$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa File: f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa (raw, json) Hash identifier: y1RqzVcDNSxAyAdgqVxwKJYBF1mz2YR7G02vMYW/QPE= Subject key identifier: 03:9F:B6:32:60:6D:3E:66:99:00:AA:69:25:82:E7:F3:51:AC:63:ED Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 71EBA60442147B7E06683BDA79C624C78A57116F Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa Signing time: Fri 11 Jul 2025 18:20:02 +0000 ROA not before: Fri 11 Jul 2025 18:20:02 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 801 IP address blocks: 2631::/24 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:eb:a6:04:42:14:7b:7e:06:68:3b:da:79:c6:24:c7:8a:57:11:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 11 18:20:02 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=03adf5462185f6dde951e78a3d3a9cd97e92d18a7ba5ead4a66ac512abaa6249, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:39:dc:bd:cc:87:75:7a:83:52:57:b0:09:74: a4:e2:12:4f:fc:67:87:13:81:e5:7c:cc:39:10:26: e7:aa:a0:8e:da:e2:fd:86:de:39:49:24:95:04:df: aa:d4:7d:7d:ff:13:ef:c9:7f:76:b8:ab:89:fd:75: 5a:59:d4:9c:00:90:3c:0d:94:ff:71:5a:06:5f:b7: dd:d7:da:73:c5:0d:0e:61:f9:7d:a2:46:81:2a:38: 50:81:b1:43:ad:cf:96:4f:b3:81:65:a8:07:f7:8e: 72:39:bf:7e:cd:45:82:6c:94:28:ef:1c:aa:4f:69: c7:0a:97:73:e9:32:f2:c6:a8:52:62:07:43:4c:d2: a9:7e:72:a5:d5:6d:d9:e3:89:fa:7a:ec:9c:60:57: 29:e8:4c:28:2a:f7:94:8a:0b:ad:94:bd:ad:fe:e6: a5:da:71:f0:bf:a3:ab:64:9f:2f:f9:06:7c:e2:52: b9:1b:49:bb:b8:a0:2c:d3:b1:0f:2e:50:47:4d:7c: b8:95:a2:6b:5c:6a:14:e3:5a:9b:97:2f:41:1b:de: 3a:92:d3:7d:0b:fc:b7:1e:ae:bb:a1:51:13:9e:54: fd:50:2b:f2:d9:6a:b4:b5:ca:2a:41:59:0c:a5:14: f6:f8:d6:4c:35:dc:b4:c6:cd:01:a3:e0:9d:d5:c5: 28:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9F:B6:32:60:6D:3E:66:99:00:AA:69:25:82:E7:F3:51:AC:63:ED X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9dbcc6f-bcfa-467c-a22b-762c669d9945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2631::/24 Signature Algorithm: sha256WithRSAEncryption 2f:8c:94:3c:8f:06:69:c6:cc:b7:6a:ed:1f:81:6d:28:71:d6: 3c:8a:62:60:47:39:09:b9:80:83:6d:c1:d9:7f:92:dc:01:45: 67:65:46:57:5e:4d:d9:70:ee:c8:79:53:3d:37:4a:5c:f2:77: d9:e5:d4:48:79:2b:7d:49:25:9c:8b:07:ba:54:b8:f1:42:f9: ca:2d:39:1d:8b:af:64:77:32:0d:ad:9b:b6:7e:58:e7:a7:f1: f0:45:56:41:9a:07:01:4f:28:81:cd:7f:ba:4c:9a:bd:c3:e4: 75:02:14:7f:02:4b:44:63:b3:18:d8:33:d9:34:f2:95:d0:11: f2:97:2d:ac:aa:ce:6a:82:2f:78:ae:95:cf:8d:b8:78:08:95: 39:84:00:87:8a:b5:cb:d8:1e:ea:83:61:16:62:05:78:fc:b0: f5:ed:4e:ea:b7:69:90:d6:0a:1c:70:50:d4:6a:7d:c0:a0:a4: 32:f9:b2:d2:2b:cd:3d:79:5b:d3:b2:b7:d4:40:61:07:43:5e: d6:c1:c3:76:dc:ed:08:91:08:73:5f:0d:48:46:7c:a9:75:7b: a8:9c:c9:70:67:9e:0e:2e:96:1f:f5:52:f0:87:02:55:62:d5: a7:6c:6e:c5:1b:1c:e2:ea:33:c3:8d:51:42:ba:87:f0:ef:73: a0:23:a3:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUceumBEIUe34GaDvaecYkx4pXEW8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzExMTgyMDAyWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2FkZjU0NjIxODVmNmRkZTk1MWU3OGEzZDNhOWNkOTdl OTJkMThhN2JhNWVhZDRhNjZhYzUxMmFiYWE2MjQ5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMOdy9zId1eoNSV7AJdKTiEk/8Z4cTgeV8zDkQJueqoI7a 4v2G3jlJJJUE36rUfX3/E+/Jf3a4q4n9dVpZ1JwAkDwNlP9xWgZft93X2nPFDQ5h +X2iRoEqOFCBsUOtz5ZPs4FlqAf3jnI5v37NRYJslCjvHKpPaccKl3PpMvLGqFJi B0NM0ql+cqXVbdnjifp67JxgVynoTCgq95SKC62Uva3+5qXacfC/o6tkny/5Bnzi UrkbSbu4oCzTsQ8uUEdNfLiVomtcahTjWpuXL0Eb3jqS030L/LcerruhUROeVP1Q K/LZarS1yipBWQylFPb41kw13LTGzQGj4J3VxShhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUA5+2MmBtPmaZAKppJYLn81GsY+0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Y5ZGJjYzZmLWJjZmEtNDY3Yy1hMjJiLTc2MmM2NjlkOTk0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAC MAYDBAAmMQAwDQYJKoZIhvcNAQELBQADggEBAC+MlDyPBmnGzLdq7R+BbShx1jyK YmBHOQm5gINtwdl/ktwBRWdlRldeTdlw7sh5Uz03Slzyd9nl1Eh5K31JJZyLB7pU uPFC+cotOR2Lr2R3Mg2tm7Z+WOen8fBFVkGaBwFPKIHNf7pMmr3D5HUCFH8CS0Rj sxjYM9k08pXQEfKXLayqzmqCL3iulc+NuHgIlTmEAIeKtcvYHuqDYRZiBXj8sPXt Tuq3aZDWChxwUNRqfcCgpDL5stIrzT15W9Oyt9RAYQdDXtbBw3bc7QiRCHNfDUhG fKl1e6icyXBnng4ulh/1UvCHAlVi1adsbsUbHOLqM8ONUUK6h/Dvc6Ajo4E= -----END CERTIFICATE-----Generated at Fri Jul 25 17:22:51 2025 by rpki-client