$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6826d5c-b428-498f-80be-06e94897140e.roa File: f6826d5c-b428-498f-80be-06e94897140e.roa (raw, json) Hash identifier: OR4A9Uw3s/+jpK8L4kDOt3lxg923F3vysO/Lc3N/oyw= Subject key identifier: 7D:A9:4D:E7:D8:6D:FF:28:DE:A7:D7:A0:85:F1:4F:CD:A0:C7:F3:74 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 673D575BC9FE04A53895CE338ADE64CDB4295BC1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6826d5c-b428-498f-80be-06e94897140e.roa Signing time: Mon 06 Oct 2025 17:38:13 +0000 ROA not before: Mon 06 Oct 2025 17:38:13 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6106::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3d:57:5b:c9:fe:04:a5:38:95:ce:33:8a:de:64:cd:b4:29:5b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:38:13 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=e2235fb743492e3d21f840ea6bb08265ef3f39a3c0548fdb6f562e20c9fcb565, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:b1:c8:d4:ed:e0:89:4e:8c:b0:2a:36:2b: 78:ef:f8:bb:a0:68:ed:30:e7:de:2f:52:91:9e:31: b6:0b:4c:b9:20:82:8f:80:7b:b1:f4:a2:f9:0b:ee: fc:10:5b:b8:ad:56:83:80:5f:f6:64:f0:57:e9:50: 96:bd:df:16:b2:42:53:79:4b:05:81:98:e7:63:1e: 0f:3d:67:71:ef:e3:da:8b:b0:66:fd:80:dc:09:c4: a4:25:bc:59:25:91:5c:f4:01:1a:bc:43:82:2f:5c: 57:dd:a4:ef:9c:29:21:55:9d:15:2a:3b:b1:4f:e3: 5a:92:81:95:af:c9:50:fd:ae:6f:38:17:aa:55:3f: 4b:f3:8f:bb:0d:cc:99:7b:68:46:fd:9b:df:0b:ad: 09:1f:ff:7c:64:59:83:9d:5e:55:03:48:a2:7e:46: 49:2c:46:a7:18:b0:3a:af:dd:12:50:72:a6:61:bf: a4:44:52:5f:cb:01:2a:7d:80:8f:c1:ee:ed:06:68: 12:87:29:cc:3f:42:59:6b:6f:38:9d:33:5c:56:7e: 13:8b:86:bf:0d:4a:e4:4c:9f:63:0e:b4:88:d2:31: b3:70:57:3b:c5:91:27:3c:d1:61:2d:1c:56:1c:e6: 36:fa:d3:10:26:bd:2c:42:a6:73:a0:82:68:dd:b8: 2c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A9:4D:E7:D8:6D:FF:28:DE:A7:D7:A0:85:F1:4F:CD:A0:C7:F3:74 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6826d5c-b428-498f-80be-06e94897140e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6106::/48 Signature Algorithm: sha256WithRSAEncryption a8:39:8a:11:c2:6a:31:98:a2:43:ed:b8:af:c8:58:e4:0c:ba: de:3c:9a:09:34:41:c5:a6:5f:25:4c:db:6a:4d:41:74:a9:94: d4:ab:58:fb:3e:e4:2f:ac:9b:1d:a2:3e:bb:40:89:8b:9c:f5: 13:7b:4f:2d:e9:e3:7a:4c:70:f1:ff:2b:4a:68:dc:f4:12:ae: cb:ad:ac:0d:c0:96:b1:be:1c:b4:ee:04:3d:24:c0:9a:6d:21: 2f:ee:c9:93:6e:57:8c:3f:07:c9:7b:f5:2c:a0:c5:e7:55:2e: 17:ad:dd:06:81:d0:b7:44:a2:22:84:96:e2:ad:ec:5c:8f:2a: 4c:e3:18:fc:7a:a4:e4:65:df:93:8d:57:81:16:37:15:75:e8: c0:58:ae:3c:f1:d7:d3:a6:19:3a:7d:e8:5e:33:b3:7d:29:9d: c8:aa:e9:b6:90:84:90:31:05:b1:42:81:d3:d7:dd:5f:60:83: 87:f8:dc:9f:e0:de:3c:12:d8:19:1d:d3:92:3b:69:3c:7b:3b: a7:bc:b4:8f:99:8e:4e:04:27:d6:23:d3:9a:cc:89:bb:a5:8e: 2a:82:8f:5d:cd:a7:4a:23:05:bf:3e:62:69:99:9e:8b:2c:d1: 99:75:a9:77:d2:c9:fb:e8:c5:53:df:c6:e2:63:09:b7:8d:0f: d8:3f:ac:7d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZz1XW8n+BKU4lc4zit5kzbQpW8EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTczODEzWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjIzNWZiNzQzNDkyZTNkMjFmODQwZWE2YmIwODI2NWVm M2YzOWEzYzA1NDhmZGI2ZjU2MmUyMGM5ZmNiNTY1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwq7HI1O3giU6MsCo2K3jv+LugaO0w594vUpGeMbYLTLkg go+Ae7H0ovkL7vwQW7itVoOAX/Zk8FfpUJa93xayQlN5SwWBmOdjHg89Z3Hv49qL sGb9gNwJxKQlvFklkVz0ARq8Q4IvXFfdpO+cKSFVnRUqO7FP41qSgZWvyVD9rm84 F6pVP0vzj7sNzJl7aEb9m98LrQkf/3xkWYOdXlUDSKJ+RkksRqcYsDqv3RJQcqZh v6REUl/LASp9gI/B7u0GaBKHKcw/QllrbzidM1xWfhOLhr8NSuRMn2MOtIjSMbNw VzvFkSc80WEtHFYc5jb60xAmvSxCpnOggmjduCwvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfalN59ht/yjep9eghfFPzaDH83QwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y2ODI2ZDVjLWI0MjgtNDk4Zi04MGJlLTA2ZTk0ODk3MTQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQYwDQYJKoZIhvcNAQELBQADggEBAKg5ihHCajGYokPtuK/IWOQM ut48mgk0QcWmXyVM22pNQXSplNSrWPs+5C+smx2iPrtAiYuc9RN7Ty3p43pMcPH/ K0po3PQSrsutrA3AlrG+HLTuBD0kwJptIS/uyZNuV4w/B8l79SygxedVLhet3QaB 0LdEoiKEluKt7FyPKkzjGPx6pORl35ONV4EWNxV16MBYrjzx19OmGTp96F4zs30p nciq6baQhJAxBbFCgdPX3V9gg4f43J/g3jwS2Bkd05I7aTx7O6e8tI+Zjk4EJ9Yj 05rMibuljiqCj13Np0ojBb8+YmmZnoss0Zl1qXfSyfvoxVPfxuJjCbeND9g/rH0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:42:01 2025 by rpki-client