$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2c3586-4c23-4045-b98b-d28000a3bd55.roa File: ee2c3586-4c23-4045-b98b-d28000a3bd55.roa (raw, json) Hash identifier: xTYd3rNIG0EyrO+kEDjwPrczTtGOnTvPey6a4uptKDA= Subject key identifier: 0C:B4:CA:D1:7A:34:4A:44:55:E0:9F:94:0E:81:D6:81:53:C0:1C:9F Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0775031B9EB0DE9D31BA72C59E98128F043A3382 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2c3586-4c23-4045-b98b-d28000a3bd55.roa Signing time: Fri 31 Oct 2025 01:50:33 +0000 ROA not before: Fri 31 Oct 2025 01:50:33 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:5503::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:75:03:1b:9e:b0:de:9d:31:ba:72:c5:9e:98:12:8f:04:3a:33:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:33 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=a180032282b1576543b6cc235ed5c6dff5bd916736d675cce8e12cc90af5c309, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:2c:70:d7:0f:70:bf:aa:81:d5:d3:28:75: 98:ef:35:bb:5e:0e:5f:f1:3b:82:70:da:9a:f9:ef: 6d:1f:a0:f2:01:28:1f:95:27:ef:68:49:89:b2:4d: 18:3d:40:a7:83:a4:1a:c4:03:ac:76:e7:b4:fe:a5: 10:ed:5b:16:85:64:19:1b:d0:e0:98:fb:e1:b9:4e: e8:41:e9:37:a0:87:08:46:7f:f1:64:eb:43:de:d0: b1:ec:9c:fe:f8:31:f0:ea:bb:65:3f:db:49:3a:47: d4:cb:0d:6f:59:00:11:c9:4a:6a:5a:7f:7b:4b:d9: a4:0c:99:71:fa:33:12:2b:08:39:dd:2f:29:a6:6d: 2b:e2:84:5c:70:84:6a:ca:fe:c7:08:cc:61:fc:fc: bb:06:c8:97:52:55:97:c6:ff:88:b1:07:17:57:06: ef:32:7f:f9:f9:42:87:62:e7:f7:9a:47:3b:8a:eb: e8:a9:91:72:d8:6f:16:be:0d:d4:85:16:0b:be:b7: 1b:1a:f2:07:5d:22:d1:79:70:d5:e7:e2:d8:87:96: c6:94:1c:76:2d:91:f4:af:0e:db:2f:84:30:05:e1: 84:d9:8b:b8:6d:6f:57:fc:75:4b:cd:89:e7:61:0d: 56:26:2e:d6:69:cb:b8:c9:d1:32:b2:e4:b7:cf:e5: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B4:CA:D1:7A:34:4A:44:55:E0:9F:94:0E:81:D6:81:53:C0:1C:9F X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2c3586-4c23-4045-b98b-d28000a3bd55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:5503::/48 Signature Algorithm: sha256WithRSAEncryption 69:2f:08:34:ae:b3:50:b7:a2:de:4c:15:f4:f0:5e:e3:09:f4: 70:5f:b9:f8:f7:f2:4b:ff:61:d4:55:b7:3b:de:da:4e:36:38: 2b:06:82:26:9f:2d:4e:02:f4:8b:2d:d6:ae:1d:62:48:2b:7a: c2:bc:54:b1:74:95:22:b8:da:9c:f3:19:85:98:8f:ee:29:6e: b4:64:20:d9:13:8a:55:0d:91:0e:65:26:f3:c4:b8:a8:98:74: 0d:fb:25:e2:2e:94:a0:c5:d0:a7:12:ec:b9:04:68:f7:7d:91: 37:84:c2:e0:d4:86:19:6d:83:9a:74:de:b3:c8:46:6c:fc:4d: 8f:24:3e:b6:f8:bd:e4:4a:15:d3:10:00:94:b8:dd:a4:60:ff: 1b:3c:58:b7:d9:f3:65:27:8c:c7:e8:44:ce:ff:5d:d1:e4:d6: 05:34:dc:e9:fc:08:f8:c9:72:bb:62:0d:78:ef:50:64:37:29: 71:5f:3f:1b:8a:2d:e3:b5:fd:0e:b0:a4:26:08:26:ad:ac:5b: 7d:81:33:88:cc:37:c0:1f:ac:1f:55:82:17:e6:bd:e2:02:a8: 4b:76:67:10:5a:e9:33:c1:84:9f:80:b6:02:a5:c6:9a:bd:d9: a2:ee:ae:dd:b0:59:3e:a4:90:b6:34:22:f3:c1:97:0e:eb:a7: fe:a3:f4:d6 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUB3UDG56w3p0xunLFnpgSjwQ6M4IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDMzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTgwMDMyMjgyYjE1NzY1NDNiNmNjMjM1ZWQ1YzZkZmY1 YmQ5MTY3MzZkNjc1Y2NlOGUxMmNjOTBhZjVjMzA5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3xyxw1w9wv6qB1dModZjvNbteDl/xO4Jw2pr5720foPIB KB+VJ+9oSYmyTRg9QKeDpBrEA6x257T+pRDtWxaFZBkb0OCY++G5TuhB6TeghwhG f/Fk60Pe0LHsnP74MfDqu2U/20k6R9TLDW9ZABHJSmpaf3tL2aQMmXH6MxIrCDnd LymmbSvihFxwhGrK/scIzGH8/LsGyJdSVZfG/4ixBxdXBu8yf/n5Qodi5/eaRzuK 6+ipkXLYbxa+DdSFFgu+txsa8gddItF5cNXn4tiHlsaUHHYtkfSvDtsvhDAF4YTZ i7htb1f8dUvNiedhDVYmLtZpy7jJ0TKy5LfP5e3jAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUDLTK0Xo0SkRV4J+UDoHWgVPAHJ8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VlMmMzNTg2LTRjMjMtNDA0NS1iOThiLWQyODAwMGEzYmQ1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwVQMwDQYJKoZIhvcNAQELBQADggEBAGkvCDSus1C3ot5MFfTwXuMJ 9HBfufj38kv/YdRVtzve2k42OCsGgiafLU4C9Ist1q4dYkgresK8VLF0lSK42pzz GYWYj+4pbrRkINkTilUNkQ5lJvPEuKiYdA37JeIulKDF0KcS7LkEaPd9kTeEwuDU hhltg5p03rPIRmz8TY8kPrb4veRKFdMQAJS43aRg/xs8WLfZ82UnjMfoRM7/XdHk 1gU03On8CPjJcrtiDXjvUGQ3KXFfPxuKLeO1/Q6wpCYIJq2sW32BM4jMN8AfrB9V ghfmveICqEt2ZxBa6TPBhJ+AtgKlxpq92aLurt2wWT6kkLY0IvPBlw7rp/6j9NY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:42 2025 by rpki-client