$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa File: 60d13554-0aae-450a-879a-816f0a4209ac.roa (raw, json) Hash identifier: VfF0aCz7MPBvloakXv937FZ7hF8P2Pau8UwD3BusF8A= Subject key identifier: 20:2E:07:1A:25:F8:F2:0B:E7:1C:EC:7A:10:BA:F6:42:E6:AE:20:FF Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0817DC98FE3C487DBD3A4DA651D9317C99CC985B Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa Signing time: Fri 03 Oct 2025 15:18:13 +0000 ROA not before: Fri 03 Oct 2025 15:18:13 +0000 ROA not after: Fri 07 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:17:dc:98:fe:3c:48:7d:bd:3a:4d:a6:51:d9:31:7c:99:cc:98:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 3 15:18:13 2025 GMT Not After : Nov 7 23:59:59 2025 GMT Subject: serialNumber=5ce4efd6e65558684e9b7e204c9588733d0909bafd247e635d0b38a2d8a251f8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:97:2d:f6:45:24:4c:49:c0:bc:ad:69:0c:c7: e6:89:85:78:82:4f:79:06:ff:52:89:88:b6:11:cc: 39:e2:fb:ec:75:15:cb:22:5a:4e:61:57:a8:55:a7: dd:25:b2:6f:c7:c8:80:ed:c9:d8:f7:c3:32:37:bc: e3:27:fb:ef:63:f3:7b:f3:0d:cf:2d:61:e7:11:c0: 5d:42:5d:16:b5:cc:b5:88:4e:de:5f:21:a3:73:55: 5d:c2:83:db:c2:45:7e:01:09:40:2f:7a:c3:be:23: e7:bf:26:39:28:36:ba:31:2a:c1:2d:ab:02:ba:c2: 3e:cf:7a:f6:ef:31:dd:bc:8e:22:ca:2c:a9:e6:75: 18:57:4b:ac:3a:a9:18:e7:40:e2:c8:11:02:5b:c8: 57:f1:3e:8e:33:1f:a6:1c:0c:fa:9a:22:81:28:07: 14:c2:e1:4c:6f:1e:52:6e:bf:4f:6e:6d:49:30:d3: d1:50:ac:96:49:27:f9:5a:39:2a:37:70:ca:63:09: 22:83:7c:ac:49:69:56:f9:63:6c:16:90:f8:34:1f: 5e:ec:62:6e:51:ef:31:ca:75:dd:5f:f4:6a:2a:75: 6a:f3:09:a0:80:ee:a3:c9:0d:d4:98:f0:bd:bd:39: aa:59:68:10:aa:35:b9:4c:23:ba:12:e8:5a:63:19: f9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2E:07:1A:25:F8:F2:0B:E7:1C:EC:7A:10:BA:F6:42:E6:AE:20:FF X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6101::/48 Signature Algorithm: sha256WithRSAEncryption 46:e1:1a:be:80:b2:e0:ba:a9:aa:88:f6:15:85:fd:c4:34:04: 50:d0:41:51:19:0e:ce:f8:43:bc:0d:60:85:0f:f7:63:b5:0f: b6:b2:c3:de:84:c3:74:6b:f6:88:42:a1:9c:98:d5:2d:33:24: 86:da:09:4e:b6:eb:58:d2:7e:fb:c4:77:a0:f1:30:b4:0b:7d: 24:72:85:06:f0:ca:1f:c8:8a:7b:a8:e3:8c:ea:fb:e9:e3:0f: 16:34:27:4f:9f:8f:4c:18:c1:21:56:b3:2e:35:8c:92:8f:88: 0a:02:2d:9f:fe:d3:bd:3c:07:23:74:f5:71:98:2c:34:21:02: fe:ab:bc:64:92:35:70:ac:19:a6:51:9f:c4:8a:f6:31:a0:ae: a6:aa:f8:cc:43:7d:c3:87:a2:e4:85:3e:15:90:16:ce:7d:cd: 4d:bb:f3:86:d3:e5:1f:d8:f2:c4:11:93:96:d6:ec:fa:75:de: b9:4c:9c:a0:05:15:88:a3:66:ac:c0:ae:03:8f:bd:8b:6a:ee: 8b:eb:7c:1e:00:9c:d3:aa:2d:a3:7a:95:ad:6d:4b:fd:11:9f: 03:56:10:ce:d5:7c:5d:2a:8e:28:76:26:b6:19:17:95:68:b3: 0d:e4:23:07:29:be:2c:23:7b:64:c6:b9:a2:c1:fc:51:90:72: 41:6d:e1:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCBfcmP48SH29Ok2mUdkxfJnMmFswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDAzMTUxODEzWhcNMjUxMTA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2U0ZWZkNmU2NTU1ODY4NGU5YjdlMjA0Yzk1ODg3MzNk MDkwOWJhZmQyNDdlNjM1ZDBiMzhhMmQ4YTI1MWY4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKly32RSRMScC8rWkMx+aJhXiCT3kG/1KJiLYRzDni++x1 FcsiWk5hV6hVp90lsm/HyIDtydj3wzI3vOMn++9j83vzDc8tYecRwF1CXRa1zLWI Tt5fIaNzVV3Cg9vCRX4BCUAvesO+I+e/JjkoNroxKsEtqwK6wj7PevbvMd28jiLK LKnmdRhXS6w6qRjnQOLIEQJbyFfxPo4zH6YcDPqaIoEoBxTC4UxvHlJuv09ubUkw 09FQrJZJJ/laOSo3cMpjCSKDfKxJaVb5Y2wWkPg0H17sYm5R7zHKdd1f9GoqdWrz CaCA7qPJDdSY8L29OapZaBCqNblMI7oS6FpjGfmvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUIC4HGiX48gvnHOx6ELr2QuauIP8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzYwZDEzNTU0LTBhYWUtNDUwYS04NzlhLTgxNmYwYTQyMDlhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQEwDQYJKoZIhvcNAQELBQADggEBAEbhGr6AsuC6qaqI9hWF/cQ0 BFDQQVEZDs74Q7wNYIUP92O1D7ayw96Ew3Rr9ohCoZyY1S0zJIbaCU6261jSfvvE d6DxMLQLfSRyhQbwyh/Iinuo44zq++njDxY0J0+fj0wYwSFWsy41jJKPiAoCLZ/+ 0708ByN09XGYLDQhAv6rvGSSNXCsGaZRn8SK9jGgrqaq+MxDfcOHouSFPhWQFs59 zU2784bT5R/Y8sQRk5bW7Pp13rlMnKAFFYijZqzArgOPvYtq7ovrfB4AnNOqLaN6 la1tS/0RnwNWEM7VfF0qjih2JrYZF5Vosw3kIwcpviwje2TGuaLB/FGQckFt4T8= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:56 2025 by rpki-client