77:cc:94:e1:1e:db:ed:0e:6a:9d:70:cf:41: 8a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CD:F4:DC:29:43:15:4B:67:66:AB:2C:7F:E8:8D:28:17:40:49:25 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d00edb39-49a5-44cb-9037-ad814c177b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10e::/48 Signature Algorithm: sha256WithRSAEncryption 15:76:92:a1:7a:52:69:aa:02:13:2b:96:12:71:fa:6d:ad:3c: 63:27:37:36:6c:2b:59:ae:43:47:ee:1b:ae:e7:bf:ae:29:dd: 8a:ec:c1:da:f4:b2:e4:48:45:ee:2a:f5:73:24:be:06:de:9c: b1:59:77:b7:aa:07:6f:0f:7e:71:0f:18:7f:d4:61:7c:bd:24: 30:35:cb:4a:bf:48:87:20:4e:d5:6b:64:3a:db:91:ec:02:90: de:f9:49:14:d7:5a:98:69:2c:7d:27:ef:1e:cf:8f:5b:b6:76: 92:3a:88:12:bd:e6:1f:0e:4d:18:a8:b1:68:fd:20:16:63:0a: a1:ab:06:2d:76:13:99:2f:cc:e1:fb:65:4c:0c:24:41:f0:eb: 48:18:75:31:e8:4f:cb:78:33:0b:59:72:66:cb:96:e6:b8:d4: 55:df:bb:c5:0e:b3:8f:70:d9:6b:06:e6:9d:d3:64:b4:55:c8: 56:0a:25:42:f0:0a:20:d5:5c:e4:08:32:9f:4e:ab:68:86:e5: 10:7f:05:84:08:e2:e4:aa:c1:d2:d2:24:16:46:7c:6a:2a:83: a4:3a:43:80:14:ca:e0:87:45:f9:74:34:a6:b7:e9:fa:90:38: a1:13:c2:c6:ea:be:e6:b8:20:32:8d:a1:27:9f:dd:62:60:4f: 77:93:9f:8a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQfLfNYEcQWUu2sVEhno0XE+AfN8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MzIxWhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNmNmZTlmYjIxZjQ2M2YyOGFjYmM2OTFhOGQwMTc5OWI4 NjdkYTI2YzU5NGI1M2ZmNzczNzYzNGVhYzU1ZTQ2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv0693NqZDcZJrYpLD2bznpwqAX49ssc3SX+saCT/PqAHk N6EWtR5V+F8iSP29LA+0+RfwbvE3leMOFySnahL15Ky21r7F0OcxOUcpIhAweq+5 9deb0WEvGBdnMfmOu9q6WrG1uucaZBS4ox02B4QGO3AdjUrGdU7eb55ItiD17xO5 MjLRWGXjFVFKghJspi3Az6jdABZQK8ic7tjG0ZdqUVtaV/yAPJCz41jOq44UM69A w/xZbvL4Sh2Qu/A/BCoIn7fv9FAzJxce6Ftm+aqh0eitunk7zKEbjHg5BX2a8oRK 8jLwVHQwD9I6FQmLV2Hkd8yU4R7b7Q5qnXDPQYqzAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU3M303ClDFUtnZqssf+iNKBdASSUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QwMGVkYjM5LTQ5YTUtNDRjYi05MDM3LWFkODE0YzE3N2I2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78Q4wDQYJKoZIhvcNAQELBQADggEBABV2kqF6UmmqAhMrlhJx+m2t PGMnNzZsK1muQ0fuG67nv64p3Yrswdr0suRIRe4q9XMkvgbenLFZd7eqB28PfnEP GH/UYXy9JDA1y0q/SIcgTtVrZDrbkewCkN75SRTXWphpLH0n7x7Pj1u2dpI6iBK9 5h8OTRiosWj9IBZjCqGrBi12E5kvzOH7ZUwMJEHw60gYdTHoT8t4MwtZcmbLlua4 1FXfu8UOs49w2WsG5p3TZLRVyFYKJULwCiDVXOQIMp9Oq2iG5RB/BYQI4uSqwdLS JBZGfGoqg6Q6Q4AUyuCHRfl0NKa36fqQOKETwsbqvua4IDKNoSef3WJgT3eTn4o= -----END CERTIFICATE-----Generated at Sun Oct 19 22:58:05 2025 by rpki-client