$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa File: 0fac8622-056c-4350-9d70-b107bedf3e94.roa (raw, json) Hash identifier: HioPxHYPzxsIOM4r+dU/HpNWgHCQuumMSiaZe5s3biU= Subject key identifier: 76:EA:A5:B0:7C:71:74:F0:AC:CA:8E:79:7A:FD:9E:33:C0:B9:26:3A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 34884DCE710D413CB8CBCE092872354FF8A35EF9 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa Signing time: Mon 06 Oct 2025 17:40:46 +0000 ROA not before: Mon 06 Oct 2025 17:40:46 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:88:4d:ce:71:0d:41:3c:b8:cb:ce:09:28:72:35:4f:f8:a3:5e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:40:46 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=471cb3cc4f372a55ac440da188e99a876417d31fe9d1591ae25187edf46bebdf, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:85:6c:21:8f:a7:36:ab:2a:62:d2:6b:c1: ef:b6:5e:b2:f0:ad:5e:92:4e:29:e2:cf:77:a6:82: 07:e9:8c:d8:18:ce:4a:fd:40:a0:5d:5f:3c:7a:23: b0:5b:54:8b:7d:28:38:35:7f:cc:c7:ef:90:81:1f: ab:38:35:30:a5:dc:9e:7e:98:fb:ce:f0:07:4b:1e: 2d:7a:15:b4:ec:59:57:71:08:46:9a:f5:84:fb:ab: 12:3b:eb:2d:a7:0f:89:9c:8e:a7:e8:ef:38:c6:a7: f8:ad:8d:ea:10:cd:43:0b:40:00:55:cc:62:e7:4b: 89:08:29:3f:15:f1:21:5e:99:13:4c:57:14:33:cb: c6:8a:2a:06:32:6f:47:cf:08:23:19:f1:5b:58:b4: e1:91:58:eb:ea:8e:ec:73:6b:d0:a2:5b:13:5c:fa: 8d:e8:84:b8:54:69:10:f0:e9:07:35:06:01:02:76: 38:d1:06:a5:fc:8c:c5:ab:8b:83:a5:34:67:ef:25: c5:70:d5:72:f3:ca:f9:3f:0d:34:06:ec:42:9e:d8: 8c:31:29:53:eb:88:e8:95:de:98:42:a5:83:41:a4: b1:e2:54:50:9c:7a:71:e3:5a:5b:69:55:a2:75:ff: 43:d5:a7:1d:59:c8:24:82:55:f5:d1:f5:68:06:f7: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EA:A5:B0:7C:71:74:F0:AC:CA:8E:79:7A:FD:9E:33:C0:B9:26:3A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6103::/48 Signature Algorithm: sha256WithRSAEncryption 90:dd:08:30:91:88:81:21:b0:bf:bc:d9:66:c1:6e:53:01:b3: 8b:81:ac:5b:e5:a6:cd:0f:54:5a:85:61:ff:ed:d2:99:55:bd: 77:41:c6:40:ce:71:e8:3d:5b:96:3f:7a:5c:28:c3:d3:62:8c: 33:c3:28:07:78:65:d6:bc:c4:10:fc:15:10:db:fa:6a:3d:37: 0a:fa:ef:c8:8c:b1:3b:e0:e0:d0:b9:e9:3e:58:ea:ea:b7:fd: 9b:f7:68:03:48:f0:77:6a:96:7b:96:9a:34:e4:c9:af:d0:d4: 68:e9:3f:18:ed:57:bc:54:11:64:fe:e6:2d:f6:9e:25:a1:65: dc:27:84:3e:cd:54:d5:ef:c1:cc:61:0c:62:e8:7e:b0:f5:4e: 28:f3:eb:38:8c:e1:dd:f1:0f:41:31:85:91:32:67:0b:37:c2: 37:99:b0:3d:b1:c2:0c:30:95:a9:0c:58:76:33:d7:c9:ad:35: 87:45:4a:d6:a0:a9:50:24:f5:c3:42:24:25:75:bc:07:de:69: 43:dd:b4:fe:2d:4b:6b:32:66:31:e1:e4:b6:49:3b:69:44:f3: 8a:80:c6:7c:74:c3:cb:75:f3:d9:96:a4:65:4a:1f:36:2c:85: ad:40:e0:e1:bb:e3:98:ef:54:f7:18:f3:30:a9:74:87:6e:47: 22:d5:b1:00 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUNIhNznENQTy4y84JKHI1T/ijXvkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTc0MDQ2WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzFjYjNjYzRmMzcyYTU1YWM0NDBkYTE4OGU5OWE4NzY0 MTdkMzFmZTlkMTU5MWFlMjUxODdlZGY0NmJlYmRmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBqYVsIY+nNqsqYtJrwe+2XrLwrV6STiniz3emggfpjNgY zkr9QKBdXzx6I7BbVIt9KDg1f8zH75CBH6s4NTCl3J5+mPvO8AdLHi16FbTsWVdx CEaa9YT7qxI76y2nD4mcjqfo7zjGp/itjeoQzUMLQABVzGLnS4kIKT8V8SFemRNM VxQzy8aKKgYyb0fPCCMZ8VtYtOGRWOvqjuxza9CiWxNc+o3ohLhUaRDw6Qc1BgEC djjRBqX8jMWri4OlNGfvJcVw1XLzyvk/DTQG7EKe2IwxKVPriOiV3phCpYNBpLHi VFCcenHjWltpVaJ1/0PVpx1ZyCSCVfXR9WgG9ynNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUduqlsHxxdPCsyo55ev2eM8C5JjowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzBmYWM4NjIyLTA1NmMtNDM1MC05ZDcwLWIxMDdiZWRmM2U5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQMwDQYJKoZIhvcNAQELBQADggEBAJDdCDCRiIEhsL+82WbBblMB s4uBrFvlps0PVFqFYf/t0plVvXdBxkDOceg9W5Y/elwow9NijDPDKAd4Zda8xBD8 FRDb+mo9Nwr678iMsTvg4NC56T5Y6uq3/Zv3aANI8HdqlnuWmjTkya/Q1GjpPxjt V7xUEWT+5i32niWhZdwnhD7NVNXvwcxhDGLofrD1Tijz6ziM4d3xD0ExhZEyZws3 wjeZsD2xwgwwlakMWHYz18mtNYdFStagqVAk9cNCJCV1vAfeaUPdtP4tS2syZjHh 5LZJO2lE84qAxnx0w8t189mWpGVKHzYsha1A4OG745jvVPcY8zCpdIduRyLVsQA= -----END CERTIFICATE-----Generated at Wed Oct 8 19:43:03 2025 by rpki-client