$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa File: adb258f2-061e-4e94-b6ee-d4de9405ec61.roa (raw, json) Hash identifier: 3nBw+6IPL4oF9bMECMMru7xQ2ChkUyrqLrqY22RuQi0= Subject key identifier: 1D:FF:27:AA:E3:81:97:D9:DB:4C:C4:89:95:6A:2D:54:0A:51:71:DA Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 35CD4A40DC288E75B07B3676F6125F45091745D7 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa Signing time: Tue 21 Oct 2025 13:00:08 +0000 ROA not before: Tue 21 Oct 2025 13:00:08 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cd:4a:40:dc:28:8e:75:b0:7b:36:76:f6:12:5f:45:09:17:45:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 13:00:08 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=34584be3a7501b126155a686c07008702a3311c5b1e1b294f41fb8a8b645f66b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:f9:30:a8:ce:01:92:22:ad:42:21:54:50: 9b:f1:b6:41:21:a2:af:10:ca:45:94:23:41:9a:5a: 19:29:a8:4a:d3:15:7e:20:03:10:5c:64:86:90:38: a2:94:9d:e6:5b:42:ce:f0:be:e9:f0:1b:36:97:b2: 2a:97:7c:13:23:2b:4b:31:38:9c:94:14:0c:29:d9: 06:5d:a6:dc:70:cc:fe:08:85:fa:ab:09:69:43:8a: 6a:da:dd:ad:7a:0d:08:2f:db:4f:11:82:bc:8d:37: 40:ae:51:33:9e:0a:3a:98:df:e6:93:a6:3d:2a:bf: f7:f3:a5:a2:eb:e0:2e:12:73:70:86:f7:ca:38:dd: 5d:5c:90:0f:c7:b5:2b:7c:56:ae:dc:b1:4a:c1:c1: 2d:83:2d:71:cf:85:39:da:f6:6b:60:6c:3d:a0:b4: 52:9c:1a:3e:73:56:b2:78:74:00:a9:20:b4:bd:88: b7:0f:a4:c9:1f:fc:a6:f9:7b:db:a1:d8:a8:6d:fd: 49:39:53:bc:d2:9c:d2:0a:cc:19:dc:3f:6d:e1:88: ae:ee:41:f3:e1:1e:d1:8d:a4:3c:10:3b:c8:c4:30: 04:b8:cf:62:b4:b6:db:a6:d2:c5:92:c7:5c:76:9f: ee:99:54:1b:25:b6:b5:34:3a:7c:f4:85:6a:35:7f: e5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FF:27:AA:E3:81:97:D9:DB:4C:C4:89:95:6A:2D:54:0A:51:71:DA X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:8000::/40 Signature Algorithm: sha256WithRSAEncryption 0a:6d:ac:2d:d0:04:9d:25:f4:32:a9:bc:29:22:99:a0:35:cb: a9:da:52:2f:a3:5a:b7:9c:10:23:b9:ff:60:85:b3:94:f9:46: 59:e3:c2:a3:4f:f8:c8:ee:d0:45:27:a4:30:d6:d2:39:fc:00: e7:c9:0a:6f:a5:90:b0:68:1c:7f:0f:b1:d9:18:fc:b2:dd:9f: 2b:ec:30:6c:8a:62:a3:f5:c3:a6:af:14:2c:eb:49:00:8a:b2: 86:9d:4d:d9:53:62:85:90:18:0a:de:92:9a:eb:da:0c:8c:eb: 9a:f2:2f:52:07:3a:78:c7:78:62:ca:5f:8e:7f:e7:83:51:26: 61:54:bd:32:30:fa:c2:6e:94:98:dd:89:12:90:5e:47:40:5b: 02:91:1b:26:b0:f5:e3:45:ba:d1:0b:81:50:f8:bb:0c:4a:8e: cb:2b:e3:c6:e3:70:2c:2c:70:0a:54:7b:2c:58:46:14:25:5f: e1:6b:e7:a1:fa:65:fb:12:ef:15:2a:ca:72:06:a4:82:33:b8: 6b:ae:42:3f:61:4b:e6:35:a1:ce:6a:9b:27:20:3d:96:18:96: a3:f8:54:20:c3:56:7b:5f:0f:f5:eb:b1:38:81:d3:fb:d0:9c: 52:ce:29:dc:ba:1b:f2:94:d7:d0:49:37:86:cf:10:b7:d8:f2: 7c:40:23:65 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUNc1KQNwojnWwezZ29hJfRQkXRdcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTMwMDA4WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDU4NGJlM2E3NTAxYjEyNjE1NWE2ODZjMDcwMDg3MDJh MzMxMWM1YjFlMWIyOTRmNDFmYjhhOGI2NDVmNjZiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9svkwqM4BkiKtQiFUUJvxtkEhoq8QykWUI0GaWhkpqErT FX4gAxBcZIaQOKKUneZbQs7wvunwGzaXsiqXfBMjK0sxOJyUFAwp2QZdptxwzP4I hfqrCWlDimra3a16DQgv208RgryNN0CuUTOeCjqY3+aTpj0qv/fzpaLr4C4Sc3CG 98o43V1ckA/HtSt8Vq7csUrBwS2DLXHPhTna9mtgbD2gtFKcGj5zVrJ4dACpILS9 iLcPpMkf/Kb5e9uh2Kht/Uk5U7zSnNIKzBncP23hiK7uQfPhHtGNpDwQO8jEMAS4 z2K0ttum0sWSx1x2n+6ZVBsltrU0Onz0hWo1f+UpAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUHf8nquOBl9nbTMSJlWotVApRcdowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FkYjI1OGYyLTA2MWUtNGU5NC1iNmVlLWQ0ZGU5NDA1ZWM2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwgDANBgkqhkiG9w0BAQsFAAOCAQEACm2sLdAEnSX0Mqm8KSKZoDXL qdpSL6Nat5wQI7n/YIWzlPlGWePCo0/4yO7QRSekMNbSOfwA58kKb6WQsGgcfw+x 2Rj8st2fK+wwbIpio/XDpq8ULOtJAIqyhp1N2VNihZAYCt6SmuvaDIzrmvIvUgc6 eMd4Yspfjn/ng1EmYVS9MjD6wm6UmN2JEpBeR0BbApEbJrD140W60QuBUPi7DEqO yyvjxuNwLCxwClR7LFhGFCVf4Wvnofpl+xLvFSrKcgakgjO4a65CP2FL5jWhzmqb JyA9lhiWo/hUIMNWe18P9euxOIHT+9CcUs4p3Lob8pTX0Ek3hs8Qt9jyfEAjZQ== -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:18 2025 by rpki-client