$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa File: 720f42c5-101d-41af-abc8-bd64d6f08fe0.roa (raw, json) Hash identifier: U1uUq9FQTW1B8QgJagLQSnaheIxuOghs0Cf5i631CSY= Subject key identifier: 71:ED:91:FB:76:F1:57:B9:9E:DD:38:15:DD:A0:4D:76:94:A3:CC:8D Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7B2BE937EF1FEABBCE3801D20E06354B2853536E Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa Signing time: Tue 16 Sep 2025 15:00:11 +0000 ROA not before: Tue 16 Sep 2025 15:00:11 +0000 ROA not after: Tue 21 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f2:7011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:2b:e9:37:ef:1f:ea:bb:ce:38:01:d2:0e:06:35:4b:28:53:53:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 16 15:00:11 2025 GMT Not After : Oct 21 23:59:59 2025 GMT Subject: serialNumber=34fc61c512ef9cdb190fce235fbb49c49d0f58216c4c53e5a81c33d217b9f018, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:28:6a:47:b8:0d:92:61:b5:78:3a:08:2b:c5: c1:aa:9c:5e:18:94:7f:25:ae:01:eb:67:2e:76:7e: 76:ea:af:cf:bf:9a:a5:e6:7a:4b:a3:8f:1d:c1:49: f3:31:98:06:f6:bb:25:68:1c:7e:25:cd:db:6a:16: 9c:f2:f6:fb:01:fe:ea:6f:74:a0:34:25:2b:10:c7: a6:c2:9c:d6:be:e3:9b:1c:56:e5:9b:73:0c:4f:31: 61:bc:0d:12:c6:9d:2a:e9:92:5d:e1:05:77:fc:72: 73:4a:e3:d3:2a:8d:cd:90:a8:27:b7:85:1c:8a:59: 61:f6:d9:6a:23:0f:ff:bf:05:a3:f0:de:e5:5a:75: ec:e1:19:00:fb:77:07:5b:93:ea:3c:b2:7b:50:98: 59:dd:e8:da:93:2e:b2:80:1d:92:3e:57:84:41:0d: c6:a8:36:73:0f:00:65:81:bf:91:46:33:fb:6c:51: ab:5b:6a:09:ee:ef:c0:e8:27:fb:77:03:50:6a:9e: fa:53:57:a3:8d:4f:f2:6e:65:65:b6:72:04:64:e3: ae:aa:cb:c6:59:26:41:03:4b:3a:fd:57:e3:6e:87: 01:5d:84:13:9e:39:4a:5f:b4:51:71:b5:10:1d:29: 6b:a8:5e:c7:0d:35:20:2b:f4:73:1d:14:07:0d:37: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:ED:91:FB:76:F1:57:B9:9E:DD:38:15:DD:A0:4D:76:94:A3:CC:8D X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/720f42c5-101d-41af-abc8-bd64d6f08fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f2:7011::/48 Signature Algorithm: sha256WithRSAEncryption 0a:06:f8:3b:51:68:ea:9f:18:0a:06:df:8f:4c:45:15:0d:ea: de:3e:7e:ab:79:78:7a:57:99:cb:a6:a1:f6:67:e4:a1:a0:bb: 5a:af:d2:34:bb:05:9b:ce:b8:e6:a2:f9:c5:5c:07:b3:d5:7e: d5:01:99:eb:28:3f:bf:e2:08:6c:e9:67:57:37:a2:81:de:aa: f6:61:0e:20:71:71:36:02:37:55:3a:0f:c5:fe:c4:79:15:72: 8d:7a:44:40:81:71:99:85:c8:9a:a9:2d:f6:74:94:e5:95:70: 03:fa:7c:99:bf:4c:4d:cf:ec:9a:50:97:58:f6:51:30:a4:d2: 6c:31:95:95:f8:8b:1e:6f:7f:42:85:f6:01:6c:c4:b2:da:87: f2:d3:f6:ef:dd:81:32:2c:cc:fd:39:b5:4a:52:b0:3b:08:5b: e5:22:fe:43:40:b5:c8:d1:90:6b:28:df:13:86:ed:66:d1:d7: 9c:1a:e7:9a:84:49:97:8e:b3:a8:44:12:d7:ca:58:f2:b3:d1: 37:c9:f3:f5:69:0c:a1:1f:8d:dd:29:f6:57:46:c4:2a:ee:ec: 7a:d4:b9:99:d6:9a:8f:1a:b9:2c:28:fb:cc:5e:6d:1a:72:e0: 98:c9:46:82:a8:60:0e:70:d4:b7:b3:79:75:7b:14:e2:cc:f7: e2:2f:6a:8d -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUeyvpN+8f6rvOOAHSDgY1SyhTU24wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTE2MTUwMDExWhcNMjUxMDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNGZjNjFjNTEyZWY5Y2RiMTkwZmNlMjM1ZmJiNDljNDlk MGY1ODIxNmM0YzUzZTVhODFjMzNkMjE3YjlmMDE4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNKGpHuA2SYbV4OggrxcGqnF4YlH8lrgHrZy52fnbqr8+/ mqXmekujjx3BSfMxmAb2uyVoHH4lzdtqFpzy9vsB/upvdKA0JSsQx6bCnNa+45sc VuWbcwxPMWG8DRLGnSrpkl3hBXf8cnNK49Mqjc2QqCe3hRyKWWH22WojD/+/BaPw 3uVadezhGQD7dwdbk+o8sntQmFnd6NqTLrKAHZI+V4RBDcaoNnMPAGWBv5FGM/ts Uatbagnu78DoJ/t3A1BqnvpTV6ONT/JuZWW2cgRk466qy8ZZJkEDSzr9V+NuhwFd hBOeOUpftFFxtRAdKWuoXscNNSAr9HMdFAcNN/S1AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUce2R+3bxV7me3TgV3aBNdpSjzI0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzcyMGY0MmM1LTEwMWQtNDFhZi1hYmM4LWJkNjRkNmYwOGZlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDycBEwDQYJKoZIhvcNAQELBQADggEBAAoG+DtRaOqfGAoG349MRRUN 6t4+fqt5eHpXmcumofZn5KGgu1qv0jS7BZvOuOai+cVcB7PVftUBmesoP7/iCGzp Z1c3ooHeqvZhDiBxcTYCN1U6D8X+xHkVco16RECBcZmFyJqpLfZ0lOWVcAP6fJm/ TE3P7JpQl1j2UTCk0mwxlZX4ix5vf0KF9gFsxLLah/LT9u/dgTIszP05tUpSsDsI W+Ui/kNAtcjRkGso3xOG7WbR15wa55qESZeOs6hEEtfKWPKz0TfJ8/VpDKEfjd0p 9ldGxCru7HrUuZnWmo8auSwo+8xebRpy4JjJRoKoYA5w1LezeXV7FOLM9+Ivao0= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:06 2025 by rpki-client