$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e46b344-1c35-4502-912b-8ec7b80005d8.roa File: 1e46b344-1c35-4502-912b-8ec7b80005d8.roa (raw, json) Hash identifier: cUUoVL1WluyFRbclkYF+DB5jBfEf5aK/kGT9eCymxJM= Subject key identifier: 8F:0C:42:93:A1:0F:F0:7F:46:84:C7:43:1B:18:8F:23:4B:66:48:2A Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2D869DAC4A8FD3F9402E0A031CF18FACFF87CB4D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e46b344-1c35-4502-912b-8ec7b80005d8.roa Signing time: Mon 06 Oct 2025 17:40:37 +0000 ROA not before: Mon 06 Oct 2025 17:40:37 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:610f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:86:9d:ac:4a:8f:d3:f9:40:2e:0a:03:1c:f1:8f:ac:ff:87:cb:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:40:37 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=d57aa993c44b4128d51ff9ad129f7d507ed76153d518d676fbd45315283875a2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:36:2a:5b:14:6a:8e:4e:3f:1c:41:e5:30: 8c:04:24:8d:ba:be:9a:b8:ac:d2:85:a3:0b:fd:9e: ae:13:e7:fd:e4:d0:00:44:11:d5:f6:b6:ba:6e:f8: f3:8d:a6:ef:8f:66:3f:3f:eb:f5:87:2e:5e:2e:2c: 72:4a:70:9f:f1:bf:d2:29:fa:dc:6e:e4:c0:15:68: 17:e4:1d:fa:bb:3c:56:88:90:76:95:ed:14:8e:cd: 54:db:56:98:d9:00:99:d8:84:c0:de:48:21:65:ca: 72:fc:3a:78:06:53:60:c7:27:4a:eb:04:3b:4b:0d: ab:0d:d3:a4:b0:23:24:ed:7f:af:8d:3f:ce:2a:df: aa:5f:de:73:f6:58:4b:e1:06:42:04:80:ac:65:b0: 26:d8:aa:02:3e:fa:e7:00:4c:a8:5f:19:9e:21:cb: d4:3b:e2:5e:90:ee:18:c4:2d:a3:95:52:e6:0c:cc: 2f:82:d9:ed:e8:a3:4c:09:45:b0:59:86:48:28:51: 8c:41:e8:0a:f9:0c:ff:47:52:df:de:00:06:4b:48: bb:b4:f6:e1:f5:cd:a9:fe:48:fd:3b:f5:28:57:81: 34:db:d5:07:95:f8:03:d2:54:3f:53:c1:90:6c:77: 70:ce:a8:bd:54:7f:30:e4:9c:04:e7:98:88:57:7d: fa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0C:42:93:A1:0F:F0:7F:46:84:C7:43:1B:18:8F:23:4B:66:48:2A X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e46b344-1c35-4502-912b-8ec7b80005d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610f::/48 Signature Algorithm: sha256WithRSAEncryption 38:84:ae:9e:9d:93:0c:3e:bf:c6:25:18:0a:2e:65:14:96:8d: 2e:be:dd:53:6c:aa:bd:c9:c8:71:d0:34:84:33:92:53:14:e3: d6:bb:e5:e1:4b:42:ca:bd:af:bd:51:ec:0f:46:05:e1:ef:59: 34:19:88:14:8f:db:a9:b6:51:01:40:8e:04:45:2d:ec:51:81: bf:25:f8:11:47:b0:4e:cb:65:dc:82:0f:3d:9a:c7:e3:2b:6c: 5e:6a:54:2a:31:a3:38:96:1b:53:e1:93:87:09:72:cf:1d:93: 82:ac:c8:36:a0:f7:70:7c:4a:05:b2:b4:9d:56:2e:e2:63:da: 1d:ec:b8:c9:74:23:53:39:9d:69:a7:a2:a8:bc:78:a6:f1:19: 4f:75:0f:58:f5:b9:05:c7:fe:e6:0b:4c:fa:bc:64:6c:97:8e: 91:94:14:66:2f:66:19:4f:df:d1:61:44:e8:43:81:4e:2e:38: d8:96:2a:dc:09:98:58:30:20:a2:f1:10:ef:aa:4b:56:b7:04: f7:84:6c:e5:b7:80:9a:c0:e8:5c:fc:49:5e:d2:43:80:27:72: cf:da:5f:bc:f6:2b:f0:93:c1:ec:bb:62:6a:e1:06:66:89:dd: 1d:a4:96:bf:6b:1f:1f:f8:02:20:a5:ab:d6:8c:0b:2d:a5:c2: 2b:21:c9:7b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULYadrEqP0/lALgoDHPGPrP+Hy00wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTc0MDM3WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTdhYTk5M2M0NGI0MTI4ZDUxZmY5YWQxMjlmN2Q1MDdl ZDc2MTUzZDUxOGQ2NzZmYmQ0NTMxNTI4Mzg3NWEyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3CTYqWxRqjk4/HEHlMIwEJI26vpq4rNKFowv9nq4T5/3k 0ABEEdX2trpu+PONpu+PZj8/6/WHLl4uLHJKcJ/xv9Ip+txu5MAVaBfkHfq7PFaI kHaV7RSOzVTbVpjZAJnYhMDeSCFlynL8OngGU2DHJ0rrBDtLDasN06SwIyTtf6+N P84q36pf3nP2WEvhBkIEgKxlsCbYqgI++ucATKhfGZ4hy9Q74l6Q7hjELaOVUuYM zC+C2e3oo0wJRbBZhkgoUYxB6Ar5DP9HUt/eAAZLSLu09uH1zan+SP079ShXgTTb 1QeV+APSVD9TwZBsd3DOqL1UfzDknATnmIhXffo/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjwxCk6EP8H9GhMdDGxiPI0tmSCowHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzFlNDZiMzQ0LTFjMzUtNDUwMi05MTJiLThlYzdiODAwMDVkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQ8wDQYJKoZIhvcNAQELBQADggEBADiErp6dkww+v8YlGAouZRSW jS6+3VNsqr3JyHHQNIQzklMU49a75eFLQsq9r71R7A9GBeHvWTQZiBSP26m2UQFA jgRFLexRgb8l+BFHsE7LZdyCDz2ax+MrbF5qVCoxoziWG1Phk4cJcs8dk4KsyDag 93B8SgWytJ1WLuJj2h3suMl0I1M5nWmnoqi8eKbxGU91D1j1uQXH/uYLTPq8ZGyX jpGUFGYvZhlP39FhROhDgU4uONiWKtwJmFgwIKLxEO+qS1a3BPeEbOW3gJrA6Fz8 SV7SQ4Ancs/aX7z2K/CTwey7YmrhBmaJ3R2klr9rHx/4AiClq9aMCy2lwishyXs= -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:06 2025 by rpki-client