$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6632e911-ee11-4bc9-a573-00ef83fd31d7.roa File: 6632e911-ee11-4bc9-a573-00ef83fd31d7.roa (raw, json) Hash identifier: cZLAJNN19Zxpo45NMgQLt6aC15d8+ca0k/iVvU2rcVI= Subject key identifier: E3:FB:74:55:F8:CA:EE:2D:96:FE:12:EB:33:FB:98:69:EF:AF:89:2E Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6E33312F2F003ECBB82AD0D3AC3089CB805EBECD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6632e911-ee11-4bc9-a573-00ef83fd31d7.roa Signing time: Tue 21 Oct 2025 12:50:08 +0000 ROA not before: Tue 21 Oct 2025 12:50:08 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:33:31:2f:2f:00:3e:cb:b8:2a:d0:d3:ac:30:89:cb:80:5e:be:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 12:50:08 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=071336b7976075b577a48fe4f185c721f9764f2a6ee5cdcad7b9ba538a9af398, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:cb:13:5a:a9:cd:56:06:48:25:fd:4e:93: f0:9e:f4:2c:6e:c0:52:52:25:f5:b7:38:57:a6:ea: 8c:4c:c7:7a:fc:95:df:37:5e:80:70:23:9e:3f:1f: e0:6c:e9:6e:d4:bc:48:3e:6e:4d:a2:82:c8:e4:21: e0:9f:90:19:84:7f:15:ff:da:d8:a9:03:a8:ae:1f: 5e:f3:3f:9e:75:55:a8:95:28:9b:38:22:14:16:f8: ec:85:52:4a:13:53:13:e2:24:ad:33:ba:48:e2:77: 40:5b:94:43:43:5a:6b:ef:44:43:00:c0:af:75:f8: ab:cf:74:63:26:83:4b:25:43:03:f2:49:e1:67:07: c2:2b:ff:ff:ee:7e:be:08:f6:3e:cc:70:54:55:7f: fd:98:7b:aa:a0:25:f5:62:16:af:84:9c:1b:c3:28: 65:1c:c0:11:b5:cd:4b:15:a8:60:aa:8e:31:e5:ea: 1b:24:ee:69:7a:3d:d5:c5:47:bb:4e:8e:50:cb:d8: 4f:2f:0c:d9:31:57:4a:3b:f6:bb:c9:2d:a8:cb:17: 5a:cb:9c:88:e3:e8:40:cf:5c:62:72:8c:db:fd:8e: d5:30:2c:f8:5b:f6:fe:c9:a6:ae:a6:2f:64:39:dc: f5:5f:a6:85:a9:92:ff:a9:6d:01:5e:4e:28:6f:ef: 23:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FB:74:55:F8:CA:EE:2D:96:FE:12:EB:33:FB:98:69:EF:AF:89:2E X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6632e911-ee11-4bc9-a573-00ef83fd31d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6000::/44 Signature Algorithm: sha256WithRSAEncryption 03:4e:02:05:b0:a8:40:22:9d:5e:9c:61:07:b9:26:82:59:34: 68:24:e3:8f:f2:7d:5e:5d:ad:e7:e9:3f:50:c2:70:2d:81:a9: 4d:02:7d:b2:c3:92:93:14:3a:d2:25:06:99:7f:06:58:fb:5d: 67:98:99:ef:69:2c:e8:c0:80:6b:1a:b6:c6:4c:19:13:52:cb: 31:b0:8e:f5:fd:57:bd:97:ec:b1:e4:8d:21:0b:00:16:02:8a: 91:c8:ca:88:a2:13:8a:c6:72:6e:90:d1:c5:2b:74:77:11:31: 44:9a:39:79:46:1e:60:01:a9:ac:76:f6:b4:e2:3e:25:80:93: 7e:44:b8:33:bd:ac:4a:5a:53:e8:a9:36:31:72:86:44:df:e1: 88:8d:0c:4c:b7:8c:c1:51:c3:73:9f:3c:20:06:a2:0d:d8:8c: b2:47:21:3c:ce:12:04:88:f7:40:26:b9:c2:f5:79:32:d0:1d: 6c:c7:bb:f4:99:fb:d6:d9:67:67:2b:48:08:b9:55:c1:53:61: db:1a:30:88:fc:b0:e8:30:4b:a0:dc:5c:a7:b7:07:46:fa:a8: 22:4e:4a:33:4c:53:cc:30:f3:5d:d8:9d:6a:db:72:17:c9:e3: 7e:36:58:21:b6:3c:04:5f:74:e7:0e:d7:96:e2:2d:25:f9:4d: 92:3b:24:2b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUbjMxLy8APsu4KtDTrDCJy4Bevs0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTI1MDA4WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzEzMzZiNzk3NjA3NWI1NzdhNDhmZTRmMTg1YzcyMWY5 NzY0ZjJhNmVlNWNkY2FkN2I5YmE1MzhhOWFmMzk4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXPMsTWqnNVgZIJf1Ok/Ce9CxuwFJSJfW3OFem6oxMx3r8 ld83XoBwI54/H+Bs6W7UvEg+bk2igsjkIeCfkBmEfxX/2tipA6iuH17zP551VaiV KJs4IhQW+OyFUkoTUxPiJK0zukjid0BblENDWmvvREMAwK91+KvPdGMmg0slQwPy SeFnB8Ir///ufr4I9j7McFRVf/2Ye6qgJfViFq+EnBvDKGUcwBG1zUsVqGCqjjHl 6hsk7ml6PdXFR7tOjlDL2E8vDNkxV0o79rvJLajLF1rLnIjj6EDPXGJyjNv9jtUw LPhb9v7Jpq6mL2Q53PVfpoWpkv+pbQFeTihv7yOlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4/t0VfjK7i2W/hLrM/uYae+viS4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY2MzJlOTExLWVlMTEtNGJjOS1hNTczLTAwZWY4M2ZkMzFkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwYAAwDQYJKoZIhvcNAQELBQADggEBAANOAgWwqEAinV6cYQe5JoJZ NGgk44/yfV5drefpP1DCcC2BqU0CfbLDkpMUOtIlBpl/Blj7XWeYme9pLOjAgGsa tsZMGRNSyzGwjvX9V72X7LHkjSELABYCipHIyoiiE4rGcm6Q0cUrdHcRMUSaOXlG HmABqax29rTiPiWAk35EuDO9rEpaU+ipNjFyhkTf4YiNDEy3jMFRw3OfPCAGog3Y jLJHITzOEgSI90AmucL1eTLQHWzHu/SZ+9bZZ2crSAi5VcFTYdsaMIj8sOgwS6Dc XKe3B0b6qCJOSjNMU8ww813YnWrbchfJ4342WCG2PARfdOcO15biLSX5TZI7JCs= -----END CERTIFICATE-----Generated at Wed Nov 5 17:49:22 2025 by rpki-client