$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa File: d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa (raw, json) Hash identifier: qmex3yAY/3DNw0wFgRSwRzQcAQ6F951pWAq7Lp1vX6g= Subject key identifier: E4:CD:9D:DD:5E:50:B7:09:B8:D2:37:73:AA:79:D3:81:4B:A1:32:22 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 07D9BB5683CD1D95DAF4A9C002E56C3D264BD673 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa Signing time: Tue 21 Oct 2025 12:50:50 +0000 ROA not before: Tue 21 Oct 2025 12:50:50 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ea00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d9:bb:56:83:cd:1d:95:da:f4:a9:c0:02:e5:6c:3d:26:4b:d6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 21 12:50:50 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=df6f2b72035aa42639d667ab5fa0e765377c4a98310b74d0db1d1b5dca84b15a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:e4:98:e3:aa:52:96:37:0f:db:29:b5:1a: 5c:85:66:46:02:d9:24:d6:c2:0b:81:96:34:fc:7b: 4c:cf:40:2b:ad:ac:b8:61:ee:c7:9d:0e:f5:3d:b3: 49:a4:97:8e:5a:44:de:86:5b:1a:f5:9e:d2:3a:c2: 3a:f2:d6:d8:4e:dd:00:26:33:b1:ad:41:1a:4e:64: ec:71:29:e8:47:26:0d:8e:cc:f4:3c:63:4f:29:28: 27:df:df:db:2e:3f:72:49:a6:af:5d:01:5c:d5:30: 37:4a:98:2d:e3:b9:fe:2d:b6:9a:85:05:d7:83:a7: bd:b9:c0:bf:d9:45:6d:c3:fd:30:c2:ce:47:70:d6: d2:d1:db:1e:0e:85:38:28:db:cc:e4:bc:be:0d:e4: 36:31:e4:c1:00:16:26:d0:cf:ac:4d:c5:bf:e0:e5: cc:9a:62:32:ca:c2:18:94:60:b3:3a:45:72:19:6c: 8d:63:b1:d0:29:13:23:6e:f9:1c:4d:ac:9c:ab:d1: 9a:fb:ab:25:49:9c:9f:c2:2b:ec:b0:5d:6b:de:d8: c1:3f:fb:34:25:25:d6:5a:a6:a7:7b:d6:d9:9a:19: 83:36:49:18:fe:2e:cc:b7:b5:96:a1:ed:f7:6e:38: f9:d2:cf:a6:5b:0e:09:55:37:0f:49:e6:f9:ec:76: 0b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CD:9D:DD:5E:50:B7:09:B8:D2:37:73:AA:79:D3:81:4B:A1:32:22 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/40 Signature Algorithm: sha256WithRSAEncryption 95:4b:1d:81:d7:fb:32:08:3e:44:06:60:c6:46:a5:91:25:58: ef:11:c9:04:12:45:09:41:a9:4a:1c:ae:2f:ed:8c:0f:fc:0f: 54:c3:16:31:d6:ab:12:eb:27:23:14:a2:d5:d5:40:c4:89:39: 42:1a:71:32:8b:0b:aa:49:71:fe:9d:30:07:8f:0b:36:6d:b0: d1:cd:5c:07:a9:44:c6:ed:d8:3a:6d:4d:11:e4:92:13:fc:98: fe:eb:6e:26:6f:51:3b:d9:c0:51:13:dc:55:80:73:3f:42:eb: 13:68:0d:22:56:9e:fb:1e:74:68:c5:29:b1:4c:4c:68:a7:42: 3c:d6:92:6a:57:42:eb:8d:04:7f:70:5d:51:40:0b:82:50:35: 87:40:46:de:d6:62:63:95:6a:94:53:a0:c5:2b:f9:8a:4a:bc: fe:97:1c:fe:e6:4a:84:9c:c7:3e:19:7a:40:04:0a:ea:ab:97: f7:c6:df:d6:03:0f:de:82:75:dc:97:8c:30:71:b2:64:a5:2f: d5:48:59:49:53:fb:d7:58:f4:60:2c:8f:5b:66:eb:e8:ec:bf: 33:31:b2:34:3c:b2:ca:79:db:22:ef:ae:3e:18:83:90:fa:22: 4c:90:3b:ad:f1:d4:ce:89:30:d8:45:d2:1e:0c:af:4d:02:69: 56:96:b2:05 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUB9m7VoPNHZXa9KnAAuVsPSZL1nMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIxMTI1MDUwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjZmMmI3MjAzNWFhNDI2MzlkNjY3YWI1ZmEwZTc2NTM3 N2M0YTk4MzEwYjc0ZDBkYjFkMWI1ZGNhODRiMTVhMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1V+SY46pSljcP2ym1GlyFZkYC2STWwguBljT8e0zPQCut rLhh7sedDvU9s0mkl45aRN6GWxr1ntI6wjry1thO3QAmM7GtQRpOZOxxKehHJg2O zPQ8Y08pKCff39suP3JJpq9dAVzVMDdKmC3juf4ttpqFBdeDp725wL/ZRW3D/TDC zkdw1tLR2x4OhTgo28zkvL4N5DYx5MEAFibQz6xNxb/g5cyaYjLKwhiUYLM6RXIZ bI1jsdApEyNu+RxNrJyr0Zr7qyVJnJ/CK+ywXWve2ME/+zQlJdZapqd71tmaGYM2 SRj+Lsy3tZah7fduOPnSz6ZbDglVNw9J5vnsdgsdAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU5M2d3V5Qtwm40jdzqnnTgUuhMiIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2QyYjExZTBmLTAxMTItNGM0ZS04YWE0LTE2ODc4OGZkNmFhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76jANBgkqhkiG9w0BAQsFAAOCAQEAlUsdgdf7Mgg+RAZgxkalkSVY 7xHJBBJFCUGpShyuL+2MD/wPVMMWMdarEusnIxSi1dVAxIk5QhpxMosLqklx/p0w B48LNm2w0c1cB6lExu3YOm1NEeSSE/yY/utuJm9RO9nAURPcVYBzP0LrE2gNIlae +x50aMUpsUxMaKdCPNaSaldC640Ef3BdUUALglA1h0BG3tZiY5VqlFOgxSv5ikq8 /pcc/uZKhJzHPhl6QAQK6quX98bf1gMP3oJ13JeMMHGyZKUv1UhZSVP711j0YCyP W2br6Oy/MzGyNDyyynnbIu+uPhiDkPoiTJA7rfHUzokw2EXSHgyvTQJpVpayBQ== -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:08 2025 by rpki-client