$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa File: 5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa (raw, json) Hash identifier: DTQkUoYMP0Vk0wF578jRw4bDNHkgAiztIxQPzKuMo0I= Subject key identifier: 30:6D:56:10:1F:DF:3C:7C:BC:1B:D7:45:88:88:C2:11:57:D8:14:D0 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 01A198D77CCF93D1C15DE1F9E0251BABD449381F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa Signing time: Tue 21 Oct 2025 12:50:07 +0000 ROA not before: Tue 21 Oct 2025 12:50:07 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:551a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:98:d7:7c:cf:93:d1:c1:5d:e1:f9:e0:25:1b:ab:d4:49:38:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 12:50:07 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=cc308eb9cc05a493071a8a43073876a89bf8300154daa103f997b575061a1523, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bc:43:f3:a9:9e:13:67:f8:e0:02:82:1c:0d: 31:2f:ed:e2:cb:7b:91:c6:4a:f3:a9:dd:34:90:da: 94:02:93:72:23:ab:d8:ec:11:32:f5:45:a3:0a:7d: e4:87:a9:5b:94:95:6b:e9:30:0e:58:7d:9e:d2:65: a0:8e:96:b4:21:b5:73:5c:9c:9b:14:5a:34:48:fd: 79:6e:02:e4:2c:62:49:f0:51:c7:66:2e:3e:2b:06: 2c:9a:74:e7:42:0e:78:a7:5b:7c:16:bf:e3:88:09: a1:76:18:d3:cc:6c:9c:b4:19:70:4b:bb:67:1e:51: 66:3d:80:0f:82:fc:6a:68:c7:1a:3e:7f:68:cd:93: 79:16:ba:40:36:2f:0e:b6:3b:29:3e:1b:a8:54:87: f6:3a:54:ae:eb:6b:e0:32:43:60:14:db:f4:dc:e1: 1e:84:6d:46:cf:77:f4:fb:88:91:45:9f:0a:dd:11: ce:0f:eb:f4:35:0e:b7:e7:f5:1a:be:63:f6:91:01: f9:75:e7:6f:06:0c:ea:88:7a:99:5f:db:a7:eb:15: cd:7e:e9:a4:d6:6a:16:3d:c0:e8:f6:3f:df:42:d4: 0d:93:6f:5f:43:61:be:6c:6d:4f:9b:f1:2d:6e:71: 73:c1:cf:82:22:d3:ac:23:6e:0e:08:0b:e8:b9:f2: d5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6D:56:10:1F:DF:3C:7C:BC:1B:D7:45:88:88:C2:11:57:D8:14:D0 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:551a::/48 Signature Algorithm: sha256WithRSAEncryption 49:fa:1d:2b:45:cb:99:59:06:c5:1d:ae:82:4f:f6:5c:22:bc: b4:6e:d0:f1:04:ab:9f:f2:d9:c2:9f:9f:fb:ec:cd:14:87:19: 02:7f:45:9e:1a:bc:1e:80:c9:34:b0:31:46:75:11:1b:92:53: 51:61:1b:26:65:28:05:95:07:81:54:0c:ce:c9:fe:68:e7:68: d1:d8:9a:5f:ea:6f:a0:45:42:43:4c:7e:0b:55:a3:08:0b:49: a1:bf:fa:04:f7:3f:9a:7b:30:ea:30:cd:53:9d:cc:7f:3d:b6: ad:7e:fe:90:ee:ab:d5:8a:7e:8f:a2:47:be:d4:48:21:aa:59: 37:8a:90:1f:e3:19:4d:24:ce:92:7d:4b:62:d4:e5:87:aa:d7: ae:92:f6:bc:20:1a:f1:7d:56:13:09:6e:8e:a5:d3:cd:2b:30: 6e:61:e5:d8:31:5d:60:fe:65:b7:0d:43:d4:50:35:a1:0f:18: dd:ed:a4:ac:0b:de:fc:60:8f:d9:1d:2e:53:ae:b2:83:e2:38: 98:f6:aa:79:30:04:08:c8:2b:9d:bf:1e:36:0c:ef:3f:c4:59: 8a:ef:dc:69:84:8a:d7:03:c9:34:c2:be:4d:e5:51:bc:5c:9d: 11:c8:f5:f3:71:b8:dc:51:fb:c7:9d:41:33:0f:32:f2:34:56: e9:c3:af:8e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAaGY13zPk9HBXeH54CUbq9RJOB8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTI1MDA3WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzMwOGViOWNjMDVhNDkzMDcxYThhNDMwNzM4NzZhODli ZjgzMDAxNTRkYWExMDNmOTk3YjU3NTA2MWExNTIzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVvEPzqZ4TZ/jgAoIcDTEv7eLLe5HGSvOp3TSQ2pQCk3Ij q9jsETL1RaMKfeSHqVuUlWvpMA5YfZ7SZaCOlrQhtXNcnJsUWjRI/XluAuQsYknw UcdmLj4rBiyadOdCDninW3wWv+OICaF2GNPMbJy0GXBLu2ceUWY9gA+C/Gpoxxo+ f2jNk3kWukA2Lw62Oyk+G6hUh/Y6VK7ra+AyQ2AU2/Tc4R6EbUbPd/T7iJFFnwrd Ec4P6/Q1Drfn9Rq+Y/aRAfl1528GDOqIeplf26frFc1+6aTWahY9wOj2P99C1A2T b19DYb5sbU+b8S1ucXPBz4Ii06wjbg4IC+i58tXFAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMG1WEB/fPHy8G9dFiIjCEVfYFNAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzVhZTM1N2UxLWVmOTUtNGY1Zi1hNmMzLThhZDRmNGZhMzAxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVRowDQYJKoZIhvcNAQELBQADggEBAEn6HStFy5lZBsUdroJP9lwi vLRu0PEEq5/y2cKfn/vszRSHGQJ/RZ4avB6AyTSwMUZ1ERuSU1FhGyZlKAWVB4FU DM7J/mjnaNHYml/qb6BFQkNMfgtVowgLSaG/+gT3P5p7MOowzVOdzH89tq1+/pDu q9WKfo+iR77USCGqWTeKkB/jGU0kzpJ9S2LU5Yeq166S9rwgGvF9VhMJbo6l080r MG5h5dgxXWD+ZbcNQ9RQNaEPGN3tpKwL3vxgj9kdLlOusoPiOJj2qnkwBAjIK52/ HjYM7z/EWYrv3GmEitcDyTTCvk3lUbxcnRHI9fNxuNxR+8edQTMPMvI0VunDr44= -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:39 2025 by rpki-client