$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f937d10a-ab1d-4f0c-85f2-3661bd103bc9.roa File: f937d10a-ab1d-4f0c-85f2-3661bd103bc9.roa (raw, json) Hash identifier: QlSE33ajEGpVLEZd+KaR5Sl2ZbpY3HygU9g3eik2MCk= Subject key identifier: F2:EB:9B:33:62:66:12:09:0E:34:A3:EC:74:40:C7:8E:88:D0:9D:37 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 468E7AC25C491594F0EFD8E8BD491155B5487ABC Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f937d10a-ab1d-4f0c-85f2-3661bd103bc9.roa Signing time: Fri 31 Oct 2025 01:50:45 +0000 ROA not before: Fri 31 Oct 2025 01:50:45 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6117::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8e:7a:c2:5c:49:15:94:f0:ef:d8:e8:bd:49:11:55:b5:48:7a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:45 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=c2228e1e48d7878a3bedd69eadb32ec81e2b99b1c391beafc42414c7df80dc8c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:97:c7:17:6e:3b:bc:8e:e6:cd:0a:88:0d: af:0c:10:0f:8d:92:32:85:19:13:65:da:20:48:61: 69:86:bb:55:de:ff:2b:cb:a7:3f:cf:34:11:5e:26: 07:9c:29:cd:d1:87:e2:c3:ba:af:16:55:2c:d8:95: db:22:ac:b2:da:d5:5b:cb:83:ba:51:69:a8:0c:e0: b2:1c:df:b8:31:c1:21:0f:e5:c1:ab:2d:12:f5:b6: 24:52:74:f2:90:c3:df:a3:51:ab:de:88:3f:77:94: ec:a6:87:7d:78:6a:cc:14:f1:2f:6e:06:f7:68:01: 5c:33:89:0a:f5:8a:ca:3f:e6:95:0f:18:2a:21:70: 75:ee:ce:ed:40:dd:4e:4e:ba:cc:49:b9:9f:37:46: aa:df:7f:67:70:af:3f:4d:73:ec:53:85:5c:2c:00: 0d:f2:03:a5:62:99:d1:4f:18:7f:53:a8:43:90:04: 2c:e3:85:69:a6:2d:e8:51:42:74:9d:f3:35:a3:17: 28:ee:cf:df:b8:bd:cf:d3:75:d3:f8:55:66:a2:01: 18:d1:85:81:6c:28:67:d5:33:7e:48:8f:bd:72:a8: 5e:8c:26:98:60:8a:e9:3b:f3:31:2c:ef:a7:18:87: e4:c6:b6:45:1a:8f:bd:d3:83:86:9e:48:c8:64:42: 05:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EB:9B:33:62:66:12:09:0E:34:A3:EC:74:40:C7:8E:88:D0:9D:37 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f937d10a-ab1d-4f0c-85f2-3661bd103bc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6117::/48 Signature Algorithm: sha256WithRSAEncryption 31:e7:92:46:70:e5:fa:3f:c6:3d:58:d8:e4:32:ad:cf:b3:08: 96:bb:b9:6f:30:ba:46:5b:1c:67:bd:55:e4:f9:2e:6f:7a:13: a2:1f:c3:5e:7f:14:90:6f:2d:23:b1:5f:9d:58:10:7d:bc:bd: 9f:40:dc:53:10:c8:47:08:85:c2:c9:0d:bc:13:70:67:38:55: 1e:a1:dd:36:5a:5b:b1:0f:6f:68:cc:bd:d8:96:db:78:c7:ff: 34:86:c4:f0:d6:e6:ea:04:1b:d8:6e:bf:21:53:68:a2:73:09: 8a:82:f5:53:c0:a1:fa:91:e8:14:2f:62:50:aa:58:4f:47:d0: 86:e1:3e:15:f4:79:c7:18:b6:9a:0e:6c:3b:e1:e6:1c:14:67: a0:4f:6d:b4:f4:e5:7e:7a:9e:2a:c8:df:32:a8:f9:78:9d:2e: 77:45:de:bd:e8:d5:77:97:1a:0c:d7:8b:5f:6c:5d:ba:b0:83: 06:5e:bb:49:d3:78:e4:29:f2:45:d8:1b:ee:07:0d:1f:21:4c: e0:a5:a0:54:26:71:1e:74:f0:22:de:b8:f5:64:d8:d0:71:99: 0d:d4:e6:37:4d:53:24:42:fc:d0:68:f0:a5:07:eb:93:ff:ee: a7:6a:9b:2a:94:5d:25:5c:8c:e1:70:f1:20:a7:8c:02:2b:77: 3a:c8:ef:fe -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIURo56wlxJFZTw79jovUkRVbVIerwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDQ1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMjIyOGUxZTQ4ZDc4NzhhM2JlZGQ2OWVhZGIzMmVjODFl MmI5OWIxYzM5MWJlYWZjNDI0MTRjN2RmODBkYzhjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmZZfHF247vI7mzQqIDa8MEA+NkjKFGRNl2iBIYWmGu1Xe /yvLpz/PNBFeJgecKc3Rh+LDuq8WVSzYldsirLLa1VvLg7pRaagM4LIc37gxwSEP 5cGrLRL1tiRSdPKQw9+jUaveiD93lOymh314aswU8S9uBvdoAVwziQr1iso/5pUP GCohcHXuzu1A3U5OusxJuZ83Rqrff2dwrz9Nc+xThVwsAA3yA6VimdFPGH9TqEOQ BCzjhWmmLehRQnSd8zWjFyjuz9+4vc/TddP4VWaiARjRhYFsKGfVM35Ij71yqF6M Jphgiuk78zEs76cYh+TGtkUaj73Tg4aeSMhkQgX9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8uubM2JmEgkONKPsdEDHjojQnTcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y5MzdkMTBhLWFiMWQtNGYwYy04NWYyLTM2NjFiZDEwM2JjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYRcwDQYJKoZIhvcNAQELBQADggEBADHnkkZw5fo/xj1Y2OQyrc+z CJa7uW8wukZbHGe9VeT5Lm96E6Ifw15/FJBvLSOxX51YEH28vZ9A3FMQyEcIhcLJ DbwTcGc4VR6h3TZaW7EPb2jMvdiW23jH/zSGxPDW5uoEG9huvyFTaKJzCYqC9VPA ofqR6BQvYlCqWE9H0IbhPhX0eccYtpoObDvh5hwUZ6BPbbT05X56nirI3zKo+Xid LndF3r3o1XeXGgzXi19sXbqwgwZeu0nTeOQp8kXYG+4HDR8hTOCloFQmcR508CLe uPVk2NBxmQ3U5jdNUyRC/NBo8KUH65P/7qdqmyqUXSVcjOFw8SCnjAIrdzrI7/4= -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:29 2025 by rpki-client