$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dca812da-36d9-435b-8f78-661a0902e7e2.roa File: dca812da-36d9-435b-8f78-661a0902e7e2.roa (raw, json) Hash identifier: a6HKUx7B463/qcPWP1oPk+545wWFLULwazbjoJb/ZZY= Subject key identifier: B6:9E:7F:BB:F1:20:5B:B8:BC:F5:80:0C:E9:55:35:C1:CA:B4:2A:71 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6322AC780CABAEFD95403C814839429936FEEDA4 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dca812da-36d9-435b-8f78-661a0902e7e2.roa Signing time: Fri 24 Oct 2025 15:37:47 +0000 ROA not before: Fri 24 Oct 2025 15:37:47 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2606:8140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:22:ac:78:0c:ab:ae:fd:95:40:3c:81:48:39:42:99:36:fe:ed:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 15:37:47 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=7c5c19453053f5bd0236f1961f5ebd82185c02da40ccb5b426c480682a8a8ea5, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:4e:66:78:c4:4d:ee:96:cf:8a:bd:bc:3f: 04:2f:b8:d5:e7:f6:51:d9:97:95:7f:00:5c:f7:ea: 9a:5f:7e:32:56:4c:67:f4:da:01:66:2d:38:be:29: 3c:2a:a7:ef:11:c4:d9:da:70:26:fd:74:50:6a:f3: 7a:ec:37:ee:57:4c:50:6f:cb:e3:fe:6d:89:fd:b2: bb:ac:5a:69:b1:bb:2c:be:b6:8d:84:7d:f1:20:a5: 87:f2:1a:ce:f1:a6:9b:00:17:84:b9:3b:c2:89:2e: 38:bf:b1:75:e6:87:ff:da:04:10:b7:89:c1:d6:53: 8e:01:c9:4a:06:bf:61:a3:64:83:0f:92:df:29:5c: 6d:c2:a1:2c:3c:cc:5b:bf:53:54:46:33:c0:8b:de: 4c:95:d0:f6:03:90:4b:85:8f:0a:81:d8:bc:64:b5: 6a:25:90:1d:7c:55:23:a6:21:64:c6:67:57:e9:c8: 5b:5d:30:0e:93:a8:3b:2e:e9:a1:1d:89:e5:c6:93: 2a:b7:1a:fe:b6:87:19:83:d9:94:4d:2f:5f:c9:4b: 3e:e7:1d:38:c5:37:5f:1e:9f:f9:1e:4d:77:b9:f3: cc:a8:97:bc:a3:05:2a:be:de:62:71:91:57:6d:14: 31:30:81:6f:51:c7:8f:6a:b0:ab:a6:d8:f5:82:92: 74:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9E:7F:BB:F1:20:5B:B8:BC:F5:80:0C:E9:55:35:C1:CA:B4:2A:71 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dca812da-36d9-435b-8f78-661a0902e7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140::/32 Signature Algorithm: sha256WithRSAEncryption 9e:de:94:ec:47:c5:08:2f:95:1a:77:0b:67:91:7a:cd:a6:82: c6:e9:94:0f:3d:0d:13:5d:1a:0b:9a:00:26:a8:68:a8:b1:59: 93:df:fa:14:ce:3b:21:fa:7d:68:20:12:36:30:76:4b:0c:eb: 12:0e:ea:60:16:1b:a5:db:02:39:c5:a6:c0:f3:8b:3c:62:42: 01:09:00:6b:0a:ae:9a:89:f1:14:6a:c5:f7:5f:f4:7b:28:a8: 1b:73:77:92:1a:b5:c3:37:29:52:d9:06:bf:b6:7a:35:49:31: 31:ae:e2:01:6b:ad:55:5f:6c:ef:bf:02:8a:9c:a8:0d:e8:f8: e3:ae:91:d1:18:1d:2f:4f:cd:89:f4:ff:33:83:83:80:34:55: 26:d7:de:f4:04:c2:9d:5e:95:85:55:e0:1f:5d:5f:54:50:65: 14:61:1f:7a:63:b7:4b:41:b7:57:7a:ff:33:30:5b:b2:fa:c6: 1b:47:9d:ba:cc:78:1a:34:37:ac:f6:ac:32:27:0d:8e:0f:c1: 87:a0:a6:41:5d:9b:e6:cc:e6:1f:bf:71:98:32:f5:89:c1:ef: e1:78:64:0d:71:3e:d5:fe:d5:d6:c0:7f:e9:90:1e:6a:b4:d3: cb:a7:22:c7:f9:1e:7e:db:24:e1:07:48:6e:a1:2d:1f:a8:b1: e4:f0:11:56 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUYyKseAyrrv2VQDyBSDlCmTb+7aQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDI0MTUzNzQ3WhcNMjUxMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzVjMTk0NTMwNTNmNWJkMDIzNmYxOTYxZjVlYmQ4MjE4 NWMwMmRhNDBjY2I1YjQyNmM0ODA2ODJhOGE4ZWE1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIvU5meMRN7pbPir28PwQvuNXn9lHZl5V/AFz36ppffjJW TGf02gFmLTi+KTwqp+8RxNnacCb9dFBq83rsN+5XTFBvy+P+bYn9srusWmmxuyy+ to2EffEgpYfyGs7xppsAF4S5O8KJLji/sXXmh//aBBC3icHWU44ByUoGv2GjZIMP kt8pXG3CoSw8zFu/U1RGM8CL3kyV0PYDkEuFjwqB2LxktWolkB18VSOmIWTGZ1fp yFtdMA6TqDsu6aEdieXGkyq3Gv62hxmD2ZRNL1/JSz7nHTjFN18en/keTXe588yo l7yjBSq+3mJxkVdtFDEwgW9Rx49qsKum2PWCknQfAgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUtp5/u/EgW7i89YAM6VU1wcq0KnEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RjYTgxMmRhLTM2ZDktNDM1Yi04Zjc4LTY2MWEwOTAyZTdlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBoFAMA0GCSqGSIb3DQEBCwUAA4IBAQCe3pTsR8UIL5UadwtnkXrNpoLG 6ZQPPQ0TXRoLmgAmqGiosVmT3/oUzjsh+n1oIBI2MHZLDOsSDupgFhul2wI5xabA 84s8YkIBCQBrCq6aifEUasX3X/R7KKgbc3eSGrXDNylS2Qa/tno1STExruIBa61V X2zvvwKKnKgN6PjjrpHRGB0vT82J9P8zg4OANFUm1970BMKdXpWFVeAfXV9UUGUU YR96Y7dLQbdXev8zMFuy+sYbR526zHgaNDes9qwyJw2OD8GHoKZBXZvmzOYfv3GY MvWJwe/heGQNcT7V/tXWwH/pkB5qtNPLpyLH+R5+2yThB0huoS0fqLHk8BFW -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:43 2025 by rpki-client