$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0481057b-5149-4ddb-b06a-d5fc7044eed5.roa File: 0481057b-5149-4ddb-b06a-d5fc7044eed5.roa (raw, json) Hash identifier: eVCMhnuRMh8TN/2+Cs5W88WTnEX/6u1/Hk7Wl8lZoQU= Subject key identifier: 73:39:79:EF:9F:A7:06:3A:BF:DC:40:CB:14:A0:98:53:2B:A1:E4:12 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1EC39A582710E12A082D882680973F5A1F991388 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0481057b-5149-4ddb-b06a-d5fc7044eed5.roa Signing time: Tue 30 Sep 2025 00:46:04 +0000 ROA not before: Tue 30 Sep 2025 00:46:04 +0000 ROA not after: Tue 04 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2631:1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c3:9a:58:27:10:e1:2a:08:2d:88:26:80:97:3f:5a:1f:99:13:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 30 00:46:04 2025 GMT Not After : Nov 4 23:59:59 2025 GMT Subject: serialNumber=4650ab6a3a93171d923529d347025e3e87cccbfa78c032b0746e440609f438c0, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:83:d2:e7:03:c1:3c:90:a3:31:84:d8:60: 6a:7e:fc:c8:07:bd:df:2d:7e:2a:6d:f7:ac:28:7a: 6d:e8:0f:43:19:7b:7c:e2:a8:64:c9:39:2d:80:9c: 8e:ce:ec:ec:76:a1:cb:70:66:fc:18:a0:30:fc:5f: 9a:13:59:bc:eb:95:46:5e:f6:5f:08:0c:ab:71:63: 06:31:55:35:1a:c7:4e:84:81:a3:8f:67:c5:24:49: 10:d4:b6:5c:08:91:41:01:0a:b8:da:5e:8b:04:c6: 7c:8f:97:2e:74:c5:73:f6:fa:07:dd:9c:5d:6c:5a: 6e:d2:a9:4d:ba:82:9d:4f:84:c8:37:32:ef:7e:3e: 3a:ed:75:00:b5:74:b0:06:c0:fa:ae:9a:70:39:ee: 8f:a8:b6:d9:4e:01:57:dd:25:94:20:92:9e:18:7d: 06:84:62:e3:7a:b1:50:9a:be:57:00:70:04:fd:c5: cc:fa:9d:f3:10:34:a4:15:3b:a1:5c:f6:e7:4b:05: e6:55:a4:d6:58:97:21:6b:f0:7c:82:d9:0c:40:6e: 90:09:46:10:e5:1f:ee:b5:6c:9b:74:61:02:c1:68: f8:d7:b5:ab:29:10:3a:48:a2:f6:7e:7f:e5:02:16: 81:df:17:ef:c8:d1:5b:4e:6b:b6:ed:98:c7:ba:4f: f2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:39:79:EF:9F:A7:06:3A:BF:DC:40:CB:14:A0:98:53:2B:A1:E4:12 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0481057b-5149-4ddb-b06a-d5fc7044eed5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631:1::/32 Signature Algorithm: sha256WithRSAEncryption 4e:4b:55:a1:85:19:7b:ae:c4:8c:db:57:11:2f:42:d3:f0:cd: 92:a4:39:e8:f9:4f:33:f8:c0:a0:a9:aa:54:2a:a6:7a:b7:80: c5:3a:c2:55:70:38:8e:3f:0b:49:9a:2e:45:46:2b:e3:92:79: 72:c3:01:c0:0d:6d:72:d3:16:84:5a:7f:38:53:77:39:6f:a3: 8d:57:a5:19:e7:65:69:c8:5e:ba:3e:ae:67:29:0f:2b:fd:d9: 17:17:8c:9d:45:80:90:a6:c6:86:61:48:f5:b3:69:72:ae:32: a6:74:02:dc:0c:53:9a:73:54:f5:9b:e0:af:56:b5:2b:45:29: d7:26:d1:c2:a7:d4:29:f8:24:bb:59:ef:30:8c:f0:1b:28:65: 32:2e:db:be:c6:5e:7e:20:12:1a:bd:5d:9c:36:97:3b:ce:b3: 69:58:23:c8:03:52:b5:ec:57:26:61:17:a7:2a:c3:31:65:8f: 5e:19:7f:20:e8:a1:cd:59:ce:1c:48:3b:2e:9f:33:c0:bc:22: 4d:6f:ce:83:71:3f:35:aa:d3:e4:e0:13:51:77:28:73:d0:79: d9:5d:b3:72:17:cd:b6:69:eb:56:73:4f:0d:e4:ce:e2:55:1b: 94:0c:83:9b:32:e8:e7:56:0e:1b:ae:29:fa:86:67:8e:b9:dc: 6d:04:0c:9d -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUHsOaWCcQ4SoILYgmgJc/Wh+ZE4gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTMwMDA0NjA0WhcNMjUxMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjUwYWI2YTNhOTMxNzFkOTIzNTI5ZDM0NzAyNWUzZTg3 Y2NjYmZhNzhjMDMyYjA3NDZlNDQwNjA5ZjQzOGMwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwRoPS5wPBPJCjMYTYYGp+/MgHvd8tfipt96woem3oD0MZ e3ziqGTJOS2AnI7O7Ox2octwZvwYoDD8X5oTWbzrlUZe9l8IDKtxYwYxVTUax06E gaOPZ8UkSRDUtlwIkUEBCrjaXosExnyPly50xXP2+gfdnF1sWm7SqU26gp1PhMg3 Mu9+PjrtdQC1dLAGwPqumnA57o+ottlOAVfdJZQgkp4YfQaEYuN6sVCavlcAcAT9 xcz6nfMQNKQVO6Fc9udLBeZVpNZYlyFr8HyC2QxAbpAJRhDlH+61bJt0YQLBaPjX taspEDpIovZ+f+UCFoHfF+/I0VtOa7btmMe6T/LlAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUczl575+nBjq/3EDLFKCYUyuh5BIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA0ODEwNTdiLTUxNDktNGRkYi1iMDZhLWQ1ZmM3MDQ0ZWVkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmMQABMA0GCSqGSIb3DQEBCwUAA4IBAQBOS1WhhRl7rsSM21cRL0LT8M2S pDno+U8z+MCgqapUKqZ6t4DFOsJVcDiOPwtJmi5FRivjknlywwHADW1y0xaEWn84 U3c5b6ONV6UZ52VpyF66Pq5nKQ8r/dkXF4ydRYCQpsaGYUj1s2lyrjKmdALcDFOa c1T1m+CvVrUrRSnXJtHCp9Qp+CS7We8wjPAbKGUyLtu+xl5+IBIavV2cNpc7zrNp WCPIA1K17FcmYRenKsMxZY9eGX8g6KHNWc4cSDsunzPAvCJNb86DcT81qtPk4BNR dyhz0HnZXbNyF822aetWc08N5M7iVRuUDIObMujnVg4brin6hmeOudxtBAyd -----END CERTIFICATE-----Generated at Mon Oct 20 07:47:43 2025 by rpki-client