$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a98a96f2-fb84-44ae-a59d-ebeb6059194f.roa File: a98a96f2-fb84-44ae-a59d-ebeb6059194f.roa (raw, json) Hash identifier: 7xnvXSixFtGLcPe4S6J0bAX/A+lv5XmQGEVawqlcwQ0= Subject key identifier: 85:8A:19:EA:56:BA:F0:3F:48:05:DD:9B:AA:2B:91:58:7C:07:CD:8F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2EA7BADE0DB27D3ED153311E3A74D6D4FB6D59E7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a98a96f2-fb84-44ae-a59d-ebeb6059194f.roa Signing time: Sat 27 Sep 2025 00:53:26 +0000 ROA not before: Sat 27 Sep 2025 00:53:26 +0000 ROA not after: Sat 01 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a7:ba:de:0d:b2:7d:3e:d1:53:31:1e:3a:74:d6:d4:fb:6d:59:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 27 00:53:26 2025 GMT Not After : Nov 1 23:59:59 2025 GMT Subject: serialNumber=6f164c646d725c330712a64844a8e22cb0eafcfe76b3222040a1541f5d429170, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:87:9a:da:55:ed:75:ef:e8:e3:03:96:6b:df: d0:1f:aa:03:1d:dc:e0:aa:09:16:ee:17:a0:09:ec: df:ad:bc:39:2e:6b:cd:60:4b:b9:64:fb:6f:66:c4: db:45:0f:f9:7f:a5:55:dc:97:d4:48:a0:0d:50:28: 85:88:1c:b5:18:23:b2:76:2b:83:e4:d2:d4:f8:27: c2:e2:68:c2:d7:d0:12:7a:d0:b1:51:ce:84:5c:6f: 79:74:22:ce:ad:14:f4:6a:d8:cf:97:db:a2:91:75: 0c:d6:a1:93:86:5f:c6:74:42:c8:ff:1f:d3:eb:b7: e2:86:a2:03:14:ce:89:23:b2:d6:c5:12:92:d7:a1: 46:93:94:d0:aa:62:b2:84:ed:1f:c1:88:0f:08:25: ca:92:36:ff:51:64:89:32:4a:8f:2c:32:1f:07:65: be:76:ad:b5:19:2c:43:0a:8b:92:db:ad:60:8c:38: f8:3f:ca:a2:79:ea:06:7c:a3:e4:07:1c:fc:36:cf: 1d:69:8d:8c:c5:47:2d:86:37:f7:e8:c6:8c:f2:30: b9:a5:57:6f:d5:f7:c2:f3:5b:42:ee:ee:a0:85:d3: 7e:95:30:86:d4:84:d2:92:9b:8a:0c:e0:b7:91:4f: 7d:a9:24:ed:13:36:9d:61:e8:57:d5:e4:6c:2a:3a: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8A:19:EA:56:BA:F0:3F:48:05:DD:9B:AA:2B:91:58:7C:07:CD:8F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a98a96f2-fb84-44ae-a59d-ebeb6059194f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f104::/48 Signature Algorithm: sha256WithRSAEncryption 11:2b:d2:9a:70:cf:bb:73:f7:73:0a:e1:cf:a2:6e:7e:31:21: 2a:dc:5d:7d:ad:06:0f:9b:f5:75:1e:8c:7e:05:4e:c4:7a:4d: 05:08:10:dd:71:ab:fb:86:c6:9f:a6:2c:e2:1a:2e:00:84:be: b3:9b:17:07:63:70:71:4f:c4:f2:09:52:55:53:e0:f4:4f:2d: 0a:d0:ef:87:18:bc:c8:e1:12:62:21:45:3d:ae:50:da:9e:09: e3:c6:d8:6d:0c:17:fd:57:ed:cb:7d:da:c4:46:72:d0:c5:61: 81:03:f3:f6:8f:fb:db:0e:e7:67:ea:87:d2:1c:67:39:82:02: 02:01:58:3b:72:d2:8b:23:b3:68:da:eb:62:3a:1c:5a:09:ee: 41:6d:5b:a9:ec:6b:37:14:af:ee:fa:12:75:21:85:29:34:26: 7b:fd:43:e9:93:0a:f3:fb:a9:79:fc:2e:c5:9c:b3:22:68:d5: 67:8f:0f:c7:d8:c4:9d:58:4f:37:64:81:8a:ed:bb:c9:08:f8: 99:93:e0:02:2a:eb:43:f4:71:be:13:36:25:76:ff:8c:75:91: 3d:77:4d:11:d8:8a:8b:29:8f:6b:a9:b9:be:df:ff:8b:2b:f4: 7a:6c:bf:62:4e:d6:49:29:9f:ed:08:1b:0b:d8:4b:a2:30:b5: 3e:36:cf:a5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULqe63g2yfT7RUzEeOnTW1PttWecwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI3MDA1MzI2WhcNMjUxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjE2NGM2NDZkNzI1YzMzMDcxMmE2NDg0NGE4ZTIyY2Iw ZWFmY2ZlNzZiMzIyMjA0MGExNTQxZjVkNDI5MTcwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbh5raVe117+jjA5Zr39AfqgMd3OCqCRbuF6AJ7N+tvDku a81gS7lk+29mxNtFD/l/pVXcl9RIoA1QKIWIHLUYI7J2K4Pk0tT4J8LiaMLX0BJ6 0LFRzoRcb3l0Is6tFPRq2M+X26KRdQzWoZOGX8Z0Qsj/H9Prt+KGogMUzokjstbF EpLXoUaTlNCqYrKE7R/BiA8IJcqSNv9RZIkySo8sMh8HZb52rbUZLEMKi5LbrWCM OPg/yqJ56gZ8o+QHHPw2zx1pjYzFRy2GN/foxozyMLmlV2/V98LzW0Lu7qCF036V MIbUhNKSm4oM4LeRT32pJO0TNp1h6FfV5GwqOg7JAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUhYoZ6la68D9IBd2bqiuRWHwHzY8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2E5OGE5NmYyLWZiODQtNDRhZS1hNTlkLWViZWI2MDU5MTk0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QQwDQYJKoZIhvcNAQELBQADggEBABEr0ppwz7tz93MK4c+ibn4x ISrcXX2tBg+b9XUejH4FTsR6TQUIEN1xq/uGxp+mLOIaLgCEvrObFwdjcHFPxPIJ UlVT4PRPLQrQ74cYvMjhEmIhRT2uUNqeCePG2G0MF/1X7ct92sRGctDFYYED8/aP +9sO52fqh9IcZzmCAgIBWDty0osjs2ja62I6HFoJ7kFtW6nsazcUr+76EnUhhSk0 Jnv9Q+mTCvP7qXn8LsWcsyJo1WePD8fYxJ1YTzdkgYrtu8kI+JmT4AIq60P0cb4T NiV2/4x1kT13TRHYiospj2upub7f/4sr9Hpsv2JO1kkpn+0IGwvYS6IwtT42z6U= -----END CERTIFICATE-----Generated at Mon Oct 20 07:18:38 2025 by rpki-client