$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa File: e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa (raw, json) Hash identifier: XTkH93LGpHiwgf/HS6Ky7Bl1OyGdo6LRY7Kix8/eNbI= Subject key identifier: 1C:EA:B8:01:87:26:D6:CB:40:4F:3A:1B:CD:4F:B5:7B:08:32:2B:33 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7C2F593E03AE2C9DE92BE8EA899A81731BB7A645 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa Signing time: Fri 10 Oct 2025 17:04:22 +0000 ROA not before: Fri 10 Oct 2025 17:04:22 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:5400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2f:59:3e:03:ae:2c:9d:e9:2b:e8:ea:89:9a:81:73:1b:b7:a6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 10 17:04:22 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=f1caa05a1f7907d60c2abea5f488d0ee89b1004e0f62efa181266cf7ef082744, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:c3:83:47:ee:54:7f:6f:6e:03:aa:8d:d4: aa:a9:f9:f8:d4:d0:5b:28:81:94:10:4b:82:68:01: 77:ac:fd:84:5d:da:a7:15:fa:ef:4c:04:4c:b7:3d: d7:1b:71:5b:43:89:57:c5:43:64:19:91:f9:72:17: f2:38:ef:2a:fd:53:70:3e:a7:60:1f:8f:61:6e:11: ba:63:06:bf:34:ef:0f:40:cc:76:e0:37:bb:d2:9f: 2b:6d:b7:5c:98:2f:7d:58:a4:e1:60:32:80:db:0d: ec:30:21:cd:6b:c2:2d:52:d5:db:c6:3c:e7:11:60: 34:d2:6c:21:13:87:60:cf:da:85:ad:c4:81:f2:01: 46:5f:c9:59:59:cc:ac:80:da:24:0d:b6:dc:96:a7: 94:24:ed:64:66:8a:32:8c:a0:a3:9a:83:aa:be:40: 72:10:ed:a8:1b:68:44:c1:de:32:35:22:c6:8c:30: 40:f7:26:56:3c:71:52:61:02:6a:8a:91:30:77:93: ff:77:4b:6a:0c:b7:6b:a5:97:fe:77:af:7a:19:e6: 66:18:8f:a1:97:e3:0e:a0:b4:c8:74:4f:f0:45:f3: 0e:93:4e:91:09:e1:fa:9d:b3:c0:e0:a4:30:4e:ec: a1:22:d8:ae:93:7a:2b:58:88:4a:40:f5:2c:52:98: 78:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EA:B8:01:87:26:D6:CB:40:4F:3A:1B:CD:4F:B5:7B:08:32:2B:33 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5400::/40 Signature Algorithm: sha256WithRSAEncryption 0d:ec:91:64:11:95:ab:11:2c:93:fc:5c:46:b9:80:c0:3d:40: 1a:98:50:ee:0d:58:d2:37:8d:90:f0:d9:6f:d5:9a:6f:55:75: 8d:0a:ee:a0:8a:8a:e2:b4:b9:a5:53:e7:d7:72:88:b5:c8:b2: b7:79:c6:72:40:b1:77:11:7c:59:f3:df:39:80:16:1b:47:a1: 89:f5:d5:b9:18:96:e1:70:4a:22:2d:1f:af:e3:c3:68:be:c6: 96:f8:df:1e:0b:a0:9a:48:d8:00:fb:f3:a7:ec:73:de:f2:44: 0a:56:94:e8:0a:62:13:4e:7a:b2:00:cc:ec:86:0b:b7:17:63: bd:89:f6:52:90:38:dc:d4:8f:55:50:b9:54:f1:c9:4f:3b:c5: c0:4f:43:0a:c9:9c:6a:da:16:19:64:a0:2b:d8:db:3a:58:32: bb:f4:b1:92:43:6b:7e:71:48:09:39:c6:0f:0b:03:c0:00:fc: fe:27:cb:d3:05:fc:8a:01:0a:c1:36:6b:59:d4:d9:12:56:1f: 45:0f:21:74:bc:ce:00:70:be:29:1e:13:0f:d0:9b:32:ca:10: 64:e4:e3:1e:de:4d:4d:9c:e0:e6:7e:e9:6d:b9:45:b6:7f:f3: 41:b6:0c:fb:a9:43:b9:77:45:5c:08:a0:2d:9d:44:02:f6:17: 0b:29:fe:fa -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUfC9ZPgOuLJ3pK+jqiZqBcxu3pkUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDEwMTcwNDIyWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMWNhYTA1YTFmNzkwN2Q2MGMyYWJlYTVmNDg4ZDBlZTg5 YjEwMDRlMGY2MmVmYTE4MTI2NmNmN2VmMDgyNzQ0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2B8ODR+5Uf29uA6qN1Kqp+fjU0FsogZQQS4JoAXes/YRd 2qcV+u9MBEy3PdcbcVtDiVfFQ2QZkflyF/I47yr9U3A+p2Afj2FuEbpjBr807w9A zHbgN7vSnyttt1yYL31YpOFgMoDbDewwIc1rwi1S1dvGPOcRYDTSbCETh2DP2oWt xIHyAUZfyVlZzKyA2iQNttyWp5Qk7WRmijKMoKOag6q+QHIQ7agbaETB3jI1IsaM MED3JlY8cVJhAmqKkTB3k/93S2oMt2ull/53r3oZ5mYYj6GX4w6gtMh0T/BF8w6T TpEJ4fqds8DgpDBO7KEi2K6TeitYiEpA9SxSmHhbAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHOq4AYcm1stATzobzU+1ewgyKzMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2UxYTQ0MWI5LTI0ZTUtNDFlOS05MWU4LTVlN2QxNGZiZGVmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwVDANBgkqhkiG9w0BAQsFAAOCAQEADeyRZBGVqxEsk/xcRrmAwD1A GphQ7g1Y0jeNkPDZb9Wab1V1jQruoIqK4rS5pVPn13KItciyt3nGckCxdxF8WfPf OYAWG0ehifXVuRiW4XBKIi0fr+PDaL7GlvjfHgugmkjYAPvzp+xz3vJEClaU6Api E056sgDM7IYLtxdjvYn2UpA43NSPVVC5VPHJTzvFwE9DCsmcatoWGWSgK9jbOlgy u/SxkkNrfnFICTnGDwsDwAD8/ifL0wX8igEKwTZrWdTZElYfRQ8hdLzOAHC+KR4T D9CbMsoQZOTjHt5NTZzg5n7pbblFtn/zQbYM+6lDuXdFXAigLZ1EAvYXCyn++g== -----END CERTIFICATE-----Generated at Mon Oct 20 12:28:31 2025 by rpki-client