$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/475cc5b7-0cb2-405e-b609-203b983a6087.roa File: 475cc5b7-0cb2-405e-b609-203b983a6087.roa (raw, json) Hash identifier: cvq0t2FsSuYb3mixj3SVPg9zUzvU5kF9MJiOZUbLCr4= Subject key identifier: 07:67:CD:D0:36:7F:B3:AD:BA:6E:36:5C:DC:DB:6C:87:C2:7E:F4:C7 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3B013200BD06609055844E8C5253A22C65D1BA40 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/475cc5b7-0cb2-405e-b609-203b983a6087.roa Signing time: Fri 26 Sep 2025 18:11:19 +0000 ROA not before: Fri 26 Sep 2025 18:11:19 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ed00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:01:32:00:bd:06:60:90:55:84:4e:8c:52:53:a2:2c:65:d1:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:11:19 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=39209d4d0a7488927419bff60cfa4979110d32da7c9289163b3d6d8eff051768, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:47:2c:f1:48:1e:bc:0a:b0:f1:b4:8c:2e: 3b:71:00:42:81:c0:82:21:65:58:b3:b9:53:51:4f: f4:a7:83:7e:d6:f3:19:0c:66:2f:8f:c1:d2:4f:71: f1:bd:b8:05:e9:2c:df:14:bf:fb:84:49:52:fb:56: f5:8e:2a:f8:0d:40:64:1f:80:05:31:71:c4:22:55: 8c:f2:3b:73:3c:aa:18:a5:bd:1e:bb:4f:04:b6:81: b4:3e:be:ec:3d:c3:a6:06:a7:55:d6:9f:b5:3c:1d: 59:27:c2:f3:40:7a:f8:23:47:92:06:48:ca:3b:15: c7:46:18:4a:8a:dd:9c:9e:30:71:c9:6d:a9:91:6b: 63:bf:1f:b8:6b:3e:4f:93:14:03:59:c1:1a:11:85: fa:f5:39:2d:f0:d0:b8:47:40:3f:e4:8c:a9:fb:f2: 17:ee:a9:d7:f2:01:a8:23:d6:cc:b6:d2:6f:bf:b5: 98:9f:97:0c:bb:1b:2a:e8:6f:7c:4c:37:96:a4:f3: f0:5f:ab:df:da:96:a0:7f:e4:c9:2c:8d:9f:b5:8e: 80:35:39:ce:7e:1b:1d:f1:1b:05:41:c9:5b:d8:e9: 28:2f:f1:35:03:f5:eb:cd:ef:7c:94:0e:24:6e:90: 35:38:b3:ad:0e:d2:7a:80:89:7b:60:07:12:83:5a: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:67:CD:D0:36:7F:B3:AD:BA:6E:36:5C:DC:DB:6C:87:C2:7E:F4:C7 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/475cc5b7-0cb2-405e-b609-203b983a6087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ed00::/40 Signature Algorithm: sha256WithRSAEncryption 17:2c:1d:e2:21:c6:08:23:8b:e6:25:17:fa:cc:e1:94:c3:ed: 6a:72:ac:db:ea:a3:73:a5:ff:21:1d:11:86:6d:76:e8:38:4a: 94:78:1c:35:5f:ee:51:50:cd:c8:5b:8c:93:18:e1:82:75:05: 90:ac:d1:94:00:61:fa:b7:d3:3a:c6:42:26:da:fd:8e:c0:60: 39:41:97:31:bd:36:69:9e:fc:5b:a5:c7:58:32:a6:88:dd:d2: b9:fd:9e:0d:67:c3:04:82:fa:c4:bb:d6:46:eb:e7:4e:e0:5c: d6:c7:6f:ce:88:c3:bb:3a:13:37:f5:d3:0a:b1:9e:c6:2f:c8: b8:43:f7:70:ee:18:b9:55:84:b2:6b:21:27:84:15:c5:80:c9: c3:e4:ac:26:56:9f:9f:ca:25:28:c2:4d:50:bf:64:5f:ac:ed: 36:86:d9:92:66:cb:f5:61:e9:47:4a:8e:8e:61:b6:05:91:7a: fe:76:c9:59:77:35:a4:73:3c:0d:1c:53:c4:a0:16:d7:59:31: 65:bc:48:e3:99:a5:16:23:bd:ad:c9:0f:30:15:0b:3c:03:c3: 4d:fb:30:bb:c4:90:fe:e3:6d:dd:26:f1:c1:e1:96:a5:14:27: c1:b0:08:cd:6b:32:0c:8c:eb:3f:52:2e:1a:08:68:f1:c2:4d: 82:d2:63:6e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOwEyAL0GYJBVhE6MUlOiLGXRukAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMTE5WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTIwOWQ0ZDBhNzQ4ODkyNzQxOWJmZjYwY2ZhNDk3OTEx MGQzMmRhN2M5Mjg5MTYzYjNkNmQ4ZWZmMDUxNzY4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrp0cs8UgevAqw8bSMLjtxAEKBwIIhZVizuVNRT/Sng37W 8xkMZi+PwdJPcfG9uAXpLN8Uv/uESVL7VvWOKvgNQGQfgAUxccQiVYzyO3M8qhil vR67TwS2gbQ+vuw9w6YGp1XWn7U8HVknwvNAevgjR5IGSMo7FcdGGEqK3ZyeMHHJ bamRa2O/H7hrPk+TFANZwRoRhfr1OS3w0LhHQD/kjKn78hfuqdfyAagj1sy20m+/ tZiflwy7Gyrob3xMN5ak8/Bfq9/alqB/5MksjZ+1joA1Oc5+Gx3xGwVByVvY6Sgv 8TUD9evN73yUDiRukDU4s60O0nqAiXtgBxKDWiyTAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUB2fN0DZ/s626bjZc3Ntsh8J+9McwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzQ3NWNjNWI3LTBjYjItNDA1ZS1iNjA5LTIwM2I5ODNhNjA4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD77TANBgkqhkiG9w0BAQsFAAOCAQEAFywd4iHGCCOL5iUX+szhlMPt anKs2+qjc6X/IR0Rhm126DhKlHgcNV/uUVDNyFuMkxjhgnUFkKzRlABh+rfTOsZC Jtr9jsBgOUGXMb02aZ78W6XHWDKmiN3Suf2eDWfDBIL6xLvWRuvnTuBc1sdvzojD uzoTN/XTCrGexi/IuEP3cO4YuVWEsmshJ4QVxYDJw+SsJlafn8olKMJNUL9kX6zt NobZkmbL9WHpR0qOjmG2BZF6/nbJWXc1pHM8DRxTxKAW11kxZbxI45mlFiO9rckP MBULPAPDTfswu8SQ/uNt3SbxweGWpRQnwbAIzWsyDIzrP1IuGgho8cJNgtJjbg== -----END CERTIFICATE-----Generated at Mon Oct 20 14:02:45 2025 by rpki-client