$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa File: c8560206-4c68-46a6-834e-4971768d50f8.roa (raw, json) Hash identifier: GLYFHFKZG5oiyMCqDp9edKj+WRaT7PKoC3IP023bq+o= Subject key identifier: 9F:9B:8F:EF:F2:98:1B:CB:D6:E7:F5:5E:BF:79:02:07:F9:D3:69:2D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5749EC96BBCAE7372DB5C6EA86A76D7EA216E06D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa Signing time: Wed 18 Jun 2025 00:30:03 +0000 ROA not before: Wed 18 Jun 2025 00:30:03 +0000 ROA not after: Wed 23 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2606:7b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:49:ec:96:bb:ca:e7:37:2d:b5:c6:ea:86:a7:6d:7e:a2:16:e0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 18 00:30:03 2025 GMT Not After : Jul 23 23:59:59 2025 GMT Subject: serialNumber=a907f1526d3b19fe86ae364473fcad34b13f4aac078995aebdba502f6ece8e2a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:71:00:fd:32:e2:a4:5a:e5:9c:3e:a4:e1: ab:4b:55:a0:03:c9:93:96:35:94:bb:d4:26:8e:d9: c7:8c:b5:07:a5:c4:f0:13:54:77:2b:96:51:8c:d7: 27:9b:71:34:34:ea:5e:69:56:3a:01:57:f3:3a:60: f7:80:aa:a2:93:77:dd:60:4c:b1:19:46:bc:5d:4a: b6:8b:e2:17:2a:d6:16:aa:b6:18:05:91:87:8c:a4: d5:70:d9:0f:32:85:b2:65:eb:ba:94:fd:ce:0a:1b: 6b:74:60:53:77:11:f0:29:a7:1e:22:40:d0:5b:bd: ad:40:0b:fb:c4:1e:c7:3f:d3:95:9c:4b:8b:12:96: 27:fb:2a:b3:a7:99:a2:f8:0c:79:c2:7e:c0:ad:e7: 90:66:82:e5:15:d1:00:bc:34:cf:37:fa:bf:aa:8a: f7:89:d7:a4:4f:6a:39:10:ec:34:79:6f:20:35:ea: 35:b3:0f:2a:71:ac:8e:72:82:b2:07:52:93:a3:9e: 4f:37:ea:1b:ee:3a:a6:1e:a0:08:c7:d5:03:23:07: 92:cd:e4:89:a4:fa:70:37:ea:8f:0c:79:d0:5e:a4: ab:25:53:aa:cc:d7:21:e5:92:37:34:5b:b3:92:3a: ce:e7:9d:58:54:5a:46:b1:28:42:09:67:69:63:e1: fc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9B:8F:EF:F2:98:1B:CB:D6:E7:F5:5E:BF:79:02:07:F9:D3:69:2D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 8e:ff:73:a2:55:34:00:b9:87:8f:76:ec:f9:78:dd:f8:6a:99: 48:82:4a:bb:48:c2:55:91:c9:4e:7b:64:81:57:12:99:3e:5b: 88:28:4f:1a:5c:e6:19:32:f8:25:ab:34:f0:a3:71:d2:b3:29: 07:d8:ff:fc:97:59:46:82:e0:9d:3f:49:fc:53:ca:7c:c3:03: 19:bf:74:98:d9:26:47:d1:bd:f1:06:aa:53:c4:38:67:cb:62: 87:d5:77:84:9c:d6:ba:4d:be:24:c5:9c:ef:5d:09:28:26:ce: dd:64:c0:0f:a3:26:c9:2a:24:02:2a:08:4e:ea:f5:ad:e4:57: 17:06:a3:16:83:a1:7e:be:c3:f3:e3:48:9e:e8:c4:5e:fd:4b: d9:de:8e:31:dd:25:b8:e6:41:26:eb:b6:e6:d3:7e:db:ac:f2: ee:7f:bb:76:fc:43:0b:68:66:3d:c2:9e:50:90:b1:1a:eb:75: 4a:0b:82:e8:76:46:44:cd:8e:de:3d:7b:a9:94:d7:61:e2:14: 0b:d9:d0:19:ae:f0:67:2a:72:9b:06:41:99:ac:7c:be:73:eb: 48:bf:11:81:56:da:e6:28:a9:3a:5d:75:45:2d:3b:b6:42:de: c8:ac:66:e9:a9:4e:8b:c9:18:44:92:9a:49:e0:74:71:a6:21: c3:b2:df:2f -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUV0nslrvK5zcttcbqhqdtfqIW4G0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjE4MDAzMDAzWhcNMjUwNzIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTA3ZjE1MjZkM2IxOWZlODZhZTM2NDQ3M2ZjYWQzNGIx M2Y0YWFjMDc4OTk1YWViZGJhNTAyZjZlY2U4ZTJhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClr3EA/TLipFrlnD6k4atLVaADyZOWNZS71CaO2ceMtQel xPATVHcrllGM1yebcTQ06l5pVjoBV/M6YPeAqqKTd91gTLEZRrxdSraL4hcq1haq thgFkYeMpNVw2Q8yhbJl67qU/c4KG2t0YFN3EfAppx4iQNBbva1AC/vEHsc/05Wc S4sSlif7KrOnmaL4DHnCfsCt55BmguUV0QC8NM83+r+qiveJ16RPajkQ7DR5byA1 6jWzDypxrI5ygrIHUpOjnk836hvuOqYeoAjH1QMjB5LN5Imk+nA36o8MedBepKsl U6rM1yHlkjc0W7OSOs7nnVhUWkaxKEIJZ2lj4fxRAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUn5uP7/KYG8vW5/Vev3kCB/nTaS0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2M4NTYwMjA2LTRjNjgtNDZhNi04MzRlLTQ5NzE3NjhkNTBmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBntAMA0GCSqGSIb3DQEBCwUAA4IBAQCO/3OiVTQAuYePduz5eN34aplI gkq7SMJVkclOe2SBVxKZPluIKE8aXOYZMvglqzTwo3HSsykH2P/8l1lGguCdP0n8 U8p8wwMZv3SY2SZH0b3xBqpTxDhny2KH1XeEnNa6Tb4kxZzvXQkoJs7dZMAPoybJ KiQCKghO6vWt5FcXBqMWg6F+vsPz40ie6MRe/UvZ3o4x3SW45kEm67bm037brPLu f7t2/EMLaGY9wp5QkLEa63VKC4LodkZEzY7ePXuplNdh4hQL2dAZrvBnKnKbBkGZ rHy+c+tIvxGBVtrmKKk6XXVFLTu2Qt7IrGbpqU6LyRhEkppJ4HRxpiHDst8v -----END CERTIFICATE-----Generated at Wed Jul 2 19:24:47 2025 by rpki-client