$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa File: 4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa (raw, json) Hash identifier: m+K1mUveJoT6RQK6+sAdk4koSuiN1H7vIxEFGAwye88= Subject key identifier: 14:C2:C3:02:80:F9:49:BB:48:C0:2E:05:DE:1E:D8:2B:46:89:1B:28 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 69E9633FDDEC24E4BA992E8131A41A61BE65ECE4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa Signing time: Sat 27 Sep 2025 00:52:48 +0000 ROA not before: Sat 27 Sep 2025 00:52:48 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e9:63:3f:dd:ec:24:e4:ba:99:2e:81:31:a4:1a:61:be:65:ec:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:52:48 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=229021dcf4905eba5d90732a6373f81ba915677a18f235fb03c757879bce3991, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6d:9f:9e:55:f7:e3:6f:34:62:8f:02:73:36: fe:aa:9d:51:66:df:f8:47:3b:75:70:54:94:7b:26: bb:e9:4c:e4:3b:2c:fc:36:b4:eb:29:f1:63:76:69: ba:71:27:dc:65:b2:04:91:20:31:70:0c:d4:fe:b6: 7a:5d:07:80:76:a6:39:d8:23:eb:da:d0:c1:06:d8: 6c:68:a0:af:16:46:02:91:87:82:3a:b7:89:fa:4c: a6:55:54:ef:9c:03:8c:f6:5c:61:90:8f:6d:36:b3: 6e:04:a0:4d:c5:ea:eb:7e:b5:7a:aa:9f:32:f8:fd: 03:0a:ba:01:75:27:3e:e6:6f:3e:94:de:61:f9:51: 47:0c:d7:f2:f3:7c:19:04:31:6c:a7:3a:74:68:1a: 6b:f9:c1:d5:4a:5c:7f:08:54:69:4b:64:31:ae:14: 87:35:91:ad:85:2d:93:03:31:7d:06:6d:1f:da:04: 57:46:4d:9d:6e:a7:64:df:bd:7a:60:4a:4f:b7:7d: 73:8a:00:04:57:f0:88:87:2a:87:35:1e:75:aa:5b: 44:59:43:0f:07:05:93:c7:bc:af:d0:d7:51:a7:48: f3:dd:99:2d:75:ba:cd:7f:78:5a:08:f2:29:3d:31: 5f:65:2d:b3:c6:3f:3b:c7:ca:ec:71:17:bf:d4:a7: bd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C2:C3:02:80:F9:49:BB:48:C0:2E:05:DE:1E:D8:2B:46:89:1B:28 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4f4627a7-ddcb-4402-bf11-3e7463b43fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:400::/44 Signature Algorithm: sha256WithRSAEncryption 37:6c:bf:f1:cb:61:49:c4:4a:39:43:00:8b:c3:c7:7f:92:4e: 5d:11:29:98:5a:bf:18:41:6c:db:4b:f7:ce:03:96:09:5a:0b: f5:38:e7:e0:e1:b5:ea:e3:3d:bc:23:44:d0:82:fd:7e:d8:17: 7a:2e:95:99:34:66:87:cf:0e:6b:47:62:73:ae:1b:d0:34:b2: 2b:5b:6a:5b:ee:87:10:1c:ee:43:69:29:94:af:44:32:6a:e7: 15:ab:ce:86:f1:fa:4c:6d:12:da:1e:ab:ec:00:4b:95:fe:da: 40:7e:aa:27:2c:ed:77:3f:93:47:58:8c:ba:a0:a6:a7:f8:b3: 54:95:29:d5:f6:9d:80:2c:ea:5c:21:02:8a:11:eb:14:db:cd: 11:d2:0b:ad:64:6d:f2:29:2b:b3:d1:e6:13:f8:df:ba:16:14: 58:68:c8:ae:b6:45:00:87:54:03:86:44:86:24:1d:c4:b7:cf: fa:ce:80:f3:06:7c:89:27:40:db:db:0e:d9:cc:59:b9:c3:74: 19:bd:e5:2d:ef:f4:3d:f4:1b:46:76:b9:88:60:15:dd:b7:80: 7e:a9:fc:08:e7:d9:4f:ca:e9:a4:96:46:b9:11:f9:f7:fa:7a: d9:fc:6b:59:d6:6d:88:79:7e:eb:4e:9c:8a:12:3e:a8:9b:e2: 99:4f:5b:54 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUaeljP93sJOS6mS6BMaQaYb5l7OQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MjQ4WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMjkwMjFkY2Y0OTA1ZWJhNWQ5MDczMmE2MzczZjgxYmE5 MTU2NzdhMThmMjM1ZmIwM2M3NTc4NzliY2UzOTkxMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfbZ+eVffjbzRijwJzNv6qnVFm3/hHO3VwVJR7JrvpTOQ7 LPw2tOsp8WN2abpxJ9xlsgSRIDFwDNT+tnpdB4B2pjnYI+va0MEG2GxooK8WRgKR h4I6t4n6TKZVVO+cA4z2XGGQj202s24EoE3F6ut+tXqqnzL4/QMKugF1Jz7mbz6U 3mH5UUcM1/LzfBkEMWynOnRoGmv5wdVKXH8IVGlLZDGuFIc1ka2FLZMDMX0GbR/a BFdGTZ1up2TfvXpgSk+3fXOKAARX8IiHKoc1HnWqW0RZQw8HBZPHvK/Q11GnSPPd mS11us1/eFoI8ik9MV9lLbPGPzvHyuxxF7/Up737AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFMLDAoD5SbtIwC4F3h7YK0aJGygwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRmNDYyN2E3LWRkY2ItNDQwMi1iZjExLTNlNzQ2M2I0M2ZhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBADdsv/HLYUnESjlDAIvDx3+S Tl0RKZhavxhBbNtL984DlglaC/U45+DhterjPbwjRNCC/X7YF3oulZk0ZofPDmtH YnOuG9A0sitbalvuhxAc7kNpKZSvRDJq5xWrzobx+kxtEtoeq+wAS5X+2kB+qics 7Xc/k0dYjLqgpqf4s1SVKdX2nYAs6lwhAooR6xTbzRHSC61kbfIpK7PR5hP437oW FFhoyK62RQCHVAOGRIYkHcS3z/rOgPMGfIknQNvbDtnMWbnDdBm95S3v9D30G0Z2 uYhgFd23gH6p/Ajn2U/K6aSWRrkR+ff6etn8a1nWbYh5futOnIoSPqib4plPW1Q= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:41 2025 by rpki-client