$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9e9ea1d5-7bdb-456e-bf42-4f12c5d6c899.roa File: 9e9ea1d5-7bdb-456e-bf42-4f12c5d6c899.roa (raw, json) Hash identifier: 4zdPpJP+VXpdwELxum2yx73SvLnuoiIb2U5pKHZfpEQ= Subject key identifier: 47:1D:77:91:CB:FA:92:A6:DC:B3:F6:2A:FC:69:CE:4B:45:DD:6E:30 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 39F092AA23F1E2BBB2935B764B278E81980D4B78 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9e9ea1d5-7bdb-456e-bf42-4f12c5d6c899.roa Signing time: Wed 22 Oct 2025 00:40:03 +0000 ROA not before: Wed 22 Oct 2025 00:40:03 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f0:92:aa:23:f1:e2:bb:b2:93:5b:76:4b:27:8e:81:98:0d:4b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:40:03 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=defd957f43af1236b7687711089f6cae4c7d3795c0a90c6a8280239be07d63c3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:9e:36:cb:c6:f3:0a:bd:69:61:c5:26:54: 95:f1:b2:62:c2:0b:d6:52:b1:3e:9b:70:ed:5f:9b: 2b:1f:8a:bf:cb:0e:cc:83:3e:bb:5c:2e:2b:f2:ae: 6d:43:72:cc:40:d7:9b:f3:f2:69:d7:ad:86:ae:57: 72:48:a8:34:cb:57:10:33:e9:25:2b:37:d1:9d:85: 2f:c3:45:01:66:24:c9:ee:b2:9e:2d:05:f4:9d:d6: 36:df:e0:f7:ac:ef:0a:00:cf:f7:4a:bf:fe:9c:27: 6c:a7:2f:4d:bf:34:5b:85:cd:ec:78:e0:5f:51:85: bb:47:ba:15:80:cb:49:60:38:5a:57:74:3c:d7:11: ee:4c:51:0e:8b:5b:28:6e:53:e6:2e:6d:48:45:c3: 4d:a9:7c:11:1d:29:3f:03:36:67:07:2d:68:73:0c: 40:0a:c1:54:44:1b:35:82:60:b5:fe:2b:8a:a9:63: e1:a9:ae:70:21:d4:1d:5b:75:bc:fa:63:82:8b:1b: c0:7c:21:b0:c7:44:43:c5:da:2c:06:e1:52:4d:53: 65:b5:64:c3:ea:ca:76:61:d8:43:04:0c:41:97:96: 11:6c:74:62:b5:d2:b1:75:53:aa:53:b0:ee:2f:4a: be:ef:d4:72:bd:48:eb:8c:3a:82:8e:21:b4:48:13: 29:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1D:77:91:CB:FA:92:A6:DC:B3:F6:2A:FC:69:CE:4B:45:DD:6E:30 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9e9ea1d5-7bdb-456e-bf42-4f12c5d6c899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:c000::/40 Signature Algorithm: sha256WithRSAEncryption 91:36:08:41:91:32:04:72:4f:b3:86:1f:e2:3d:be:15:a9:ad: 87:ed:51:b8:46:20:4f:3f:14:eb:41:76:aa:79:37:0b:d2:4a: ee:4a:8b:19:6f:eb:47:19:a7:d7:8a:3e:c4:a1:2a:df:bb:c4: 57:ad:49:8f:db:f3:98:4c:66:84:89:5b:54:94:91:16:2f:37: a6:5e:c6:b6:13:97:d3:c0:68:4d:98:9b:91:ac:9c:9c:a2:73: 43:9b:12:6e:15:88:63:3e:31:ef:e4:67:ed:61:3f:2e:c9:4c: ea:95:48:c5:a0:c5:b3:df:49:d8:6a:d3:f5:ce:80:51:73:6a: 5d:e2:fd:aa:f9:b2:64:eb:08:fe:73:ef:02:b8:70:d9:9d:50: a1:43:b5:d0:8d:57:20:04:96:db:26:2d:66:02:96:32:4e:23: 47:2a:d9:ab:d6:57:8c:5d:cb:b7:06:e6:b3:d8:e2:30:33:52: ff:29:a7:14:b2:11:70:cd:09:02:ad:9a:52:bf:94:cc:ae:88: 07:97:9c:a7:b9:14:37:36:6b:43:f9:f2:a6:e2:dc:4d:c7:54: 7f:77:20:2f:fc:a6:1a:46:53:be:c4:01:ae:af:af:9f:60:f1: ea:77:ef:78:19:f9:fc:df:1f:48:d3:47:c1:01:ae:b9:c8:67: 03:7f:d8:a2 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUOfCSqiPx4ruyk1t2SyeOgZgNS3gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA0MDAzWhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZWZkOTU3ZjQzYWYxMjM2Yjc2ODc3MTEwODlmNmNhZTRj N2QzNzk1YzBhOTBjNmE4MjgwMjM5YmUwN2Q2M2MzMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzzJ42y8bzCr1pYcUmVJXxsmLCC9ZSsT6bcO1fmysfir/L DsyDPrtcLivyrm1DcsxA15vz8mnXrYauV3JIqDTLVxAz6SUrN9GdhS/DRQFmJMnu sp4tBfSd1jbf4Pes7woAz/dKv/6cJ2ynL02/NFuFzex44F9RhbtHuhWAy0lgOFpX dDzXEe5MUQ6LWyhuU+YubUhFw02pfBEdKT8DNmcHLWhzDEAKwVREGzWCYLX+K4qp Y+GprnAh1B1bdbz6Y4KLG8B8IbDHREPF2iwG4VJNU2W1ZMPqynZh2EMEDEGXlhFs dGK10rF1U6pTsO4vSr7v1HK9SOuMOoKOIbRIEyl3AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQURx13kcv6kqbcs/Yq/GnOS0XdbjAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzllOWVhMWQ1LTdiZGItNDU2ZS1iZjQyLTRmMTJjNWQ2Yzg5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPDwwDANBgkqhkiG9w0BAQsFAAOCAQEAkTYIQZEyBHJPs4Yf4j2+Famt h+1RuEYgTz8U60F2qnk3C9JK7kqLGW/rRxmn14o+xKEq37vEV61Jj9vzmExmhIlb VJSRFi83pl7GthOX08BoTZibkaycnKJzQ5sSbhWIYz4x7+Rn7WE/LslM6pVIxaDF s99J2GrT9c6AUXNqXeL9qvmyZOsI/nPvArhw2Z1QoUO10I1XIASW2yYtZgKWMk4j RyrZq9ZXjF3Ltwbms9jiMDNS/ymnFLIRcM0JAq2aUr+UzK6IB5ecp7kUNzZrQ/ny puLcTcdUf3cgL/ymGkZTvsQBrq+vn2Dx6nfveBn5/N8fSNNHwQGuuchnA3/Yog== -----END CERTIFICATE-----Generated at Tue Nov 4 04:41:06 2025 by rpki-client