$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa File: 644f882a-d42c-4c76-bb70-882838f6e3e0.roa (raw, json) Hash identifier: Og57FTJs4z7MCn6ABIjF/wpzQie+ljChXm7JghleMIA= Subject key identifier: 24:53:99:3E:6C:3E:BD:88:A3:FF:70:70:62:F5:A7:6C:67:35:68:08 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 56CEEF7031D24CE4DE4F325E6E9CCDF6C4ECD933 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa Signing time: Fri 26 Sep 2025 18:11:31 +0000 ROA not before: Fri 26 Sep 2025 18:11:31 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ce:ef:70:31:d2:4c:e4:de:4f:32:5e:6e:9c:cd:f6:c4:ec:d9:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:11:31 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=c51d142a594ca0c11ba815599ef303d49afab054cd87a9b12a341695dc7695fe, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:5f:36:f2:8e:94:c7:33:4e:78:64:8e:4b: 30:46:5f:08:e2:20:eb:a3:fb:0c:0c:f0:7c:f8:12: 00:f2:0e:71:ad:e7:ee:65:54:73:d4:e6:a1:b6:c6: 43:b7:b5:2a:60:4a:86:e0:cc:f7:21:5c:cb:61:5b: 50:1e:0e:41:08:a1:05:13:dc:7b:3e:e1:45:a1:99: d2:15:1d:c1:2f:61:bf:a0:44:dc:6b:dc:f2:58:6d: 6b:d2:30:58:97:63:ee:6d:e7:ef:a4:e7:b8:42:4b: c1:5f:be:0d:70:13:06:26:c2:4a:15:5e:4e:27:57: d1:ed:55:35:4f:51:33:24:8b:fd:87:77:83:0b:db: e2:27:87:d9:f8:64:4a:7d:b8:d4:ff:86:e8:fe:13: c1:f8:21:fd:90:af:23:f9:48:2d:c7:aa:1d:5e:7d: 36:a2:6b:48:9e:a7:dc:d3:f5:31:7e:eb:ed:c0:a9: 67:71:eb:15:11:27:ab:bd:e4:f4:85:dc:29:df:ee: f6:34:59:c8:05:86:9e:5b:df:01:46:a9:6c:6e:05: c4:72:9d:f8:f6:2e:59:15:c4:55:07:99:e1:bb:7e: 23:15:2f:1c:e9:aa:d8:a3:8a:1f:aa:0f:a6:bf:36: 99:3e:d4:39:61:66:ef:a8:9b:d8:e8:a2:cd:25:b2: 20:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:53:99:3E:6C:3E:BD:88:A3:FF:70:70:62:F5:A7:6C:67:35:68:08 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e600::/40 Signature Algorithm: sha256WithRSAEncryption 99:ad:a7:ea:84:ec:08:14:b9:87:a7:52:ba:84:c0:f2:1a:7d: 0a:ad:43:20:59:da:da:e4:fb:1e:0c:9f:50:2a:7b:cc:60:26: 27:0e:1d:a9:34:b4:ea:65:9b:5f:03:e6:cc:df:f5:1b:83:f4: b9:0c:a3:24:6b:62:c9:bf:e2:58:68:62:3f:7a:99:d8:1d:ca: 5e:f1:92:d1:da:5f:93:7e:6f:7f:73:86:12:f0:3f:7f:96:51: e5:37:20:ea:d3:95:cc:9a:55:b5:84:b6:28:1c:1e:54:c2:a4: aa:48:1c:d7:a8:ea:5e:75:13:6a:ae:b0:fc:56:5b:10:5e:04: 0f:00:d9:b1:10:2b:cf:6c:00:a8:52:10:f6:4f:9c:34:25:d2: 0c:91:e0:0c:ad:aa:22:09:7f:50:77:5a:b3:38:b2:dd:e4:28: 5d:79:f4:ba:44:8a:a0:11:e3:2b:93:d8:b6:9b:b9:cc:d5:5f: 44:13:37:77:82:1f:43:95:4a:c3:9c:df:c8:ae:6d:af:9e:dd: 9f:91:6d:b6:d7:40:ed:9a:df:00:66:5e:22:4d:6e:34:6e:02: cd:24:99:12:18:6d:57:d1:ea:58:7a:ec:8e:4f:61:dd:9e:23: fa:ad:b5:a6:1d:f7:94:8a:68:0b:38:94:73:47:22:56:d4:36: 4e:12:43:58 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUVs7vcDHSTOTeTzJebpzN9sTs2TMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMTMxWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNTFkMTQyYTU5NGNhMGMxMWJhODE1NTk5ZWYzMDNkNDlh ZmFiMDU0Y2Q4N2E5YjEyYTM0MTY5NWRjNzY5NWZlMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn7F828o6UxzNOeGSOSzBGXwjiIOuj+wwM8Hz4EgDyDnGt 5+5lVHPU5qG2xkO3tSpgSobgzPchXMthW1AeDkEIoQUT3Hs+4UWhmdIVHcEvYb+g RNxr3PJYbWvSMFiXY+5t5++k57hCS8Ffvg1wEwYmwkoVXk4nV9HtVTVPUTMki/2H d4ML2+Inh9n4ZEp9uNT/huj+E8H4If2QryP5SC3Hqh1efTaia0iep9zT9TF+6+3A qWdx6xURJ6u95PSF3Cnf7vY0WcgFhp5b3wFGqWxuBcRynfj2LlkVxFUHmeG7fiMV Lxzpqtijih+qD6a/Npk+1DlhZu+om9joos0lsiB3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUJFOZPmw+vYij/3BwYvWnbGc1aAgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY0NGY4ODJhLWQ0MmMtNGM3Ni1iYjcwLTg4MjgzOGY2ZTNlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD75jANBgkqhkiG9w0BAQsFAAOCAQEAma2n6oTsCBS5h6dSuoTA8hp9 Cq1DIFna2uT7HgyfUCp7zGAmJw4dqTS06mWbXwPmzN/1G4P0uQyjJGtiyb/iWGhi P3qZ2B3KXvGS0dpfk35vf3OGEvA/f5ZR5Tcg6tOVzJpVtYS2KBweVMKkqkgc16jq XnUTaq6w/FZbEF4EDwDZsRArz2wAqFIQ9k+cNCXSDJHgDK2qIgl/UHdasziy3eQo XXn0ukSKoBHjK5PYtpu5zNVfRBM3d4IfQ5VKw5zfyK5tr57dn5FtttdA7ZrfAGZe Ik1uNG4CzSSZEhhtV9HqWHrsjk9h3Z4j+q21ph33lIpoCziUc0ciVtQ2ThJDWA== -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:36 2025 by rpki-client