$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa File: c8a22460-1c12-4314-8b13-6a586edac27c.roa (raw, json) Hash identifier: HljKBrTmBnd1o8dLnoOIs2sEh+02hYy7kjzdD81HBDk= Subject key identifier: 21:C4:51:AE:7B:5E:4E:F3:F5:4B:B9:3C:DA:D3:0D:43:74:34:E6:14 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 24B269111B7782A829B9A64EF97205451BD23A09 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa Signing time: Fri 26 Sep 2025 18:10:18 +0000 ROA not before: Fri 26 Sep 2025 18:10:18 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:ec00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b2:69:11:1b:77:82:a8:29:b9:a6:4e:f9:72:05:45:1b:d2:3a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Sep 26 18:10:18 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=375ba7ad58de275c228684cb7e1513752e5cfc906e56edfcac075696fc375da0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:01:6b:f0:b9:76:c1:aa:b3:e6:46:74:6a: d3:15:bd:ac:51:a2:3d:3d:c5:05:27:b2:b5:21:e0: 26:48:d8:3a:72:1c:45:40:87:fb:02:ae:6a:53:cd: 00:40:49:58:5b:5f:f9:85:05:be:c4:3b:90:5c:de: 20:d2:06:3a:a1:97:d3:bf:f6:0f:33:94:69:b0:1b: 20:de:db:3a:1b:3f:dd:2b:1c:5a:8a:69:89:79:25: a0:cb:6e:0e:03:5f:f4:12:ae:e1:ec:b4:4f:9d:be: 6a:2c:3c:25:80:99:a2:5a:9e:0b:8c:ec:29:c1:2b: 37:11:6f:7f:06:8c:bb:30:e3:18:b4:2c:6d:69:91: 36:a8:50:d0:1f:3b:c2:70:4f:3b:9e:87:d2:52:f5: dc:a1:66:11:77:cf:0b:37:5a:33:fe:91:66:bd:0f: 20:0f:9c:19:ac:98:da:8f:11:28:94:26:81:5e:49: a7:5e:2b:9e:63:05:f8:d7:4f:9f:2e:4d:c8:bb:a1: e2:2a:63:62:72:ea:84:22:81:9f:23:af:fe:ed:00: c7:74:84:d7:cb:fd:e4:e9:ac:86:46:40:49:58:6c: b2:13:1e:60:8b:3c:2b:80:d7:46:b9:39:ba:c2:90: c8:b1:3e:e4:06:42:1c:74:52:ec:68:ae:a1:32:ad: d0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C4:51:AE:7B:5E:4E:F3:F5:4B:B9:3C:DA:D3:0D:43:74:34:E6:14 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c8a22460-1c12-4314-8b13-6a586edac27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:ec00::/40 Signature Algorithm: sha256WithRSAEncryption 85:39:dd:7e:68:5e:06:c1:a6:1a:db:88:79:d6:a8:9c:06:5d: 85:4b:39:4e:07:ac:68:ef:b5:10:06:0f:ae:04:35:10:73:62: 6e:d4:92:91:ee:a2:66:ef:42:e7:a0:90:f1:e7:da:c9:d8:9b: 52:47:cc:43:e4:d8:02:37:6e:1f:6b:4e:cc:d7:87:35:9e:23: 74:8b:ed:36:3a:b5:39:90:44:26:30:09:88:7a:82:51:72:ae: 20:0d:32:d2:d3:60:67:af:18:a3:7b:7d:70:37:2d:fd:72:47: 2b:94:51:35:16:2d:b0:9b:12:65:24:ee:ff:44:cb:d1:cc:c2: 44:df:6e:6b:38:1a:b1:eb:16:94:7a:a1:4c:c2:e2:a8:d9:97: 4e:16:44:7e:09:13:9c:10:41:ec:4d:89:22:de:2e:27:78:24: 44:d4:38:26:c0:9d:6d:ed:b0:39:78:55:20:d8:d2:bc:9d:a8: e6:70:25:73:5e:83:66:ee:34:43:cb:64:59:e4:97:39:f9:c5: 28:4f:bd:11:7d:d1:53:f8:b1:04:74:60:56:ea:5a:37:65:f7: e4:64:ad:85:be:5f:7f:40:3d:e0:8a:da:01:ac:25:86:f7:f8: a6:57:4a:5b:ed:92:f7:65:df:7c:66:95:f3:90:8c:63:ba:28: d8:13:30:2f -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUJLJpERt3gqgpuaZO+XIFRRvSOgkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUwOTI2MTgxMDE4WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzViYTdhZDU4ZGUyNzVjMjI4Njg0Y2I3ZTE1MTM3NTJl NWNmYzkwNmU1NmVkZmNhYzA3NTY5NmZjMzc1ZGEwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxaAFr8Ll2waqz5kZ0atMVvaxRoj09xQUnsrUh4CZI2Dpy HEVAh/sCrmpTzQBASVhbX/mFBb7EO5Bc3iDSBjqhl9O/9g8zlGmwGyDe2zobP90r HFqKaYl5JaDLbg4DX/QSruHstE+dvmosPCWAmaJanguM7CnBKzcRb38GjLsw4xi0 LG1pkTaoUNAfO8JwTzueh9JS9dyhZhF3zws3WjP+kWa9DyAPnBmsmNqPESiUJoFe SadeK55jBfjXT58uTci7oeIqY2Jy6oQigZ8jr/7tAMd0hNfL/eTprIZGQElYbLIT HmCLPCuA10a5ObrCkMixPuQGQhx0UuxorqEyrdARAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUIcRRrnteTvP1S7k82tMNQ3Q05hQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2M4YTIyNDYwLTFjMTItNDMxNC04YjEzLTZhNTg2ZWRhYzI3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAPD77DANBgkqhkiG9w0BAQsFAAOCAQEAhTndfmheBsGmGtuIedaonAZd hUs5TgesaO+1EAYPrgQ1EHNibtSSke6iZu9C56CQ8efaydibUkfMQ+TYAjduH2tO zNeHNZ4jdIvtNjq1OZBEJjAJiHqCUXKuIA0y0tNgZ68Yo3t9cDct/XJHK5RRNRYt sJsSZSTu/0TL0czCRN9uazgasesWlHqhTMLiqNmXThZEfgkTnBBB7E2JIt4uJ3gk RNQ4JsCdbe2wOXhVINjSvJ2o5nAlc16DZu40Q8tkWeSXOfnFKE+9EX3RU/ixBHRg VupaN2X35GSthb5ff0A94IraAawlhvf4pldKW+2S92XffGaV85CMY7oo2BMwLw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:12 2025 by rpki-client