$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eaa44d60-743f-446e-9c20-0b0b717ee1ab.roa File: eaa44d60-743f-446e-9c20-0b0b717ee1ab.roa (raw, json) Hash identifier: fWpaLyj/lnmT60Z7BxKXu2GvMaD/7yIil7L+MTznGpI= Subject key identifier: 07:56:C0:C2:9E:A0:30:4F:6A:54:E5:AE:D3:07:47:DE:F5:BA:ED:AB Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 1751B496A17DAD604227D04BA76FBC2E70185050 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eaa44d60-743f-446e-9c20-0b0b717ee1ab.roa Signing time: Tue 28 Oct 2025 00:10:04 +0000 ROA not before: Tue 28 Oct 2025 00:10:04 +0000 ROA not after: Tue 02 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:6100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:51:b4:96:a1:7d:ad:60:42:27:d0:4b:a7:6f:bc:2e:70:18:50:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 28 00:10:04 2025 GMT Not After : Dec 2 23:59:59 2025 GMT Subject: serialNumber=4305e3ee031b17e769838ffcb2682c10388b98279adb97db17e6bad69e8fd3e8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cf:85:89:20:bc:6d:d1:c7:6e:ed:09:b7:4c: 91:02:1e:51:cc:4e:ac:14:70:93:93:c4:5a:d7:df: af:e8:96:af:05:96:ce:64:ae:0b:a3:fc:59:d5:49: 0d:5d:09:f9:6d:7e:f9:31:3f:f4:af:01:33:5e:fb: c5:1d:80:a9:58:33:29:e9:61:af:d8:1f:77:e1:6c: bc:d2:1c:3b:ae:57:ad:1d:73:06:a0:d5:07:59:1a: 46:e9:5c:f3:eb:b1:e3:48:4e:da:60:62:6b:b7:39: c4:3a:ea:19:43:35:c3:bd:f2:ed:ba:c0:8b:98:ff: 0c:e5:d7:0d:ed:b3:7a:1d:2a:0b:62:7c:9e:75:0a: 8b:fb:6e:c7:5d:e8:83:eb:eb:90:bf:e2:41:39:7f: b0:04:d1:f2:6c:90:e1:29:d9:4f:b1:2c:88:78:4d: e9:e9:c1:18:7d:46:76:d1:f2:7c:9f:73:93:6d:f1: 66:94:33:9d:2d:95:e5:62:67:e6:74:7b:2f:ea:d8: d5:80:83:9e:8e:e1:d3:e7:23:ae:50:72:dc:0f:d5: 5d:a6:d9:4e:fa:85:2d:1a:d1:a8:12:89:4b:04:cb: f6:99:78:9c:95:f5:dd:3e:3f:9e:18:15:60:77:58: 2f:67:51:35:97:f6:58:ee:bb:d2:86:f6:74:89:ce: 21:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:56:C0:C2:9E:A0:30:4F:6A:54:E5:AE:D3:07:47:DE:F5:BA:ED:AB X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eaa44d60-743f-446e-9c20-0b0b717ee1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6100::/48 Signature Algorithm: sha256WithRSAEncryption 70:1c:0c:fb:a7:de:12:1c:83:1b:a3:70:06:f6:91:ab:53:95: 54:0d:df:91:c6:ab:85:fc:03:eb:73:7b:20:59:c3:19:14:6a: 53:b0:d7:ef:81:91:9f:7d:60:65:97:b2:91:4b:fd:bb:44:57: 05:85:05:ae:8c:e8:0d:b1:07:2d:c9:10:b8:44:47:30:7e:80: 07:5b:22:f5:2d:05:3a:34:53:e3:18:88:49:cd:8e:a4:09:96: 2c:8f:d6:e6:02:4b:f6:e7:d3:dd:be:31:41:a0:2a:fe:ae:2a: 3c:bc:c4:d4:83:bf:2e:2b:13:99:cc:7e:fd:70:65:e6:69:fe: e9:45:71:0f:35:b1:c2:b8:56:ce:ac:96:30:11:ff:d0:f6:b5: 1c:c6:0c:25:f5:a4:c9:d9:e1:d0:74:37:7f:55:94:90:29:48: 87:f9:4a:d0:b3:25:02:f3:e0:f8:7c:86:e7:d3:e9:ef:e5:0f: 36:c9:9d:02:d8:67:72:77:fc:5e:d8:fe:74:3f:f4:a5:99:24: 2d:d0:46:04:f4:cb:27:2e:15:e6:ba:d5:c0:cf:e4:37:bc:c1: 5a:3e:34:72:5b:ca:46:45:24:36:a7:a8:a4:98:6c:60:a7:f3: 23:8a:d7:4a:71:9a:02:8c:10:2e:a4:64:93:28:5a:86:b3:97: ff:d6:47:02 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF1G0lqF9rWBCJ9BLp2+8LnAYUFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDI4MDAxMDA0WhcNMjUxMjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzA1ZTNlZTAzMWIxN2U3Njk4MzhmZmNiMjY4MmMxMDM4 OGI5ODI3OWFkYjk3ZGIxN2U2YmFkNjllOGZkM2U4MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQz4WJILxt0cdu7Qm3TJECHlHMTqwUcJOTxFrX36/olq8F ls5krguj/FnVSQ1dCfltfvkxP/SvATNe+8UdgKlYMynpYa/YH3fhbLzSHDuuV60d cwag1QdZGkbpXPPrseNITtpgYmu3OcQ66hlDNcO98u26wIuY/wzl1w3ts3odKgti fJ51Cov7bsdd6IPr65C/4kE5f7AE0fJskOEp2U+xLIh4TenpwRh9RnbR8nyfc5Nt 8WaUM50tleViZ+Z0ey/q2NWAg56O4dPnI65QctwP1V2m2U76hS0a0agSiUsEy/aZ eJyV9d0+P54YFWB3WC9nUTWX9ljuu9KG9nSJziFdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUB1bAwp6gME9qVOWu0wdH3vW67aswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VhYTQ0ZDYwLTc0M2YtNDQ2ZS05YzIwLTBiMGI3MTdlZTFhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQAwDQYJKoZIhvcNAQELBQADggEBAHAcDPun3hIcgxujcAb2katT lVQN35HGq4X8A+tzeyBZwxkUalOw1++BkZ99YGWXspFL/btEVwWFBa6M6A2xBy3J ELhERzB+gAdbIvUtBTo0U+MYiEnNjqQJliyP1uYCS/bn092+MUGgKv6uKjy8xNSD vy4rE5nMfv1wZeZp/ulFcQ81scK4Vs6sljAR/9D2tRzGDCX1pMnZ4dB0N39VlJAp SIf5StCzJQLz4Ph8hufT6e/lDzbJnQLYZ3J3/F7Y/nQ/9KWZJC3QRgT0yycuFea6 1cDP5De8wVo+NHJbykZFJDanqKSYbGCn8yOK10pxmgKMEC6kZJMoWoazl//WRwI= -----END CERTIFICATE-----Generated at Tue Nov 4 04:39:56 2025 by rpki-client