$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa File: af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa (raw, json) Hash identifier: jl+ZkKDdbXnvqFyf2UfbSg+HgqbAs3X7OMjDrPH3ey8= Subject key identifier: E9:70:FB:43:21:A9:BB:F1:7E:61:80:8E:EB:B4:6E:30:3E:C9:1B:74 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 6BE5C1BC28685BA3F95DD3675D45B6B166AFBFA6 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa Signing time: Tue 04 Nov 2025 00:10:09 +0000 ROA not before: Tue 04 Nov 2025 00:10:09 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e5:c1:bc:28:68:5b:a3:f9:5d:d3:67:5d:45:b6:b1:66:af:bf:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Nov 4 00:10:09 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=f049e446312ca050c5f9d837bf3069689233cfdb2a8023c6f5cfc23882900252, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:c6:22:bb:07:2b:be:77:01:a4:a0:05:53: 7e:3d:ad:d9:15:ab:73:70:0d:83:c7:f1:a7:fb:80: f7:c9:bb:a7:9c:fe:88:19:a0:cd:81:e5:2a:e5:42: 36:d8:a1:e9:80:31:09:5f:a9:29:4a:0d:6a:37:c8: 28:6a:88:1f:e8:2e:d4:3f:a1:7f:9d:db:27:95:85: 3b:03:4a:dd:4d:e8:1f:ab:df:1b:06:0b:61:df:11: b7:b0:08:5c:f0:e5:a2:5d:b2:06:68:e2:cb:1d:71: b4:36:ee:d4:09:9f:61:6c:42:17:f6:d1:7f:03:44: d3:6d:db:3f:27:b7:4a:df:4a:d1:04:a1:ef:f8:ed: 7a:93:34:49:ec:f2:b7:58:30:5a:0b:c2:14:44:f6: 2a:f5:e8:6f:89:34:a2:ac:28:cf:41:3a:e7:e7:99: 36:6b:a3:23:cd:35:54:aa:1b:ee:81:cb:ef:ab:92: 87:e0:a8:99:8c:a5:d5:38:ad:6a:0c:bd:56:9d:d0: 5b:f6:e8:be:ed:5c:f5:6d:88:47:b2:ca:60:cc:64: 96:60:0d:ea:cd:3d:2d:a1:ea:bf:e9:aa:03:30:f5: aa:6a:47:7a:2c:cf:2a:43:c9:cf:67:4f:81:d6:3d: 0e:58:f6:cf:ad:14:1c:b7:45:25:4c:88:2e:68:0b: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:70:FB:43:21:A9:BB:F1:7E:61:80:8E:EB:B4:6E:30:3E:C9:1B:74 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6122::/48 Signature Algorithm: sha256WithRSAEncryption 02:e9:0a:b1:fc:78:f7:42:89:42:54:71:92:c1:33:13:a4:3b: a5:14:38:ef:bf:e4:06:e8:1b:f4:db:d7:91:b1:87:b0:f7:bf: 15:44:e1:ce:37:6e:65:dd:95:5c:58:8e:59:a6:b8:19:20:d9: f9:22:98:be:76:fc:cb:34:14:76:34:54:64:ee:9d:e3:e3:3a: f8:22:c8:3e:74:9f:7d:5b:93:87:1b:0e:a2:23:32:e6:02:4e: b7:bd:ea:29:9e:72:71:ab:96:42:c8:de:61:3d:3d:d8:c2:d4: 30:a8:1f:29:8e:a6:22:5b:af:4f:0f:c2:8d:05:43:9e:3d:ae: af:17:b9:46:af:c3:e1:a2:94:bf:83:99:47:de:c3:16:3b:54: 9e:f1:02:47:1a:91:2b:19:cc:b1:d9:46:bc:73:ee:b0:43:bf: bb:e9:03:b3:9a:e4:49:69:43:58:f3:e0:03:11:10:87:9d:f7: 2a:29:bb:9f:69:a4:0c:1f:59:ea:0b:56:45:62:2c:63:e9:9f: 85:09:d3:58:47:c2:0f:9c:9e:94:23:5c:3c:e4:a8:64:e7:ea: 40:1b:f3:d0:2f:fc:cd:a0:02:30:09:e1:44:b6:40:1b:8e:bd: e6:3e:6b:4e:20:2f:2d:10:ee:1b:e2:c2:52:ea:ba:7c:b3:ce: 60:f6:f8:d2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUa+XBvChoW6P5XdNnXUW2sWavv6YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMTA0MDAxMDA5WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDQ5ZTQ0NjMxMmNhMDUwYzVmOWQ4MzdiZjMwNjk2ODky MzNjZmRiMmE4MDIzYzZmNWNmYzIzODgyOTAwMjUyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1psYiuwcrvncBpKAFU349rdkVq3NwDYPH8af7gPfJu6ec /ogZoM2B5SrlQjbYoemAMQlfqSlKDWo3yChqiB/oLtQ/oX+d2yeVhTsDSt1N6B+r 3xsGC2HfEbewCFzw5aJdsgZo4ssdcbQ27tQJn2FsQhf20X8DRNNt2z8nt0rfStEE oe/47XqTNEns8rdYMFoLwhRE9ir16G+JNKKsKM9BOufnmTZroyPNNVSqG+6By++r kofgqJmMpdU4rWoMvVad0Fv26L7tXPVtiEeyymDMZJZgDerNPS2h6r/pqgMw9apq R3oszypDyc9nT4HWPQ5Y9s+tFBy3RSVMiC5oC7/BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU6XD7QyGpu/F+YYCO67RuMD7JG3QwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FmNmQwY2ExLWRkNzctNDI0OS1hNWNmLWRkNzU3NGRiMzRmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSIwDQYJKoZIhvcNAQELBQADggEBAALpCrH8ePdCiUJUcZLBMxOk O6UUOO+/5AboG/Tb15Gxh7D3vxVE4c43bmXdlVxYjlmmuBkg2fkimL52/Ms0FHY0 VGTunePjOvgiyD50n31bk4cbDqIjMuYCTre96imecnGrlkLI3mE9PdjC1DCoHymO piJbr08Pwo0FQ549rq8XuUavw+GilL+DmUfewxY7VJ7xAkcakSsZzLHZRrxz7rBD v7vpA7Oa5ElpQ1jz4AMREIed9yopu59ppAwfWeoLVkViLGPpn4UJ01hHwg+cnpQj XDzkqGTn6kAb89Av/M2gAjAJ4US2QBuOveY+a04gLy0Q7hviwlLqunyzzmD2+NI= -----END CERTIFICATE-----Generated at Tue Nov 4 04:43:53 2025 by rpki-client