$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e9eb1b5e-aefe-426d-914f-f7d5796460c4.roa File: e9eb1b5e-aefe-426d-914f-f7d5796460c4.roa (raw, json) Hash identifier: 6VPzWZrEqQTav2/efp4O7s08zkBqjijkmxN2bP+FPAY= Subject key identifier: CD:2F:9E:5A:55:68:AC:80:1A:67:8D:78:41:B8:4E:B7:D5:BD:1E:55 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 25332CE87A4B21C87ED6016DE17E7832036F4493 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e9eb1b5e-aefe-426d-914f-f7d5796460c4.roa Signing time: Fri 25 Apr 2025 17:40:01 +0000 ROA not before: Fri 25 Apr 2025 17:40:01 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2631::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:33:2c:e8:7a:4b:21:c8:7e:d6:01:6d:e1:7e:78:32:03:6f:44:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 25 17:40:01 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=6bfbb0b34b1e868420d9ffaf5f62d41b392ea69992924afb6c7036ff493344d2, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:95:81:95:6c:17:4a:12:6a:92:de:75:61: e7:f2:ea:05:31:1b:1b:02:85:2b:cd:ab:0e:c8:73: 4b:e1:49:ca:38:fb:cd:f7:30:21:fa:12:e6:dc:af: a7:b7:e1:31:86:bc:e6:c0:1d:d3:30:7e:63:b4:9d: ff:34:f2:5c:3e:a8:9e:fa:24:0d:5d:96:4d:6c:68: 4f:60:1a:dc:77:fb:99:a8:9b:15:37:50:53:ec:86: c7:ab:a3:1e:d6:57:83:68:bd:f5:b1:74:77:41:bb: 06:09:86:76:b0:05:ca:44:82:7f:bf:c3:88:71:47: a8:c8:5f:19:70:b3:2d:f9:eb:55:e2:a1:9a:7c:36: 17:be:eb:f5:ff:d8:65:7a:0c:ea:38:11:cf:a6:c0: 06:1d:dc:46:31:23:54:c1:c0:ea:58:20:9f:51:0b: 18:02:e5:b4:41:5c:f4:a7:e2:21:fc:15:32:97:18: e3:5a:88:92:00:42:da:a4:c3:fc:cb:07:9a:3a:df: e9:98:63:23:f2:05:0b:00:a4:e8:d9:b2:9a:2a:d3: ed:81:ad:a5:5a:e5:ca:05:81:a9:dd:89:fb:66:b4: d3:19:69:8a:78:52:92:05:0c:64:93:43:3d:8c:f9: b1:21:5f:6f:72:8d:37:ea:c2:71:3e:95:ea:b1:ea: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2F:9E:5A:55:68:AC:80:1A:67:8D:78:41:B8:4E:B7:D5:BD:1E:55 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e9eb1b5e-aefe-426d-914f-f7d5796460c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631::/24 Signature Algorithm: sha256WithRSAEncryption 9e:85:49:e2:1a:e4:a0:e9:e5:03:0d:8c:76:84:c3:f0:61:6b: 3b:33:66:07:fd:f4:2e:af:0e:3f:df:40:5c:e1:6b:49:66:93: 08:25:b6:49:39:ec:31:18:da:43:a1:24:4c:12:e4:4d:c9:05: a2:c2:34:55:3f:93:4a:71:84:20:a3:61:ca:25:78:be:b2:ab: 05:c5:69:0a:5a:c2:40:7b:71:c9:42:e9:30:f5:4c:d5:c0:e3: d6:d4:bf:a6:30:83:4c:e1:b8:0c:b1:15:df:a1:f1:1d:21:a4: 4b:d9:54:d6:d0:94:ef:01:5d:fa:08:50:39:32:30:09:54:d0: 14:1a:cf:2b:56:e7:53:ef:48:fc:3a:23:4a:05:58:0b:a9:b2: c6:61:56:16:66:ee:6b:dd:0c:25:af:e3:71:8a:18:54:ca:4f: 01:eb:b2:6d:2b:19:44:c6:6b:c7:da:b9:07:9b:15:95:55:4d: 01:7b:f0:16:7a:e3:86:1c:67:9c:0b:4b:2f:7c:35:c4:5a:2e: af:0f:4d:d0:2b:bc:81:91:7b:86:73:08:65:79:6f:09:fd:8b: e7:05:e9:01:04:ac:6b:00:ad:8d:4c:3b:65:74:84:20:d5:d1: 9c:ed:6a:1b:35:88:7e:70:61:e5:61:14:2a:e9:64:b6:2d:7c: 9c:02:88:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJTMs6HpLIch+1gFt4X54MgNvRJMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDI1MTc0MDAxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YmZiYjBiMzRiMWU4Njg0MjBkOWZmYWY1ZjYyZDQxYjM5 MmVhNjk5OTI5MjRhZmI2YzcwMzZmZjQ5MzM0NGQyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEC5WBlWwXShJqkt51Yefy6gUxGxsChSvNqw7Ic0vhSco4 +833MCH6Eubcr6e34TGGvObAHdMwfmO0nf808lw+qJ76JA1dlk1saE9gGtx3+5mo mxU3UFPshserox7WV4NovfWxdHdBuwYJhnawBcpEgn+/w4hxR6jIXxlwsy3561Xi oZp8Nhe+6/X/2GV6DOo4Ec+mwAYd3EYxI1TBwOpYIJ9RCxgC5bRBXPSn4iH8FTKX GONaiJIAQtqkw/zLB5o63+mYYyPyBQsApOjZspoq0+2BraVa5coFgandiftmtNMZ aYp4UpIFDGSTQz2M+bEhX29yjTfqwnE+leqx6lEjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzS+eWlVorIAaZ414QbhOt9W9HlUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2U5ZWIxYjVlLWFlZmUtNDI2ZC05MTRmLWY3ZDU3OTY0NjBjNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC MAYDBAAmMQAwDQYJKoZIhvcNAQELBQADggEBAJ6FSeIa5KDp5QMNjHaEw/Bhazsz Zgf99C6vDj/fQFzha0lmkwgltkk57DEY2kOhJEwS5E3JBaLCNFU/k0pxhCCjYcol eL6yqwXFaQpawkB7cclC6TD1TNXA49bUv6Ywg0zhuAyxFd+h8R0hpEvZVNbQlO8B XfoIUDkyMAlU0BQazytW51PvSPw6I0oFWAupssZhVhZm7mvdDCWv43GKGFTKTwHr sm0rGUTGa8fauQebFZVVTQF78BZ644YcZ5wLSy98NcRaLq8PTdArvIGRe4ZzCGV5 bwn9i+cF6QEErGsArY1MO2V0hCDV0Zztahs1iH5wYeVhFCrpZLYtfJwCiPc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:04 2025 by rpki-client