$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ceacf551-02ee-4f40-8abd-053509a65c13.roa File: ceacf551-02ee-4f40-8abd-053509a65c13.roa (raw, json) Hash identifier: e+R4+w6zC5wRPm7dIkclfhZA/GLHEd6MTwcSuzaCKk8= Subject key identifier: 0B:57:02:C2:17:EB:13:5E:CE:D4:0C:C0:47:48:A4:D9:1F:8F:D1:40 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 65C89656029481F7A5FCA7D3FD0C6EA3F1ADD486 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ceacf551-02ee-4f40-8abd-053509a65c13.roa Signing time: Fri 26 Sep 2025 18:20:13 +0000 ROA not before: Fri 26 Sep 2025 18:20:13 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:ea00::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c8:96:56:02:94:81:f7:a5:fc:a7:d3:fd:0c:6e:a3:f1:ad:d4:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:20:13 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=21cbd079fc2a106106f1c1f1add1be9ac3ab93797b50146eb51ee56555708fb3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:ba:bd:32:62:74:2a:72:63:c3:7f:1c:ea: 0d:5c:2f:e2:4a:59:ae:2d:7c:e9:d4:c4:03:eb:f9: 53:e5:c3:86:01:7e:45:26:fb:2a:b5:23:16:ba:8c: fc:23:fc:7a:34:82:d0:7c:f7:70:f4:d7:42:2c:aa: f0:49:8b:c5:71:bd:a1:a0:2e:32:54:71:e5:a8:99: e3:16:6e:ed:c7:56:bd:62:0a:3c:0e:23:e8:0a:2b: b2:58:5f:98:bf:03:49:dd:eb:03:c4:74:bd:f8:85: 4a:f8:b5:97:93:4a:b6:5d:07:be:27:7f:14:86:a7: dc:99:e9:e9:c4:f0:9f:d0:a4:81:42:3d:6e:c0:de: 8c:c4:00:c2:6b:e5:92:9a:4f:36:5f:02:df:a3:89: 85:d3:c4:58:a7:9f:6a:16:c2:30:02:e6:27:0d:17: 97:d4:72:31:dd:24:74:15:7b:5d:e7:7e:49:6d:69: 78:62:5a:c8:75:d8:63:a7:6e:6b:b6:be:8a:73:f0: df:39:a4:e1:ca:65:0d:66:e5:f5:64:b3:a2:8a:ad: 08:a4:a3:2e:0e:88:ab:9b:f5:23:1b:c6:04:af:ba: 05:0a:ad:e2:ba:c8:34:46:11:2a:e5:3e:07:71:6e: 1b:11:5c:af:fe:a5:47:f5:ed:c4:66:e0:9a:63:35: 15:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:57:02:C2:17:EB:13:5E:CE:D4:0C:C0:47:48:A4:D9:1F:8F:D1:40 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ceacf551-02ee-4f40-8abd-053509a65c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ea00::/42 Signature Algorithm: sha256WithRSAEncryption 83:ff:24:4b:04:86:fb:d5:6d:3a:84:3b:83:28:68:f5:0f:3e: ba:7b:8a:63:f0:9e:c1:f1:a1:4c:d7:35:fa:ac:7d:44:d0:ba: 59:bc:c4:f8:70:d4:09:ba:78:b9:3c:c1:39:fa:c4:bb:f3:52: 01:55:dc:e4:26:be:02:90:a5:c0:91:df:23:3c:13:4e:aa:b0: e1:2a:20:34:dd:77:9e:f9:35:31:68:54:f6:2f:27:77:78:ec: ee:4c:81:20:e4:3c:52:2e:6c:33:e3:06:c4:d7:e0:51:65:83: c2:27:02:8f:d3:93:e6:be:a0:14:a1:28:b4:61:65:b9:fc:20: 06:46:22:3d:f0:f5:8e:5c:5e:3c:e7:27:7c:91:8e:57:29:f5: 39:15:bb:b7:8f:ac:79:2c:b8:0d:de:95:13:06:ae:01:e0:0e: 52:b7:d8:95:21:9b:af:24:e8:5a:a7:3e:27:22:d1:28:35:55: 6e:e6:39:69:ae:6c:54:a5:98:f6:d0:9d:34:26:59:76:40:68: a9:ff:74:02:ed:9b:82:e0:4b:3b:d4:c8:dd:88:3b:dc:5f:32: 71:9d:90:98:86:d5:c4:cb:38:a8:a1:bc:f2:36:3d:0d:a2:eb: 78:55:ac:60:a4:11:65:54:10:f8:9d:de:a8:74:66:9b:f3:95: 71:ac:cc:32 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZciWVgKUgfel/KfT/Qxuo/Gt1IYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgyMDEzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMWNiZDA3OWZjMmExMDYxMDZmMWMxZjFhZGQxYmU5YWMz YWI5Mzc5N2I1MDE0NmViNTFlZTU2NTU1NzA4ZmIzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd37q9MmJ0KnJjw38c6g1cL+JKWa4tfOnUxAPr+VPlw4YB fkUm+yq1Ixa6jPwj/Ho0gtB893D010IsqvBJi8VxvaGgLjJUceWomeMWbu3HVr1i CjwOI+gKK7JYX5i/A0nd6wPEdL34hUr4tZeTSrZdB74nfxSGp9yZ6enE8J/QpIFC PW7A3ozEAMJr5ZKaTzZfAt+jiYXTxFinn2oWwjAC5icNF5fUcjHdJHQVe13nfklt aXhiWsh12GOnbmu2vopz8N85pOHKZQ1m5fVks6KKrQikoy4OiKub9SMbxgSvugUK reK6yDRGESrlPgdxbhsRXK/+pUf17cRm4JpjNRWDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUC1cCwhfrE17O1AzAR0ik2R+P0UAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2NlYWNmNTUxLTAyZWUtNGY0MC04YWJkLTA1MzUwOWE2NWMxMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD76gAwDQYJKoZIhvcNAQELBQADggEBAIP/JEsEhvvVbTqEO4MoaPUP Prp7imPwnsHxoUzXNfqsfUTQulm8xPhw1Am6eLk8wTn6xLvzUgFV3OQmvgKQpcCR 3yM8E06qsOEqIDTdd575NTFoVPYvJ3d47O5MgSDkPFIubDPjBsTX4FFlg8InAo/T k+a+oBShKLRhZbn8IAZGIj3w9Y5cXjznJ3yRjlcp9TkVu7ePrHksuA3elRMGrgHg DlK32JUhm68k6FqnPici0Sg1VW7mOWmubFSlmPbQnTQmWXZAaKn/dALtm4LgSzvU yN2IO9xfMnGdkJiG1cTLOKihvPI2PQ2i63hVrGCkEWVUEPid3qh0ZpvzlXGszDI= -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:10 2025 by rpki-client