$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa File: 3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa (raw, json) Hash identifier: 61gfi32pDs/tqlahMdpgLmBMW9xW+1088F6FJxmiLyM= Subject key identifier: DF:9B:50:FB:D2:EB:B1:CA:1E:CD:43:17:0B:55:B8:7F:96:12:5F:F1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 311C42CC109191190BC8CE22B71EAA7F35392A24 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa Signing time: Fri 31 Oct 2025 01:50:04 +0000 ROA not before: Fri 31 Oct 2025 01:50:04 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1c:42:cc:10:91:91:19:0b:c8:ce:22:b7:1e:aa:7f:35:39:2a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:04 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=66606cd5395b8eb28ce11cb9b8bec03516c0d6c802a69083529ee622ec5960f7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:c9:8e:ab:cf:1f:50:15:d5:c8:ea:7d:16: 6c:ce:20:b9:e0:a3:1a:6b:11:1d:e5:ea:96:2d:31: 41:7d:af:24:de:4e:e2:8e:78:77:c4:e5:a8:ee:26: 72:e3:a1:bc:5d:4a:6d:22:ab:df:b2:95:2a:20:1b: 5f:ba:ce:53:b8:eb:9e:dd:77:80:3d:93:61:3a:6e: 2b:e8:0f:27:91:da:6f:4a:40:73:39:dd:4f:71:5b: e4:ef:d2:8a:1a:54:d9:8c:0b:c7:20:3a:4a:12:12: 23:8e:f2:65:16:b3:4c:88:93:36:78:b3:2b:67:68: e3:1f:a6:6b:2f:5c:9a:53:ae:61:a8:13:9f:8d:0b: aa:a4:23:3d:c9:a4:24:53:33:39:d0:35:9c:52:e0: 43:53:7c:2b:eb:ce:ca:53:d7:7a:cc:b0:92:48:b2: 8c:15:74:ff:42:87:1e:d5:3a:52:c8:b3:50:f7:f9: e3:36:a8:2d:c6:cc:00:db:26:1b:ae:85:b6:a8:fa: 32:47:04:0a:c2:f6:88:cd:ec:5c:66:dd:a9:fe:df: a2:a5:cf:7f:d6:18:2c:e0:52:fa:d4:80:f6:30:47: 7d:4f:f7:01:54:f3:b4:2f:41:66:e2:b3:3d:b7:c0: 39:1c:51:df:ea:1c:3e:a9:d5:4c:de:2c:1f:e0:bd: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9B:50:FB:D2:EB:B1:CA:1E:CD:43:17:0B:55:B8:7F:96:12:5F:F1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3d4602c0-9599-4325-ba8d-dc8b19c6c24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610b::/48 Signature Algorithm: sha256WithRSAEncryption 7c:4b:cd:9c:84:7d:4b:8a:d7:5d:7a:c9:ed:43:24:af:bf:22: dd:7b:64:6a:59:e4:06:d6:82:49:fe:21:19:7f:d8:43:60:a3: 40:b8:96:e9:1d:5e:1c:38:17:c8:c9:04:71:11:b9:d3:74:a8: 61:f1:c3:c8:ca:7b:ed:34:f3:31:75:0f:10:d4:5a:e8:37:2c: db:b4:17:f8:cf:09:21:50:18:7f:b3:7c:09:af:59:00:a9:39: f0:91:2d:1a:90:a7:5f:93:fd:37:ba:f6:69:fe:9b:aa:c2:db: 89:29:1a:0f:c3:ee:df:0d:ad:69:5d:77:31:22:55:aa:cd:f5: b2:2f:b8:90:49:8d:57:5e:c0:46:3d:ff:3f:28:27:9c:40:64: 10:1f:e5:35:64:c3:37:73:eb:09:93:6d:00:b9:19:5f:36:3c: c7:d2:41:12:87:0f:27:b1:b7:da:b2:7d:23:1d:26:c0:b0:e6: 71:bd:c4:d5:6b:22:1f:a4:65:21:4d:3d:f4:f4:6a:db:ac:c2: 96:50:9e:d9:33:99:98:ce:71:91:36:3d:f7:fb:bc:b7:68:74: db:e1:a1:8e:39:02:37:8a:b6:25:3e:72:5b:a0:bf:c6:83:4f: 08:92:50:3b:70:0f:47:73:b7:5b:1b:f7:56:5c:6e:73:63:bb: 5d:e2:68:76 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMRxCzBCRkRkLyM4itx6qfzU5KiQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDA0WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjYwNmNkNTM5NWI4ZWIyOGNlMTFjYjliOGJlYzAzNTE2 YzBkNmM4MDJhNjkwODM1MjllZTYyMmVjNTk2MGY3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOiMmOq88fUBXVyOp9FmzOILngoxprER3l6pYtMUF9ryTe TuKOeHfE5ajuJnLjobxdSm0iq9+ylSogG1+6zlO4657dd4A9k2E6bivoDyeR2m9K QHM53U9xW+Tv0ooaVNmMC8cgOkoSEiOO8mUWs0yIkzZ4sytnaOMfpmsvXJpTrmGo E5+NC6qkIz3JpCRTMznQNZxS4ENTfCvrzspT13rMsJJIsowVdP9Chx7VOlLIs1D3 +eM2qC3GzADbJhuuhbao+jJHBArC9ojN7Fxm3an+36Klz3/WGCzgUvrUgPYwR31P 9wFU87QvQWbisz23wDkcUd/qHD6p1UzeLB/gvY45AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU35tQ+9LrscoezUMXC1W4f5YSX/EwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzNkNDYwMmMwLTk1OTktNDMyNS1iYThkLWRjOGIxOWM2YzI0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQswDQYJKoZIhvcNAQELBQADggEBAHxLzZyEfUuK1116ye1DJK+/ It17ZGpZ5AbWgkn+IRl/2ENgo0C4lukdXhw4F8jJBHERudN0qGHxw8jKe+008zF1 DxDUWug3LNu0F/jPCSFQGH+zfAmvWQCpOfCRLRqQp1+T/Te69mn+m6rC24kpGg/D 7t8NrWlddzEiVarN9bIvuJBJjVdewEY9/z8oJ5xAZBAf5TVkwzdz6wmTbQC5GV82 PMfSQRKHDyext9qyfSMdJsCw5nG9xNVrIh+kZSFNPfT0atuswpZQntkzmZjOcZE2 Pff7vLdodNvhoY45AjeKtiU+clugv8aDTwiSUDtwD0dzt1sb91ZcbnNju13iaHY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:42:10 2025 by rpki-client