$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a65dc579-55d0-4640-8ee5-6bd70e3dd724.roa File: a65dc579-55d0-4640-8ee5-6bd70e3dd724.roa (raw, json) Hash identifier: 5pZRQY/2RUWoyns0jzAgQL1n7emZCCSeXax8sumKoNc= Subject key identifier: F5:E1:CE:62:95:C5:0D:4E:1A:A9:80:F5:E0:40:95:8D:0E:A7:E4:37 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1CE711E12A258CD0F511290D3AE99C333F30D05E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a65dc579-55d0-4640-8ee5-6bd70e3dd724.roa Signing time: Fri 26 Sep 2025 18:00:07 +0000 ROA not before: Fri 26 Sep 2025 18:00:07 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:551c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e7:11:e1:2a:25:8c:d0:f5:11:29:0d:3a:e9:9c:33:3f:30:d0:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:00:07 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=587158625b1840323b460028174a004b57e307e31f4ebbb2c50acca92d570352, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:dc:a8:58:05:4e:b4:6b:e3:6d:d9:55:39: c5:17:93:d4:6a:88:29:46:67:d0:49:b1:a6:b6:4f: f5:88:d7:8d:af:e8:a8:79:32:2b:be:ff:e1:f8:42: be:da:59:26:40:a2:30:55:e9:29:65:b6:4c:fe:4b: 31:a2:85:4b:bd:64:97:37:f1:35:95:18:7c:3a:30: 43:32:5a:2e:48:c2:49:dc:56:ec:7a:4f:17:1b:40: e1:29:8d:6e:03:b8:36:b2:aa:c6:79:d4:c9:84:86: 2b:d7:13:20:f1:5c:c7:81:19:0d:eb:c7:67:40:3c: fd:7b:02:d1:ae:48:3b:ba:76:b8:6b:5e:5a:db:16: cc:ee:64:f0:70:67:79:5d:ae:5e:09:4f:f4:8c:70: 46:75:03:9e:19:6b:97:f4:99:ab:e8:8e:d6:9d:63: a5:17:11:7e:8a:aa:83:a7:85:0d:0d:a9:54:8d:a7: 84:d3:ac:af:c2:96:71:5c:6a:c0:90:89:4c:db:f7: b1:bf:0c:6f:04:c2:c9:5a:da:e6:e0:ac:04:10:89: 06:87:6c:25:87:99:bf:9a:9b:51:3a:99:97:60:7a: 0d:c9:e7:45:74:e9:45:17:8e:49:a7:65:11:62:68: 1a:37:3b:ad:22:7e:2b:76:b5:0e:f3:f6:80:b5:93: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E1:CE:62:95:C5:0D:4E:1A:A9:80:F5:E0:40:95:8D:0E:A7:E4:37 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a65dc579-55d0-4640-8ee5-6bd70e3dd724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551c::/48 Signature Algorithm: sha256WithRSAEncryption a1:34:2f:71:f4:d7:7b:63:bc:e3:91:c8:2a:98:25:45:05:a4: 19:4b:1c:c3:e9:43:5d:f6:8c:94:fc:87:d0:ca:9c:73:54:b9: e3:2a:99:c6:76:50:b7:f0:cd:c1:2e:25:94:b2:01:ed:ba:4a: cf:f8:cc:03:0b:c9:72:02:b0:7d:ef:5b:40:18:ea:c4:f9:c7: 2c:a1:8c:c1:8f:9d:7f:e3:23:37:82:1d:89:33:61:2f:d8:4b: 12:5c:cd:1c:ce:63:84:99:71:7a:94:42:ec:5a:56:f7:f1:36: 47:11:18:31:42:4c:77:3e:df:2b:fb:f7:fa:cf:d3:e8:00:79: d9:53:9e:25:2b:43:94:5b:36:24:22:c2:d6:5a:50:e8:a6:c4: 4d:13:55:81:a9:41:12:a9:2e:ec:af:95:ad:14:f2:5d:74:b2: 3d:9f:e3:10:15:e4:5f:8f:69:bb:75:aa:dd:15:79:fb:7c:57: 22:16:16:07:4a:bb:01:59:76:f7:f9:69:02:a3:9d:7e:52:43: 0b:d9:8a:00:99:2e:20:70:b4:42:cf:12:4b:e8:ae:c9:41:d6: 23:f4:d8:6b:05:bf:9d:85:42:ef:f5:65:56:63:e3:fa:82:0d: b9:9f:af:11:d1:ce:8c:79:fd:2c:f5:56:3f:96:66:e2:7c:33: ab:d6:98:4f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHOcR4SoljND1ESkNOumcMz8w0F4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgwMDA3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODcxNTg2MjViMTg0MDMyM2I0NjAwMjgxNzRhMDA0YjU3 ZTMwN2UzMWY0ZWJiYjJjNTBhY2NhOTJkNTcwMzUyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5BdyoWAVOtGvjbdlVOcUXk9RqiClGZ9BJsaa2T/WI142v 6Kh5Miu+/+H4Qr7aWSZAojBV6Slltkz+SzGihUu9ZJc38TWVGHw6MEMyWi5Iwknc Vux6TxcbQOEpjW4DuDayqsZ51MmEhivXEyDxXMeBGQ3rx2dAPP17AtGuSDu6drhr XlrbFszuZPBwZ3ldrl4JT/SMcEZ1A54Za5f0mavojtadY6UXEX6KqoOnhQ0NqVSN p4TTrK/ClnFcasCQiUzb97G/DG8Ewsla2ubgrAQQiQaHbCWHmb+am1E6mZdgeg3J 50V06UUXjkmnZRFiaBo3O60ifit2tQ7z9oC1k0kVAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU9eHOYpXFDU4aqYD14ECVjQ6n5DcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E2NWRjNTc5LTU1ZDAtNDY0MC04ZWU1LTZiZDcwZTNkZDcyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRwwDQYJKoZIhvcNAQELBQADggEBAKE0L3H013tjvOORyCqYJUUF pBlLHMPpQ132jJT8h9DKnHNUueMqmcZ2ULfwzcEuJZSyAe26Ss/4zAMLyXICsH3v W0AY6sT5xyyhjMGPnX/jIzeCHYkzYS/YSxJczRzOY4SZcXqUQuxaVvfxNkcRGDFC THc+3yv79/rP0+gAedlTniUrQ5RbNiQiwtZaUOimxE0TVYGpQRKpLuyvla0U8l10 sj2f4xAV5F+Pabt1qt0Veft8VyIWFgdKuwFZdvf5aQKjnX5SQwvZigCZLiBwtELP EkvorslB1iP02GsFv52FQu/1ZVZj4/qCDbmfrxHRzox5/Sz1Vj+WZuJ8M6vWmE8= -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:22 2025 by rpki-client