$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa File: 37cee73e-f60c-422c-8edf-fbb308bfb117.roa (raw, json) Hash identifier: KdyxkeED9IVk2iExePD3zfxpe5smFTq22uqWak6eS9A= Subject key identifier: AE:57:AA:66:3E:D4:CE:36:DD:F2:B5:F9:2D:FD:E3:BE:74:88:86:F1 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 61DC7BCD75037E0CC9A99C4C778B71E34A4F4B9B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa Signing time: Fri 26 Sep 2025 18:10:24 +0000 ROA not before: Fri 26 Sep 2025 18:10:24 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:dc:7b:cd:75:03:7e:0c:c9:a9:9c:4c:77:8b:71:e3:4a:4f:4b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:10:24 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=5fda3815833520ebfddb8ba2c358e385a7c4a4f1c533849f3c770f73e41724a6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:1f:4b:b1:48:69:eb:95:dd:bf:7b:ff:02: 70:a7:65:95:6c:15:0e:74:cb:99:c7:d1:08:aa:2c: ca:e1:57:e1:12:86:f0:ed:08:d8:a1:46:24:06:1f: 26:ca:db:33:0b:bb:46:29:e1:07:1d:49:d6:1c:8b: ae:5a:bf:36:37:53:1d:db:b6:d8:30:8b:0f:f4:7e: 89:d3:25:d8:ef:a0:4b:34:d4:55:2c:2a:f6:a5:dd: b4:39:9a:46:bc:c0:30:3d:d2:d5:2e:fe:e5:62:85: 09:6f:ca:7e:98:ed:e6:78:c6:da:67:71:58:e2:56: 48:b9:ef:8f:a3:3c:33:7a:95:8a:b5:25:ef:7e:76: 30:a9:23:81:3f:33:f2:3e:f9:84:7c:9f:b6:d7:92: 95:6a:fe:b0:f0:59:b8:23:16:aa:22:8c:80:a8:7d: 2f:18:4f:d7:2a:64:8c:f9:8a:13:1d:fc:8d:54:c3: fc:61:18:b0:37:1f:ac:50:5b:17:07:fa:b8:2e:1e: 35:2a:ca:51:f5:89:a7:49:bb:4a:c8:35:d0:62:8a: ce:e2:fb:59:f9:38:ee:0d:56:94:2c:d5:a8:54:8a: 71:2b:28:bd:d8:8c:6d:69:51:1e:79:56:a7:ac:a2: 56:29:58:c7:f7:49:6b:89:3b:70:d0:ce:f5:5d:ed: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:57:AA:66:3E:D4:CE:36:DD:F2:B5:F9:2D:FD:E3:BE:74:88:86:F1 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37cee73e-f60c-422c-8edf-fbb308bfb117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e000::/40 Signature Algorithm: sha256WithRSAEncryption a1:9b:09:62:46:34:b9:5b:a7:01:e0:6f:69:b1:2b:3f:05:b6: ba:70:57:4e:67:4c:02:d2:a9:55:01:e3:5f:87:cd:ae:e4:80: 48:c9:25:71:df:6f:e0:66:d8:b1:00:18:1b:41:eb:81:ab:d6: b2:0a:11:09:2c:58:6c:b9:55:97:8f:a7:25:55:6c:64:5a:9c: ce:f8:53:bb:0d:c6:89:a0:ee:28:49:fc:a9:41:d5:46:39:a1: a9:44:59:ef:73:63:a4:4c:84:94:26:f9:20:43:6a:e8:16:0c: 3e:62:c7:cf:fb:a6:2b:a2:97:ca:08:3a:83:e3:71:cb:ee:b2: cb:b1:3e:9b:0f:47:96:3e:10:08:1c:f0:4e:ed:98:b7:4f:99: 65:7e:fa:07:2c:79:0c:68:a3:fb:e2:6a:4e:95:86:c4:22:58: 66:63:21:2f:f9:af:e4:e0:0a:d1:82:bc:d8:7e:70:a5:80:13: 3d:21:7c:9f:9c:7c:f4:19:c6:d5:ee:96:a4:93:ff:9a:e7:3b: 3c:a0:25:7f:93:ab:ba:23:ed:b1:e5:73:d6:68:82:27:19:d0: 23:1d:ee:87:16:e6:a6:dd:52:d2:1b:4a:76:fb:a6:ca:71:2d: 4d:f5:f7:7a:61:b4:d7:11:2b:f7:0b:ac:16:4d:fb:50:54:b6: 15:a8:e3:0b -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYdx7zXUDfgzJqZxMd4tx40pPS5swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMDI0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmRhMzgxNTgzMzUyMGViZmRkYjhiYTJjMzU4ZTM4NWE3 YzRhNGYxYzUzMzg0OWYzYzc3MGY3M2U0MTcyNGE2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaoB9LsUhp65Xdv3v/AnCnZZVsFQ50y5nH0QiqLMrhV+ES hvDtCNihRiQGHybK2zMLu0Yp4QcdSdYci65avzY3Ux3bttgwiw/0fonTJdjvoEs0 1FUsKval3bQ5mka8wDA90tUu/uVihQlvyn6Y7eZ4xtpncVjiVki574+jPDN6lYq1 Je9+djCpI4E/M/I++YR8n7bXkpVq/rDwWbgjFqoijICofS8YT9cqZIz5ihMd/I1U w/xhGLA3H6xQWxcH+rguHjUqylH1iadJu0rINdBiis7i+1n5OO4NVpQs1ahUinEr KL3YjG1pUR55VqesolYpWMf3SWuJO3DQzvVd7Q+TAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUrleqZj7Uzjbd8rX5Lf3jvnSIhvEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzM3Y2VlNzNlLWY2MGMtNDIyYy04ZWRmLWZiYjMwOGJmYjExNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD74DANBgkqhkiG9w0BAQsFAAOCAQEAoZsJYkY0uVunAeBvabErPwW2 unBXTmdMAtKpVQHjX4fNruSASMklcd9v4GbYsQAYG0HrgavWsgoRCSxYbLlVl4+n JVVsZFqczvhTuw3GiaDuKEn8qUHVRjmhqURZ73NjpEyElCb5IENq6BYMPmLHz/um K6KXygg6g+Nxy+6yy7E+mw9Hlj4QCBzwTu2Yt0+ZZX76Byx5DGij++JqTpWGxCJY ZmMhL/mv5OAK0YK82H5wpYATPSF8n5x89BnG1e6WpJP/muc7PKAlf5OruiPtseVz 1miCJxnQIx3uhxbmpt1S0htKdvumynEtTfX3emG01xEr9wusFk37UFS2FajjCw== -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:56 2025 by rpki-client