$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e0cd21c8-1410-40ff-a97a-86e6bf523865.roa File: e0cd21c8-1410-40ff-a97a-86e6bf523865.roa (raw, json) Hash identifier: nI4qLlNVwf1WO8NNXoRpFfJpxHRIHF2ouydda8Cwk6o= Subject key identifier: 1B:02:6E:64:9E:D0:E8:1C:86:2B:92:49:A9:22:6F:41:95:89:71:DD Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 06055FFA3ABB37AC60310F0905512EE0FC64FF5A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e0cd21c8-1410-40ff-a97a-86e6bf523865.roa Signing time: Tue 30 Sep 2025 00:46:04 +0000 ROA not before: Tue 30 Sep 2025 00:46:04 +0000 ROA not after: Tue 04 Nov 2025 23:59:59 +0000 asID: 801 IP address blocks: 2631:1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:05:5f:fa:3a:bb:37:ac:60:31:0f:09:05:51:2e:e0:fc:64:ff:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Sep 30 00:46:04 2025 GMT Not After : Nov 4 23:59:59 2025 GMT Subject: serialNumber=5bffa37ba732fe42cab2b8397971ba9d459b902472c608fe492c253f05bd35db, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c7:c4:9b:d4:f1:e8:1d:9d:64:b1:76:6b:f1: a0:dd:c6:b5:df:8c:e0:d0:cb:da:4a:ad:23:bb:bf: 45:2a:f1:63:b7:4d:47:83:1f:0e:1c:52:ce:ae:52: 78:e6:91:2e:34:40:2a:2a:6a:a1:61:83:3e:0e:69: c5:db:ad:3e:5e:98:da:d7:7e:d0:6e:7a:42:1c:65: dc:af:8b:d4:db:d2:f5:f7:5a:54:60:c3:5c:a0:61: ca:e0:7e:a3:7a:2e:8b:b6:56:68:3b:e1:54:f7:6e: e9:6e:87:67:1c:e1:87:72:22:ed:14:a3:86:b5:c6: b0:2a:66:01:f3:9a:34:13:1a:b3:09:c7:bf:9a:f9: 9e:38:ec:b0:44:ac:40:b8:3e:7d:29:5c:6d:32:47: 8a:82:da:84:18:a0:e2:30:b3:fc:9e:02:68:50:a5: a4:69:10:af:9c:55:43:71:d9:bd:ec:c3:9d:3d:07: 7b:6f:a3:5a:69:ac:7b:88:4e:72:c2:6c:1f:16:1a: e8:d2:ab:f8:76:b5:57:7f:58:0a:2e:82:57:d7:74: a7:63:c8:83:bf:76:95:bc:9a:87:1b:47:0e:55:0b: 1b:7b:f1:5d:43:59:19:be:f7:e3:11:f4:c7:8d:a3: 4c:dd:f6:97:98:16:1a:59:dd:59:77:5b:43:c3:45: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:02:6E:64:9E:D0:E8:1C:86:2B:92:49:A9:22:6F:41:95:89:71:DD X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e0cd21c8-1410-40ff-a97a-86e6bf523865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631:1::/32 Signature Algorithm: sha256WithRSAEncryption 0a:06:da:35:c4:e0:52:24:94:0e:98:75:0e:d6:22:c7:97:d0: 9b:2c:ad:e4:09:c6:a0:b3:08:71:db:a4:9c:6a:67:c3:78:a3: 31:de:e2:3a:48:a0:dd:9b:ec:b4:25:97:3a:01:5f:a7:3f:51: 50:1c:09:3a:06:da:f5:9a:e4:df:a5:bb:57:f7:a8:10:f0:72: b2:14:bd:58:7c:5b:45:e3:fc:c0:f8:34:3b:88:95:cf:9b:6a: f4:96:b3:0a:bd:03:81:30:d0:f6:a5:84:d1:21:e0:17:8a:3d: a8:69:3c:44:f8:92:fb:2c:be:78:15:0e:bb:b3:a5:3d:ec:71: 72:ac:b4:2e:67:b3:db:36:78:97:0c:29:d8:83:e4:48:bc:ad: 61:d5:2e:c5:d9:2c:33:a5:f2:17:02:50:8a:c3:1f:73:be:bd: 61:ef:dd:bc:fb:63:67:98:61:a1:d9:14:56:44:4b:54:94:1f: 78:d2:ef:cb:81:e3:d7:2d:cf:93:c1:6f:53:e0:c6:34:5c:68: b4:1a:a3:81:79:76:b4:12:c7:40:38:6d:c5:45:87:ad:ed:4d: eb:fb:38:33:1d:66:75:6a:a9:f9:51:8b:36:0d:c8:37:6a:1f: b6:60:ad:62:1e:3d:af:e4:49:25:41:65:51:c2:91:30:a1:ca: d5:97:25:fa -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUBgVf+jq7N6xgMQ8JBVEu4Pxk/1owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwOTMwMDA0NjA0WhcNMjUxMTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YmZmYTM3YmE3MzJmZTQyY2FiMmI4Mzk3OTcxYmE5ZDQ1 OWI5MDI0NzJjNjA4ZmU0OTJjMjUzZjA1YmQzNWRiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDix8Sb1PHoHZ1ksXZr8aDdxrXfjODQy9pKrSO7v0Uq8WO3 TUeDHw4cUs6uUnjmkS40QCoqaqFhgz4OacXbrT5emNrXftBuekIcZdyvi9Tb0vX3 WlRgw1ygYcrgfqN6Lou2Vmg74VT3buluh2cc4YdyIu0Uo4a1xrAqZgHzmjQTGrMJ x7+a+Z447LBErEC4Pn0pXG0yR4qC2oQYoOIws/yeAmhQpaRpEK+cVUNx2b3sw509 B3tvo1pprHuITnLCbB8WGujSq/h2tVd/WAouglfXdKdjyIO/dpW8mocbRw5VCxt7 8V1DWRm+9+MR9MeNo0zd9peYFhpZ3Vl3W0PDRYebAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUGwJuZJ7Q6ByGK5JJqSJvQZWJcd0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2UwY2QyMWM4LTE0MTAtNDBmZi1hOTdhLTg2ZTZiZjUyMzg2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmMQABMA0GCSqGSIb3DQEBCwUAA4IBAQAKBto1xOBSJJQOmHUO1iLHl9Cb LK3kCcagswhx26ScamfDeKMx3uI6SKDdm+y0JZc6AV+nP1FQHAk6Btr1muTfpbtX 96gQ8HKyFL1YfFtF4/zA+DQ7iJXPm2r0lrMKvQOBMND2pYTRIeAXij2oaTxE+JL7 LL54FQ67s6U97HFyrLQuZ7PbNniXDCnYg+RIvK1h1S7F2SwzpfIXAlCKwx9zvr1h 7928+2NnmGGh2RRWREtUlB940u/LgePXLc+TwW9T4MY0XGi0GqOBeXa0EsdAOG3F RYet7U3r+zgzHWZ1aqn5UYs2Dcg3ah+2YK1iHj2v5EklQWVRwpEwocrVlyX6 -----END CERTIFICATE-----Generated at Mon Oct 20 15:28:54 2025 by rpki-client