$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa File: f6cf58cb-08de-4e22-be98-43e3537a793b.roa (raw, json) Hash identifier: /Nltlvl9C5FeJYOK7l17FTOCxD9/+byD6NHPQ2EycPc= Subject key identifier: 79:A8:D5:E9:CF:85:22:A8:15:B6:7E:DE:BD:2F:77:52:E6:5C:8A:C1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 011A749E196C4011EFB88D4DF96376A67D010CF3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa Signing time: Fri 26 Sep 2025 18:20:08 +0000 ROA not before: Fri 26 Sep 2025 18:20:08 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1a:74:9e:19:6c:40:11:ef:b8:8d:4d:f9:63:76:a6:7d:01:0c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:20:08 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=27c28b511eaf4541f100c9df9f4392b94cc3a92676218ae3f1aa32ac834ea919, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:4e:ea:3e:58:65:48:ae:f2:d6:d9:72:33: 87:10:ae:a3:2d:99:6a:a3:cb:d1:2c:44:96:04:c5: c8:fd:e7:d1:da:f0:be:57:31:ea:da:b6:5d:69:a0: 4e:5d:93:a8:66:a5:ce:eb:c6:fa:c2:90:2c:fa:3d: e8:76:9c:33:25:9b:f7:f4:27:58:4e:fd:11:f1:26: 05:55:62:92:ed:a0:45:3e:e4:51:62:41:12:58:8d: 42:e4:32:3c:66:18:d2:79:64:e3:57:12:87:b1:19: de:11:16:59:47:6f:bc:20:aa:8e:90:53:7c:10:7b: fd:ef:6a:26:82:89:5a:08:1c:15:23:7b:4e:ba:59: c4:26:77:63:b9:f3:e3:49:16:ca:04:d0:9b:64:f7: 3f:3b:b3:e0:24:00:23:69:b9:dd:f8:13:eb:1c:5e: 2f:5b:d2:57:01:3f:18:82:0d:04:ce:88:b3:df:8b: 01:0e:5d:73:09:4a:f8:81:a4:7a:0b:81:6d:6e:9f: 96:ee:35:cc:ce:47:a8:43:e6:91:b7:e8:ea:8d:2a: a9:99:fd:14:9e:d3:93:01:10:20:3a:03:18:f5:46: 66:01:c5:01:af:5a:d4:fe:f8:4c:35:e3:ea:7e:35: 8e:ad:74:83:de:5e:fc:bb:ca:19:d3:95:f7:ef:8b: 00:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A8:D5:E9:CF:85:22:A8:15:B6:7E:DE:BD:2F:77:52:E6:5C:8A:C1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e100::/40 Signature Algorithm: sha256WithRSAEncryption 5f:60:c5:7a:82:64:12:6f:49:ca:c2:1f:9a:2e:59:52:53:9b: 8e:b9:18:bb:22:cd:10:5c:ea:18:44:f1:85:6a:c2:e3:eb:62: bd:26:55:19:96:27:50:2f:2d:f8:f8:94:56:65:0c:b8:1e:67: 43:b1:ad:5b:42:4d:2e:66:96:90:5c:a5:c6:90:d8:31:4a:6d: 67:01:e1:fa:25:2e:64:b7:a6:83:95:99:f4:5e:cf:c1:d7:95: 83:79:e8:dd:ee:83:c2:fd:52:42:57:5e:fa:2d:bf:82:5b:17: 8c:95:74:26:87:fd:3b:28:5a:45:79:76:ba:56:99:f6:c2:92: 95:d2:49:9d:f9:7d:f3:74:bc:ff:6e:85:a0:67:49:96:49:45: af:f0:b4:85:c2:d0:da:20:0a:d2:1e:c6:83:2e:00:42:87:33: e2:b9:35:fc:a8:70:26:f5:7d:c6:4c:e5:6d:46:51:1c:ff:73: 6d:cb:88:76:1f:84:64:ec:e7:42:f7:e9:96:50:4e:13:95:d0: 09:fa:e6:fc:c1:fd:c7:53:51:ea:cd:c6:f5:44:5e:9c:f1:d1: 34:97:cd:56:bb:76:81:a6:d9:91:8e:1d:2a:12:7b:f3:5d:96: 01:ff:f8:60:e6:70:85:2d:36:59:de:7a:53:59:c5:ed:20:ed: a7:48:37:43 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUARp0nhlsQBHvuI1N+WN2pn0BDPMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgyMDA4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyN2MyOGI1MTFlYWY0NTQxZjEwMGM5ZGY5ZjQzOTJiOTRj YzNhOTI2NzYyMThhZTNmMWFhMzJhYzgzNGVhOTE5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCP0U7qPlhlSK7y1tlyM4cQrqMtmWqjy9EsRJYExcj959Ha 8L5XMeratl1poE5dk6hmpc7rxvrCkCz6Peh2nDMlm/f0J1hO/RHxJgVVYpLtoEU+ 5FFiQRJYjULkMjxmGNJ5ZONXEoexGd4RFllHb7wgqo6QU3wQe/3vaiaCiVoIHBUj e066WcQmd2O58+NJFsoE0Jtk9z87s+AkACNpud34E+scXi9b0lcBPxiCDQTOiLPf iwEOXXMJSviBpHoLgW1un5buNczOR6hD5pG36OqNKqmZ/RSe05MBECA6Axj1RmYB xQGvWtT++Ew14+p+NY6tdIPeXvy7yhnTlffviwCdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUeajV6c+FIqgVtn7evS93UuZcisEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y2Y2Y1OGNiLTA4ZGUtNGUyMi1iZTk4LTQzZTM1MzdhNzkzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74TANBgkqhkiG9w0BAQsFAAOCAQEAX2DFeoJkEm9JysIfmi5ZUlOb jrkYuyLNEFzqGETxhWrC4+tivSZVGZYnUC8t+PiUVmUMuB5nQ7GtW0JNLmaWkFyl xpDYMUptZwHh+iUuZLemg5WZ9F7PwdeVg3no3e6Dwv1SQlde+i2/glsXjJV0Jof9 OyhaRXl2ulaZ9sKSldJJnfl983S8/26FoGdJlklFr/C0hcLQ2iAK0h7Ggy4AQocz 4rk1/KhwJvV9xkzlbUZRHP9zbcuIdh+EZOznQvfpllBOE5XQCfrm/MH9x1NR6s3G 9URenPHRNJfNVrt2gabZkY4dKhJ7812WAf/4YOZwhS02Wd56U1nF7SDtp0g3Qw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:49 2025 by rpki-client