$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13d95532-571e-4655-86b3-383b815023ba.roa File: 13d95532-571e-4655-86b3-383b815023ba.roa (raw, json) Hash identifier: DdEF1Gg8/lxu5lQZwWSDpmUVEeQEKFtBrzzIoyJC/Hk= Subject key identifier: 99:E6:32:C6:B5:68:6B:DD:90:AD:9C:7E:2F:E8:A6:FC:F0:49:FF:F5 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 29C39D1B89F7AC92FE892784514B58AE36B121E3 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13d95532-571e-4655-86b3-383b815023ba.roa Signing time: Fri 26 Sep 2025 18:11:22 +0000 ROA not before: Fri 26 Sep 2025 18:11:22 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c3:9d:1b:89:f7:ac:92:fe:89:27:84:51:4b:58:ae:36:b1:21:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:11:22 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=b0fd0400dd3fd62013856860ecf23cff2707608a8ab7669b8c80edf7bd20d665, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:4d:24:f5:e0:62:3b:47:9b:d1:74:ab:0e: ea:8d:7a:62:a4:c7:ac:6a:40:1b:01:41:cd:3f:7e: b3:bc:87:df:9b:3a:51:48:f9:fe:b9:70:03:c2:be: 91:61:ab:cd:ec:2e:7d:9c:7d:7f:06:44:f9:40:4c: 80:7e:65:8b:61:32:64:84:f0:2e:72:46:3c:cc:60: 51:40:b9:87:6c:10:f7:33:5b:77:07:10:9f:1f:0b: 7e:ee:d0:0d:14:a2:cf:a1:1c:9d:65:62:0f:bd:dc: 7e:72:6d:f8:55:26:37:c6:ce:dc:0a:b8:2f:06:1e: b1:49:d7:92:35:ac:32:fd:1d:87:38:b0:18:ea:2a: 68:2e:68:7a:21:eb:f6:6c:c1:98:bd:57:cd:c7:d3: 8d:2a:20:de:65:68:34:54:24:65:e4:75:41:1f:50: 7f:6c:da:9d:5b:11:70:49:0d:9f:5c:65:a8:79:61: a2:1f:0e:06:51:18:27:e7:94:a9:08:ff:5f:90:01: 19:4f:8a:0b:af:11:89:fd:d0:54:e6:69:6c:eb:ca: 8d:1c:d9:af:7c:d3:da:37:fb:30:5e:a3:b6:0c:a9: 77:bb:82:59:51:a4:13:07:aa:ca:ea:e4:be:c6:18: 96:36:64:b7:82:de:e8:67:e3:49:16:90:2f:2a:4b: 00:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E6:32:C6:B5:68:6B:DD:90:AD:9C:7E:2F:E8:A6:FC:F0:49:FF:F5 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/13d95532-571e-4655-86b3-383b815023ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e900::/40 Signature Algorithm: sha256WithRSAEncryption 96:ee:fc:44:7a:89:b4:bd:81:50:c2:72:ce:54:38:2c:fb:69: a9:a8:30:50:1c:32:8b:05:1b:1c:9d:84:70:2e:b5:66:bc:60: b9:91:e2:e8:b3:67:64:11:59:b2:ee:0f:58:9a:5f:31:2c:e7: 1a:5b:13:9c:1e:01:e9:8e:b3:82:b3:0d:13:b4:81:93:c5:bb: b0:f3:8e:ac:ce:ad:75:56:91:c3:2d:ae:39:06:8b:29:67:3b: 15:e5:b6:1c:ac:25:ee:8c:76:d0:23:0e:44:de:98:da:9c:28: 7b:98:7b:27:9b:91:c6:58:df:6b:e0:74:a4:85:19:b0:32:21: 14:42:24:bd:30:a1:cc:ff:70:06:ee:dc:73:d6:38:f1:67:62: 82:9e:88:95:fd:08:76:49:92:45:f0:50:c2:4e:d1:5a:d8:51: 14:70:35:10:79:12:c5:95:57:e3:7e:ab:01:dc:60:27:86:b7: 21:8e:36:3a:b3:03:4d:62:f8:85:d1:6e:30:7b:9a:3b:76:e4: 6b:e6:89:3e:2a:4f:7e:8c:9b:68:b9:8c:0e:e5:8b:c9:63:93: 5d:47:69:59:5f:e6:2f:05:7c:6e:e8:2b:cd:71:d1:7a:98:64: de:b9:7e:26:74:c5:53:2f:8c:8c:31:e6:1e:96:90:3b:6b:ef: e3:22:d8:6f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUKcOdG4n3rJL+iSeEUUtYrjaxIeMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMTIyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMGZkMDQwMGRkM2ZkNjIwMTM4NTY4NjBlY2YyM2NmZjI3 MDc2MDhhOGFiNzY2OWI4YzgwZWRmN2JkMjBkNjY1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCm0k0k9eBiO0eb0XSrDuqNemKkx6xqQBsBQc0/frO8h9+b OlFI+f65cAPCvpFhq83sLn2cfX8GRPlATIB+ZYthMmSE8C5yRjzMYFFAuYdsEPcz W3cHEJ8fC37u0A0Uos+hHJ1lYg+93H5ybfhVJjfGztwKuC8GHrFJ15I1rDL9HYc4 sBjqKmguaHoh6/ZswZi9V83H040qIN5laDRUJGXkdUEfUH9s2p1bEXBJDZ9cZah5 YaIfDgZRGCfnlKkI/1+QARlPiguvEYn90FTmaWzryo0c2a9809o3+zBeo7YMqXe7 gllRpBMHqsrq5L7GGJY2ZLeC3uhn40kWkC8qSwD9AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUmeYyxrVoa92QrZx+L+im/PBJ//UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzEzZDk1NTMyLTU3MWUtNDY1NS04NmIzLTM4M2I4MTUwMjNiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD76TANBgkqhkiG9w0BAQsFAAOCAQEAlu78RHqJtL2BUMJyzlQ4LPtp qagwUBwyiwUbHJ2EcC61ZrxguZHi6LNnZBFZsu4PWJpfMSznGlsTnB4B6Y6zgrMN E7SBk8W7sPOOrM6tdVaRwy2uOQaLKWc7FeW2HKwl7ox20CMORN6Y2pwoe5h7J5uR xljfa+B0pIUZsDIhFEIkvTChzP9wBu7cc9Y48Wdigp6Ilf0IdkmSRfBQwk7RWthR FHA1EHkSxZVX436rAdxgJ4a3IY42OrMDTWL4hdFuMHuaO3bka+aJPipPfoybaLmM DuWLyWOTXUdpWV/mLwV8bugrzXHRephk3rl+JnTFUy+MjDHmHpaQO2vv4yLYbw== -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:09 2025 by rpki-client