$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f933dc9a-6cb0-4836-9711-454fb0e2e364.roa File: f933dc9a-6cb0-4836-9711-454fb0e2e364.roa (raw, json) Hash identifier: xnTTarig5riudOMuAS0VemN6GrSIlEXYv2mKeFywZFI= Subject key identifier: 9A:A8:D1:90:79:A2:3F:A6:AD:89:4C:62:BB:19:2D:3F:04:05:8B:35 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 01EBB01EA484313087DD54E5204D3AD14AAEB9A1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f933dc9a-6cb0-4836-9711-454fb0e2e364.roa Signing time: Wed 22 Oct 2025 00:40:09 +0000 ROA not before: Wed 22 Oct 2025 00:40:09 +0000 ROA not after: Wed 26 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0fb:f104::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:eb:b0:1e:a4:84:31:30:87:dd:54:e5:20:4d:3a:d1:4a:ae:b9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 22 00:40:09 2025 GMT Not After : Nov 26 23:59:59 2025 GMT Subject: serialNumber=24cfdd937eea6c97b5dbb1e06775df929d2b4788c73b407158c3f13f06935a54, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:89:03:e5:c5:2b:ee:0f:74:aa:fe:9e:2a:cc: 7a:a5:d5:53:ed:f2:e0:a1:66:a8:b9:d4:18:b4:6b: 78:8d:ef:6e:87:f8:ab:79:22:17:ba:d0:03:6a:9f: 36:d5:34:8f:75:70:01:0c:e6:3f:a5:7b:fb:5f:8f: d6:01:fd:e2:d5:64:ce:3a:0e:2d:fd:f2:e5:43:ab: d4:d3:a1:d6:f5:e6:ed:0a:7e:e9:c5:4e:f2:70:62: 3d:73:63:75:88:91:45:24:57:f7:92:18:a4:9b:ed: 89:b5:5a:bc:6a:e8:69:f0:1c:93:61:2c:a9:ab:e3: a7:cf:0e:a3:cb:61:c4:11:3f:a1:fa:bc:dd:23:59: 56:72:e9:8f:b2:05:c1:01:8b:d0:e0:24:aa:0b:37: 23:51:8e:a2:76:0a:f7:63:21:65:77:02:95:67:91: ef:4e:b5:f2:e8:4e:ce:e1:24:83:5f:a9:46:13:ff: 4f:8c:90:1e:fa:85:a5:9c:60:dc:a0:a0:b1:38:24: 11:66:1c:06:7e:39:0a:29:7f:44:f2:cb:30:b9:42: 49:25:b9:b6:01:1a:c8:1b:52:a0:5a:aa:cb:7b:a4: ba:d6:72:8f:44:76:ff:eb:a1:97:7e:9c:c2:4c:dd: d5:9f:aa:8c:9a:c7:f4:9f:9a:06:08:b5:f7:ea:77: ad:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A8:D1:90:79:A2:3F:A6:AD:89:4C:62:BB:19:2D:3F:04:05:8B:35 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f933dc9a-6cb0-4836-9711-454fb0e2e364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:f104::/48 Signature Algorithm: sha256WithRSAEncryption 2e:4e:dd:00:01:0c:0d:97:91:10:4d:20:69:16:90:29:7e:dd: e0:bf:d4:bc:ab:05:37:40:30:30:76:63:bd:05:10:a9:8c:60: f7:95:1f:af:32:ab:c4:42:c4:72:1b:dd:ad:e6:48:d3:bd:05: 3d:02:e0:a8:cd:9b:eb:48:d4:3d:eb:84:f2:45:db:74:2f:9d: 12:14:9f:c4:ba:9e:c8:38:a3:ea:f1:b1:ab:a1:f8:51:34:5d: ba:c2:2a:44:20:61:94:3f:22:f0:03:c6:c8:89:b6:87:c8:62: 71:2a:ee:ff:d2:a0:aa:f5:be:90:77:76:89:a0:ac:af:35:8f: 3c:af:f8:5c:08:fa:97:66:5b:86:0c:3e:1d:55:35:a8:ea:27: 4f:ef:d8:05:30:cf:9d:ce:5f:02:83:7b:e3:37:1b:75:56:d4: a5:05:1b:8a:9d:0f:f8:d5:55:2c:68:c6:5d:b1:70:7f:40:a3: e4:e2:14:25:e9:86:aa:08:4c:7d:02:4b:64:df:8b:39:78:af: b9:bd:3c:b7:64:c5:c7:5a:a0:31:f3:0d:a9:39:69:b0:61:b2: 41:d0:34:cf:b2:0f:e9:17:91:5a:0d:1a:49:9b:f0:60:5e:49: 6a:77:3b:b8:8c:31:26:ce:9e:02:6f:bd:bb:dd:ab:1a:c6:3a: 6b:68:65:64 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUAeuwHqSEMTCH3VTlIE060UquuaEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDIyMDA0MDA5WhcNMjUxMTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNGNmZGQ5MzdlZWE2Yzk3YjVkYmIxZTA2Nzc1ZGY5Mjlk MmI0Nzg4YzczYjQwNzE1OGMzZjEzZjA2OTM1YTU0MS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUiQPlxSvuD3Sq/p4qzHql1VPt8uChZqi51Bi0a3iN726H +Kt5Ihe60ANqnzbVNI91cAEM5j+le/tfj9YB/eLVZM46Di398uVDq9TTodb15u0K funFTvJwYj1zY3WIkUUkV/eSGKSb7Ym1Wrxq6GnwHJNhLKmr46fPDqPLYcQRP6H6 vN0jWVZy6Y+yBcEBi9DgJKoLNyNRjqJ2CvdjIWV3ApVnke9OtfLoTs7hJINfqUYT /0+MkB76haWcYNygoLE4JBFmHAZ+OQopf0TyyzC5QkklubYBGsgbUqBaqst7pLrW co9Edv/roZd+nMJM3dWfqoyax/SfmgYItffqd61PAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmqjRkHmiP6atiUxiuxktPwQFizUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2Y5MzNkYzlhLTZjYjAtNDgzNi05NzExLTQ1NGZiMGUyZTM2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPD78QQwDQYJKoZIhvcNAQELBQADggEBAC5O3QABDA2XkRBNIGkWkCl+ 3eC/1LyrBTdAMDB2Y70FEKmMYPeVH68yq8RCxHIb3a3mSNO9BT0C4KjNm+tI1D3r hPJF23QvnRIUn8S6nsg4o+rxsauh+FE0XbrCKkQgYZQ/IvADxsiJtofIYnEq7v/S oKr1vpB3domgrK81jzyv+FwI+pdmW4YMPh1VNajqJ0/v2AUwz53OXwKDe+M3G3VW 1KUFG4qdD/jVVSxoxl2xcH9Ao+TiFCXphqoITH0CS2Tfizl4r7m9PLdkxcdaoDHz Dak5abBhskHQNM+yD+kXkVoNGkmb8GBeSWp3O7iMMSbOngJvvbvdqxrGOmtoZWQ= -----END CERTIFICATE-----Generated at Tue Nov 4 04:42:53 2025 by rpki-client