$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e25ff6b-b800-47bd-b202-1ffe5f44d9fe.roa File: 0e25ff6b-b800-47bd-b202-1ffe5f44d9fe.roa (raw, json) Hash identifier: xnbEHyGt5/MZwE/KmeuV8DAokycIUvYZmHY9CnDyayc= Subject key identifier: C1:80:5B:A4:64:46:6D:78:11:2E:4C:7B:82:CB:81:16:A0:CC:E3:2C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 152A7885ABD113A5D2162A511CF8EE1BB9C4639D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e25ff6b-b800-47bd-b202-1ffe5f44d9fe.roa Signing time: Sat 27 Sep 2025 00:53:28 +0000 ROA not before: Sat 27 Sep 2025 00:53:28 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:2a:78:85:ab:d1:13:a5:d2:16:2a:51:1c:f8:ee:1b:b9:c4:63:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:53:28 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=bb7f8ef822d08cfe55a02372206a40f96633a79b47ad55aca10a434fc7560122, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:27:56:4a:a8:d7:e3:9d:0f:b6:f3:35:96:e8: 0b:3b:a7:dd:77:1a:d1:55:22:5f:e2:52:46:cd:dd: 5f:57:fb:69:d8:ec:96:d2:01:8b:16:22:8c:fb:3c: b4:ec:ad:83:e3:24:c0:13:70:b6:45:85:0e:4e:d9: 58:54:5b:84:41:8a:a6:91:eb:f8:1d:2c:a1:a7:de: 3a:cd:b1:4f:6b:70:b7:ce:f7:1c:c2:41:b5:86:20: 40:a7:62:c1:2e:f1:a2:b9:37:d8:85:5d:79:98:c0: db:01:08:ac:fc:63:79:a1:d5:db:f3:f1:17:ab:ec: 4b:9e:b4:a0:23:59:8d:91:d3:16:29:d2:65:0b:9f: 52:ff:61:38:93:e3:27:34:cc:15:23:2b:d3:7f:7a: 24:bf:46:09:54:fb:a9:d6:a1:0d:f5:15:1e:b2:06: 4d:c9:43:9c:45:1f:60:1e:76:91:9a:48:21:8c:32: ca:2d:d2:78:53:09:be:ea:c8:e2:b8:45:2e:b6:94: 9a:70:83:8b:00:3c:e7:b7:f1:c7:18:93:a4:39:03: 1e:1a:03:a8:e0:19:8c:41:e2:e5:52:cb:ac:56:98: 09:92:bd:45:2a:83:48:c1:d5:ca:3d:96:c2:d4:db: 94:b2:56:15:87:57:2c:c2:9a:a3:5c:8c:ed:67:03: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:80:5B:A4:64:46:6D:78:11:2E:4C:7B:82:CB:81:16:A0:CC:E3:2C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0e25ff6b-b800-47bd-b202-1ffe5f44d9fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f103::/48 Signature Algorithm: sha256WithRSAEncryption 5f:78:13:8a:19:76:b8:7d:35:ae:cf:8c:f9:73:85:3d:45:fa: c5:86:dd:da:b7:9f:d7:78:b5:d7:e9:b4:0c:f2:66:63:fb:a0: 08:0c:c8:a8:aa:6c:56:4a:b3:9d:32:cf:9e:70:69:4f:41:b7: 09:31:26:0c:4c:dc:ff:ce:71:40:28:09:91:d5:60:32:b4:71: 45:7e:e4:a9:41:68:6d:ed:ce:c1:17:2d:ef:7d:c9:7b:dd:6b: d9:41:23:db:97:f9:a9:53:e8:29:0a:30:bb:e5:b0:f7:a1:f9: 9e:61:6a:db:85:9c:fe:b6:ea:16:1e:ae:40:83:1b:72:86:10: b9:6f:23:43:16:28:de:a5:88:53:39:8a:f3:80:cb:46:64:b1: c4:01:d1:e8:16:49:ba:96:15:f2:c2:e4:06:dd:96:d8:75:a2: a5:0c:21:f4:6d:a8:9c:4c:56:6c:df:36:b4:9a:c8:2b:7c:ef: 72:48:f1:6b:09:19:04:c6:41:73:87:9c:1a:79:9a:49:e5:fb: e9:92:33:0f:b7:58:7b:ee:bb:7f:70:e6:7d:31:b5:26:21:d0: 1b:0d:e9:af:4a:55:7f:d3:37:69:5f:d5:53:ae:34:df:d5:bd: b9:5a:4a:d3:86:0d:df:9c:35:4c:ed:07:0d:8c:02:4d:aa:dc: 44:cf:71:f7 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUFSp4havRE6XSFipRHPjuG7nEY50wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MzI4WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjdmOGVmODIyZDA4Y2ZlNTVhMDIzNzIyMDZhNDBmOTY2 MzNhNzliNDdhZDU1YWNhMTBhNDM0ZmM3NTYwMTIyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCFJ1ZKqNfjnQ+28zWW6As7p913GtFVIl/iUkbN3V9X+2nY 7JbSAYsWIoz7PLTsrYPjJMATcLZFhQ5O2VhUW4RBiqaR6/gdLKGn3jrNsU9rcLfO 9xzCQbWGIECnYsEu8aK5N9iFXXmYwNsBCKz8Y3mh1dvz8Rer7EuetKAjWY2R0xYp 0mULn1L/YTiT4yc0zBUjK9N/eiS/RglU+6nWoQ31FR6yBk3JQ5xFH2AedpGaSCGM Msot0nhTCb7qyOK4RS62lJpwg4sAPOe38ccYk6Q5Ax4aA6jgGYxB4uVSy6xWmAmS vUUqg0jB1co9lsLU25SyVhWHVyzCmqNcjO1nA1JvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUwYBbpGRGbXgRLkx7gsuBFqDM4ywwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBlMjVmZjZiLWI4MDAtNDdiZC1iMjAyLTFmZmU1ZjQ0ZDlmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QMwDQYJKoZIhvcNAQELBQADggEBAF94E4oZdrh9Na7PjPlzhT1F +sWG3dq3n9d4tdfptAzyZmP7oAgMyKiqbFZKs50yz55waU9BtwkxJgxM3P/OcUAo CZHVYDK0cUV+5KlBaG3tzsEXLe99yXvda9lBI9uX+alT6CkKMLvlsPeh+Z5hatuF nP626hYerkCDG3KGELlvI0MWKN6liFM5ivOAy0ZkscQB0egWSbqWFfLC5Abdlth1 oqUMIfRtqJxMVmzfNrSayCt873JI8WsJGQTGQXOHnBp5mknl++mSMw+3WHvuu39w 5n0xtSYh0BsN6a9KVX/TN2lf1VOuNN/VvblaStOGDd+cNUztBw2MAk2q3ETPcfc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:18:35 2025 by rpki-client