$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ed489dd8-33df-4b42-9bde-ace356f6114a.roa File: ed489dd8-33df-4b42-9bde-ace356f6114a.roa (raw, json) Hash identifier: yiIOFJwlWC83cxpETFp9u3bmUykPmNHDNMFYSaPq0m8= Subject key identifier: 30:4D:71:32:24:7C:67:84:71:6E:20:53:DF:A9:0F:5C:ED:A6:F4:A8 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 11AEC2199BD949E3049277DDA54232AF5B6B3118 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ed489dd8-33df-4b42-9bde-ace356f6114a.roa Signing time: Wed 22 Oct 2025 00:50:06 +0000 ROA not before: Wed 22 Oct 2025 00:50:06 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:f102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ae:c2:19:9b:d9:49:e3:04:92:77:dd:a5:42:32:af:5b:6b:31:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:50:06 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=7cf120903ce9a1e4dddab7c3dd35ae465a250de1b604011e931bd33b09429d85, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:98:51:40:f9:62:57:00:23:f5:32:89:27:d4: fb:f2:2d:21:d4:3b:6c:49:29:6d:24:39:0a:4c:75: 16:28:62:d0:80:da:8c:e8:b6:99:18:ff:a3:41:38: 90:55:64:30:f8:26:da:b7:63:44:4e:b7:72:fb:d8: 34:f9:91:d8:47:91:38:3e:ee:bd:7c:dc:9a:12:eb: 59:fa:2d:b3:18:b6:1a:b3:67:57:fc:3b:2c:bc:e7: 5b:89:c1:77:37:4b:a6:24:80:18:f7:04:d6:bd:67: 22:6e:04:08:c7:b8:bd:bb:e3:ac:2c:29:46:10:cb: d8:4f:78:cc:1f:20:a6:19:1d:5f:7e:01:0a:21:c0: 88:b6:2d:75:8f:29:87:e4:3b:e3:3a:e0:e8:20:b7: c5:10:c7:c0:9c:3e:e8:c9:2a:84:8a:3a:35:2d:e6: 0a:fd:51:96:24:fe:1b:8a:8e:89:c9:43:33:04:8d: ad:b6:2d:cc:62:46:a4:79:1a:78:dd:ac:df:c6:7d: d6:69:5e:2d:29:6c:95:90:0e:c0:dd:4d:8c:7d:ea: a4:53:15:fd:d7:34:0a:ac:9d:f3:62:18:c3:e4:5f: d9:25:77:fa:bd:a2:c7:87:36:e0:95:44:b6:ba:f9: 6b:85:65:fc:2d:b6:f3:f8:44:39:4e:a6:be:4c:e9: 5a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4D:71:32:24:7C:67:84:71:6E:20:53:DF:A9:0F:5C:ED:A6:F4:A8 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ed489dd8-33df-4b42-9bde-ace356f6114a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f102::/48 Signature Algorithm: sha256WithRSAEncryption 3a:31:f1:7e:ea:eb:42:38:d7:59:a7:4b:6f:37:d2:5a:c7:d7: a4:55:24:e5:4d:13:75:c9:d5:2f:74:aa:ab:34:10:dd:cd:7d: 80:73:72:6e:5e:5d:6b:9f:b1:7f:f5:c8:33:c8:83:89:4c:d4: 3b:03:fc:b7:67:5a:5d:d4:41:28:63:0b:e2:fe:26:bc:46:1a: 29:92:72:38:31:0a:fc:09:46:cd:1a:3a:44:05:23:a7:cc:39: c4:24:ba:59:f9:ed:de:5d:56:18:14:f3:0f:b1:0e:96:ec:0f: c5:71:e6:ea:b0:b6:8b:60:b6:be:33:a6:7a:5b:3e:0a:b3:66: 67:92:23:18:21:af:fa:27:64:31:21:e5:63:c0:3a:5c:b1:f6: 84:50:e2:94:79:e3:5d:20:b3:41:19:f8:34:21:7c:1d:9d:a9: c3:da:1d:90:2e:c8:33:7b:cb:ae:65:6a:0e:d1:ea:d9:87:33: 5f:3c:9b:e0:b7:b7:a7:8e:c6:4c:ac:d3:b8:cc:5b:92:08:17: 6f:5d:54:40:d5:06:1e:d9:b4:31:eb:dc:40:19:16:cd:d3:dd: 35:c3:8d:6a:bf:7b:bf:cf:d4:37:67:c9:88:30:80:6d:eb:d7: 64:f5:66:29:2e:00:54:a1:c1:a0:ec:55:ac:16:42:13:d4:63: 58:dd:2d:7f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEa7CGZvZSeMEknfdpUIyr1trMRgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA1MDA2WhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2YxMjA5MDNjZTlhMWU0ZGRkYWI3YzNkZDM1YWU0NjVh MjUwZGUxYjYwNDAxMWU5MzFiZDMzYjA5NDI5ZDg1MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8mFFA+WJXACP1Mokn1PvyLSHUO2xJKW0kOQpMdRYoYtCA 2ozotpkY/6NBOJBVZDD4Jtq3Y0ROt3L72DT5kdhHkTg+7r183JoS61n6LbMYthqz Z1f8Oyy851uJwXc3S6YkgBj3BNa9ZyJuBAjHuL2746wsKUYQy9hPeMwfIKYZHV9+ AQohwIi2LXWPKYfkO+M64Oggt8UQx8CcPujJKoSKOjUt5gr9UZYk/huKjonJQzME ja22LcxiRqR5GnjdrN/GfdZpXi0pbJWQDsDdTYx96qRTFf3XNAqsnfNiGMPkX9kl d/q9oseHNuCVRLa6+WuFZfwttvP4RDlOpr5M6Vr/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUME1xMiR8Z4RxbiBT36kPXO2m9KgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2VkNDg5ZGQ4LTMzZGYtNGI0Mi05YmRlLWFjZTM1NmY2MTE0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QIwDQYJKoZIhvcNAQELBQADggEBADox8X7q60I411mnS2830lrH 16RVJOVNE3XJ1S90qqs0EN3NfYBzcm5eXWufsX/1yDPIg4lM1DsD/LdnWl3UQShj C+L+JrxGGimScjgxCvwJRs0aOkQFI6fMOcQkuln57d5dVhgU8w+xDpbsD8Vx5uqw totgtr4zpnpbPgqzZmeSIxghr/onZDEh5WPAOlyx9oRQ4pR5410gs0EZ+DQhfB2d qcPaHZAuyDN7y65lag7R6tmHM188m+C3t6eOxkys07jMW5IIF29dVEDVBh7ZtDHr 3EAZFs3T3TXDjWq/e7/P1DdnyYgwgG3r12T1ZikuAFShwaDsVawWQhPUY1jdLX8= -----END CERTIFICATE-----Generated at Tue Nov 4 04:43:29 2025 by rpki-client