$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e59813d-926c-4866-9022-8b9ec2fee201.roa File: 0e59813d-926c-4866-9022-8b9ec2fee201.roa (raw, json) Hash identifier: ne4wvcr/FWbbMPmixwx309aJOGPGBRYBB6eTLoGKOmk= Subject key identifier: 44:92:A1:7F:18:0F:A3:9D:45:B0:D1:6B:6B:E1:F1:AE:6F:F8:3D:DC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 13E1DB6CF8C2BDBF3C62D27EADBFDA8E9AE58041 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e59813d-926c-4866-9022-8b9ec2fee201.roa Signing time: Mon 29 Sep 2025 15:23:41 +0000 ROA not before: Mon 29 Sep 2025 15:23:41 +0000 ROA not after: Mon 03 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2631:0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e1:db:6c:f8:c2:bd:bf:3c:62:d2:7e:ad:bf:da:8e:9a:e5:80:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 29 15:23:41 2025 GMT Not After : Nov 3 23:59:59 2025 GMT Subject: serialNumber=63d777796954f261af40cf78b8450104d7e455a70e19343a6336ad9351406103, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:7c:64:4c:62:ae:bd:84:30:2e:46:12:39: 4a:96:ee:72:67:63:e3:cc:80:75:9d:8c:e0:0e:6d: b3:8d:40:5d:fb:f8:c8:45:86:6e:08:58:3c:ec:28: d7:95:59:8c:c4:87:25:7a:1e:b3:26:42:19:55:a6: 39:20:69:11:10:0e:83:2e:a7:8e:2e:a9:1e:af:f6: 55:de:eb:4b:5f:ea:75:76:54:cb:1e:dc:ba:57:3a: 96:b8:34:fa:29:dc:08:a1:2b:c1:b9:92:cb:08:69: be:6e:6b:66:ca:14:ec:76:f8:e8:1c:ea:19:3b:7f: 0c:d7:70:ac:5a:39:87:79:2d:bc:8a:a2:a6:1e:08: bd:50:b3:c6:28:78:0d:ab:3d:66:cf:c3:30:5a:75: 57:69:36:4a:1c:cd:bd:ea:44:5c:43:21:89:94:fb: 99:b5:de:7a:2d:2e:92:d2:56:02:d3:17:c6:56:3f: bd:a8:06:6f:a7:45:36:8d:4e:06:8f:52:a1:d8:b0: 5c:59:59:5c:d1:77:7f:e8:3b:47:88:b4:b7:82:20: f0:74:99:7f:e8:b4:68:9d:89:53:e4:1c:11:21:10: 4b:00:00:b8:3b:ea:c4:d2:2a:46:8d:74:76:2f:4e: 5f:16:fe:58:b2:1c:c4:c3:85:c5:ba:2e:d2:c3:eb: b3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:92:A1:7F:18:0F:A3:9D:45:B0:D1:6B:6B:E1:F1:AE:6F:F8:3D:DC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e59813d-926c-4866-9022-8b9ec2fee201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631:0:1::/48 Signature Algorithm: sha256WithRSAEncryption 61:62:79:0a:8f:4f:62:af:ec:9f:7e:0b:c7:b4:f7:1a:1c:5e: a8:ed:fb:c5:9b:d0:4f:66:5d:68:a6:fb:a8:53:2d:4b:61:79: a4:c3:2a:b9:36:ab:38:38:6f:60:27:08:69:3d:5f:9a:72:77: 9d:c9:1a:ae:a4:1f:8c:55:29:d1:b3:46:88:45:32:b7:bc:ca: 84:92:c3:98:3d:5e:48:89:ea:91:f3:73:1a:09:6b:c4:74:73: bf:59:8e:78:72:e5:3f:ee:be:58:e7:f7:1b:d8:7f:11:42:f2: 7f:ba:5f:d8:ef:31:d8:89:1a:ca:be:74:01:31:01:77:5c:1a: 63:23:bd:24:95:4d:c4:d4:e4:32:7a:92:9d:9f:36:77:72:06: 91:e4:d5:36:41:a8:7a:0c:53:d7:5d:f7:4b:96:5e:d8:c7:48: e4:14:af:ea:80:11:e9:51:c2:a5:ef:fb:6c:54:b9:e7:ab:ae: 70:9c:f9:a2:45:ed:22:cc:cd:29:b3:19:c4:57:41:ab:a7:48: 6d:b1:b8:a5:5b:8b:e1:16:04:b7:a5:18:98:12:37:e1:f9:ab: cf:f7:eb:99:c2:f1:a4:54:74:03:79:f1:22:4e:ef:d9:31:65: 2c:1c:88:52:bb:05:20:3b:1a:6b:f4:c9:23:30:a9:9d:09:b2: da:97:5e:64 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUE+HbbPjCvb88YtJ+rb/ajprlgEEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTI5MTUyMzQxWhcNMjUxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2M2Q3Nzc3OTY5NTRmMjYxYWY0MGNmNzhiODQ1MDEwNGQ3 ZTQ1NWE3MGUxOTM0M2E2MzM2YWQ5MzUxNDA2MTAzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7bHxkTGKuvYQwLkYSOUqW7nJnY+PMgHWdjOAObbONQF37 +MhFhm4IWDzsKNeVWYzEhyV6HrMmQhlVpjkgaREQDoMup44uqR6v9lXe60tf6nV2 VMse3LpXOpa4NPop3AihK8G5kssIab5ua2bKFOx2+Ogc6hk7fwzXcKxaOYd5LbyK oqYeCL1Qs8YoeA2rPWbPwzBadVdpNkoczb3qRFxDIYmU+5m13notLpLSVgLTF8ZW P72oBm+nRTaNTgaPUqHYsFxZWVzRd3/oO0eItLeCIPB0mX/otGidiVPkHBEhEEsA ALg76sTSKkaNdHYvTl8W/liyHMTDhcW6LtLD67MxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURJKhfxgPo51FsNFra+Hxrm/4PdwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBlNTk4MTNkLTkyNmMtNDg2Ni05MDIyLThiOWVjMmZlZTIwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmMQAAAAEwDQYJKoZIhvcNAQELBQADggEBAGFieQqPT2Kv7J9+C8e09xoc Xqjt+8Wb0E9mXWim+6hTLUtheaTDKrk2qzg4b2AnCGk9X5pyd53JGq6kH4xVKdGz RohFMre8yoSSw5g9XkiJ6pHzcxoJa8R0c79Zjnhy5T/uvljn9xvYfxFC8n+6X9jv MdiJGsq+dAExAXdcGmMjvSSVTcTU5DJ6kp2fNndyBpHk1TZBqHoMU9dd90uWXtjH SOQUr+qAEelRwqXv+2xUueerrnCc+aJF7SLMzSmzGcRXQaunSG2xuKVbi+EWBLel GJgSN+H5q8/365nC8aRUdAN58SJO79kxZSwciFK7BSA7Gmv0ySMwqZ0JstqXXmQ= -----END CERTIFICATE-----Generated at Sun Oct 19 22:57:28 2025 by rpki-client