$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa File: 0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa (raw, json) Hash identifier: Ewk2MTrU5boZ6ssDAlZViV+WvMg+29pWJGp98sQJ8Yk= Subject key identifier: 24:74:2F:68:FC:53:2D:2B:D7:0F:57:82:97:AE:95:73:AC:39:27:CB Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 432B610666861893538DE615F5F49A5D899794C8 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa Signing time: Mon 03 Nov 2025 11:06:42 +0000 ROA not before: Mon 03 Nov 2025 11:06:42 +0000 ROA not after: Mon 08 Dec 2025 23:59:59 +0000 asID: 801 IP address blocks: 2631::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2b:61:06:66:86:18:93:53:8d:e6:15:f5:f4:9a:5d:89:97:94:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 3 11:06:42 2025 GMT Not After : Dec 8 23:59:59 2025 GMT Subject: serialNumber=cfe463f59dabfafd88ebc545190e49745b24d7bda2ab115adcf4d612655a02cc, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:54:a8:e8:1c:e5:1b:d1:a3:a3:75:10:72: 15:18:93:dd:49:ea:55:12:73:ae:cb:4e:0d:8e:97: 5c:d1:49:83:eb:69:0f:88:ea:a7:ad:06:d4:5a:34: ae:fa:8d:76:1a:27:cd:a6:98:2b:6d:b9:71:b9:fa: 49:fe:55:17:8d:f4:35:fd:38:0a:98:9b:f6:6d:2d: d8:19:83:a9:38:b9:91:36:54:57:7d:b6:28:fb:a6: 3c:9c:d7:36:80:1a:08:13:92:2d:49:08:87:fd:56: 42:46:7c:bc:c2:85:ea:7c:fc:77:1f:0d:44:56:23: 49:17:c6:8b:69:df:82:dc:6a:a1:e6:06:2b:be:9d: 4c:83:81:75:1c:62:40:ba:3a:d9:dd:cb:43:1e:01: fd:b2:21:44:4d:ac:cd:e7:c8:a3:bb:64:1f:fe:63: 5e:d4:88:aa:d8:a4:42:ff:62:c3:85:75:dc:bf:d8: c2:72:52:8d:9e:e3:ae:85:10:20:c1:c6:9a:01:ea: e4:af:2c:af:83:8c:7a:6e:c2:69:9b:16:9e:3a:f5: 2b:44:27:a0:dc:0d:64:9f:56:4f:b9:85:72:25:4d: b2:07:bc:d2:22:96:2f:81:e0:10:16:59:e1:b7:fc: cb:29:eb:6c:0f:2f:a0:9f:48:13:9b:0c:09:d9:71: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:74:2F:68:FC:53:2D:2B:D7:0F:57:82:97:AE:95:73:AC:39:27:CB X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631::/24 Signature Algorithm: sha256WithRSAEncryption 9f:94:40:a4:21:05:86:a6:d6:08:e9:07:93:8e:3d:7c:97:f5: 34:d8:80:72:e0:0a:69:3a:4c:76:9b:4e:bb:de:16:fd:ba:5a: 68:30:7b:60:69:82:52:85:bd:eb:94:11:25:e1:e4:3a:4a:8b: 89:dc:74:19:46:1b:be:a5:65:cc:3b:90:12:e5:51:7a:e2:ed: 2b:15:29:68:64:01:f4:54:f4:ab:55:6e:1c:a3:9f:b3:83:b2: 9d:94:98:5f:e1:87:f3:4b:63:d2:8a:f7:4a:5a:44:91:06:23: d3:e7:09:65:90:61:74:0c:d7:74:3e:ba:b9:aa:02:0f:e9:0f: f7:68:43:83:6e:7b:73:c9:21:3e:21:8d:7e:fc:a6:f9:fb:92: 25:d3:0c:1d:a8:5b:48:56:3a:7b:08:7c:9a:d9:99:a8:62:26: 4e:4c:d5:3d:80:22:64:07:4b:87:be:39:95:9b:35:36:2c:4b: 45:6a:62:26:4d:db:65:67:ad:75:47:16:f2:04:58:2d:85:c2: f2:73:21:db:27:f0:22:b4:e7:d4:64:1e:7f:2b:32:42:19:c9: 4e:70:56:7b:24:30:eb:ee:71:cb:a1:3f:12:cf:52:7e:0f:16: 54:af:cd:d2:68:08:c1:19:98:4f:33:32:36:e3:85:69:bd:fc: 13:33:ab:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQythBmaGGJNTjeYV9fSaXYmXlMgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTAzMTEwNjQyWhcNMjUxMjA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZmU0NjNmNTlkYWJmYWZkODhlYmM1NDUxOTBlNDk3NDVi MjRkN2JkYTJhYjExNWFkY2Y0ZDYxMjY1NWEwMmNjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz/FSo6BzlG9Gjo3UQchUYk91J6lUSc67LTg2Ol1zRSYPr aQ+I6qetBtRaNK76jXYaJ82mmCttuXG5+kn+VReN9DX9OAqYm/ZtLdgZg6k4uZE2 VFd9tij7pjyc1zaAGggTki1JCIf9VkJGfLzChep8/HcfDURWI0kXxotp34LcaqHm Biu+nUyDgXUcYkC6Otndy0MeAf2yIURNrM3nyKO7ZB/+Y17UiKrYpEL/YsOFddy/ 2MJyUo2e466FECDBxpoB6uSvLK+DjHpuwmmbFp469StEJ6DcDWSfVk+5hXIlTbIH vNIili+B4BAWWeG3/Msp62wPL6CfSBObDAnZcRuvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJHQvaPxTLSvXD1eCl66Vc6w5J8swHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBhOGMwZjZkLWQzZGYtNDU4Ni1hODc0LWVlMjBkZTdkMWUwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC MAYDBAAmMQAwDQYJKoZIhvcNAQELBQADggEBAJ+UQKQhBYam1gjpB5OOPXyX9TTY gHLgCmk6THabTrveFv26Wmgwe2BpglKFveuUESXh5DpKi4ncdBlGG76lZcw7kBLl UXri7SsVKWhkAfRU9KtVbhyjn7ODsp2UmF/hh/NLY9KK90paRJEGI9PnCWWQYXQM 13Q+urmqAg/pD/doQ4Nue3PJIT4hjX78pvn7kiXTDB2oW0hWOnsIfJrZmahiJk5M 1T2AImQHS4e+OZWbNTYsS0VqYiZN22VnrXVHFvIEWC2FwvJzIdsn8CK059RkHn8r MkIZyU5wVnskMOvuccuhPxLPUn4PFlSvzdJoCMEZmE8zMjbjhWm9/BMzqyY= -----END CERTIFICATE-----Generated at Wed Nov 5 21:04:34 2025 by rpki-client