$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa File: f5b1d1bf-721f-4a57-a400-f549c190180c.roa (raw, json) Hash identifier: TbGfU41bhYzqFt9frrB/FNrJq5kZgvFwr94phBNAd6s= Subject key identifier: 07:A4:B4:FD:44:12:37:8F:F3:FB:50:43:94:71:43:3D:97:2A:13:B0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 020F610DC6560C418ADE6A77AFC4B94FE100BCC2 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa Signing time: Mon 06 Oct 2025 17:20:03 +0000 ROA not before: Mon 06 Oct 2025 17:20:03 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2606:8140:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0f:61:0d:c6:56:0c:41:8a:de:6a:77:af:c4:b9:4f:e1:00:bc:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 6 17:20:03 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=abd1025f3df7d5ef62c818b2adc039453a1657854b249729a2250e364e21d8a6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:55:6f:b4:82:9f:0f:86:ae:19:b7:c2:5f: 5c:f9:bc:bd:28:7a:36:c5:29:ce:26:ca:f4:d1:e3: f5:01:23:05:d4:69:8c:83:c9:a9:ff:14:5d:14:bf: 92:84:0d:4f:d8:b5:a7:e1:3e:dd:44:d5:0f:25:55: 6a:78:5f:85:32:42:28:35:80:dc:7c:a6:e6:43:45: 90:57:95:55:46:c0:0e:d8:f9:f3:2a:36:7b:04:09: 92:90:46:f1:b8:39:96:42:8a:37:47:b3:68:92:5f: 82:86:a7:61:39:10:2e:96:2a:24:d2:35:01:71:9b: 13:bd:49:22:9e:26:d9:52:ef:40:8b:19:0f:3f:95: d4:3d:f5:33:e8:d6:78:0e:fb:59:5b:92:8c:67:ba: 93:20:cc:29:46:a4:40:92:c6:84:b2:0a:36:72:9e: 99:1a:34:46:22:e2:c9:f7:57:0a:46:8d:e2:f2:f7: 74:7d:90:1f:13:9d:d9:3c:cf:aa:07:df:1c:87:23: ee:03:80:77:06:b0:1b:5e:a3:51:96:0d:79:ea:74: 49:e9:31:d7:6c:44:02:4c:d1:89:00:c9:c6:d3:ec: 75:1b:0b:e6:24:ee:b9:7d:f8:bc:1e:e1:47:4a:80: c3:08:0e:8c:92:9b:5f:65:5c:7d:9e:e1:6c:ca:d9: 2d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A4:B4:FD:44:12:37:8F:F3:FB:50:43:94:71:43:3D:97:2A:13:B0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140:400::/40 Signature Algorithm: sha256WithRSAEncryption 60:5a:b3:ea:9b:5b:07:98:31:29:b0:a5:60:f2:96:75:1d:f5: 31:4c:16:3f:29:9f:f9:00:7f:22:4e:76:e9:6a:bf:67:34:05: f1:f0:bd:8b:99:f5:1f:df:86:3a:6b:1f:83:d1:c8:d6:b5:46: 6f:04:e8:87:71:66:75:0a:1f:6b:b1:9a:f6:f4:1b:79:3a:f3: 38:ac:91:41:fe:aa:cb:8c:9b:5c:df:48:e9:3b:74:c8:37:50: 48:a9:c6:e1:49:3e:be:5a:1a:43:13:f3:b0:77:0a:f1:5e:3a: 03:14:2d:91:dc:e0:76:ad:a2:ed:a6:09:ae:31:03:98:47:81: 9d:d7:33:02:c5:2c:0a:e2:6a:3a:64:43:9e:8a:08:33:be:9c: 4c:54:ad:68:1e:53:07:2c:9f:aa:6f:f5:fb:05:54:6c:b6:4f: 31:a6:0a:ff:c5:09:66:22:9e:06:a0:6e:d2:22:d6:a0:14:ba: 03:aa:88:26:1b:00:af:74:89:3e:de:9a:8b:70:67:a3:2c:7b: 89:ee:9b:eb:6f:60:56:25:cb:dd:58:19:2f:68:5f:69:a5:e2: df:71:8a:86:4e:f9:c7:bc:70:be:ed:3e:74:5d:92:ff:d9:42: 11:48:62:4d:13:eb:70:22:62:94:97:c8:08:2b:fe:58:a9:45: c1:00:98:d7 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUAg9hDcZWDEGK3mp3r8S5T+EAvMIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDA2MTcyMDAzWhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYmQxMDI1ZjNkZjdkNWVmNjJjODE4YjJhZGMwMzk0NTNh MTY1Nzg1NGIyNDk3MjlhMjI1MGUzNjRlMjFkOGE2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHwFVvtIKfD4auGbfCX1z5vL0oejbFKc4myvTR4/UBIwXU aYyDyan/FF0Uv5KEDU/YtafhPt1E1Q8lVWp4X4UyQig1gNx8puZDRZBXlVVGwA7Y +fMqNnsECZKQRvG4OZZCijdHs2iSX4KGp2E5EC6WKiTSNQFxmxO9SSKeJtlS70CL GQ8/ldQ99TPo1ngO+1lbkoxnupMgzClGpECSxoSyCjZynpkaNEYi4sn3VwpGjeLy 93R9kB8Tndk8z6oH3xyHI+4DgHcGsBteo1GWDXnqdEnpMddsRAJM0YkAycbT7HUb C+Yk7rl9+Lwe4UdKgMMIDoySm19lXH2e4WzK2S07AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUB6S0/UQSN4/z+1BDlHFDPZcqE7AwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Y1YjFkMWJmLTcyMWYtNGE1Ny1hNDAwLWY1NDljMTkwMTgwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBoFABDANBgkqhkiG9w0BAQsFAAOCAQEAYFqz6ptbB5gxKbClYPKWdR31 MUwWPymf+QB/Ik526Wq/ZzQF8fC9i5n1H9+GOmsfg9HI1rVGbwToh3FmdQofa7Ga 9vQbeTrzOKyRQf6qy4ybXN9I6Tt0yDdQSKnG4Uk+vloaQxPzsHcK8V46AxQtkdzg dq2i7aYJrjEDmEeBndczAsUsCuJqOmRDnooIM76cTFStaB5TByyfqm/1+wVUbLZP MaYK/8UJZiKeBqBu0iLWoBS6A6qIJhsAr3SJPt6ai3Bnoyx7ie6b629gViXL3VgZ L2hfaaXi33GKhk75x7xwvu0+dF2S/9lCEUhiTRPrcCJilJfICCv+WKlFwQCY1w== -----END CERTIFICATE-----Generated at Wed Oct 8 23:16:42 2025 by rpki-client