$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dde62d4-6bbd-4a28-bbc3-33587737ae3b.roa File: 6dde62d4-6bbd-4a28-bbc3-33587737ae3b.roa (raw, json) Hash identifier: PUlfxuaYZ+//2Sc7V66zlWEvHktVq3XekozhHYU30MQ= Subject key identifier: 36:4D:FA:0E:15:DE:26:A1:FA:BF:C8:2F:F9:94:4B:1F:36:A1:FC:FB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1745A1FB72498B0A24F8D0F5BCB400270F600971 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dde62d4-6bbd-4a28-bbc3-33587737ae3b.roa Signing time: Mon 06 Oct 2025 17:37:42 +0000 ROA not before: Mon 06 Oct 2025 17:37:42 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:610b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:45:a1:fb:72:49:8b:0a:24:f8:d0:f5:bc:b4:00:27:0f:60:09:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 6 17:37:42 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=da79f517d50af81e5747908ccb6707aab6a0370d36a3850d0554e5cd0259bca4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:40:53:b5:3e:2b:8e:ba:5e:11:b9:92:02:f8: 82:5f:91:b4:90:2e:72:b8:e4:e8:c1:ce:43:f0:43: ef:ae:8a:e5:6b:7a:3b:d9:d9:e1:af:83:1d:73:bc: 4f:ac:a4:4d:c6:6e:0a:bf:53:37:d6:31:c4:55:f3: 1c:59:de:c9:42:5f:02:84:3b:58:79:50:c2:cc:48: ea:5b:af:d7:5e:62:14:3e:3f:17:e1:e3:a8:27:3c: 33:56:19:bd:ee:52:0b:11:56:6f:85:80:c6:83:62: 8b:c6:66:a0:82:e6:f4:73:e5:6e:86:b2:27:1f:b6: 2c:aa:1b:90:b5:10:d7:09:21:ac:e1:71:72:6a:4f: ce:0a:a4:e4:c1:58:b8:9b:0a:a8:19:e9:e1:1b:5b: 08:66:2b:b2:a1:fc:6d:3e:70:ca:d6:4c:c8:82:75: e6:02:3f:bc:63:a4:ee:7d:b5:f3:20:58:03:7b:06: a8:a7:90:84:a2:6b:a5:37:86:8d:0f:86:e2:dc:45: ed:6f:6a:95:67:a8:9f:25:ee:49:d2:72:20:c2:cc: f0:ef:41:ea:ec:ff:d3:21:66:33:8e:62:5a:d5:88: 17:d6:9f:d0:94:3a:83:35:85:d7:d7:b9:58:cf:8f: fd:d2:9d:53:74:c9:c5:4e:32:e1:e3:8c:11:d6:d8: 4b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4D:FA:0E:15:DE:26:A1:FA:BF:C8:2F:F9:94:4B:1F:36:A1:FC:FB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dde62d4-6bbd-4a28-bbc3-33587737ae3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:610b::/48 Signature Algorithm: sha256WithRSAEncryption 84:fd:6b:24:52:68:58:bd:85:60:9a:9e:f6:5c:0d:1e:a8:52: e9:91:47:2a:d6:12:95:a2:30:be:da:dc:9f:f1:e6:5b:43:34: 39:1d:9e:ea:7e:2c:2b:ce:fc:88:52:ad:87:5f:c1:26:9f:fd: 07:fc:d1:45:ad:85:51:53:92:a4:3c:61:b0:81:75:f8:44:eb: 93:b3:33:be:39:75:ce:9c:ee:ab:ec:ce:77:56:6a:e9:f6:17: ca:cc:47:eb:13:87:96:a9:45:ce:1c:77:0d:88:3b:f0:7a:1b: 20:f8:80:da:f1:5e:35:35:18:66:fe:33:05:e4:00:b8:fc:53: f9:99:3f:71:9d:f4:36:e5:f0:25:c7:40:eb:5c:1f:c5:4e:1c: 78:94:4a:57:42:09:84:ad:de:27:a8:17:2b:20:22:c9:38:71: 5a:3e:56:2a:f5:62:06:b5:c4:a7:cf:54:84:e7:0a:92:c1:3b: b8:3b:7f:ef:5a:88:29:28:42:d1:0b:96:19:ed:03:8b:40:2f: 74:c5:04:84:3b:b8:9b:66:1e:fe:c3:1c:0c:29:ff:76:c4:ea: 5e:a8:7b:b4:7e:d5:b5:44:15:27:08:2d:27:ac:d7:66:42:0e: 53:e5:b4:36:bc:3f:61:6d:b9:8b:79:0d:e5:12:de:9c:3e:51: 26:0b:98:36 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF0Wh+3JJiwok+ND1vLQAJw9gCXEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDA2MTczNzQyWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTc5ZjUxN2Q1MGFmODFlNTc0NzkwOGNjYjY3MDdhYWI2 YTAzNzBkMzZhMzg1MGQwNTU0ZTVjZDAyNTliY2E0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeQFO1PiuOul4RuZIC+IJfkbSQLnK45OjBzkPwQ++uiuVr ejvZ2eGvgx1zvE+spE3Gbgq/UzfWMcRV8xxZ3slCXwKEO1h5UMLMSOpbr9deYhQ+ Pxfh46gnPDNWGb3uUgsRVm+FgMaDYovGZqCC5vRz5W6GsicftiyqG5C1ENcJIazh cXJqT84KpOTBWLibCqgZ6eEbWwhmK7Kh/G0+cMrWTMiCdeYCP7xjpO59tfMgWAN7 BqinkISia6U3ho0PhuLcRe1vapVnqJ8l7knSciDCzPDvQers/9MhZjOOYlrViBfW n9CUOoM1hdfXuVjPj/3SnVN0ycVOMuHjjBHW2EvDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUNk36DhXeJqH6v8gv+ZRLHzah/PswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzZkZGU2MmQ0LTZiYmQtNGEyOC1iYmMzLTMzNTg3NzM3YWUzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQswDQYJKoZIhvcNAQELBQADggEBAIT9ayRSaFi9hWCanvZcDR6o UumRRyrWEpWiML7a3J/x5ltDNDkdnup+LCvO/IhSrYdfwSaf/Qf80UWthVFTkqQ8 YbCBdfhE65OzM745dc6c7qvszndWaun2F8rMR+sTh5apRc4cdw2IO/B6GyD4gNrx XjU1GGb+MwXkALj8U/mZP3Gd9Dbl8CXHQOtcH8VOHHiUSldCCYSt3ieoFysgIsk4 cVo+Vir1Yga1xKfPVITnCpLBO7g7f+9aiCkoQtELlhntA4tAL3TFBIQ7uJtmHv7D HAwp/3bE6l6oe7R+1bVEFScILSes12ZCDlPltDa8P2FtuYt5DeUS3pw+USYLmDY= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:56 2025 by rpki-client