$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/460ed500-f45c-40ef-9062-2ca31b8c1dec.roa File: 460ed500-f45c-40ef-9062-2ca31b8c1dec.roa (raw, json) Hash identifier: M4EbW/WLzUmum7IXAhZKto1BXz6pvqXbbUpIidJnmvo= Subject key identifier: D2:4B:9E:F0:85:DC:C4:20:5D:13:0C:14:E4:A8:6F:89:0E:BB:1D:43 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 024DFDF881A82870695574B9C6594A5FD11A4E53 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/460ed500-f45c-40ef-9062-2ca31b8c1dec.roa Signing time: Thu 28 Aug 2025 18:52:11 +0000 ROA not before: Thu 28 Aug 2025 18:52:11 +0000 ROA not after: Thu 02 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4d:fd:f8:81:a8:28:70:69:55:74:b9:c6:59:4a:5f:d1:1a:4e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Aug 28 18:52:11 2025 GMT Not After : Oct 2 23:59:59 2025 GMT Subject: serialNumber=b55e95bae077a96e0dc76bf113fae718eeba3fcd489fc0bc4b305681adaec39e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0c:e2:9a:21:7f:8c:74:f3:5c:37:7a:ea:10: 1c:0e:64:ef:99:8d:aa:1e:9d:af:ad:c2:db:84:74: e4:56:3f:c6:31:f1:04:ff:eb:19:f5:d0:32:72:6c: c5:78:04:4b:ec:49:19:97:c4:b4:06:6b:96:f7:8b: 4b:0c:52:43:41:0f:0c:ec:81:9d:cf:23:bc:41:b6: d4:d0:75:53:73:56:f0:7f:b2:e8:cf:a4:12:4a:b0: 86:c8:e8:f0:31:d8:02:99:41:e3:9c:11:ac:34:1e: a7:ff:a4:37:35:1d:9f:7f:10:19:9f:8a:52:c6:7c: 97:22:34:8c:a6:40:27:e1:c5:75:9c:45:39:4c:6b: da:10:a3:31:c9:f8:c7:3b:03:0b:08:ac:f7:8b:54: b6:a1:45:a7:35:b6:9c:23:03:53:6d:6d:bd:f6:62: 95:08:9d:de:04:af:76:55:82:01:d0:46:04:9e:4f: 66:c5:52:0e:22:ed:df:2c:93:02:22:b2:bb:4c:67: 8f:13:5c:b8:5a:b3:47:11:cc:31:3b:11:f9:98:c6: 27:2c:d5:1f:b8:8c:bc:ec:67:eb:25:82:c8:eb:c8: 34:15:1a:55:75:f6:37:48:66:77:f2:57:af:04:be: bd:57:f3:e7:4a:71:71:eb:ba:b7:ab:17:f5:d8:6a: 81:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4B:9E:F0:85:DC:C4:20:5D:13:0C:14:E4:A8:6F:89:0E:BB:1D:43 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/460ed500-f45c-40ef-9062-2ca31b8c1dec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:b0::/44 Signature Algorithm: sha256WithRSAEncryption 24:d7:d7:ef:e7:4c:f4:80:73:5f:35:08:40:df:f6:ea:4d:bb: 2b:ea:9e:e1:a2:94:f0:89:86:22:b5:25:a6:ec:dd:82:18:30: cb:40:86:83:4e:3d:45:49:ec:f4:ea:87:47:7d:be:41:bf:0f: 0d:42:b6:11:bc:9b:32:be:15:e8:41:75:7a:b9:34:2c:67:15: 61:c1:e8:07:1b:48:35:12:48:fe:48:27:dc:29:81:04:3f:49: 3f:6f:71:f7:04:e2:90:3a:b3:05:41:c2:77:0a:e8:8f:a3:79: d4:be:ac:f2:76:cb:3b:48:57:25:42:ed:6b:38:50:6d:0e:7d: cd:42:9a:ab:de:19:29:f5:30:52:f7:ea:05:c0:77:e5:ae:6b: 1e:01:6c:dc:84:e0:4c:17:a5:cb:3b:16:e6:fd:7d:be:58:37: 0d:b8:da:e2:49:37:9b:d6:91:62:38:1d:b9:75:51:a0:e6:4f: 1e:87:fd:6d:fb:c2:88:86:23:b9:4d:5d:d3:ec:89:a8:6e:be: ae:b7:51:c2:96:5c:d3:75:aa:d0:85:af:0a:80:95:49:6a:6e: 5d:66:7c:fe:9d:0f:80:9c:38:ea:35:e2:57:d6:dc:19:23:9d: d8:5e:f0:7a:54:d1:b1:0b:2c:fd:a4:42:98:4a:db:92:52:21: e2:2f:85:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAk39+IGoKHBpVXS5xllKX9EaTlMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwODI4MTg1MjExWhcNMjUxMDAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTVlOTViYWUwNzdhOTZlMGRjNzZiZjExM2ZhZTcxOGVl YmEzZmNkNDg5ZmMwYmM0YjMwNTY4MWFkYWVjMzllMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfDOKaIX+MdPNcN3rqEBwOZO+Zjaoena+twtuEdORWP8Yx 8QT/6xn10DJybMV4BEvsSRmXxLQGa5b3i0sMUkNBDwzsgZ3PI7xBttTQdVNzVvB/ sujPpBJKsIbI6PAx2AKZQeOcEaw0Hqf/pDc1HZ9/EBmfilLGfJciNIymQCfhxXWc RTlMa9oQozHJ+Mc7AwsIrPeLVLahRac1tpwjA1Ntbb32YpUInd4Er3ZVggHQRgSe T2bFUg4i7d8skwIisrtMZ48TXLhas0cRzDE7EfmYxics1R+4jLzsZ+slgsjryDQV GlV19jdIZnfyV68Evr1X8+dKcXHrurerF/XYaoEpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU0kue8IXcxCBdEwwU5KhviQ67HUMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ2MGVkNTAwLWY0NWMtNDBlZi05MDYyLTJjYTMxYjhjMWRlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwQmAPDwALAwDQYJKoZIhvcNAQELBQADggEBACTX1+/nTPSAc181CEDf9upN uyvqnuGilPCJhiK1Jabs3YIYMMtAhoNOPUVJ7PTqh0d9vkG/Dw1CthG8mzK+FehB dXq5NCxnFWHB6AcbSDUSSP5IJ9wpgQQ/ST9vcfcE4pA6swVBwncK6I+jedS+rPJ2 yztIVyVC7Ws4UG0Ofc1CmqveGSn1MFL36gXAd+Wuax4BbNyE4EwXpcs7Fub9fb5Y Nw242uJJN5vWkWI4Hbl1UaDmTx6H/W37woiGI7lNXdPsiahuvq63UcKWXNN1qtCF rwqAlUlqbl1mfP6dD4CcOOo14lfW3Bkjndhe8HpU0bELLP2kQphK25JSIeIvhSA= -----END CERTIFICATE-----Generated at Fri Sep 19 09:47:22 2025 by rpki-client