$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eee842ff-7274-4b3b-98b9-4e0009ea8c69.roa File: eee842ff-7274-4b3b-98b9-4e0009ea8c69.roa (raw, json) Hash identifier: xMRcS8c749XFmOoQUMqbm63UOzBupSCapmLBRXDGGS4= Subject key identifier: E3:A1:2C:CC:AB:7F:31:3A:B4:8B:77:D3:37:97:7D:6C:55:CA:9F:2C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 5C6F37DCD4D4DEF571BE329A106F4F6AE475FFFB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eee842ff-7274-4b3b-98b9-4e0009ea8c69.roa Signing time: Sat 27 Sep 2025 00:53:18 +0000 ROA not before: Sat 27 Sep 2025 00:53:18 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f10b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:6f:37:dc:d4:d4:de:f5:71:be:32:9a:10:6f:4f:6a:e4:75:ff:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:53:18 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=365416cebebf469ba5a5d764de94de8f667141e65baee2883cae9b74070535e1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:fd:fd:4d:0a:3e:cb:34:74:ed:0e:d1:fc: 6a:15:17:7b:d7:e2:a7:b2:9c:c5:8a:47:3e:c9:3e: d4:38:7d:79:b3:05:ee:de:b8:f7:54:6b:50:71:ea: fa:28:1f:04:04:be:3c:ea:b9:27:14:a1:26:8d:f4: 30:08:b9:e5:2c:1c:c7:9c:07:4d:b3:89:82:77:bf: 99:9e:32:13:b6:92:26:78:d5:be:4c:77:6a:ae:43: 66:5f:9a:bd:9e:40:22:a1:ff:46:0c:ba:86:60:6c: 52:59:b0:de:67:8f:ae:0f:a5:8e:bd:1c:9d:07:d8: c5:ef:b4:82:46:1d:ca:77:f7:7c:da:20:28:eb:69: 89:21:51:18:0e:98:5b:d5:37:a8:4d:4d:41:ef:48: 33:82:61:24:ce:4c:80:32:ba:7e:8a:92:22:72:a5: 5a:98:8d:d6:ea:ea:e5:53:45:fa:4c:ee:8c:27:47: 80:9b:cf:60:7a:31:20:f1:09:9f:01:4f:79:c8:42: 36:6f:07:68:a3:ed:c3:ae:43:11:31:8a:97:15:a9: aa:ea:45:82:a6:d6:db:f0:cf:17:72:77:22:76:0a: ec:75:af:26:f0:d6:41:62:65:08:cf:df:7e:ae:54: 01:b2:d5:21:eb:6f:c2:41:34:17:ad:59:4c:2d:ab: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A1:2C:CC:AB:7F:31:3A:B4:8B:77:D3:37:97:7D:6C:55:CA:9F:2C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eee842ff-7274-4b3b-98b9-4e0009ea8c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10b::/48 Signature Algorithm: sha256WithRSAEncryption 74:21:4f:b5:48:f6:47:47:9b:fb:10:14:36:10:96:79:0b:ba: 97:c0:8f:57:6e:b5:68:30:a6:73:b4:80:0d:52:2c:a5:4b:49: 5a:06:12:4e:7e:4d:98:3a:6e:e8:2b:1c:85:f2:a6:a2:17:48: 18:c1:d3:41:c1:de:4b:62:ed:84:0c:88:7c:87:33:45:ae:82: f6:7f:ca:d4:f5:ea:6e:ea:23:a5:23:fc:4e:c2:c6:18:52:b0: d1:ce:fd:d1:a9:7c:8f:93:b8:90:fb:ec:43:c5:fd:cd:d7:96: 5b:f8:78:a9:1e:47:16:bf:30:7c:bb:54:cc:c8:ae:06:77:a8: 4e:b7:2e:da:03:93:e3:41:cf:95:0c:f3:78:cf:45:91:54:4c: 12:4f:5f:d0:e3:a3:40:c1:68:f6:2b:dd:e2:28:c7:71:89:0b: b2:48:20:10:07:b0:ac:ff:13:7b:a7:89:9a:f8:0a:18:7a:14: 3f:24:fa:6a:2d:e5:15:bc:7c:1f:fe:84:9e:71:d9:bc:63:19: 17:d8:9c:22:07:0d:46:53:0c:4c:ef:81:23:bc:fb:65:dc:4a: 23:be:a0:de:c4:94:bb:3c:54:45:a0:bb:b0:90:6b:3d:67:c4: 6a:d2:85:cc:8f:a9:d0:5c:76:56:3f:fe:d6:70:af:1c:5c:51: 1c:09:53:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXG833NTU3vVxvjKaEG9PauR1//swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MzE4WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjU0MTZjZWJlYmY0NjliYTVhNWQ3NjRkZTk0ZGU4ZjY2 NzE0MWU2NWJhZWUyODgzY2FlOWI3NDA3MDUzNWUxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMjf39TQo+yzR07Q7R/GoVF3vX4qeynMWKRz7JPtQ4fXmz Be7euPdUa1Bx6vooHwQEvjzquScUoSaN9DAIueUsHMecB02ziYJ3v5meMhO2kiZ4 1b5Md2quQ2Zfmr2eQCKh/0YMuoZgbFJZsN5nj64PpY69HJ0H2MXvtIJGHcp393za ICjraYkhURgOmFvVN6hNTUHvSDOCYSTOTIAyun6KkiJypVqYjdbq6uVTRfpM7own R4Cbz2B6MSDxCZ8BT3nIQjZvB2ij7cOuQxExipcVqarqRYKm1tvwzxdydyJ2Cux1 rybw1kFiZQjP336uVAGy1SHrb8JBNBetWUwtq3WtAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU46EszKt/MTq0i3fTN5d9bFXKnywwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VlZTg0MmZmLTcyNzQtNGIzYi05OGI5LTRlMDAwOWVhOGM2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QswDQYJKoZIhvcNAQELBQADggEBAHQhT7VI9kdHm/sQFDYQlnkL upfAj1dutWgwpnO0gA1SLKVLSVoGEk5+TZg6bugrHIXypqIXSBjB00HB3kti7YQM iHyHM0WugvZ/ytT16m7qI6Uj/E7CxhhSsNHO/dGpfI+TuJD77EPF/c3Xllv4eKke Rxa/MHy7VMzIrgZ3qE63LtoDk+NBz5UM83jPRZFUTBJPX9Djo0DBaPYr3eIox3GJ C7JIIBAHsKz/E3uniZr4Chh6FD8k+mot5RW8fB/+hJ5x2bxjGRfYnCIHDUZTDEzv gSO8+2XcSiO+oN7ElLs8VEWgu7CQaz1nxGrShcyPqdBcdlY//tZwrxxcURwJUz8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:18:41 2025 by rpki-client