$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8118e9e-4da8-4d2a-bf13-2faef4f132df.roa File: f8118e9e-4da8-4d2a-bf13-2faef4f132df.roa (raw, json) Hash identifier: bm82mFoLUS51+4sH6PMd+8G/1zQSrZvOB4qikG4dhvg= Subject key identifier: 8D:CE:97:0D:F6:01:4F:3E:DF:B3:2B:79:3E:B1:7F:3A:A0:97:85:57 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 764BCE998F5E48BF508B10EB2FDF54857A406CD4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8118e9e-4da8-4d2a-bf13-2faef4f132df.roa Signing time: Fri 31 Oct 2025 01:50:41 +0000 ROA not before: Fri 31 Oct 2025 01:50:41 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:610e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4b:ce:99:8f:5e:48:bf:50:8b:10:eb:2f:df:54:85:7a:40:6c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:41 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=47bb2f560e652044b02dd180a8ea0805d32d70a1ec7dc256695944cfade98bfb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:c1:00:71:de:f9:56:9c:f5:e2:51:1f:7f: c5:2c:30:58:f9:45:e5:b5:b4:01:e4:f6:0b:58:56: aa:18:c5:8f:95:b3:89:3d:b3:b0:0d:58:ec:80:fc: 36:da:20:dd:4b:3e:41:62:c7:b1:4f:d9:83:74:83: f7:e8:8c:46:8d:42:a9:93:08:c7:8e:ee:06:ec:8e: fb:f9:35:a3:a9:cf:47:c9:a7:7b:85:c1:9c:32:51: 82:9b:b7:a6:f9:92:51:3d:6b:29:a0:35:94:5a:86: 78:f1:52:99:ec:5a:03:66:32:6e:5a:3f:b3:81:fa: 10:97:23:dd:50:4d:9b:51:9b:9c:17:1f:19:f0:63: 72:3b:c5:a4:6f:be:20:f4:2b:d0:82:75:ab:34:78: d7:96:bb:ee:0c:a2:4a:64:d5:c1:a6:88:60:0f:15: 11:d5:9a:ec:36:e7:b6:41:92:ac:a1:c6:fe:37:a8: 34:cd:74:b0:08:d4:ae:c5:73:74:99:1f:da:67:fe: 11:9d:3e:36:ac:c3:52:c9:2e:bc:a5:8b:34:6a:73: 38:20:5a:ce:48:dd:38:20:ab:d6:d4:bc:ef:f1:d4: d6:a0:d6:cd:c6:3b:3a:ba:1c:07:0f:e3:6f:66:07: 80:d5:4e:24:ec:50:d1:59:e6:f9:d6:b8:cf:b1:c6: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CE:97:0D:F6:01:4F:3E:DF:B3:2B:79:3E:B1:7F:3A:A0:97:85:57 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8118e9e-4da8-4d2a-bf13-2faef4f132df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610e::/48 Signature Algorithm: sha256WithRSAEncryption 85:64:83:6b:bc:82:5e:4b:7c:99:19:bc:21:c1:9f:bd:ec:c9: 4c:cd:eb:d8:5e:76:b7:0b:e2:b2:1e:97:33:24:6a:93:e5:e7: 86:67:3d:cc:53:40:2a:9c:82:1b:94:97:d9:dd:3c:de:ed:13: a4:5c:a7:b5:87:e6:91:3c:25:d7:da:5a:dd:8a:35:f0:ff:04: 88:d9:c8:e0:1a:da:c6:d8:2a:92:83:a6:fe:54:ce:ec:c7:ba: 85:03:80:93:c4:48:59:70:38:99:f3:64:dc:f0:4f:4e:a9:ef: a5:cd:5f:e2:ad:3b:1a:a6:b7:ab:2f:6e:b7:c7:ee:95:f8:bd: fe:6b:0e:73:45:7a:6c:72:6d:27:5a:6f:62:b8:34:1e:f5:be: 33:34:35:64:91:fb:f4:6b:94:27:fc:53:5c:fd:48:94:89:55: 7b:a6:bb:63:88:69:99:96:ab:58:eb:23:76:bd:36:50:c1:4b: ee:0e:b0:f4:4b:d4:b8:c9:a9:9a:91:52:fa:9a:65:56:b3:61: 75:84:18:1f:75:c3:ce:0e:13:a0:26:86:b3:d1:be:53:91:d6: fd:07:82:23:ad:90:7b:82:f0:86:df:87:1e:c7:c9:7c:02:61: a9:89:72:a3:77:9e:01:7e:3f:ea:a6:c9:5f:89:10:7e:04:b5: 9e:38:78:3e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUdkvOmY9eSL9QixDrL99UhXpAbNQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDQxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0N2JiMmY1NjBlNjUyMDQ0YjAyZGQxODBhOGVhMDgwNWQz MmQ3MGExZWM3ZGMyNTY2OTU5NDRjZmFkZTk4YmZiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDg+8EAcd75Vpz14lEff8UsMFj5ReW1tAHk9gtYVqoYxY+V s4k9s7ANWOyA/DbaIN1LPkFix7FP2YN0g/fojEaNQqmTCMeO7gbsjvv5NaOpz0fJ p3uFwZwyUYKbt6b5klE9aymgNZRahnjxUpnsWgNmMm5aP7OB+hCXI91QTZtRm5wX HxnwY3I7xaRvviD0K9CCdas0eNeWu+4Mokpk1cGmiGAPFRHVmuw257ZBkqyhxv43 qDTNdLAI1K7Fc3SZH9pn/hGdPjasw1LJLrylizRqczggWs5I3Tggq9bUvO/x1Nag 1s3GOzq6HAcP429mB4DVTiTsUNFZ5vnWuM+xxtmXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjc6XDfYBTz7fsyt5PrF/OqCXhVcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y4MTE4ZTllLTRkYTgtNGQyYS1iZjEzLTJmYWVmNGYxMzJkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQ4wDQYJKoZIhvcNAQELBQADggEBAIVkg2u8gl5LfJkZvCHBn73s yUzN69hedrcL4rIelzMkapPl54ZnPcxTQCqcghuUl9ndPN7tE6Rcp7WH5pE8Jdfa Wt2KNfD/BIjZyOAa2sbYKpKDpv5UzuzHuoUDgJPESFlwOJnzZNzwT06p76XNX+Kt Oxqmt6svbrfH7pX4vf5rDnNFemxybSdab2K4NB71vjM0NWSR+/RrlCf8U1z9SJSJ VXumu2OIaZmWq1jrI3a9NlDBS+4OsPRL1LjJqZqRUvqaZVazYXWEGB91w84OE6Am hrPRvlOR1v0HgiOtkHuC8Ibfhx7HyXwCYamJcqN3ngF+P+qmyV+JEH4EtZ44eD4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:05:38 2025 by rpki-client