$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa File: 87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa (raw, json) Hash identifier: VXCYknov75QRgy9qdxeFFVXghHkjJ6zaOKCHhX1y1o8= Subject key identifier: F1:6C:C7:63:91:11:6B:A6:C4:E3:FE:59:FE:F5:63:76:1E:F7:49:44 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 57DF7F55C2EFFEBA231926020578DE80A1DE832F Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa Signing time: Fri 26 Sep 2025 18:11:33 +0000 ROA not before: Fri 26 Sep 2025 18:11:33 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e500::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:df:7f:55:c2:ef:fe:ba:23:19:26:02:05:78:de:80:a1:de:83:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:11:33 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=d9f051c1b00fbb15a40b960daca251782ae1f73886dd22eb4ff7b650e670119b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:f9:b6:49:e6:e5:da:c0:54:d6:ef:80:b6: 7b:23:a9:b1:a7:71:6b:d0:a1:61:67:cd:95:bb:e1: da:c6:4d:e6:c0:19:e5:8d:65:c9:bf:7c:37:ba:48: a1:b6:99:57:98:ef:ed:a8:23:e2:b5:90:f2:e3:c0: 9d:3e:59:da:92:36:2c:c5:2f:63:68:b3:9e:71:b6: 0a:29:1c:2b:7d:7a:5d:15:88:c2:49:38:ce:94:cd: b0:82:88:37:8c:4f:d4:85:71:30:1c:17:5a:bd:f9: b3:c6:cc:93:df:55:ed:4d:e1:81:3c:67:e6:2b:58: 3d:17:4f:35:80:a1:48:31:ad:e1:91:43:c1:60:24: 1e:ca:8b:b0:81:2e:bb:0a:55:01:14:7b:66:10:5b: 91:55:9a:07:31:e9:b5:8e:96:f4:0c:3e:82:c4:2d: f8:e4:71:e3:cb:d5:63:64:05:4e:64:a3:b9:dc:5f: 73:b4:d7:eb:51:31:a5:2a:13:0b:c2:c6:4d:cc:a5: e0:e9:7d:4a:98:e1:a7:9e:83:12:08:f5:14:48:41: e2:ef:e8:ac:2d:f3:1e:0c:4c:ec:f1:bc:11:41:00: 29:03:18:ce:34:96:aa:d7:46:23:8e:05:7c:68:46: 2b:1e:eb:e2:d0:4a:aa:f1:82:56:23:c7:ed:d9:94: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6C:C7:63:91:11:6B:A6:C4:E3:FE:59:FE:F5:63:76:1E:F7:49:44 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e500::/42 Signature Algorithm: sha256WithRSAEncryption 2a:3d:fc:83:e5:dd:69:77:9b:73:a0:e6:de:06:d4:95:d7:b6: cf:a6:56:cc:21:62:8c:2a:09:98:99:76:c0:8f:e6:18:82:ff: f8:96:1f:56:c3:e2:2e:18:e2:22:65:55:42:7a:3a:79:9d:34: 5b:89:65:be:16:7a:15:62:46:61:8a:a5:03:aa:a7:27:db:b4: b0:2a:96:b0:f8:ae:68:3b:3f:8a:47:a3:65:ec:dc:45:b7:7e: 49:33:62:3b:8b:71:3a:51:d6:da:14:ca:3e:7d:86:b0:65:c7: c3:fc:ce:c8:65:44:23:f8:3f:6b:9c:9e:bd:5a:73:4a:94:ef: 9e:ac:a4:22:ff:98:3f:db:66:f6:f5:bd:0d:a3:16:46:d0:de: 89:56:3b:20:47:4b:6e:66:36:64:f3:79:44:91:55:88:2d:06: f0:80:c6:be:a2:65:a3:64:f3:a8:67:b1:65:ae:e9:8c:06:a3: 72:a1:08:2f:35:9a:69:8b:50:4d:9f:90:70:57:bd:db:73:8b: f7:b6:36:69:9d:55:11:d0:d1:b1:e6:26:57:71:6c:47:c3:11: b1:93:9c:19:f6:69:50:79:62:4d:94:8d:7d:87:30:f8:ac:bd: 13:d4:06:7e:0e:c5:6a:f9:b2:a0:18:38:d0:bc:67:38:e4:2a: 7b:57:c8:7e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUV99/VcLv/rojGSYCBXjegKHegy8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMTMzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWYwNTFjMWIwMGZiYjE1YTQwYjk2MGRhY2EyNTE3ODJh ZTFmNzM4ODZkZDIyZWI0ZmY3YjY1MGU2NzAxMTliMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCyvm2Sebl2sBU1u+AtnsjqbGncWvQoWFnzZW74drGTebA GeWNZcm/fDe6SKG2mVeY7+2oI+K1kPLjwJ0+WdqSNizFL2Nos55xtgopHCt9el0V iMJJOM6UzbCCiDeMT9SFcTAcF1q9+bPGzJPfVe1N4YE8Z+YrWD0XTzWAoUgxreGR Q8FgJB7Ki7CBLrsKVQEUe2YQW5FVmgcx6bWOlvQMPoLELfjkcePL1WNkBU5ko7nc X3O01+tRMaUqEwvCxk3MpeDpfUqY4aeegxII9RRIQeLv6Kwt8x4MTOzxvBFBACkD GM40lqrXRiOOBXxoRise6+LQSqrxglYjx+3ZlPAlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8WzHY5ERa6bE4/5Z/vVjdh73SUQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2Lzg3YmFmYjBkLTdjZWMtNDMzMS04YTA5LTRhNGQ1NmFiZjdkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD75QAwDQYJKoZIhvcNAQELBQADggEBACo9/IPl3Wl3m3Og5t4G1JXX ts+mVswhYowqCZiZdsCP5hiC//iWH1bD4i4Y4iJlVUJ6OnmdNFuJZb4WehViRmGK pQOqpyfbtLAqlrD4rmg7P4pHo2Xs3EW3fkkzYjuLcTpR1toUyj59hrBlx8P8zshl RCP4P2ucnr1ac0qU756spCL/mD/bZvb1vQ2jFkbQ3olWOyBHS25mNmTzeUSRVYgt BvCAxr6iZaNk86hnsWWu6YwGo3KhCC81mmmLUE2fkHBXvdtzi/e2NmmdVRHQ0bHm JldxbEfDEbGTnBn2aVB5Yk2UjX2HMPisvRPUBn4OxWr5sqAYONC8ZzjkKntXyH4= -----END CERTIFICATE-----Generated at Wed Oct 8 19:48:43 2025 by rpki-client