$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0c115e9d-b0f1-4548-97d3-623227defd98.roa File: 0c115e9d-b0f1-4548-97d3-623227defd98.roa (raw, json) Hash identifier: IUGCxffZQ7kNpSuauEuiscZeftO3pUe0qwlOGKbz84c= Subject key identifier: 0A:48:6E:C0:46:16:C0:61:40:21:F5:D2:F9:B4:FB:A9:01:0B:7C:B2 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5D447C99B2A6C91276D343B55B7AFE4756376E42 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0c115e9d-b0f1-4548-97d3-623227defd98.roa Signing time: Sun 19 Oct 2025 05:00:14 +0000 ROA not before: Sun 19 Oct 2025 05:00:14 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2631::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:44:7c:99:b2:a6:c9:12:76:d3:43:b5:5b:7a:fe:47:56:37:6e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 05:00:14 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=832412944b4a59309483cd19496d34892c7e7b89cca0700a97920e03b1110b76, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:db:09:89:8a:e2:64:fd:bb:dc:f3:7c:a2: fe:bf:b8:96:88:69:e9:73:fe:f3:85:8e:cb:b8:dd: 7d:05:47:1a:c9:60:ce:20:5c:55:55:5e:b5:84:c0: e5:c3:34:db:42:70:33:32:aa:fa:77:b6:b7:9f:93: d4:4f:7b:2c:9d:7b:e8:11:28:96:a3:03:e4:93:bf: 65:1b:dd:30:66:bb:eb:92:e6:c7:b3:cb:2a:c3:31: 12:81:09:2e:fa:2c:dd:19:85:e8:84:88:4c:56:c8: c4:6e:51:95:03:28:3c:99:e5:8b:85:71:1a:82:4a: a4:0f:8a:13:41:5b:f6:44:8b:56:d2:4b:27:7c:52: 10:c3:b9:58:18:9d:3c:14:26:2f:cb:9e:8e:4b:f2: 8a:55:b5:63:23:94:c0:a8:26:b1:e1:74:a9:31:16: 4f:26:bd:75:eb:db:e2:cc:dd:b8:22:de:d8:99:b7: 10:21:c3:b2:d9:94:c6:d6:e1:a6:ea:0b:46:21:d3: 4e:c7:38:a1:9c:2e:b1:94:23:18:33:5b:45:e3:c1: 2e:b4:9c:c6:38:ec:63:1d:b6:78:c2:2d:9e:bb:77: 71:9e:1b:98:9c:de:53:4e:1d:32:b6:de:e6:83:97: 60:6b:2d:3e:91:5d:cd:62:91:6b:22:74:51:1f:a7: 4e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:48:6E:C0:46:16:C0:61:40:21:F5:D2:F9:B4:FB:A9:01:0B:7C:B2 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0c115e9d-b0f1-4548-97d3-623227defd98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631::/48 Signature Algorithm: sha256WithRSAEncryption 96:bc:d2:6c:5a:d0:fa:db:7e:d9:23:50:fd:de:ec:a1:10:db: 81:f7:2a:77:a7:ab:be:d8:34:fa:ce:c1:36:d4:fe:c8:d3:10: ba:c2:1d:a1:42:64:9a:50:9d:2a:10:44:33:19:52:34:b3:6c: d1:36:0f:80:49:17:5f:34:e8:81:f1:e2:4f:20:c2:23:33:31: d3:3b:3e:93:53:65:87:96:45:6e:c6:46:ba:a7:90:b5:67:8d: 62:3e:b0:4f:66:7b:e5:ee:8a:57:97:26:f4:09:ec:f4:4f:ec: 85:04:da:20:6e:dc:79:76:9f:94:97:57:02:39:9d:a3:dc:89: 81:2a:1b:23:36:1e:81:8d:08:7d:eb:56:4b:63:0d:f4:59:99: fb:b2:cc:c4:69:95:40:3e:9f:dc:df:7a:04:18:d8:b3:86:2e: 2d:78:17:d3:89:e9:73:a2:af:f4:28:13:5e:5d:4e:d3:35:b7: 32:a4:23:b2:b1:73:de:b8:fa:94:e4:ae:4d:11:4d:f8:de:0c: a6:0f:19:95:f3:25:3b:86:40:fb:bd:42:f1:8a:27:d0:81:6c: ff:0d:01:08:b7:f8:9f:8a:10:9e:1d:c5:02:5f:72:53:b5:20: fa:a0:55:46:53:1e:1f:ef:93:b5:62:8b:b1:ab:fb:59:d6:ec: 32:28:4e:25 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXUR8mbKmyRJ200O1W3r+R1Y3bkIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDE5MDUwMDE0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzI0MTI5NDRiNGE1OTMwOTQ4M2NkMTk0OTZkMzQ4OTJj N2U3Yjg5Y2NhMDcwMGE5NzkyMGUwM2IxMTEwYjc2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAHtsJiYriZP273PN8ov6/uJaIaelz/vOFjsu43X0FRxrJ YM4gXFVVXrWEwOXDNNtCcDMyqvp3trefk9RPeyyde+gRKJajA+STv2Ub3TBmu+uS 5sezyyrDMRKBCS76LN0ZheiEiExWyMRuUZUDKDyZ5YuFcRqCSqQPihNBW/ZEi1bS Syd8UhDDuVgYnTwUJi/Lno5L8opVtWMjlMCoJrHhdKkxFk8mvXXr2+LM3bgi3tiZ txAhw7LZlMbW4abqC0Yh007HOKGcLrGUIxgzW0XjwS60nMY47GMdtnjCLZ67d3Ge G5ic3lNOHTK23uaDl2BrLT6RXc1ikWsidFEfp04dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUCkhuwEYWwGFAIfXS+bT7qQELfLIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBjMTE1ZTlkLWIwZjEtNDU0OC05N2QzLTYyMzIyN2RlZmQ5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmMQAAAAAwDQYJKoZIhvcNAQELBQADggEBAJa80mxa0PrbftkjUP3e7KEQ 24H3Knenq77YNPrOwTbU/sjTELrCHaFCZJpQnSoQRDMZUjSzbNE2D4BJF1806IHx 4k8gwiMzMdM7PpNTZYeWRW7GRrqnkLVnjWI+sE9me+XuileXJvQJ7PRP7IUE2iBu 3Hl2n5SXVwI5naPciYEqGyM2HoGNCH3rVktjDfRZmfuyzMRplUA+n9zfegQY2LOG Li14F9OJ6XOir/QoE15dTtM1tzKkI7Kxc964+pTkrk0RTfjeDKYPGZXzJTuGQPu9 QvGKJ9CBbP8NAQi3+J+KEJ4dxQJfclO1IPqgVUZTHh/vk7Vii7Gr+1nW7DIoTiU= -----END CERTIFICATE-----Generated at Mon Oct 20 07:47:52 2025 by rpki-client