$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b26bc1e7-1ac6-4102-9377-56212373c3cb.roa File: b26bc1e7-1ac6-4102-9377-56212373c3cb.roa (raw, json) Hash identifier: M8+ISfLbQBmuIohwfXFzx3sH/w7/QoajJI/UQTBPLpQ= Subject key identifier: 54:FB:3E:1C:AC:A5:C3:F5:14:95:2E:FF:84:64:2A:86:73:B6:87:F8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1359A4B2F464749499326389BEE38268E161EB75 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b26bc1e7-1ac6-4102-9377-56212373c3cb.roa Signing time: Wed 17 Sep 2025 16:36:57 +0000 ROA not before: Wed 17 Sep 2025 16:36:57 +0000 ROA not after: Wed 22 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f1:80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:59:a4:b2:f4:64:74:94:99:32:63:89:be:e3:82:68:e1:61:eb:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 17 16:36:57 2025 GMT Not After : Oct 22 23:59:59 2025 GMT Subject: serialNumber=d406764e4c086bc51b26633c3fd38e90e6b50dd93192ec6612bd2779dc9a9716, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:e6:c0:c9:85:66:55:75:bf:4f:1f:9c:96: 1b:5a:d3:a9:3b:f7:12:56:78:65:4b:39:e4:3f:b4: e0:c5:31:76:ec:db:eb:0f:f5:35:da:0d:39:9d:1f: 08:e5:3e:35:2f:96:a9:39:de:46:dc:b6:d2:5c:52: bf:af:9e:8b:04:5b:d2:09:55:ce:24:8a:75:a3:d0: df:0b:f2:c8:41:c5:df:9f:e5:c7:fe:7d:14:3c:9a: a6:4d:f6:e4:b9:f2:51:00:6f:fd:17:b0:b3:cf:03: 0c:b7:04:b9:2b:db:86:b0:93:6c:f9:d8:b0:a1:a6: 49:ab:df:8c:8d:68:04:40:57:60:06:8c:c5:67:48: d7:2e:e8:c9:f9:49:4b:f4:4d:13:42:78:5e:69:b5: cf:67:19:a8:6e:0c:f7:a6:76:ba:e4:e8:ba:b6:69: 78:79:b7:8a:8b:ef:d7:68:e0:87:57:53:fe:42:90: 37:45:ae:29:d1:b5:2c:94:23:23:6c:51:5a:b5:a6: 53:c9:84:c9:25:54:1a:76:32:c7:51:1b:84:8e:0f: 3c:dc:df:91:92:70:61:a8:6a:63:61:5d:42:71:5d: e2:33:6f:30:36:f8:07:e3:ba:45:4b:7a:7a:20:95: 89:09:cb:94:70:b3:ef:45:28:92:7e:a1:e6:3a:18: cf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FB:3E:1C:AC:A5:C3:F5:14:95:2E:FF:84:64:2A:86:73:B6:87:F8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b26bc1e7-1ac6-4102-9377-56212373c3cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:80::/44 Signature Algorithm: sha256WithRSAEncryption 9c:2b:4d:ab:cf:cf:07:1c:20:e3:ba:91:b0:95:1c:e2:ed:d2: 88:d8:58:44:06:58:3a:ee:83:83:73:13:d8:2c:e3:d8:35:6a: 27:c4:72:5f:a8:32:c6:c2:bf:c1:cc:a8:5c:95:1b:02:cd:07: e2:64:21:5f:3e:9f:22:f3:09:a6:6c:4d:41:71:79:36:ee:19: 0f:8c:79:92:0a:74:f9:51:ec:ad:de:77:11:d1:6e:93:08:89: a1:f7:b4:dc:54:e7:2e:52:79:30:a5:78:fe:ab:96:b0:f7:31: ad:28:49:fe:a4:91:60:8d:03:90:52:55:23:6c:c7:89:f1:7f: 60:cf:96:80:5b:25:0d:ee:ae:a8:c9:d4:68:0f:0a:e7:70:51: f0:38:00:1c:49:91:08:52:d2:d8:7b:ce:fd:7a:63:e1:01:93: 27:93:40:3c:ef:a3:b9:8e:dc:fb:cd:60:46:ff:0b:cd:99:7d: 81:8c:b8:03:d4:9c:7c:c1:70:50:ef:68:b2:94:78:12:43:14: 93:4d:07:b2:7a:0e:03:3e:87:be:a1:cb:df:84:9a:13:4f:2d: 12:b5:7c:de:77:d5:36:e2:1a:24:45:37:b0:27:26:b0:c8:4e: 3f:90:06:88:95:fa:64:f5:ab:67:d5:99:53:09:a8:80:43:44: fc:b4:40:71 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE1mksvRkdJSZMmOJvuOCaOFh63UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTE3MTYzNjU3WhcNMjUxMDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDA2NzY0ZTRjMDg2YmM1MWIyNjYzM2MzZmQzOGU5MGU2 YjUwZGQ5MzE5MmVjNjYxMmJkMjc3OWRjOWE5NzE2MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7dObAyYVmVXW/Tx+clhta06k79xJWeGVLOeQ/tODFMXbs 2+sP9TXaDTmdHwjlPjUvlqk53kbcttJcUr+vnosEW9IJVc4kinWj0N8L8shBxd+f 5cf+fRQ8mqZN9uS58lEAb/0XsLPPAwy3BLkr24awk2z52LChpkmr34yNaARAV2AG jMVnSNcu6Mn5SUv0TRNCeF5ptc9nGahuDPemdrrk6Lq2aXh5t4qL79do4IdXU/5C kDdFrinRtSyUIyNsUVq1plPJhMklVBp2MsdRG4SODzzc35GScGGoamNhXUJxXeIz bzA2+AfjukVLenoglYkJy5Rws+9FKJJ+oeY6GM/fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUVPs+HKylw/UUlS7/hGQqhnO2h/gwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2IyNmJjMWU3LTFhYzYtNDEwMi05Mzc3LTU2MjEyMzczYzNjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDxAIAwDQYJKoZIhvcNAQELBQADggEBAJwrTavPzwccIOO6kbCVHOLt 0ojYWEQGWDrug4NzE9gs49g1aifEcl+oMsbCv8HMqFyVGwLNB+JkIV8+nyLzCaZs TUFxeTbuGQ+MeZIKdPlR7K3edxHRbpMIiaH3tNxU5y5SeTCleP6rlrD3Ma0oSf6k kWCNA5BSVSNsx4nxf2DPloBbJQ3urqjJ1GgPCudwUfA4ABxJkQhS0th7zv16Y+EB kyeTQDzvo7mO3PvNYEb/C82ZfYGMuAPUnHzBcFDvaLKUeBJDFJNNB7J6DgM+h76h y9+EmhNPLRK1fN531TbiGiRFN7AnJrDITj+QBoiV+mT1q2fVmVMJqIBDRPy0QHE= -----END CERTIFICATE-----Generated at Fri Sep 19 03:18:31 2025 by rpki-client