$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/868fe5a3-3c18-4d2a-bf96-0e0a840118e0.roa File: 868fe5a3-3c18-4d2a-bf96-0e0a840118e0.roa (raw, json) Hash identifier: LaFt5yl+D4CAoJ96PA5oDExnQNaNz9ZSXP5xzyPHW5o= Subject key identifier: C6:AB:4A:17:0E:55:61:5B:A8:01:D2:EB:13:D3:D6:C0:3C:18:EC:59 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 03849ACCCDF378C55AED447174487D9A3763337B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/868fe5a3-3c18-4d2a-bf96-0e0a840118e0.roa Signing time: Sat 27 Sep 2025 00:53:38 +0000 ROA not before: Sat 27 Sep 2025 00:53:38 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:84:9a:cc:cd:f3:78:c5:5a:ed:44:71:74:48:7d:9a:37:63:33:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:53:38 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=e2998091c3ff86f6b3d3b40568cfda4e45c206f41555cc4b2648125bb0463858, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:19:0d:01:fa:a4:2e:1c:a2:97:32:b0:7f: 1d:e2:9e:af:24:0f:0e:b0:f6:7f:db:ff:b6:69:ee: 91:d9:81:05:fa:00:50:24:c0:47:87:d8:d9:84:f3: 3a:96:42:4b:79:05:72:c9:d2:19:06:00:7c:99:a2: db:19:68:1c:f5:91:a2:79:52:2b:68:1e:d5:ee:5e: 2c:0f:5f:54:42:e4:77:d6:16:68:9a:10:3e:2b:84: a4:f6:3d:3b:4b:4c:aa:b4:54:82:97:ae:b1:db:78: b6:8c:ed:e7:23:b5:c2:ef:bd:07:90:36:af:c9:a2: 06:11:bf:32:13:e9:8b:82:64:0f:b4:26:e8:8e:9f: 48:ab:32:53:22:59:6a:99:20:68:ad:c2:5d:c3:54: 88:cd:22:36:6e:2c:f8:48:99:b3:05:c4:b3:e1:fc: f0:5f:8a:99:76:4c:67:5f:ba:8d:64:90:e0:10:d3: 94:25:65:e6:19:59:11:b3:21:82:4e:a7:41:73:99: 02:7a:92:3e:34:55:89:32:af:49:ed:9c:95:f6:0a: 57:cb:da:0f:b6:cf:9c:75:f4:f3:bc:48:94:61:f7: dd:ba:74:07:ed:ce:58:c7:d1:ef:ed:0e:dd:f7:0b: b8:82:73:3e:5a:ae:67:fe:b6:e9:39:92:66:ab:24: 33:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AB:4A:17:0E:55:61:5B:A8:01:D2:EB:13:D3:D6:C0:3C:18:EC:59 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/868fe5a3-3c18-4d2a-bf96-0e0a840118e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f105::/48 Signature Algorithm: sha256WithRSAEncryption 78:8f:2b:3a:8f:c4:ee:3e:b4:51:14:42:95:52:49:23:86:f0: 4c:0c:4e:af:0f:8a:e1:f6:5b:b4:d9:34:31:25:3a:5b:13:9a: 95:a3:d1:40:d5:6a:c2:bd:14:ae:c5:c9:7d:5f:8e:b7:8c:4a: 91:6e:45:f3:0f:44:c3:44:86:96:a6:32:b1:56:49:69:92:27: 70:fb:f7:28:64:43:5a:fd:1a:12:c8:f8:0b:01:6c:f5:f2:4b: 25:31:73:2b:79:fd:32:4c:c3:36:91:82:f6:79:b1:fd:40:f2: 6f:5b:99:01:68:73:10:16:01:c5:e5:2a:bf:09:a2:a8:db:96: 39:7a:2b:80:da:56:e8:46:e0:98:d8:69:4c:f8:d0:e7:2d:23: 97:7f:e8:f1:f3:fa:fc:37:e1:fd:32:b3:4a:e7:bb:35:16:dd: 04:24:ad:ad:d2:43:d4:b9:19:9d:ca:64:a6:46:1d:4a:1a:6d: 14:6c:31:7c:04:40:af:a1:97:f0:23:fe:93:cc:81:ec:19:d2: cd:e9:d3:dd:c9:f2:7f:75:1b:cc:24:81:43:40:1b:c4:6e:e2: cc:8b:84:54:eb:e4:27:6f:1a:cc:15:db:56:fe:4e:db:d0:dd: 7b:5e:e9:61:8d:28:83:95:1b:fa:f8:d7:6d:a8:d9:9d:f1:ee: 08:d6:81:3e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA4SazM3zeMVa7URxdEh9mjdjM3swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MzM4WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjk5ODA5MWMzZmY4NmY2YjNkM2I0MDU2OGNmZGE0ZTQ1 YzIwNmY0MTU1NWNjNGIyNjQ4MTI1YmIwNDYzODU4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrYhkNAfqkLhyilzKwfx3inq8kDw6w9n/b/7Zp7pHZgQX6 AFAkwEeH2NmE8zqWQkt5BXLJ0hkGAHyZotsZaBz1kaJ5UitoHtXuXiwPX1RC5HfW FmiaED4rhKT2PTtLTKq0VIKXrrHbeLaM7ecjtcLvvQeQNq/JogYRvzIT6YuCZA+0 JuiOn0irMlMiWWqZIGitwl3DVIjNIjZuLPhImbMFxLPh/PBfipl2TGdfuo1kkOAQ 05QlZeYZWRGzIYJOp0FzmQJ6kj40VYkyr0ntnJX2ClfL2g+2z5x19PO8SJRh9926 dAftzljH0e/tDt33C7iCcz5armf+tuk5kmarJDPhAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUxqtKFw5VYVuoAdLrE9PWwDwY7FkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg2OGZlNWEzLTNjMTgtNGQyYS1iZjk2LTBlMGE4NDAxMThlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QUwDQYJKoZIhvcNAQELBQADggEBAHiPKzqPxO4+tFEUQpVSSSOG 8EwMTq8PiuH2W7TZNDElOlsTmpWj0UDVasK9FK7FyX1fjreMSpFuRfMPRMNEhpam MrFWSWmSJ3D79yhkQ1r9GhLI+AsBbPXySyUxcyt5/TJMwzaRgvZ5sf1A8m9bmQFo cxAWAcXlKr8Joqjbljl6K4DaVuhG4JjYaUz40OctI5d/6PHz+vw34f0ys0rnuzUW 3QQkra3SQ9S5GZ3KZKZGHUoabRRsMXwEQK+hl/Aj/pPMgewZ0s3p093J8n91G8wk gUNAG8Ru4syLhFTr5CdvGswV21b+TtvQ3Xte6WGNKIOVG/r4122o2Z3x7gjWgT4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:18:39 2025 by rpki-client