$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa File: 644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa (raw, json) Hash identifier: Qp3wR03c9Ug/ZorfTgME96BWSF9vRetfirH6zlT+9MY= Subject key identifier: 1E:95:A7:CB:B8:0B:5A:F8:32:CA:EF:FF:76:06:86:CF:23:68:4A:C9 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 639311A298639121DE3A175C199E4DFC32C648BB Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa Signing time: Wed 22 Oct 2025 00:40:18 +0000 ROA not before: Wed 22 Oct 2025 00:40:18 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:93:11:a2:98:63:91:21:de:3a:17:5c:19:9e:4d:fc:32:c6:48:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:40:18 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=c1ce80402eb61786fd9f48dc752293ee509511c864d14276c4ef7464c4b379c4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:ef:d6:d9:9e:fe:d1:7b:dd:1b:00:ad:36: 50:f8:9b:16:16:c5:ce:63:df:05:10:e8:95:5f:25: d6:aa:cd:18:7d:7f:d6:15:9a:b8:8e:0d:4d:ae:83: c9:3d:80:3d:94:68:a2:0c:e9:51:46:48:44:e9:de: 47:f6:64:27:84:c8:4a:87:d7:78:8e:1c:8d:0c:55: d5:7f:fd:a6:2c:77:a7:1b:2e:bb:4f:88:5d:3e:c4: 01:e2:63:a7:4f:dd:0d:9c:40:ab:e3:24:8c:94:ce: 13:6d:54:a1:95:ea:2c:ca:3a:22:5f:27:27:25:20: 97:41:ee:01:97:c8:26:2a:a4:5f:d0:79:8b:84:4c: b9:5b:cd:57:3a:51:e5:65:74:e8:7e:43:7f:86:2b: 54:6b:6f:71:d7:ea:30:52:9e:ec:77:ba:35:d6:bf: b6:f4:56:69:5d:72:15:5c:8b:ef:66:cf:50:ec:d8: 1c:f4:bb:2e:7e:2c:2d:7f:bd:21:da:f9:4b:d8:25: df:32:88:67:bf:38:97:09:80:f3:e3:a6:cf:d9:3f: ba:c2:a5:a3:22:b2:73:6d:13:8c:58:39:da:14:0f: be:36:ef:85:63:fd:45:52:8e:a0:d0:a5:07:94:7a: c6:3a:d5:56:83:3c:43:16:6a:8a:d5:ec:57:a0:8a: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:95:A7:CB:B8:0B:5A:F8:32:CA:EF:FF:76:06:86:CF:23:68:4A:C9 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644c1249-e651-40f3-ae6c-5a7b6d8a3767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f111::/48 Signature Algorithm: sha256WithRSAEncryption 42:7e:e6:d7:a5:f1:91:7e:53:d9:db:8f:b0:bc:a2:f3:b1:33: fd:29:73:79:e4:28:ef:15:27:ea:f4:d8:db:f2:5a:b6:c4:08: 22:b4:da:cc:17:65:16:70:0f:ee:01:28:74:dd:d1:66:e5:cc: 4d:ac:ab:57:02:5a:d1:45:a9:de:5a:47:6a:c9:45:6d:e9:ef: ea:1f:f9:21:30:31:5c:a7:57:4b:37:eb:e6:6d:a8:8e:72:3f: 03:cc:64:6b:2c:c0:0a:f2:3a:ae:3b:f9:3c:e7:8b:16:53:a7: a2:c3:51:ac:b8:c8:5e:45:92:97:2a:eb:ea:bc:2b:8e:2b:35: 0c:9f:b1:51:72:e4:12:1b:4c:56:50:07:92:66:09:f9:0f:55: 4a:04:e0:e9:db:03:fc:c5:cb:8d:ba:03:ce:20:1d:26:d0:78: c2:4f:31:fd:8e:24:4b:a2:87:26:b8:eb:b7:26:14:db:b0:84: aa:d6:35:af:06:88:90:8d:e3:de:01:9e:a3:74:c2:4d:22:22: 72:40:7d:8b:9b:41:d3:a3:72:74:93:bd:e5:c3:a3:40:a2:c5: a2:d7:73:05:2e:a6:b0:0c:63:fb:f8:39:47:35:bd:2c:dc:ef: 27:a8:72:8b:38:7a:2f:6e:4a:55:21:95:63:3a:2c:37:59:ed: ff:b4:2c:09 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUY5MRophjkSHeOhdcGZ5N/DLGSLswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA0MDE4WhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMWNlODA0MDJlYjYxNzg2ZmQ5ZjQ4ZGM3NTIyOTNlZTUw OTUxMWM4NjRkMTQyNzZjNGVmNzQ2NGM0YjM3OWM0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvTu/W2Z7+0XvdGwCtNlD4mxYWxc5j3wUQ6JVfJdaqzRh9 f9YVmriODU2ug8k9gD2UaKIM6VFGSETp3kf2ZCeEyEqH13iOHI0MVdV//aYsd6cb LrtPiF0+xAHiY6dP3Q2cQKvjJIyUzhNtVKGV6izKOiJfJyclIJdB7gGXyCYqpF/Q eYuETLlbzVc6UeVldOh+Q3+GK1Rrb3HX6jBSnux3ujXWv7b0VmldchVci+9mz1Ds 2Bz0uy5+LC1/vSHa+UvYJd8yiGe/OJcJgPPjps/ZP7rCpaMisnNtE4xYOdoUD742 74Vj/UVSjqDQpQeUesY61VaDPEMWaorV7FeginuJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUHpWny7gLWvgyyu//dgaGzyNoSskwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzY0NGMxMjQ5LWU2NTEtNDBmMy1hZTZjLTVhN2I2ZDhhMzc2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78REwDQYJKoZIhvcNAQELBQADggEBAEJ+5tel8ZF+U9nbj7C8ovOx M/0pc3nkKO8VJ+r02NvyWrbECCK02swXZRZwD+4BKHTd0WblzE2sq1cCWtFFqd5a R2rJRW3p7+of+SEwMVynV0s36+ZtqI5yPwPMZGsswAryOq47+TznixZTp6LDUay4 yF5Fkpcq6+q8K44rNQyfsVFy5BIbTFZQB5JmCfkPVUoE4OnbA/zFy426A84gHSbQ eMJPMf2OJEuihya467cmFNuwhKrWNa8GiJCN494BnqN0wk0iInJAfYubQdOjcnST veXDo0CixaLXcwUuprAMY/v4OUc1vSzc7yeocos4ei9uSlUhlWM6LDdZ7f+0LAk= -----END CERTIFICATE-----Generated at Tue Nov 4 04:42:53 2025 by rpki-client