$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa File: 53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa (raw, json) Hash identifier: CS44OLvE/98z4tGLfelnEe3qGkX7FVTr9+WbXYh4Ocg= Subject key identifier: AA:81:2D:97:F5:DE:BE:BE:7A:94:C5:B0:B3:0E:D0:11:68:2C:E8:F9 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 707064FD89F009601EE19082BC65C8B3E2C4474C Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa Signing time: Mon 06 Oct 2025 17:37:45 +0000 ROA not before: Mon 06 Oct 2025 17:37:45 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:70:64:fd:89:f0:09:60:1e:e1:90:82:bc:65:c8:b3:e2:c4:47:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:37:45 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=e55e9f98b08dbe106d9431434930115d9024006629777dfcbf0a0ce34471e50b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1d:c9:ce:9d:d4:a7:f4:6c:b7:6a:e6:3a:6c: d0:a9:78:38:01:bb:d7:ab:1a:71:be:1d:35:d8:f1: 1c:a5:83:29:32:1f:e4:47:6a:b3:4a:21:6f:3e:33: f0:25:bd:13:63:2d:89:67:1d:c4:56:4e:7f:a6:93: 75:67:2a:13:16:e3:7c:4a:da:12:21:6b:82:93:b6: 54:ae:b2:f7:b6:b7:46:4c:ec:28:0d:5a:8d:ad:2f: fc:44:fe:8b:37:b8:07:bb:41:f6:e8:12:69:2c:6f: c3:6c:4d:6f:e0:20:ed:92:8c:ba:29:7e:71:63:37: b5:81:17:32:18:7c:71:0e:83:63:89:05:dc:f5:fd: 33:f9:c6:87:02:6d:9c:b6:b8:e0:89:2b:75:4a:e4: 7f:e8:e8:43:b1:a7:2c:7f:39:55:b0:e5:a3:a2:1a: 47:43:0c:94:26:d6:0e:c4:7c:ba:25:d7:95:21:20: 07:23:1e:9a:d1:33:0f:b3:42:f1:a6:d0:67:2d:24: 06:1e:d8:cf:12:e4:e2:ba:94:f3:51:e7:41:ea:ec: 94:0a:5b:01:87:8e:40:2f:c0:ee:12:fd:58:14:39: ac:08:8a:e3:eb:d5:a3:03:cb:33:fb:2c:ad:27:47: 0a:2d:34:ee:67:79:c7:7a:b5:ea:5c:f8:2b:8f:27: 32:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:81:2D:97:F5:DE:BE:BE:7A:94:C5:B0:B3:0E:D0:11:68:2C:E8:F9 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6107::/48 Signature Algorithm: sha256WithRSAEncryption 41:c3:8c:72:a9:f4:b9:7a:5d:f2:f0:21:0e:4e:1a:02:84:27: cb:c2:75:81:b6:9f:b7:b2:e0:63:43:bf:3d:5f:bd:3b:6e:e0: 3b:3e:53:c8:6e:dd:77:cd:09:16:31:aa:c1:c1:96:32:dc:50: 03:5d:a0:ba:7d:04:04:64:68:71:90:64:46:d9:49:55:8a:0f: 26:10:f8:d6:d1:c1:f7:c9:6d:5d:9b:a4:79:5a:cc:cb:6e:6d: 08:9a:61:c2:76:5d:89:e0:7c:c3:5b:87:c5:ee:38:d0:02:a8: 68:b3:b1:2a:66:67:a9:a2:56:26:16:e5:90:e4:52:f9:f4:34: ee:26:69:67:4a:8e:4f:10:0e:6a:10:44:56:19:84:85:ae:6d: 18:0a:af:ad:4a:a3:52:3a:9f:1a:04:5a:e1:05:ed:7e:de:c4: a9:1f:29:db:fe:ce:3c:56:65:02:14:17:78:b9:14:30:15:14: 6c:60:a4:73:c7:eb:f7:bd:d4:4b:7c:2d:84:40:cc:59:7f:f8: ae:d0:e3:e4:f3:30:e9:7c:b3:e2:c5:ba:c9:c2:d9:37:82:c5: ee:67:c4:0c:a1:18:3a:de:84:bc:30:35:b0:01:f2:f9:e7:65: cd:c6:68:0f:42:24:9b:82:52:03:1f:28:b2:1b:97:7e:8d:38: 3b:9e:ca:05 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcHBk/YnwCWAe4ZCCvGXIs+LER0wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTczNzQ1WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTVlOWY5OGIwOGRiZTEwNmQ5NDMxNDM0OTMwMTE1ZDkw MjQwMDY2Mjk3NzdkZmNiZjBhMGNlMzQ0NzFlNTBiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRHcnOndSn9Gy3auY6bNCpeDgBu9erGnG+HTXY8Rylgyky H+RHarNKIW8+M/AlvRNjLYlnHcRWTn+mk3VnKhMW43xK2hIha4KTtlSusve2t0ZM 7CgNWo2tL/xE/os3uAe7QfboEmksb8NsTW/gIO2SjLopfnFjN7WBFzIYfHEOg2OJ Bdz1/TP5xocCbZy2uOCJK3VK5H/o6EOxpyx/OVWw5aOiGkdDDJQm1g7EfLol15Uh IAcjHprRMw+zQvGm0GctJAYe2M8S5OK6lPNR50Hq7JQKWwGHjkAvwO4S/VgUOawI iuPr1aMDyzP7LK0nRwotNO5necd6tepc+CuPJzKNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqoEtl/Xevr56lMWwsw7QEWgs6PkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzUzZWE2OTNlLWZhOGQtNDEyNi1iYWY1LTA2ZTFjZWViZGNlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQcwDQYJKoZIhvcNAQELBQADggEBAEHDjHKp9Ll6XfLwIQ5OGgKE J8vCdYG2n7ey4GNDvz1fvTtu4Ds+U8hu3XfNCRYxqsHBljLcUANdoLp9BARkaHGQ ZEbZSVWKDyYQ+NbRwffJbV2bpHlazMtubQiaYcJ2XYngfMNbh8XuONACqGizsSpm Z6miViYW5ZDkUvn0NO4maWdKjk8QDmoQRFYZhIWubRgKr61Ko1I6nxoEWuEF7X7e xKkfKdv+zjxWZQIUF3i5FDAVFGxgpHPH6/e91Et8LYRAzFl/+K7Q4+TzMOl8s+LF usnC2TeCxe5nxAyhGDrehLwwNbAB8vnnZc3GaA9CJJuCUgMfKLIbl36NODueygU= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:26 2025 by rpki-client