$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9eac186e-c426-418a-82c6-9034de5c9843.roa File: 9eac186e-c426-418a-82c6-9034de5c9843.roa (raw, json) Hash identifier: JO2FSN8UGoJ/1jV/77CVE2QWONiVQw+FUYhzCuZ7Bro= Subject key identifier: AA:31:11:3E:30:89:F9:E9:19:D8:58:4B:22:0E:75:1D:1B:F7:25:34 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 110A93DE22C0C9FFC9CE08D5AA2D81DE055E2550 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9eac186e-c426-418a-82c6-9034de5c9843.roa Signing time: Sat 27 Sep 2025 00:52:28 +0000 ROA not before: Sat 27 Sep 2025 00:52:28 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f10d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0a:93:de:22:c0:c9:ff:c9:ce:08:d5:aa:2d:81:de:05:5e:25:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:52:28 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=69a01f758deb3aa17f8407f6aa3e04edd6e537221fe615ac8425b4a2fe419cd7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:ab:46:3c:70:dc:41:e4:e1:89:2f:95:13: 68:ec:b9:2b:2c:33:7b:a1:2d:e8:71:15:30:e8:f4: 55:01:5d:58:b1:f6:70:0a:e2:aa:81:0d:81:5c:bd: fe:a4:fc:45:55:c8:c9:ac:d8:7d:70:f6:15:73:8a: e3:c7:97:94:bf:d2:29:b8:35:9d:3d:c6:72:e7:29: 52:44:38:81:ca:ab:6f:2d:bb:67:92:23:c0:dc:42: ec:e5:9c:fb:76:e4:40:93:ff:0a:29:6b:f9:77:d4: f5:8d:53:a2:e2:58:40:0f:6d:a6:da:54:dc:99:1c: 2f:0a:ff:ec:ed:6b:31:9d:7b:b4:c0:23:c8:81:47: 15:76:45:b9:7c:75:63:c6:26:ba:79:17:fa:f5:96: 62:62:83:e2:52:fa:db:0a:8e:90:12:93:77:df:5e: ec:fc:88:ca:c7:ea:5d:45:78:94:36:d3:9b:b8:88: 62:e6:63:5f:0c:65:99:78:9a:38:1c:da:0e:b7:ae: b9:92:1d:1a:f5:75:ea:53:59:61:0e:8f:58:ee:58: 22:88:e8:95:b6:17:d0:76:74:ca:43:ba:e9:e1:e1: 94:29:25:9d:01:00:1f:97:69:ee:75:5e:98:df:6c: cf:bf:01:63:6e:f4:44:12:42:7e:0d:5d:20:82:b7: b1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:31:11:3E:30:89:F9:E9:19:D8:58:4B:22:0E:75:1D:1B:F7:25:34 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9eac186e-c426-418a-82c6-9034de5c9843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f10d::/48 Signature Algorithm: sha256WithRSAEncryption 90:02:2b:ab:60:32:7e:d0:c5:89:56:bf:7e:80:84:12:41:e6: 61:08:ec:85:6e:4f:7e:34:5b:19:f3:c2:b7:45:e4:9e:72:16: be:26:59:d6:26:c5:1e:b5:3e:fc:ca:ae:4e:2d:4f:21:ff:83: 48:53:21:fe:19:69:34:b5:b5:24:82:9f:d0:2a:85:e5:38:55: e7:d3:fd:87:07:26:62:c4:f6:dd:53:71:75:ca:27:87:13:79: 0f:b6:cb:63:9f:4b:48:c0:3d:f6:66:c9:af:33:ca:ad:e2:14: 1c:9c:3c:cd:a2:94:bb:12:09:83:ba:1b:53:b9:84:a2:68:52: 72:6b:ea:64:49:82:db:d4:0a:20:97:46:76:bb:09:50:e2:ff: 8a:72:01:a3:38:91:1e:b4:1f:d4:07:39:6c:69:12:51:f7:ad: 3a:80:90:2f:95:46:b4:7f:a9:e5:ed:c4:60:fa:c8:b3:ef:0f: 6f:fe:ce:71:cf:a7:8a:04:04:f7:ac:8f:00:13:43:9a:d8:56: 58:f7:48:5b:de:77:39:91:b2:a2:1f:97:3c:6d:fd:ea:46:f0: 6d:bf:b6:a5:70:74:90:b5:41:db:49:39:eb:b7:6d:9c:80:7b: 30:d3:0d:b4:8e:28:e6:89:df:66:8d:45:fa:9e:33:dc:8c:79: ac:b0:1f:ce -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEQqT3iLAyf/JzgjVqi2B3gVeJVAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MjI4WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWEwMWY3NThkZWIzYWExN2Y4NDA3ZjZhYTNlMDRlZGQ2 ZTUzNzIyMWZlNjE1YWM4NDI1YjRhMmZlNDE5Y2Q3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuAatGPHDcQeThiS+VE2jsuSssM3uhLehxFTDo9FUBXVix 9nAK4qqBDYFcvf6k/EVVyMms2H1w9hVziuPHl5S/0im4NZ09xnLnKVJEOIHKq28t u2eSI8DcQuzlnPt25ECT/wopa/l31PWNU6LiWEAPbabaVNyZHC8K/+ztazGde7TA I8iBRxV2Rbl8dWPGJrp5F/r1lmJig+JS+tsKjpASk3ffXuz8iMrH6l1FeJQ205u4 iGLmY18MZZl4mjgc2g63rrmSHRr1depTWWEOj1juWCKI6JW2F9B2dMpDuunh4ZQp JZ0BAB+Xae51XpjfbM+/AWNu9EQSQn4NXSCCt7HNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqjERPjCJ+ekZ2FhLIg51HRv3JTQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzllYWMxODZlLWM0MjYtNDE4YS04MmM2LTkwMzRkZTVjOTg0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78Q0wDQYJKoZIhvcNAQELBQADggEBAJACK6tgMn7QxYlWv36AhBJB 5mEI7IVuT340WxnzwrdF5J5yFr4mWdYmxR61PvzKrk4tTyH/g0hTIf4ZaTS1tSSC n9AqheU4VefT/YcHJmLE9t1TcXXKJ4cTeQ+2y2OfS0jAPfZmya8zyq3iFBycPM2i lLsSCYO6G1O5hKJoUnJr6mRJgtvUCiCXRna7CVDi/4pyAaM4kR60H9QHOWxpElH3 rTqAkC+VRrR/qeXtxGD6yLPvD2/+znHPp4oEBPesjwATQ5rYVlj3SFvedzmRsqIf lzxt/epG8G2/tqVwdJC1QdtJOeu3bZyAezDTDbSOKOaJ32aNRfqeM9yMeaywH84= -----END CERTIFICATE-----Generated at Mon Oct 20 13:01:48 2025 by rpki-client