$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa File: f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa (raw, json) Hash identifier: vYqKvdQ9MyMxtSJGIVn0LcJk/EU0rqC7enpVIK1gIfw= Subject key identifier: 10:DE:99:41:00:E7:A2:8C:79:0B:C6:CE:8D:3E:A1:E4:1E:DF:3B:02 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 406863C85C1BC197B4F9504086286ED1A635D912 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa Signing time: Fri 26 Sep 2025 18:10:59 +0000 ROA not before: Fri 26 Sep 2025 18:10:59 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:8000::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:68:63:c8:5c:1b:c1:97:b4:f9:50:40:86:28:6e:d1:a6:35:d9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:10:59 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=9e931b321d928738bbbe5cf719c18cec9a09f00c87018a48830abbda012047bc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cc:6c:f5:e4:c8:41:b4:33:74:22:1d:8a:c6: 14:3e:62:c3:64:04:21:12:04:00:56:4f:23:56:ef: d7:89:ca:6c:82:38:21:28:e2:1d:dd:3e:38:28:66: 41:22:e3:54:80:9b:52:51:60:18:ec:86:7c:55:cc: d5:8d:35:ba:3f:38:57:ae:68:9e:bb:74:81:75:d3: c5:79:cb:bd:84:d3:d5:d6:f9:91:98:e6:22:85:2c: 96:46:61:0d:c0:10:3c:a2:cf:99:63:ff:0f:14:e7: 99:a3:15:94:84:15:5b:6d:5c:34:99:94:47:ef:fc: ff:16:16:a8:dc:ef:59:76:a3:2d:8e:e0:75:8b:2b: 0b:b8:26:c9:af:31:c9:5b:3d:6e:7f:a6:02:da:c2: 6b:ca:f2:08:17:47:7b:45:15:10:e8:d2:b2:be:a7: 00:61:38:d4:2f:4c:c7:9a:af:2e:c3:0c:5b:2d:78: 20:72:16:fb:4e:f0:a2:a4:d9:59:59:7a:7f:3c:27: 88:88:8a:1d:a2:c7:01:f1:79:ce:c8:9f:3a:f0:5d: 61:20:4c:85:8a:18:cf:1d:57:ce:73:a6:69:90:2d: c2:e5:8a:b4:f7:1e:9c:23:af:96:7c:9f:ea:c0:51: f4:9f:9b:4c:56:e0:99:60:34:97:e8:41:18:88:3e: b4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DE:99:41:00:E7:A2:8C:79:0B:C6:CE:8D:3E:A1:E4:1E:DF:3B:02 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:8000::/42 Signature Algorithm: sha256WithRSAEncryption 65:69:09:47:19:19:36:91:fc:6a:78:62:83:b2:c9:0f:d8:bf: 5d:12:12:33:2c:5e:8c:fc:2a:24:1f:6f:71:7e:08:e8:11:73: 6a:0d:6a:53:3d:88:c0:c9:56:64:ec:cb:6a:22:0a:8b:37:16: cb:c4:07:86:3a:ea:5a:43:16:9f:08:6c:08:f3:54:eb:57:e5: 90:2e:9e:79:c3:c1:79:4d:e4:0e:37:fb:63:3d:89:46:5b:9f: 46:d7:c2:2c:ae:63:41:a3:92:b5:1d:69:84:06:e6:f1:c5:c6: a0:9a:01:df:1d:ca:f3:b5:5c:6c:6d:4b:cd:da:a8:9f:86:bd: 8a:7c:2c:c6:d2:d8:85:01:db:ba:a6:b4:a4:5a:09:7d:8d:82: fc:ee:d8:f6:45:49:19:18:0f:c3:70:85:2c:45:5e:eb:4b:ed: a7:fc:33:0d:07:f8:54:22:b5:a0:cd:c4:a2:f4:8e:9f:e8:55: d9:19:20:38:6a:3f:ef:14:2b:50:f9:6a:dc:9d:62:5d:60:31: 3b:49:7a:ad:33:26:18:0a:31:a4:a7:8e:71:b8:e6:4d:54:eb: b7:1c:f1:3c:80:1b:d6:c5:ae:31:7e:fc:6f:0f:4f:1f:e7:be: 8d:56:29:e1:c1:48:3f:8f:9b:10:53:35:79:13:51:b4:ae:05: 9c:34:07:38 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQGhjyFwbwZe0+VBAhihu0aY12RIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMDU5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTkzMWIzMjFkOTI4NzM4YmJiZTVjZjcxOWMxOGNlYzlh MDlmMDBjODcwMThhNDg4MzBhYmJkYTAxMjA0N2JjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpzGz15MhBtDN0Ih2KxhQ+YsNkBCESBABWTyNW79eJymyC OCEo4h3dPjgoZkEi41SAm1JRYBjshnxVzNWNNbo/OFeuaJ67dIF108V5y72E09XW +ZGY5iKFLJZGYQ3AEDyiz5lj/w8U55mjFZSEFVttXDSZlEfv/P8WFqjc71l2oy2O 4HWLKwu4JsmvMclbPW5/pgLawmvK8ggXR3tFFRDo0rK+pwBhONQvTMeary7DDFst eCByFvtO8KKk2VlZen88J4iIih2ixwHxec7InzrwXWEgTIWKGM8dV85zpmmQLcLl irT3Hpwjr5Z8n+rAUfSfm0xW4JlgNJfoQRiIPrRLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUEN6ZQQDnoox5C8bOjT6h5B7fOwIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2YzN2M4NjMzLWFhZjMtNGE0OS1iZmE2LTc3NWFiNzcyNGQzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD7gAAwDQYJKoZIhvcNAQELBQADggEBAGVpCUcZGTaR/Gp4YoOyyQ/Y v10SEjMsXoz8KiQfb3F+COgRc2oNalM9iMDJVmTsy2oiCos3FsvEB4Y66lpDFp8I bAjzVOtX5ZAunnnDwXlN5A43+2M9iUZbn0bXwiyuY0GjkrUdaYQG5vHFxqCaAd8d yvO1XGxtS83aqJ+GvYp8LMbS2IUB27qmtKRaCX2Ngvzu2PZFSRkYD8NwhSxFXutL 7af8Mw0H+FQitaDNxKL0jp/oVdkZIDhqP+8UK1D5atydYl1gMTtJeq0zJhgKMaSn jnG45k1U67cc8TyAG9bFrjF+/G8PTx/nvo1WKeHBSD+PmxBTNXkTUbSuBZw0Bzg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:14 2025 by rpki-client