$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa File: 6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa (raw, json) Hash identifier: jN6fgGSqU7/q08g7hx6X8/2uNeCEDZgY01sY7kVWE4c= Subject key identifier: F8:5A:15:70:7C:72:79:D0:97:92:8B:86:33:DF:65:01:A6:9C:B5:EC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 21BDEA38E215367C0A695FC9BBD40986AB95FA00 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa Signing time: Sat 27 Sep 2025 00:53:35 +0000 ROA not before: Sat 27 Sep 2025 00:53:35 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bd:ea:38:e2:15:36:7c:0a:69:5f:c9:bb:d4:09:86:ab:95:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:53:35 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=22d01fa41f2c30033ea6a92ec7a17fa7f87acaa7f6137bbfc454b25f8f4f9626, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:9c:b7:b2:96:4d:3b:86:df:ad:22:34:76: c7:fd:f0:bc:1b:a4:c7:66:e2:65:96:df:15:e4:b8: 7e:1a:ce:80:84:c5:eb:59:2a:3b:ab:8e:83:e7:7c: 90:39:75:b0:24:5b:aa:15:02:21:39:9a:4e:73:00: a6:e3:ec:12:0b:1e:2b:eb:a8:f6:9a:f5:23:13:70: 5a:34:ca:7f:fc:9b:eb:7e:76:03:d9:0f:26:6a:a7: b0:c2:b6:87:14:56:69:10:6d:96:a1:c5:56:8b:40: e5:82:ff:42:91:37:30:62:75:07:c8:24:63:1b:fb: 0d:99:ea:fc:ab:10:af:e8:61:e6:59:0c:f9:3a:a4: 65:bb:14:44:f4:63:59:74:46:12:91:82:c2:78:27: d9:c6:23:09:c2:9c:2c:1b:d9:23:e7:20:b0:8c:b4: e5:f5:e1:ba:31:5e:3b:c9:80:04:d5:0d:63:39:07: 11:8e:57:c1:06:af:f9:9f:f6:f3:be:44:66:a3:e0: 1d:f9:66:79:a9:66:9d:ca:4c:4d:72:4e:c6:19:92: 0a:99:d6:0d:b3:60:b7:9b:53:e8:a4:20:62:ad:7c: 67:88:ff:8b:50:4b:35:4e:32:42:35:29:03:82:7c: 81:9d:3c:25:5f:a7:0a:74:24:1a:16:76:f2:52:65: 65:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5A:15:70:7C:72:79:D0:97:92:8B:86:33:DF:65:01:A6:9C:B5:EC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dda3bf3-022d-4ca1-ab68-eb73ef36558c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f105::/48 Signature Algorithm: sha256WithRSAEncryption 13:ca:bc:02:8b:5b:d4:af:37:77:7a:e4:64:1b:94:26:60:2e: 71:68:ca:a3:59:0a:5e:9c:f8:db:fd:99:63:f6:8f:0a:86:eb: 0f:6f:34:fc:b1:13:77:be:6f:c2:ea:81:dd:c6:6a:85:74:9f: 42:64:76:de:8a:a9:98:9c:c6:b1:ae:1e:20:fc:32:21:18:6d: ae:7e:f4:9f:c1:d0:46:e8:5f:ee:be:df:94:a5:39:1b:03:53: bc:49:96:df:eb:9a:2c:e3:6d:79:62:8c:e6:08:88:e9:5f:3c: 86:67:e0:91:43:48:37:06:13:e5:e2:bd:df:4b:ba:ce:9b:51: 5f:a1:58:8e:c9:f2:99:2d:d2:46:a8:8a:d8:8e:23:45:52:35: fe:02:11:8e:ec:56:e3:8b:9f:88:8c:31:56:36:04:1a:e3:98: dc:09:17:a5:80:5d:86:95:7e:7d:24:7a:2d:a8:99:da:0a:f4: cd:a3:16:b8:3c:fb:b1:0a:df:17:1b:c4:f4:b4:b1:89:1f:dc: f1:d5:a0:b9:bd:86:82:cf:20:ff:de:44:22:ee:0d:35:38:1f: de:6e:ee:e9:d3:03:4a:e8:a7:25:ac:95:93:75:58:b8:db:28: f0:cf:7f:b3:35:ac:95:e3:8a:db:2e:67:11:1a:d8:b1:d7:e0: 45:ab:27:09 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIb3qOOIVNnwKaV/Ju9QJhquV+gAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MzM1WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMmQwMWZhNDFmMmMzMDAzM2VhNmE5MmVjN2ExN2ZhN2Y4 N2FjYWE3ZjYxMzdiYmZjNDU0YjI1ZjhmNGY5NjI2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwu5y3spZNO4bfrSI0dsf98LwbpMdm4mWW3xXkuH4azoCE xetZKjurjoPnfJA5dbAkW6oVAiE5mk5zAKbj7BILHivrqPaa9SMTcFo0yn/8m+t+ dgPZDyZqp7DCtocUVmkQbZahxVaLQOWC/0KRNzBidQfIJGMb+w2Z6vyrEK/oYeZZ DPk6pGW7FET0Y1l0RhKRgsJ4J9nGIwnCnCwb2SPnILCMtOX14boxXjvJgATVDWM5 BxGOV8EGr/mf9vO+RGaj4B35ZnmpZp3KTE1yTsYZkgqZ1g2zYLebU+ikIGKtfGeI /4tQSzVOMkI1KQOCfIGdPCVfpwp0JBoWdvJSZWUvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU+FoVcHxyedCXkouGM99lAaactewwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZkZGEzYmYzLTAyMmQtNGNhMS1hYjY4LWViNzNlZjM2NTU4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QUwDQYJKoZIhvcNAQELBQADggEBABPKvAKLW9SvN3d65GQblCZg LnFoyqNZCl6c+Nv9mWP2jwqG6w9vNPyxE3e+b8Lqgd3GaoV0n0Jkdt6KqZicxrGu HiD8MiEYba5+9J/B0EboX+6+35SlORsDU7xJlt/rmizjbXlijOYIiOlfPIZn4JFD SDcGE+Xivd9Lus6bUV+hWI7J8pkt0kaoitiOI0VSNf4CEY7sVuOLn4iMMVY2BBrj mNwJF6WAXYaVfn0kei2omdoK9M2jFrg8+7EK3xcbxPS0sYkf3PHVoLm9hoLPIP/e RCLuDTU4H95u7unTA0ropyWslZN1WLjbKPDPf7M1rJXjitsuZxEa2LHX4EWrJwk= -----END CERTIFICATE-----Generated at Sun Oct 19 22:58:53 2025 by rpki-client