$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa File: 660f5154-1b49-462f-808c-68d8e6db8edc.roa (raw, json) Hash identifier: rWIemsrYQPyn4VJQsI2BHC1NrC1NxJUdlUd4EiRfQEc= Subject key identifier: 37:B4:EE:6F:B5:06:37:BB:5E:44:19:6E:D5:34:5D:25:EF:66:DF:C1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2F673D1EF373D717769D9CD66DD1E5F102D302E4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa Signing time: Fri 31 Oct 2025 01:50:11 +0000 ROA not before: Fri 31 Oct 2025 01:50:11 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:67:3d:1e:f3:73:d7:17:76:9d:9c:d6:6d:d1:e5:f1:02:d3:02:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:11 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=b15d58673183ec92b543a2feee3c6040123943b2f1af8d0124af04530e9db7ce, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:ca:5b:bf:66:17:10:07:50:8e:93:eb:ac: 61:4e:25:94:95:7b:54:2b:38:54:84:97:72:bd:e1: d9:cf:f8:e6:29:15:9b:2c:a2:73:77:85:b6:e6:80: 79:b4:d1:d7:79:13:a9:94:1b:90:22:c6:35:49:28: 5f:da:c6:20:7c:1d:64:0e:e4:03:a5:cd:a3:fe:8e: 87:7b:ea:6e:59:4a:5e:aa:7d:cf:0e:64:7e:4f:8e: 78:98:5c:d0:ee:af:21:66:7d:c1:f3:96:5c:0e:8c: 54:f6:90:ef:54:a3:77:dd:0e:03:75:23:ce:59:d5: e9:d0:5f:89:aa:58:f6:06:1c:f3:15:26:7c:92:62: d5:e1:68:99:5f:66:d8:15:82:42:f7:61:c7:cc:8a: d4:97:8c:d9:b8:07:62:40:e4:54:0f:2c:04:7a:a7: 44:24:9d:7b:1c:53:bc:ce:6a:b5:89:94:15:f6:82: 2b:d8:ba:8f:a8:fc:3d:ae:86:2a:5a:97:54:56:17: dc:12:89:9f:02:4d:e8:f8:94:f6:54:d6:25:2e:8a: 9b:3f:48:3c:7a:79:2d:90:17:20:33:d8:27:a2:d1: 61:55:26:91:be:e4:c4:d1:aa:49:aa:ea:c7:b7:dc: 82:9f:56:f9:f8:87:c2:a9:44:eb:cf:5a:c3:c4:79: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B4:EE:6F:B5:06:37:BB:5E:44:19:6E:D5:34:5D:25:EF:66:DF:C1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/660f5154-1b49-462f-808c-68d8e6db8edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6120::/48 Signature Algorithm: sha256WithRSAEncryption 74:8f:a9:5f:6d:10:dc:1c:1b:0f:16:1e:71:33:76:3d:6b:5e: 31:be:9e:64:2d:da:c8:a9:66:6f:bc:12:15:5d:ed:d0:53:32: 89:16:08:6a:14:d6:8f:36:01:ea:0a:7d:4e:50:d5:ee:2d:fc: 80:ee:18:c5:80:df:1a:02:99:70:bb:a0:b8:a3:ec:d6:2f:64: 38:5b:8d:a1:9b:5f:87:4b:c5:d9:36:07:72:a8:4c:e2:dd:46: c2:08:dd:01:76:f5:36:5b:94:59:a7:11:4a:8f:f3:4d:99:ff: 02:b8:05:be:11:b5:9b:ba:7e:ef:a5:4b:93:e2:5f:2e:33:1e: 8f:cb:13:1f:ce:c2:95:af:11:e6:00:55:44:bf:32:1a:b5:0d: e9:ac:0b:47:66:bc:bd:2d:22:a1:c6:84:a2:e3:7a:94:72:3f: e8:9d:7b:85:1a:7f:df:7a:bd:54:f5:63:35:02:be:7e:44:cf: 0a:e3:15:ca:7d:15:64:79:f3:8c:12:7e:53:f2:7d:8e:76:e8: 92:47:74:1f:e9:39:1c:b2:47:c5:e3:f6:42:b6:c5:b4:b8:5b: c5:b6:9d:ca:43:84:68:2b:12:86:10:e0:d1:0f:4f:d4:fe:a7: 7e:e6:41:d6:39:2f:60:ff:93:5e:70:d8:7f:ac:37:bf:6a:4b: 8c:14:00:c2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUL2c9HvNz1xd2nZzWbdHl8QLTAuQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDExWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTVkNTg2NzMxODNlYzkyYjU0M2EyZmVlZTNjNjA0MDEy Mzk0M2IyZjFhZjhkMDEyNGFmMDQ1MzBlOWRiN2NlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS48pbv2YXEAdQjpPrrGFOJZSVe1QrOFSEl3K94dnP+OYp FZssonN3hbbmgHm00dd5E6mUG5AixjVJKF/axiB8HWQO5AOlzaP+jod76m5ZSl6q fc8OZH5PjniYXNDuryFmfcHzllwOjFT2kO9Uo3fdDgN1I85Z1enQX4mqWPYGHPMV JnySYtXhaJlfZtgVgkL3YcfMitSXjNm4B2JA5FQPLAR6p0QknXscU7zOarWJlBX2 givYuo+o/D2uhipal1RWF9wSiZ8CTej4lPZU1iUuips/SDx6eS2QFyAz2Cei0WFV JpG+5MTRqkmq6se33IKfVvn4h8KpROvPWsPEeTqDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUN7Tub7UGN7teRBlu1TRdJe9m38EwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY2MGY1MTU0LTFiNDktNDYyZi04MDhjLTY4ZDhlNmRiOGVkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSAwDQYJKoZIhvcNAQELBQADggEBAHSPqV9tENwcGw8WHnEzdj1r XjG+nmQt2sipZm+8EhVd7dBTMokWCGoU1o82AeoKfU5Q1e4t/IDuGMWA3xoCmXC7 oLij7NYvZDhbjaGbX4dLxdk2B3KoTOLdRsII3QF29TZblFmnEUqP802Z/wK4Bb4R tZu6fu+lS5PiXy4zHo/LEx/OwpWvEeYAVUS/Mhq1DemsC0dmvL0tIqHGhKLjepRy P+ide4Uaf996vVT1YzUCvn5EzwrjFcp9FWR584wSflPyfY526JJHdB/pORyyR8Xj 9kK2xbS4W8W2ncpDhGgrEoYQ4NEPT9T+p37mQdY5L2D/k15w2H+sN79qS4wUAMI= -----END CERTIFICATE-----Generated at Wed Nov 5 05:36:06 2025 by rpki-client