$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16493254-23cd-454e-98e8-0cfbdb8f499f.roa File: 16493254-23cd-454e-98e8-0cfbdb8f499f.roa (raw, json) Hash identifier: 3pzGzjZqzH22UsJIgLbGOJPQL+MnCf0hzq/AeFglKzg= Subject key identifier: F2:BE:17:06:35:F8:0B:F5:06:5A:4D:32:ED:3E:4E:53:5F:80:E7:8C Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 40468B14AECFC2A7781561A04E9197C04763A1EE Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16493254-23cd-454e-98e8-0cfbdb8f499f.roa Signing time: Fri 31 Oct 2025 01:50:11 +0000 ROA not before: Fri 31 Oct 2025 01:50:11 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:611f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:46:8b:14:ae:cf:c2:a7:78:15:61:a0:4e:91:97:c0:47:63:a1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:11 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=533d9e8e1c1d34acafffa43492cd05f77510bb59d9651e0d13c30993dd030492, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:b3:99:58:81:8f:a8:8d:42:f4:8e:48:9d: c9:ac:15:1f:82:5f:1e:e1:04:aa:fc:35:e9:65:a7: 0f:87:83:2a:61:9a:0d:98:97:ae:5d:01:02:ae:d3: f8:ea:d9:fb:e5:ed:ec:a5:ba:92:53:1b:ba:22:5f: f6:cc:89:63:fa:e2:d5:fa:d1:12:5f:28:85:ee:3e: 9c:b2:e8:f4:b8:99:db:79:a7:73:bd:a0:eb:c3:af: c2:ba:e5:48:9b:07:0d:b5:56:b3:f6:9e:b8:b1:e0: 0b:a0:e4:d0:36:44:22:56:f7:91:3c:b4:11:3f:d2: 0d:e7:f2:88:25:5d:61:2b:36:5f:c8:9a:1c:5f:3f: a4:fd:dd:6a:b3:f5:5e:00:f4:24:c9:9a:3c:87:28: b2:f1:da:7e:2b:c3:b8:e7:c0:d0:32:a9:f4:e6:ec: 8a:a7:1f:f4:be:0d:70:db:c0:32:9d:ad:5b:dc:a9: be:9a:98:31:ee:9f:fb:66:65:47:1f:1e:1c:16:ca: 9b:12:c7:fb:60:25:6a:1f:6c:ca:9d:de:e7:45:6a: 69:1c:0d:8a:56:0a:85:82:8d:60:3e:86:94:46:c3: 4d:90:63:8d:fa:a4:7e:64:d5:6c:91:01:68:21:25: 1a:b4:f5:f0:69:df:8f:ec:0e:de:b8:68:7e:9b:92: 32:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BE:17:06:35:F8:0B:F5:06:5A:4D:32:ED:3E:4E:53:5F:80:E7:8C X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/16493254-23cd-454e-98e8-0cfbdb8f499f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:611f::/48 Signature Algorithm: sha256WithRSAEncryption 4b:9e:ba:e0:9a:8e:6f:aa:c9:3a:69:01:64:46:79:63:b8:e5: 58:86:8f:a2:0a:2a:ae:31:d9:f9:a0:48:8f:bc:db:f4:0e:37: d5:3e:c3:4a:32:13:1c:32:ae:db:3e:ad:20:84:db:fc:ca:f1: 5f:96:53:45:d7:74:75:ee:42:9b:c1:26:9a:9f:04:92:56:10: e4:c6:c3:33:b0:d4:58:82:b5:a5:d8:b4:bf:83:3a:13:04:1d: 6e:e2:b6:c3:07:b2:99:ed:a5:00:5b:78:79:2b:e2:9e:da:95: eb:e5:0a:b0:bb:9f:61:8f:80:41:f1:8f:61:9a:45:58:72:e8: cf:9e:2d:89:6f:01:9d:b7:ee:1e:9d:58:03:66:f2:85:32:8f: f5:f5:c3:ac:63:36:ef:8e:c7:80:ea:b5:82:e0:1b:61:d5:3f: bb:a0:20:c7:87:23:54:69:ca:d6:7d:5f:8f:73:86:27:82:e2: 79:dd:91:f6:90:e2:96:79:96:16:3e:e4:64:3b:a7:10:15:a9: ad:7c:9d:d6:b1:73:e4:8c:96:10:b5:a4:84:4e:f8:12:2c:6f: eb:b9:99:3f:25:1b:30:f5:33:6d:df:74:fb:ef:ab:ef:62:cf: cf:20:44:ad:c2:f0:2a:9e:98:8d:89:c4:20:28:d5:1b:c9:ca: 18:7b:30:0c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQEaLFK7Pwqd4FWGgTpGXwEdjoe4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDExWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzNkOWU4ZTFjMWQzNGFjYWZmZmE0MzQ5MmNkMDVmNzc1 MTBiYjU5ZDk2NTFlMGQxM2MzMDk5M2RkMDMwNDkyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYs7OZWIGPqI1C9I5IncmsFR+CXx7hBKr8Nellpw+Hgyph mg2Yl65dAQKu0/jq2fvl7eylupJTG7oiX/bMiWP64tX60RJfKIXuPpyy6PS4mdt5 p3O9oOvDr8K65UibBw21VrP2nrix4Aug5NA2RCJW95E8tBE/0g3n8oglXWErNl/I mhxfP6T93Wqz9V4A9CTJmjyHKLLx2n4rw7jnwNAyqfTm7IqnH/S+DXDbwDKdrVvc qb6amDHun/tmZUcfHhwWypsSx/tgJWofbMqd3udFamkcDYpWCoWCjWA+hpRGw02Q Y436pH5k1WyRAWghJRq09fBp34/sDt64aH6bkjL1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8r4XBjX4C/UGWk0y7T5OU1+A54wwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzE2NDkzMjU0LTIzY2QtNDU0ZS05OGU4LTBjZmJkYjhmNDk5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYR8wDQYJKoZIhvcNAQELBQADggEBAEueuuCajm+qyTppAWRGeWO4 5ViGj6IKKq4x2fmgSI+82/QON9U+w0oyExwyrts+rSCE2/zK8V+WU0XXdHXuQpvB JpqfBJJWEOTGwzOw1FiCtaXYtL+DOhMEHW7itsMHspntpQBbeHkr4p7alevlCrC7 n2GPgEHxj2GaRVhy6M+eLYlvAZ237h6dWANm8oUyj/X1w6xjNu+Ox4DqtYLgG2HV P7ugIMeHI1RpytZ9X49zhieC4nndkfaQ4pZ5lhY+5GQ7pxAVqa18ndaxc+SMlhC1 pIRO+BIsb+u5mT8lGzD1M23fdPvvq+9iz88gRK3C8CqemI2JxCAo1RvJyhh7MAw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:21 2025 by rpki-client