$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43bd03e8-db2f-4930-9069-f2ba3c7a9b81.roa File: 43bd03e8-db2f-4930-9069-f2ba3c7a9b81.roa (raw, json) Hash identifier: QcfDSXQmSYzcJbI8nRjd1muoIElG2kA3ygqhqv/EJlE= Subject key identifier: 14:48:0F:AB:EE:9D:FC:53:F1:F2:40:9A:85:A8:F0:9D:E1:67:75:71 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 38BCD3C86972D36A48E958F7F5448ED0859909DD Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43bd03e8-db2f-4930-9069-f2ba3c7a9b81.roa Signing time: Fri 31 Oct 2025 01:50:42 +0000 ROA not before: Fri 31 Oct 2025 01:50:42 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:bc:d3:c8:69:72:d3:6a:48:e9:58:f7:f5:44:8e:d0:85:99:09:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:42 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=9614ceda94c55d9742fade0afa82601b148af2c7735575d8ec07cbfa426a9b87, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:1c:cd:d9:5d:e4:a7:40:8b:25:3a:77:be: 60:83:77:a5:b7:89:d7:99:31:97:08:62:c4:76:eb: de:1b:6c:7c:6b:a2:0f:88:8a:ba:d9:da:c9:4e:f2: 53:87:ca:4d:7b:4a:91:12:2c:32:1b:65:b8:2c:b8: 75:ec:c7:53:a9:f0:3d:ec:3f:de:c8:74:e5:10:a8: 77:ef:43:dc:b3:7e:21:80:ed:0a:67:a4:23:b6:2f: a3:50:16:c3:52:9c:85:02:21:12:d3:b6:3b:b4:9d: f3:ba:c2:d6:e6:84:f4:2a:6f:56:9b:15:05:51:0b: 3e:b4:35:56:9c:de:70:ad:9c:9c:b4:61:b8:ba:92: f7:bb:ec:fc:f0:17:1c:9a:c6:da:0a:51:37:10:7f: 8d:f2:a8:b0:14:c7:c7:36:93:8c:b1:b5:5e:03:6a: c3:3f:f9:da:fb:02:d4:e2:6b:8a:18:f8:23:78:f3: 32:3e:db:53:37:7e:b3:36:a2:00:09:87:3a:1c:13: 29:39:3d:cd:45:20:5e:cf:eb:9a:21:b7:61:25:6f: 43:f1:f4:26:0f:2a:61:77:91:cf:4b:d5:3f:9b:87: 82:e3:23:4a:8d:d8:d7:01:f0:da:44:84:a8:82:62: c6:aa:58:c8:0e:a2:3d:85:1a:cf:8b:b3:05:fb:4b: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:48:0F:AB:EE:9D:FC:53:F1:F2:40:9A:85:A8:F0:9D:E1:67:75:71 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/43bd03e8-db2f-4930-9069-f2ba3c7a9b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6111::/48 Signature Algorithm: sha256WithRSAEncryption 08:2b:ea:55:c5:13:76:16:b4:b9:82:7b:4a:b5:4e:d0:65:5f: 2d:4a:fd:5a:11:6e:de:ce:fa:f1:09:09:e7:aa:67:47:f2:a3: 39:a5:d0:8a:fe:d8:30:ce:06:b1:9c:96:d3:9f:db:ad:42:bd: 43:aa:e8:0c:f6:d8:e9:4a:66:aa:20:af:a3:86:c7:43:8e:bb: 50:22:af:95:55:2e:65:40:3a:67:cc:ca:89:36:05:d8:7c:10: 0a:f4:66:a8:94:40:ab:d5:b2:c3:22:80:0f:84:5d:d9:c0:f9: 32:a4:9f:db:a1:8a:7c:56:82:50:6a:1b:6d:7c:a4:97:3c:ea: 5a:f7:1a:59:95:f9:52:f8:11:a3:08:8a:5b:88:f9:7d:2a:4e: ae:73:f5:46:37:cd:ec:ce:94:ba:6c:37:ba:58:5e:e5:83:aa: 9b:43:d7:94:20:81:3a:fb:81:8e:13:cf:ca:3f:63:91:80:7b: df:01:5e:8e:10:cd:a5:32:b2:6b:6c:61:df:67:b6:aa:c6:88: ec:ee:c5:de:84:56:5c:58:9f:51:92:47:b4:0a:fd:be:9b:4b: 7f:7e:d7:11:a9:5e:b6:7e:c2:e6:15:30:90:df:38:10:e9:ef: df:99:b1:1d:2b:8c:76:33:ef:57:e4:f6:a0:54:c6:ce:31:9d: ff:c9:e5:1a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOLzTyGly02pI6Vj39USO0IWZCd0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDQyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjE0Y2VkYTk0YzU1ZDk3NDJmYWRlMGFmYTgyNjAxYjE0 OGFmMmM3NzM1NTc1ZDhlYzA3Y2JmYTQyNmE5Yjg3MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCuBzN2V3kp0CLJTp3vmCDd6W3ideZMZcIYsR2694bbHxr og+IirrZ2slO8lOHyk17SpESLDIbZbgsuHXsx1Op8D3sP97IdOUQqHfvQ9yzfiGA 7QpnpCO2L6NQFsNSnIUCIRLTtju0nfO6wtbmhPQqb1abFQVRCz60NVac3nCtnJy0 Ybi6kve77PzwFxyaxtoKUTcQf43yqLAUx8c2k4yxtV4DasM/+dr7AtTia4oY+CN4 8zI+21M3frM2ogAJhzocEyk5Pc1FIF7P65oht2Elb0Px9CYPKmF3kc9L1T+bh4Lj I0qN2NcB8NpEhKiCYsaqWMgOoj2FGs+LswX7Sz03AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFEgPq+6d/FPx8kCahajwneFndXEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQzYmQwM2U4LWRiMmYtNDkzMC05MDY5LWYyYmEzYzdhOWI4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYREwDQYJKoZIhvcNAQELBQADggEBAAgr6lXFE3YWtLmCe0q1TtBl Xy1K/VoRbt7O+vEJCeeqZ0fyozml0Ir+2DDOBrGcltOf261CvUOq6Az22OlKZqog r6OGx0OOu1Air5VVLmVAOmfMyok2Bdh8EAr0ZqiUQKvVssMigA+EXdnA+TKkn9uh inxWglBqG218pJc86lr3GlmV+VL4EaMIiluI+X0qTq5z9UY3zezOlLpsN7pYXuWD qptD15QggTr7gY4Tz8o/Y5GAe98BXo4QzaUysmtsYd9ntqrGiOzuxd6EVlxYn1GS R7QK/b6bS39+1xGpXrZ+wuYVMJDfOBDp79+ZsR0rjHYz71fk9qBUxs4xnf/J5Ro= -----END CERTIFICATE-----Generated at Tue Nov 4 04:39:56 2025 by rpki-client