$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa File: 23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa (raw, json) Hash identifier: HuuA1oSRjgQaU20kszZny1eT2Y4e8FQqTr2S4bm7qEM= Subject key identifier: 68:29:7E:60:B6:2D:5A:A5:99:34:F9:A5:73:A5:F0:1F:48:37:BB:B7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 494588EEC265928C8A4A1895C5EA20CC8E3D772E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa Signing time: Sat 27 Sep 2025 00:52:41 +0000 ROA not before: Sat 27 Sep 2025 00:52:41 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:45:88:ee:c2:65:92:8c:8a:4a:18:95:c5:ea:20:cc:8e:3d:77:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:52:41 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=06c994e0b2373cb20d30a5c0d1a14b0353bd363c688b89aeaed934d17539797a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:18:23:bb:7c:1d:52:5c:66:98:c7:ac:3c:f9: 3d:15:3f:87:33:59:aa:d8:f5:62:fd:6a:49:0c:38: c8:a2:10:e9:15:56:80:03:f3:15:ff:29:ea:07:a3: bb:4c:87:87:2a:8c:55:86:f6:fe:a6:f8:0c:04:9e: 39:05:2c:ac:d1:ab:47:6d:64:b2:5c:2e:da:c8:b5: 33:54:85:40:a1:d9:3f:0b:96:bc:8d:b2:83:25:77: 96:62:b9:25:a3:f3:c9:cf:1e:fd:bd:23:8f:0e:71: d0:aa:f8:44:8b:fd:71:20:17:da:6a:5c:b0:6c:29: f3:10:4c:ef:0e:ce:e5:4c:3d:02:2b:56:ed:36:b9: 5a:eb:96:52:c7:cd:d6:95:15:ce:8a:37:da:6d:89: d3:85:31:94:9a:20:3a:62:1c:bb:20:93:a4:7c:ed: c6:bf:a4:e5:c9:45:bf:b8:03:ef:2b:9c:2a:76:b1: 5b:a1:fd:c7:1a:3f:ff:2b:fa:0d:d3:ca:d8:b2:59: 20:27:c1:03:21:24:99:01:24:b4:13:7a:64:d5:13: 4e:bf:3e:eb:01:b5:bc:6a:89:1b:25:9e:9b:65:10: 40:a5:b3:d5:53:b7:bf:27:4a:55:cc:64:04:98:bd: 8a:10:68:e1:26:94:a2:5f:ca:60:fd:f5:eb:61:28: 48:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:29:7E:60:B6:2D:5A:A5:99:34:F9:A5:73:A5:F0:1F:48:37:BB:B7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/23b8e089-1979-42f1-9d4e-ed7428a25f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f107::/48 Signature Algorithm: sha256WithRSAEncryption 07:07:da:62:bf:a9:f7:bc:af:e6:fd:f4:59:6b:3a:59:d2:56: a9:6e:61:e3:ab:42:f5:56:a5:78:13:e9:df:6f:ab:6f:41:f5: 54:39:ae:27:6e:76:20:86:17:58:62:ea:0f:b1:db:93:b9:a6: b1:8e:97:60:93:f5:5b:49:03:eb:e7:3a:a0:25:57:82:e3:c8: d0:58:0a:fa:94:40:9c:eb:3c:05:62:ff:2a:77:12:15:a0:a7: 9d:ea:be:33:9d:8c:22:f3:2f:8b:1a:89:03:69:2f:5d:95:94: d1:28:41:cd:8a:47:65:64:56:08:d1:21:20:73:01:9e:25:4c: d7:ec:67:fd:4c:fb:e5:70:a4:4f:02:fe:27:77:ee:f4:3e:ef: f3:9b:97:43:bf:dc:dc:75:49:4e:39:07:cf:c2:8d:56:ee:cf: 1c:dd:ce:5c:82:a2:5b:df:2b:c3:7f:bf:fc:f2:ec:64:29:77: d9:e1:a5:73:2c:27:97:e3:74:15:10:1d:af:1d:43:f7:f5:af: 91:18:34:94:02:16:08:1d:8e:9d:f8:6c:18:94:59:7f:b9:46: c3:c0:36:36:e5:d6:82:70:1e:b8:3e:18:8b:25:09:98:c8:5d: 44:17:02:ed:67:bd:5c:17:84:c9:79:a0:ab:d9:dd:76:a3:55: f2:11:1a:29 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSUWI7sJlkoyKShiVxeogzI49dy4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MjQxWhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNmM5OTRlMGIyMzczY2IyMGQzMGE1YzBkMWExNGIwMzUz YmQzNjNjNjg4Yjg5YWVhZWQ5MzRkMTc1Mzk3OTdhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDyGCO7fB1SXGaYx6w8+T0VP4czWarY9WL9akkMOMiiEOkV VoAD8xX/KeoHo7tMh4cqjFWG9v6m+AwEnjkFLKzRq0dtZLJcLtrItTNUhUCh2T8L lryNsoMld5ZiuSWj88nPHv29I48OcdCq+ESL/XEgF9pqXLBsKfMQTO8OzuVMPQIr Vu02uVrrllLHzdaVFc6KN9ptidOFMZSaIDpiHLsgk6R87ca/pOXJRb+4A+8rnCp2 sVuh/ccaP/8r+g3TytiyWSAnwQMhJJkBJLQTemTVE06/PusBtbxqiRslnptlEECl s9VTt78nSlXMZASYvYoQaOEmlKJfymD99ethKEhxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUaCl+YLYtWqWZNPmlc6XwH0g3u7cwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzIzYjhlMDg5LTE5NzktNDJmMS05ZDRlLWVkNzQyOGEyNWYwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QcwDQYJKoZIhvcNAQELBQADggEBAAcH2mK/qfe8r+b99FlrOlnS VqluYeOrQvVWpXgT6d9vq29B9VQ5ridudiCGF1hi6g+x25O5prGOl2CT9VtJA+vn OqAlV4LjyNBYCvqUQJzrPAVi/yp3EhWgp53qvjOdjCLzL4saiQNpL12VlNEoQc2K R2VkVgjRISBzAZ4lTNfsZ/1M++VwpE8C/id37vQ+7/Obl0O/3Nx1SU45B8/CjVbu zxzdzlyColvfK8N/v/zy7GQpd9nhpXMsJ5fjdBUQHa8dQ/f1r5EYNJQCFggdjp34 bBiUWX+5RsPANjbl1oJwHrg+GIslCZjIXUQXAu1nvVwXhMl5oKvZ3XajVfIRGik= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:00 2025 by rpki-client