$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e9eb1b5e-aefe-426d-914f-f7d5796460c4.roa File: e9eb1b5e-aefe-426d-914f-f7d5796460c4.roa (raw, json) Hash identifier: u8S39ODFDQV24OWFfeJPG7GNZBhY9UBrCgd0oHuYFv8= Subject key identifier: 95:5F:57:C8:27:FB:20:86:62:6B:B1:42:11:8D:BC:10:84:93:4C:DC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 262078E87E3F1ABE7989CB28497E87545FF5F9EF Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e9eb1b5e-aefe-426d-914f-f7d5796460c4.roa Signing time: Mon 16 Jun 2025 19:10:02 +0000 ROA not before: Mon 16 Jun 2025 19:10:02 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2631::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:20:78:e8:7e:3f:1a:be:79:89:cb:28:49:7e:87:54:5f:f5:f9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 16 19:10:02 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=a1163ab2670aa6280aab859597c93e965e1b77ca5f5584ed4a86c177e8c5ae86, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:25:22:4c:55:1b:ff:39:64:30:84:fa:0c: f5:cb:54:9f:e3:43:6f:a9:22:59:1c:27:12:c6:25: b5:e5:0d:bf:0a:51:14:1f:8f:76:d6:3d:27:2a:e8: f2:c4:e7:d3:5c:f8:8c:8f:1d:3f:f5:c2:3d:97:ea: f2:b8:fd:af:62:07:8f:c5:a0:36:bb:e6:53:cd:66: 1e:aa:46:88:66:db:55:b1:a1:b9:a1:ff:64:92:71: 1e:5a:3d:53:9e:3d:04:72:89:1e:0f:f2:1f:ce:c5: 46:69:32:a2:76:cc:52:ba:6f:ed:b7:33:ae:e4:c3: 63:65:dc:10:8b:b1:b7:ea:b6:0f:57:33:50:cb:17: b4:2b:e5:9c:e8:c6:1c:51:f4:d8:1a:99:a6:73:ad: c1:bd:9e:22:7c:d3:08:a6:6d:44:44:6a:16:6c:0c: a4:05:e9:34:28:fe:d4:3e:08:ae:e1:f4:d0:77:ee: 46:64:d3:89:a5:da:15:2c:7c:22:d1:c6:67:c6:75: ea:c6:b3:75:14:e2:32:de:e7:d7:bb:6b:ab:03:bb: 51:54:13:c2:59:bf:f6:d1:d3:0a:ab:56:78:78:05: 0e:a2:00:e9:bc:80:9e:33:78:3c:8a:de:a5:85:cc: 9f:83:32:2f:fc:42:29:41:c7:48:26:a8:c9:05:f2: 2e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5F:57:C8:27:FB:20:86:62:6B:B1:42:11:8D:BC:10:84:93:4C:DC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e9eb1b5e-aefe-426d-914f-f7d5796460c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631::/24 Signature Algorithm: sha256WithRSAEncryption 5b:72:8e:cc:33:5e:7f:80:26:21:19:fd:e3:6b:f2:7f:b8:f9: 1c:e2:72:f2:bb:78:11:3f:16:a0:8f:9c:05:c1:02:18:16:54: f9:a3:2a:c0:38:74:2b:2c:71:6b:88:ec:49:2a:e3:28:da:4f: 76:a3:6b:f6:09:95:c2:d7:6c:43:e6:ef:cc:9e:bd:85:5e:21: a3:ce:5e:0b:6c:de:4b:dc:90:fd:d3:a5:ee:3d:6c:aa:a7:4b: 53:6a:e1:cc:c1:91:7a:74:39:b4:7e:69:57:1f:de:76:80:ca: ca:82:7c:10:7b:aa:82:4f:52:9a:e0:1f:1e:56:88:3d:69:08: 8b:8d:f6:92:73:60:f2:09:66:fd:26:52:74:08:d7:09:13:73: 71:da:c0:d9:c3:d1:08:67:60:b9:4b:75:9b:83:67:2b:01:9e: 55:02:8b:8f:12:4d:31:02:18:d8:eb:12:81:b9:a7:89:3d:41: 54:e0:72:b9:6f:78:38:09:14:75:83:e6:11:aa:f0:3e:3a:84: 7b:a1:6a:16:1f:e6:ef:e6:ee:4c:10:af:39:b3:2d:18:e0:ab: 43:90:c2:7c:51:e0:b3:34:94:a9:ed:89:07:45:a9:bf:c6:b1: e2:ae:40:1c:37:5c:9c:71:66:3a:a9:ee:f7:9b:03:b1:34:0d: 77:f8:87:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJiB46H4/Gr55icsoSX6HVF/1+e8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjE2MTkxMDAyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTE2M2FiMjY3MGFhNjI4MGFhYjg1OTU5N2M5M2U5NjVl MWI3N2NhNWY1NTg0ZWQ0YTg2YzE3N2U4YzVhZTg2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBmSUiTFUb/zlkMIT6DPXLVJ/jQ2+pIlkcJxLGJbXlDb8K URQfj3bWPScq6PLE59Nc+IyPHT/1wj2X6vK4/a9iB4/FoDa75lPNZh6qRohm21Wx obmh/2SScR5aPVOePQRyiR4P8h/OxUZpMqJ2zFK6b+23M67kw2Nl3BCLsbfqtg9X M1DLF7Qr5ZzoxhxR9NgamaZzrcG9niJ80wimbUREahZsDKQF6TQo/tQ+CK7h9NB3 7kZk04ml2hUsfCLRxmfGderGs3UU4jLe59e7a6sDu1FUE8JZv/bR0wqrVnh4BQ6i AOm8gJ4zeDyK3qWFzJ+DMi/8QilBx0gmqMkF8i4XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlV9XyCf7IIZia7FCEY28EISTTNwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2U5ZWIxYjVlLWFlZmUtNDI2ZC05MTRmLWY3ZDU3OTY0NjBjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC MAYDBAAmMQAwDQYJKoZIhvcNAQELBQADggEBAFtyjswzXn+AJiEZ/eNr8n+4+Rzi cvK7eBE/FqCPnAXBAhgWVPmjKsA4dCsscWuI7Ekq4yjaT3aja/YJlcLXbEPm78ye vYVeIaPOXgts3kvckP3Tpe49bKqnS1Nq4czBkXp0ObR+aVcf3naAysqCfBB7qoJP UprgHx5WiD1pCIuN9pJzYPIJZv0mUnQI1wkTc3HawNnD0QhnYLlLdZuDZysBnlUC i48STTECGNjrEoG5p4k9QVTgcrlveDgJFHWD5hGq8D46hHuhahYf5u/m7kwQrzmz LRjgq0OQwnxR4LM0lKntiQdFqb/GseKuQBw3XJxxZjqp7vebA7E0DXf4hyM= -----END CERTIFICATE-----Generated at Mon Jun 30 17:26:22 2025 by rpki-client