$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa File: f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa (raw, json) Hash identifier: pSd08rFzy8CpSa2o/TGm+sMwSdkafhvf45iLcRn7vVE= Subject key identifier: 20:B7:84:E4:D9:5B:55:8F:FB:E4:91:E0:08:4A:D8:65:71:50:EB:CC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 634C1685A550F30B6579DB8D8BD8EEA121B04B1B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa Signing time: Tue 05 Aug 2025 18:20:03 +0000 ROA not before: Tue 05 Aug 2025 18:20:03 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 801 IP address blocks: 2631::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4c:16:85:a5:50:f3:0b:65:79:db:8d:8b:d8:ee:a1:21:b0:4b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 5 18:20:03 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=5c94f48f9a5352221d45feff14894d17a7bc8c4472b62119892c0bde75385124, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cf:9c:ae:67:7b:34:2f:78:3b:2f:69:ec:a2: 97:44:e7:48:3e:50:70:e0:16:37:a6:1b:7d:34:d4: 07:0a:01:69:ba:98:da:3f:a9:dd:91:c2:7c:25:2d: 03:d0:55:40:d7:c3:d9:6c:8d:a7:ef:96:ab:bb:93: 88:ee:d6:72:e8:f9:bc:74:71:6d:6b:43:db:28:70: e2:32:8c:dc:42:e2:24:88:bf:3e:83:11:3c:90:eb: 4e:f0:ff:2a:55:6c:46:4f:ab:4c:02:f8:48:cf:fc: a1:7d:7d:18:b1:20:4c:fe:b2:9c:01:05:33:d7:03: e4:27:ca:2a:a8:f0:a5:a7:01:d8:84:ce:d9:c0:3d: 26:4d:37:16:31:90:de:36:67:03:b8:fa:5a:c8:c9: 78:38:b8:77:2c:ef:d4:2b:24:23:ff:df:16:ce:10: ab:60:c7:32:e3:f5:20:d9:40:e5:83:a4:c7:96:2b: c2:33:ee:02:2a:24:98:50:d2:bf:36:e9:a3:64:d7: f3:b2:78:e8:2f:db:46:ae:72:2b:a1:75:ba:35:7a: 20:ea:0b:7d:91:6f:c5:9d:a9:fe:cf:ad:9c:a7:c5: 42:6a:47:e2:a0:75:d7:cb:58:ea:a5:5d:89:58:6f: b9:cb:fa:55:01:4e:2e:82:26:75:bb:7e:a4:54:40: a9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B7:84:E4:D9:5B:55:8F:FB:E4:91:E0:08:4A:D8:65:71:50:EB:CC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631::/24 Signature Algorithm: sha256WithRSAEncryption 03:6e:7b:aa:33:a7:cd:23:a1:bf:4f:04:ec:e6:1f:db:72:e2: a4:b4:12:7f:01:ba:9e:d7:78:81:e8:69:5d:c2:a7:85:31:32: 13:50:fa:bc:12:f9:f2:4d:b9:5c:64:99:11:ec:3b:78:74:52: 80:60:59:74:89:57:e0:8f:44:e5:43:17:4a:14:a6:c9:3b:f9: c3:29:1c:ca:94:51:de:bb:a8:7e:ec:47:69:80:58:9e:d0:df: 9b:f3:d6:8f:ef:1c:d9:42:e4:21:5e:36:78:d8:f3:1b:2c:45: 77:da:63:df:a2:1f:90:e7:b6:f4:ba:4f:c4:8d:1c:ae:42:a4: 95:8f:6d:6a:65:df:fd:c6:1d:ce:84:e0:01:88:54:35:59:b8: 6e:a1:21:ee:dc:7d:6e:85:63:fb:3e:e0:5d:50:7e:f0:98:c4: d2:25:1b:b3:e9:60:2f:e9:9a:de:94:64:0e:f5:bf:48:ad:ab: d2:08:57:96:db:a1:31:b7:25:6a:84:7f:f1:4e:d6:ef:32:8f: eb:df:3c:b3:e4:9b:85:bb:ed:91:a6:a8:3d:14:cc:cd:16:9a: 84:da:83:24:54:12:77:b4:aa:4c:2f:62:8f:55:91:49:1b:2c: ac:b4:c8:96:71:3e:e7:12:d7:46:ae:2c:da:00:85:3c:8a:74: c5:7b:99:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY0wWhaVQ8wtleduNi9juoSGwSxswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODA1MTgyMDAzWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Yzk0ZjQ4ZjlhNTM1MjIyMWQ0NWZlZmYxNDg5NGQxN2E3 YmM4YzQ0NzJiNjIxMTk4OTJjMGJkZTc1Mzg1MTI0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNz5yuZ3s0L3g7L2nsopdE50g+UHDgFjemG3001AcKAWm6 mNo/qd2RwnwlLQPQVUDXw9lsjafvlqu7k4ju1nLo+bx0cW1rQ9socOIyjNxC4iSI vz6DETyQ607w/ypVbEZPq0wC+EjP/KF9fRixIEz+spwBBTPXA+Qnyiqo8KWnAdiE ztnAPSZNNxYxkN42ZwO4+lrIyXg4uHcs79QrJCP/3xbOEKtgxzLj9SDZQOWDpMeW K8Iz7gIqJJhQ0r826aNk1/OyeOgv20auciuhdbo1eiDqC32Rb8Wdqf7PrZynxUJq R+KgddfLWOqlXYlYb7nL+lUBTi6CJnW7fqRUQKldAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUILeE5NlbVY/75JHgCErYZXFQ68wwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Y5ZGJjYzZmLWJjZmEtNDY3Yy1hMjJiLTc2MmM2NjlkOTk0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC MAYDBAAmMQAwDQYJKoZIhvcNAQELBQADggEBAANue6ozp80job9PBOzmH9ty4qS0 En8Bup7XeIHoaV3Cp4UxMhNQ+rwS+fJNuVxkmRHsO3h0UoBgWXSJV+CPROVDF0oU psk7+cMpHMqUUd67qH7sR2mAWJ7Q35vz1o/vHNlC5CFeNnjY8xssRXfaY9+iH5Dn tvS6T8SNHK5CpJWPbWpl3/3GHc6E4AGIVDVZuG6hIe7cfW6FY/s+4F1QfvCYxNIl G7PpYC/pmt6UZA71v0itq9IIV5bboTG3JWqEf/FO1u8yj+vfPLPkm4W77ZGmqD0U zM0WmoTagyRUEne0qkwvYo9VkUkbLKy0yJZxPucS10auLNoAhTyKdMV7mYU= -----END CERTIFICATE-----Generated at Mon Aug 11 01:45:02 2025 by rpki-client