$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa File: b90bcce5-377e-4df4-b77e-97a06ec916c4.roa (raw, json) Hash identifier: s+QSvPTJBSGyrSVYOprzC5SEtiHHSdWhc8QyPBchAa0= Subject key identifier: 97:B9:F4:CC:B5:33:A0:BD:4C:F3:61:97:0E:EE:2D:B1:65:B6:80:DE Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 50FA4328FAA0F50E1FFA4D838DEC4578E990F86D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa Signing time: Fri 26 Sep 2025 18:10:57 +0000 ROA not before: Fri 26 Sep 2025 18:10:57 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:fa:43:28:fa:a0:f5:0e:1f:fa:4d:83:8d:ec:45:78:e9:90:f8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:10:57 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=6cb25da527b4c3a81dc4d1dcc1c9a521deeedfcd77fdfb9171f102d096425a15, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:86:57:09:96:25:b2:4f:6b:f4:75:6f:9d: bf:94:cd:4d:30:fb:e9:49:b4:4d:f4:7e:61:22:3b: db:e7:92:6f:4d:14:0a:3e:d3:ba:ac:c4:3b:f2:3c: 5a:1f:37:ca:60:2b:4f:db:90:df:0d:1a:bd:c7:96: e5:8d:40:a0:b4:10:d0:e7:7c:a2:c9:9e:e4:4c:23: ce:45:79:87:6b:81:af:f5:d1:f0:72:a4:6f:58:22: 05:c0:da:96:b9:e3:4f:0e:ce:85:25:2d:2a:85:14: 27:d0:32:c9:d7:b0:6e:5c:f5:e8:89:35:4a:db:45: 50:51:7c:16:c4:92:b7:e2:e0:6a:d0:30:2b:a1:a9: 81:69:50:cb:8b:37:a1:27:e9:30:f1:be:45:cc:dd: 3c:61:2e:ee:96:c5:3c:d9:17:13:15:25:43:78:88: 22:d0:48:e1:91:01:62:c1:ff:a2:09:31:c4:40:f4: 81:a2:a7:64:31:58:a5:21:13:67:f1:fb:88:63:1e: 53:54:15:4c:e3:15:db:a7:5c:b6:13:08:38:90:5b: 3d:0b:f0:5e:f7:4f:3f:40:3b:3f:aa:96:13:97:ef: 3f:79:f7:71:c3:94:16:d1:34:86:52:2d:77:12:77: 7f:b0:75:2f:86:14:7c:b4:67:17:ca:8c:f0:72:65: d2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B9:F4:CC:B5:33:A0:BD:4C:F3:61:97:0E:EE:2D:B1:65:B6:80:DE X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:30::/44 Signature Algorithm: sha256WithRSAEncryption 20:40:e8:0a:a6:a0:7e:65:8d:56:88:27:ee:5d:60:ee:c7:e4: 44:87:92:05:95:47:34:ff:3b:a3:d3:5b:0b:a4:10:fa:27:58: 91:e7:3b:08:52:47:8a:f8:4d:53:d5:d9:50:0e:27:4a:46:1f: 68:cc:08:8b:f3:a3:96:7a:15:56:bb:bc:76:df:6d:b5:3f:8a: 10:c5:18:f8:3f:f9:ac:fe:25:ad:62:e2:4f:a5:14:71:fe:9d: 81:51:ce:8a:bc:16:b8:12:43:0c:ee:18:5b:f3:56:53:bd:d7: 4d:8d:8b:a9:04:1c:94:53:86:cd:ea:fa:30:4c:ef:d3:df:ca: c1:35:9e:3e:78:6d:b7:ab:47:f0:91:67:ab:cd:de:5b:f9:33: 70:44:f3:e5:2b:e5:9a:99:62:22:40:f8:1d:f3:26:f5:32:92: 59:56:48:ca:40:34:b7:89:5e:be:09:a0:1a:cc:ef:d6:8a:ef: 3b:c9:e5:ad:19:95:4a:7e:59:17:71:6b:f5:ae:d8:75:c5:02: b7:97:90:eb:68:c9:9f:9f:d2:7d:05:c9:56:15:ae:a8:58:bd: e2:6f:8b:70:00:6a:0a:9b:1a:de:76:27:2c:69:7c:f4:0c:c0: 5a:a4:c2:98:ef:d7:08:ca:4a:46:f4:c4:0e:7b:b1:f2:b2:29: b0:47:dc:96 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUUPpDKPqg9Q4f+k2DjexFeOmQ+G0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMDU3WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2Y2IyNWRhNTI3YjRjM2E4MWRjNGQxZGNjMWM5YTUyMWRl ZWVkZmNkNzdmZGZiOTE3MWYxMDJkMDk2NDI1YTE1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFdYZXCZYlsk9r9HVvnb+UzU0w++lJtE30fmEiO9vnkm9N FAo+07qsxDvyPFofN8pgK0/bkN8NGr3HluWNQKC0ENDnfKLJnuRMI85FeYdrga/1 0fBypG9YIgXA2pa5408OzoUlLSqFFCfQMsnXsG5c9eiJNUrbRVBRfBbEkrfi4GrQ MCuhqYFpUMuLN6En6TDxvkXM3TxhLu6WxTzZFxMVJUN4iCLQSOGRAWLB/6IJMcRA 9IGip2QxWKUhE2fx+4hjHlNUFUzjFdunXLYTCDiQWz0L8F73Tz9AOz+qlhOX7z95 93HDlBbRNIZSLXcSd3+wdS+GFHy0ZxfKjPByZdJTAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUl7n0zLUzoL1M82GXDu4tsWW2gN4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2I5MGJjY2U1LTM3N2UtNGRmNC1iNzdlLTk3YTA2ZWM5MTZjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwADAwDQYJKoZIhvcNAQELBQADggEBACBA6AqmoH5ljVaIJ+5dYO7H 5ESHkgWVRzT/O6PTWwukEPonWJHnOwhSR4r4TVPV2VAOJ0pGH2jMCIvzo5Z6FVa7 vHbfbbU/ihDFGPg/+az+Ja1i4k+lFHH+nYFRzoq8FrgSQwzuGFvzVlO9102Ni6kE HJRThs3q+jBM79PfysE1nj54bberR/CRZ6vN3lv5M3BE8+Ur5ZqZYiJA+B3zJvUy kllWSMpANLeJXr4JoBrM79aK7zvJ5a0ZlUp+WRdxa/Wu2HXFAreXkOtoyZ+f0n0F yVYVrqhYveJvi3AAagqbGt52JyxpfPQMwFqkwpjv1wjKSkb0xA57sfKyKbBH3JY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:46 2025 by rpki-client