$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dac6a5ca-4991-4707-9646-5eeece7b0bc5.roa File: dac6a5ca-4991-4707-9646-5eeece7b0bc5.roa (raw, json) Hash identifier: uF9bU20LWUq6elNhmLkrEPMvmwGM+Q5NJIraj7q2tH8= Subject key identifier: 3A:A8:5F:66:16:66:1D:24:34:54:20:25:77:2E:9E:0C:C7:78:D0:66 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 78D5007D92BCD1D11C9D73ECEF2EE35FF2EC965A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dac6a5ca-4991-4707-9646-5eeece7b0bc5.roa Signing time: Fri 31 Oct 2025 01:50:07 +0000 ROA not before: Fri 31 Oct 2025 01:50:07 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d5:00:7d:92:bc:d1:d1:1c:9d:73:ec:ef:2e:e3:5f:f2:ec:96:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:07 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=5b5ce0199fb31b57ba9c43b7769bd5576f13a31d112c3d4c40965cac8583b4e5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:29:fb:de:a9:cb:83:80:cb:2a:2f:54:ed:6e: ce:c7:18:46:d5:11:fd:a5:63:e1:77:ec:8a:52:78: 03:fd:90:57:85:2d:61:1a:34:e5:fe:65:ae:75:02: f4:bb:a7:61:09:17:05:55:34:76:d2:a7:26:ec:f5: 7a:f8:76:d0:34:1c:e9:bc:cb:0e:10:ea:53:3c:66: 40:41:24:04:8a:e0:30:9c:99:ca:b0:04:f8:60:0e: 11:f8:aa:9f:70:63:85:91:bd:d0:b2:96:0b:04:43: e0:19:6c:6e:b9:ed:7f:2d:e7:ff:94:e7:ed:88:26: 48:b0:68:a4:bc:46:e8:c3:83:99:d0:83:c8:b4:fc: ce:b8:62:ee:11:42:aa:98:02:e2:4f:55:00:36:e2: fc:bb:69:a6:07:d9:11:ca:f1:de:83:ff:7f:1b:9b: 1c:46:49:fc:9d:c5:36:2d:93:c5:0f:24:b5:96:d4: 4d:88:de:33:bd:a9:95:21:79:74:2d:20:06:ee:83: c5:1d:93:8d:2d:f7:62:6e:3f:5c:a2:e6:d8:6b:22: 49:05:1b:86:8d:ee:71:fd:e4:c2:8c:1b:72:d6:3f: f9:6c:c2:01:62:cc:10:15:4d:e4:c8:26:97:cf:52: 8c:6c:c7:97:fa:73:7b:50:91:b9:88:41:b9:39:7b: fe:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A8:5F:66:16:66:1D:24:34:54:20:25:77:2E:9E:0C:C7:78:D0:66 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dac6a5ca-4991-4707-9646-5eeece7b0bc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6112::/48 Signature Algorithm: sha256WithRSAEncryption 15:cc:b0:7a:02:10:0d:bc:39:56:f2:02:16:48:cb:90:7e:81: f5:99:b1:f0:4a:5f:4a:39:c4:29:4c:13:2d:2a:71:ac:b8:e9: 79:61:67:21:ff:ac:80:74:53:4e:c0:62:3f:15:9d:eb:92:34: 3a:09:c1:33:76:74:bd:4f:14:5a:cd:f3:20:d2:a5:6f:b3:aa: db:66:c7:4d:17:b8:f1:eb:30:a8:7b:a8:dd:60:88:7a:9e:2e: 3e:4b:eb:a0:9f:e3:05:7e:da:85:66:ee:28:ef:02:6b:49:66: e3:62:4b:92:53:cf:38:2b:6b:0e:95:45:bf:f1:a0:0f:d3:2d: 27:36:f2:48:f9:56:50:52:d1:ad:46:d6:71:9b:35:0e:e8:21: 67:12:cc:45:90:84:a9:2a:c7:53:66:eb:fe:83:cd:2e:3b:b2: 8e:4c:39:06:74:89:f5:fa:e5:b1:95:73:7d:cd:8b:42:36:40: 0a:43:2f:07:d7:7b:98:f8:19:84:0f:8b:e6:0c:a6:83:af:29: 2d:16:98:67:3d:a6:e5:29:b2:c1:d7:c4:2a:74:fa:3f:84:d4: d2:fb:40:fa:1d:34:a8:42:d9:9e:7b:cf:15:a2:db:8d:27:fb: b2:c4:5f:94:bd:c6:3e:8c:82:90:60:fe:37:73:41:81:89:22: 9d:ac:87:e0 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeNUAfZK80dEcnXPs7y7jX/LsllowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDA3WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjVjZTAxOTlmYjMxYjU3YmE5YzQzYjc3NjliZDU1NzZm MTNhMzFkMTEyYzNkNGM0MDk2NWNhYzg1ODNiNGU1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcKfveqcuDgMsqL1Ttbs7HGEbVEf2lY+F37IpSeAP9kFeF LWEaNOX+Za51AvS7p2EJFwVVNHbSpybs9Xr4dtA0HOm8yw4Q6lM8ZkBBJASK4DCc mcqwBPhgDhH4qp9wY4WRvdCylgsEQ+AZbG657X8t5/+U5+2IJkiwaKS8RujDg5nQ g8i0/M64Yu4RQqqYAuJPVQA24vy7aaYH2RHK8d6D/38bmxxGSfydxTYtk8UPJLWW 1E2I3jO9qZUheXQtIAbug8Udk40t92JuP1yi5thrIkkFG4aN7nH95MKMG3LWP/ls wgFizBAVTeTIJpfPUoxsx5f6c3tQkbmIQbk5e/7rAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUOqhfZhZmHSQ0VCAldy6eDMd40GYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2RhYzZhNWNhLTQ5OTEtNDcwNy05NjQ2LTVlZWVjZTdiMGJjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRIwDQYJKoZIhvcNAQELBQADggEBABXMsHoCEA28OVbyAhZIy5B+ gfWZsfBKX0o5xClMEy0qcay46XlhZyH/rIB0U07AYj8VneuSNDoJwTN2dL1PFFrN 8yDSpW+zqttmx00XuPHrMKh7qN1giHqeLj5L66Cf4wV+2oVm7ijvAmtJZuNiS5JT zzgraw6VRb/xoA/TLSc28kj5VlBS0a1G1nGbNQ7oIWcSzEWQhKkqx1Nm6/6DzS47 so5MOQZ0ifX65bGVc33Ni0I2QApDLwfXe5j4GYQPi+YMpoOvKS0WmGc9puUpssHX xCp0+j+E1NL7QPodNKhC2Z57zxWi240n+7LEX5S9xj6MgpBg/jdzQYGJIp2sh+A= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:52 2025 by rpki-client