$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa File: e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa (raw, json) Hash identifier: qbQgsr1imh9MqqfZaaAWCEtWT1o1iuqxn5k4rVnu4hY= Subject key identifier: 4D:77:62:FB:C6:F4:07:AB:24:AA:89:13:E5:9C:B6:27:4A:53:2F:CE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 63EE7D9B624CD0F65B8754524BEEEBAC56276851 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa Signing time: Sat 27 Sep 2025 00:52:25 +0000 ROA not before: Sat 27 Sep 2025 00:52:25 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ee:7d:9b:62:4c:d0:f6:5b:87:54:52:4b:ee:eb:ac:56:27:68:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:52:25 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=402dbb8e2ab5d263399be74b8ca81d12e245b3e963659555c7464c62941bfd80, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:64:56:6f:ff:86:71:f3:7b:9f:2a:5b:d2: 57:e9:63:82:b4:3d:4e:91:b7:24:26:3f:17:02:db: a4:84:85:df:3f:e9:b9:84:75:5c:de:7e:88:54:d5: d1:e2:90:8c:92:e8:39:ab:6e:16:39:0c:89:8f:a3: d6:cb:19:3d:6d:4c:fc:ee:b5:f7:cf:ab:b5:c0:42: 6a:ef:15:7d:d7:9a:4a:86:17:0a:fe:53:3f:88:97: 36:f8:67:c8:5a:a7:45:39:b4:35:ad:24:1b:35:9b: b5:4a:27:4d:8b:9d:ae:f3:c4:50:1b:d6:37:a4:57: 50:21:07:ab:c2:b1:c4:7e:8c:a8:89:d7:87:27:ba: 4b:73:fa:7c:5a:71:97:0f:8d:e0:c0:c4:7f:8d:c4: 8f:cd:d5:e4:ba:01:62:8a:85:f7:f0:1e:ea:4c:d8: c8:d4:34:f7:6a:61:a1:e9:d7:f0:bc:70:cb:d7:c1: c8:4e:fe:43:13:c5:93:c1:df:88:da:16:8d:33:3d: 78:ee:7d:92:09:31:af:b0:36:96:a3:ff:38:08:d9: 40:3d:0f:50:e2:df:d6:79:5c:ce:3d:4c:bc:ae:8a: f6:61:5c:6a:d7:3d:9f:d1:5c:73:24:b0:26:17:55: c1:8e:84:c7:42:f6:4b:15:0e:0e:dc:7e:e3:54:64: 4f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:77:62:FB:C6:F4:07:AB:24:AA:89:13:E5:9C:B6:27:4A:53:2F:CE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9e9fa29-b290-4ea2-9c3a-b6b0e792e777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f106::/48 Signature Algorithm: sha256WithRSAEncryption a2:49:80:b3:41:aa:fa:92:ed:9c:de:71:44:06:cb:d2:e7:23: 9c:78:05:43:72:b9:75:16:2c:7e:ed:92:85:bf:12:4f:97:d2: 64:7c:7b:fc:18:63:45:68:2f:b7:b7:5d:2a:9b:39:0c:37:e9: db:74:a3:13:4d:99:8f:55:cd:2d:cc:6c:b5:4b:07:21:5e:96: ad:6d:b6:30:5b:0b:65:7a:17:af:a6:ab:2a:8a:37:9f:79:79: 51:7a:61:f6:98:23:3a:c8:bd:be:eb:64:12:da:84:2f:71:4e: d4:cd:16:4d:18:bd:8a:fc:dc:41:77:85:6a:8f:ed:5a:f0:35: 73:9c:c6:74:e0:3c:f4:6f:1d:6c:78:16:10:2c:a2:6f:11:d0: 4f:3b:41:e9:52:d4:18:36:98:26:52:00:02:80:b4:bd:7a:6f: 4b:9e:f2:cd:0e:2e:83:c3:95:ad:b7:20:7d:c2:bb:b6:7b:be: c5:1c:e9:6b:1b:43:a8:5b:4c:6d:b2:d3:b2:09:82:fd:02:a6: 69:90:ff:85:e7:dd:5c:f7:60:78:78:72:a7:3a:8f:04:93:10: 54:42:6a:ed:72:d3:e9:76:a3:a5:5b:74:70:95:79:fa:05:86: 01:f6:7a:5c:ca:a6:08:64:38:bd:4b:3b:95:69:73:c6:8d:3e: fc:9f:f9:b2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY+59m2JM0PZbh1RSS+7rrFYnaFEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MjI1WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDJkYmI4ZTJhYjVkMjYzMzk5YmU3NGI4Y2E4MWQxMmUy NDViM2U5NjM2NTk1NTVjNzQ2NGM2Mjk0MWJmZDgwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkCGRWb/+GcfN7nypb0lfpY4K0PU6RtyQmPxcC26SEhd8/ 6bmEdVzefohU1dHikIyS6DmrbhY5DImPo9bLGT1tTPzutffPq7XAQmrvFX3XmkqG Fwr+Uz+Ilzb4Z8hap0U5tDWtJBs1m7VKJ02Lna7zxFAb1jekV1AhB6vCscR+jKiJ 14cnuktz+nxacZcPjeDAxH+NxI/N1eS6AWKKhffwHupM2MjUNPdqYaHp1/C8cMvX wchO/kMTxZPB34jaFo0zPXjufZIJMa+wNpaj/zgI2UA9D1Di39Z5XM49TLyuivZh XGrXPZ/RXHMksCYXVcGOhMdC9ksVDg7cfuNUZE9dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUTXdi+8b0B6skqokT5Zy2J0pTL84wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2U5ZTlmYTI5LWIyOTAtNGVhMi05YzNhLWI2YjBlNzkyZTc3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QYwDQYJKoZIhvcNAQELBQADggEBAKJJgLNBqvqS7ZzecUQGy9Ln I5x4BUNyuXUWLH7tkoW/Ek+X0mR8e/wYY0VoL7e3XSqbOQw36dt0oxNNmY9VzS3M bLVLByFelq1ttjBbC2V6F6+mqyqKN595eVF6YfaYIzrIvb7rZBLahC9xTtTNFk0Y vYr83EF3hWqP7VrwNXOcxnTgPPRvHWx4FhAsom8R0E87QelS1Bg2mCZSAAKAtL16 b0ue8s0OLoPDla23IH3Cu7Z7vsUc6WsbQ6hbTG2y07IJgv0CpmmQ/4Xn3Vz3YHh4 cqc6jwSTEFRCau1y0+l2o6VbdHCVefoFhgH2elzKpghkOL1LO5Vpc8aNPvyf+bI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:58:45 2025 by rpki-client