$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c92a8c24-62b8-4009-a51c-8908d7373850.roa File: c92a8c24-62b8-4009-a51c-8908d7373850.roa (raw, json) Hash identifier: JflXa8yfJzcYc5euRW5YCq6DRck5QgG+DP+Mj77bXLw= Subject key identifier: 4B:A6:5C:6E:B0:72:C7:96:98:47:A1:D9:19:6E:D8:BD:77:A6:18:06 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3C69F49B4D2321500D355BBBD1E59E2089B39393 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c92a8c24-62b8-4009-a51c-8908d7373850.roa Signing time: Fri 26 Sep 2025 18:20:03 +0000 ROA not before: Fri 26 Sep 2025 18:20:03 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:e100::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:69:f4:9b:4d:23:21:50:0d:35:5b:bb:d1:e5:9e:20:89:b3:93:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:20:03 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=5fe56f9fb8c32c330d81c08c9e2729f86f21a96a941e1ce8de745856c1d52979, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:0f:73:f1:45:e8:9f:f8:ee:26:02:0b:17: 7c:2d:69:f7:c5:9e:6e:78:df:15:36:61:c5:5f:b9: 3b:61:7a:23:68:85:a3:9e:64:f6:f1:35:b6:bb:d4: 57:b9:9e:4b:8d:5b:de:c9:7d:4c:34:94:9f:4a:70: 80:ad:b5:f9:20:f6:a4:94:75:c1:54:be:42:0c:a9: c3:9f:1c:ff:01:8a:f2:70:5e:ff:a7:08:01:72:54: 69:e8:0b:96:c8:da:08:49:5e:a3:f3:d2:d8:63:ad: 98:82:05:85:c2:51:26:8f:96:bf:de:d4:7a:83:0e: 72:be:19:0b:f2:bc:25:94:d1:1f:28:fd:96:8c:9a: 2d:69:db:8f:66:bd:2a:fa:fc:33:74:38:51:87:2f: 06:75:de:12:01:6b:b0:24:89:ac:d8:1e:e3:3f:a8: 6d:c5:32:59:3b:72:f1:e9:e7:7d:1e:f9:97:82:2c: 2c:71:5d:69:2d:19:9f:c6:6e:26:56:97:8e:81:bc: d6:35:3d:a2:3c:14:8c:c6:87:0f:ac:6f:6f:cc:1b: db:10:6d:89:16:b1:28:23:be:4d:c4:20:1a:9b:ff: 95:73:22:35:c8:e1:5a:9b:c0:13:14:ab:eb:21:61: 02:ca:9f:41:38:6d:e9:62:db:7f:86:06:42:48:ff: 3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A6:5C:6E:B0:72:C7:96:98:47:A1:D9:19:6E:D8:BD:77:A6:18:06 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c92a8c24-62b8-4009-a51c-8908d7373850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e100::/42 Signature Algorithm: sha256WithRSAEncryption 7b:44:1c:35:25:50:aa:25:7b:b5:07:e2:c3:81:ca:d3:e4:ea: 1e:30:c9:35:ed:aa:d3:0b:42:73:de:32:fe:84:ae:72:ae:a9: 2f:4e:24:42:57:51:fe:5c:71:a8:94:48:55:f8:65:63:1f:cb: 90:49:68:9e:00:c4:ce:93:ff:c7:1c:38:bf:3f:71:9d:a3:3d: a7:88:ba:03:f5:bb:6d:b4:6c:9d:d7:3a:18:94:23:03:90:15: 6f:6a:b9:29:65:bf:4d:e0:94:31:a0:cd:17:0d:7f:ae:ec:a2: e9:66:75:7e:01:41:20:16:28:35:d1:b7:75:94:49:75:55:42: a2:0f:3d:0c:89:02:d1:e8:cb:97:2c:9d:02:00:e3:dc:00:67: 65:2b:be:1c:25:75:ca:94:a1:9b:32:82:0d:b2:ee:16:3f:84: 50:04:f3:5d:72:58:05:00:18:0d:fe:12:ff:cb:83:83:e9:a3: 55:fc:70:02:be:30:f2:1a:e7:df:23:6a:31:b5:a4:14:37:d2: d9:9b:57:5c:17:8d:54:3f:cf:31:73:ab:53:ca:26:13:13:38: d2:ae:38:a7:0d:f8:15:d7:a6:03:4b:43:c4:bd:bc:70:65:78: 3a:81:bb:83:fb:04:1b:30:ef:bc:94:be:72:58:b8:38:b1:4f: 8e:94:53:93 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUPGn0m00jIVANNVu70eWeIImzk5MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgyMDAzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZmU1NmY5ZmI4YzMyYzMzMGQ4MWMwOGM5ZTI3MjlmODZm MjFhOTZhOTQxZTFjZThkZTc0NTg1NmMxZDUyOTc5MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC0g9z8UXon/juJgILF3wtaffFnm543xU2YcVfuTtheiNo haOeZPbxNba71Fe5nkuNW97JfUw0lJ9KcICttfkg9qSUdcFUvkIMqcOfHP8BivJw Xv+nCAFyVGnoC5bI2ghJXqPz0thjrZiCBYXCUSaPlr/e1HqDDnK+GQvyvCWU0R8o /ZaMmi1p249mvSr6/DN0OFGHLwZ13hIBa7AkiazYHuM/qG3FMlk7cvHp530e+ZeC LCxxXWktGZ/GbiZWl46BvNY1PaI8FIzGhw+sb2/MG9sQbYkWsSgjvk3EIBqb/5Vz IjXI4VqbwBMUq+shYQLKn0E4beli23+GBkJI/z2bAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUS6ZcbrByx5aYR6HZGW7YvXemGAYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M5MmE4YzI0LTYyYjgtNDAwOS1hNTFjLTg5MDhkNzM3Mzg1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD74QAwDQYJKoZIhvcNAQELBQADggEBAHtEHDUlUKole7UH4sOBytPk 6h4wyTXtqtMLQnPeMv6ErnKuqS9OJEJXUf5ccaiUSFX4ZWMfy5BJaJ4AxM6T/8cc OL8/cZ2jPaeIugP1u220bJ3XOhiUIwOQFW9quSllv03glDGgzRcNf67soulmdX4B QSAWKDXRt3WUSXVVQqIPPQyJAtHoy5csnQIA49wAZ2UrvhwldcqUoZsygg2y7hY/ hFAE811yWAUAGA3+Ev/Lg4Ppo1X8cAK+MPIa598jajG1pBQ30tmbV1wXjVQ/zzFz q1PKJhMTONKuOKcN+BXXpgNLQ8S9vHBleDqBu4P7BBsw77yUvnJYuDixT46UU5M= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:50 2025 by rpki-client