$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa File: 4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa (raw, json) Hash identifier: //R5BVKqI88SwnuABSt1jG8EXBkWUhcb4CP5XHusLjY= Subject key identifier: E7:AF:7E:01:BA:B8:A5:DD:24:D4:4F:F3:98:E4:0B:23:97:96:8B:38 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6F4BE3CFC0CD3FE76D3BAFC1829F39CFBF78F834 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa Signing time: Tue 21 Oct 2025 13:10:05 +0000 ROA not before: Tue 21 Oct 2025 13:10:05 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:4b:e3:cf:c0:cd:3f:e7:6d:3b:af:c1:82:9f:39:cf:bf:78:f8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 13:10:05 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=b2c4dd66d256ede291028f75748df0e2d7aab11ef2cfa3b6223d4415920ee8df, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:54:53:ce:c6:5f:44:1b:ad:f6:a1:ef:f7: 01:f0:bc:e3:71:e5:72:5b:71:a9:c7:77:45:cf:01: 1f:f8:12:e4:b3:25:b3:cc:7d:be:cc:d2:ea:e1:4d: 45:7a:b6:d7:7b:b0:5c:87:22:ca:2d:6e:fe:74:07: 8d:c4:15:79:3e:78:63:fe:7f:9d:c7:f1:52:94:04: 88:ea:fe:e1:41:56:b9:c4:07:14:f7:36:64:2b:c6: 0a:0b:47:ee:4c:95:e4:0f:c5:5d:6c:24:78:08:60: 62:cd:81:6f:7c:f4:62:20:12:c0:8a:33:cc:4c:24: b2:70:3e:9b:de:82:59:c2:e4:75:e8:27:c6:5b:be: be:8c:cf:e7:4c:d8:b6:46:f0:c1:51:a0:f5:af:9a: 79:85:4a:9f:29:fb:0f:ab:5b:e8:69:f8:c0:a1:4a: b7:49:cf:ad:3a:ab:91:d3:84:43:53:d2:ae:97:86: de:28:0d:11:52:3d:09:79:24:86:cc:12:dd:2b:5a: b9:7d:7b:ad:53:a0:82:8d:da:ac:9f:e5:c2:97:8a: 0f:d6:fa:cf:89:bf:26:18:eb:43:04:db:f7:cf:b7: eb:0a:86:70:eb:3a:3e:49:c2:43:e2:45:26:b1:88: c9:84:bf:bf:3a:a4:a1:96:74:21:77:4f:e4:c9:b2: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AF:7E:01:BA:B8:A5:DD:24:D4:4F:F3:98:E4:0B:23:97:96:8B:38 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4a8623c4-10a0-46b6-a5f5-c94e84c56867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:a0::/48 Signature Algorithm: sha256WithRSAEncryption 1c:b6:b1:b3:14:ac:56:f2:a2:38:40:95:2a:36:d3:ca:d0:ee: c8:4d:84:b2:55:70:d2:96:25:3a:39:13:a5:4f:77:79:89:b7: a3:a1:e8:69:a9:bd:47:b5:87:3c:2b:d9:ac:e6:22:b2:83:d9: e9:ed:58:05:e4:b7:8a:ad:c3:46:5d:f4:86:0e:8d:06:48:7e: 5a:63:8d:d8:de:78:67:a7:31:ab:b1:21:f8:2e:41:65:37:8b: b8:a4:c1:90:a5:fc:5e:6a:47:20:9a:c4:1a:65:92:dc:73:3d: a5:26:c4:b9:8a:f7:40:02:80:69:e3:6e:e4:ef:cb:1b:42:55: 72:c8:a8:4b:19:fe:6b:78:c0:c5:df:7e:1e:fc:a7:4b:12:34: ed:aa:70:36:bb:3f:02:93:5f:2a:55:4d:b9:05:6e:e1:7f:77: 5d:13:24:c6:6b:e1:82:c3:ee:81:ac:e2:11:d3:bd:b1:23:be: fb:df:3d:8d:a5:a1:b2:de:fe:ff:78:81:0b:d1:f0:92:21:d8: bc:e9:fe:dc:77:e5:ec:9a:ac:22:db:d5:b8:f0:e9:72:cb:e7: e3:c6:0b:e2:01:4e:3b:0b:40:69:6a:53:95:c3:7a:07:fd:b7: ff:83:dd:bd:94:f7:ee:24:df:5c:d0:8f:e0:d2:1b:5b:b9:38: 37:22:86:59 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUb0vjz8DNP+dtO6/Bgp85z794+DQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTMxMDA1WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmM0ZGQ2NmQyNTZlZGUyOTEwMjhmNzU3NDhkZjBlMmQ3 YWFiMTFlZjJjZmEzYjYyMjNkNDQxNTkyMGVlOGRmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKyVRTzsZfRBut9qHv9wHwvONx5XJbcanHd0XPAR/4EuSz JbPMfb7M0urhTUV6ttd7sFyHIsotbv50B43EFXk+eGP+f53H8VKUBIjq/uFBVrnE BxT3NmQrxgoLR+5MleQPxV1sJHgIYGLNgW989GIgEsCKM8xMJLJwPpveglnC5HXo J8Zbvr6Mz+dM2LZG8MFRoPWvmnmFSp8p+w+rW+hp+MChSrdJz606q5HThENT0q6X ht4oDRFSPQl5JIbMEt0rWrl9e61ToIKN2qyf5cKXig/W+s+JvyYY60ME2/fPt+sK hnDrOj5JwkPiRSaxiMmEv786pKGWdCF3T+TJsqCfAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU569+Abq4pd0k1E/zmOQLI5eWizgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzRhODYyM2M0LTEwYTAtNDZiNi1hNWY1LWM5NGU4NGM1Njg2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwAKAwDQYJKoZIhvcNAQELBQADggEBABy2sbMUrFbyojhAlSo208rQ 7shNhLJVcNKWJTo5E6VPd3mJt6Oh6GmpvUe1hzwr2azmIrKD2entWAXkt4qtw0Zd 9IYOjQZIflpjjdjeeGenMauxIfguQWU3i7ikwZCl/F5qRyCaxBplktxzPaUmxLmK 90ACgGnjbuTvyxtCVXLIqEsZ/mt4wMXffh78p0sSNO2qcDa7PwKTXypVTbkFbuF/ d10TJMZr4YLD7oGs4hHTvbEjvvvfPY2lobLe/v94gQvR8JIh2Lzp/tx35eyarCLb 1bjw6XLL5+PGC+IBTjsLQGlqU5XDegf9t/+D3b2U9+4k31zQj+DSG1u5ODcihlk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:14 2025 by rpki-client