$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1660d601-ea01-4749-afce-d123fc5f0dd7.roa File: 1660d601-ea01-4749-afce-d123fc5f0dd7.roa (raw, json) Hash identifier: iNIQGnTKYKFY+yx3hMGrPKYqyP8us1HVnRDY8i3njWw= Subject key identifier: F9:9B:F9:EF:4C:2A:F2:8E:60:34:65:41:B2:A4:11:33:96:13:57:A9 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 73ECDC9DC138C53055E9C60D02395F85D8ACCADB Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1660d601-ea01-4749-afce-d123fc5f0dd7.roa Signing time: Fri 24 Oct 2025 15:37:49 +0000 ROA not before: Fri 24 Oct 2025 15:37:49 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2606:8140:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ec:dc:9d:c1:38:c5:30:55:e9:c6:0d:02:39:5f:85:d8:ac:ca:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 15:37:49 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=2ff024833ea070db76de4b5bc77d7a8d84bd33074269740d1d9831c760598026, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:ac:d8:65:01:b6:cb:85:6d:93:f3:d3:b2: f7:b1:97:cb:1c:92:ef:a5:eb:ca:33:a9:27:d5:50: c1:c6:c6:a7:be:09:e4:d5:6f:6c:8e:b1:4e:b7:84: d9:35:7c:4c:bb:c2:c4:a9:44:66:b0:af:df:12:51: 08:36:96:28:ea:d4:b9:61:91:fc:40:4e:7b:33:6b: 20:49:95:fb:fb:b4:ce:b0:4c:ab:07:0c:cb:48:b0: dd:6c:b6:8d:7f:a0:fb:6b:4c:f2:3a:83:d4:30:dd: 3c:0a:54:c3:58:77:3f:d7:3e:c3:7a:db:6a:0e:65: 43:be:2f:f6:bf:79:e2:0a:1f:3f:36:00:55:55:b6: da:47:7e:b2:f8:de:69:92:27:c9:eb:30:8b:d8:0e: 0c:3a:d5:3e:8b:5a:2c:5e:6b:9d:4a:01:6e:c3:d4: 3f:57:da:3d:25:3c:17:9c:2f:88:fa:de:41:1d:74: 69:d7:4e:b7:31:ae:fd:c9:9a:8d:e9:f7:23:03:46: a5:65:a5:eb:58:03:7c:ef:4f:88:8d:bf:95:f4:3e: 60:ce:b2:72:1b:3e:86:98:00:e9:b1:94:97:7b:92: bc:53:8f:fa:d8:75:48:f8:5d:b4:51:10:dc:c8:be: 4a:de:cb:99:10:90:07:7f:78:f4:35:29:e6:7b:86: 1f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9B:F9:EF:4C:2A:F2:8E:60:34:65:41:B2:A4:11:33:96:13:57:A9 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1660d601-ea01-4749-afce-d123fc5f0dd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140:200::/40 Signature Algorithm: sha256WithRSAEncryption 57:bb:22:1d:27:f7:77:6b:b2:a7:51:fc:4a:1a:d0:8c:6b:25: 8b:30:be:14:a8:45:d5:59:26:8c:b5:a3:fd:f2:78:2a:23:2b: 76:da:7f:d0:da:fa:ab:09:07:42:8c:20:99:85:99:3c:d4:9e: bd:87:8b:fc:95:7a:ec:f9:29:3a:f5:e8:3a:3a:ff:17:15:cc: 6a:c6:17:e9:79:e8:ba:44:1b:cd:df:1a:34:3d:5c:60:d3:63: be:9a:ce:42:b4:b4:c4:9b:29:12:85:79:65:96:83:43:9d:9f: 77:7e:5e:ff:81:18:59:2a:2f:4d:96:16:46:30:c2:d7:0e:c0: 44:73:bc:b3:f6:6f:34:58:f3:5e:b8:3c:8b:2c:21:60:7f:bb: 08:a9:a8:02:81:5a:12:87:53:df:8d:04:2e:a4:36:57:6e:8c: 82:28:25:f6:c3:52:b0:5a:64:51:7f:da:a8:5f:a8:7c:4d:96: 86:b9:5b:eb:7c:90:86:2d:4a:2b:21:31:62:c6:ad:5f:28:35: 43:0f:41:77:fd:78:66:13:1c:24:f9:e8:4b:04:f0:45:84:ca: 26:a8:5a:82:3c:eb:74:6b:9a:6f:61:42:91:82:7b:e3:43:4a: 54:3f:11:f7:d8:15:e7:78:97:7d:96:8f:b4:80:c9:4d:00:d4: ac:eb:80:04 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUc+zcncE4xTBV6cYNAjlfhdisytswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDI0MTUzNzQ5WhcNMjUxMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmYwMjQ4MzNlYTA3MGRiNzZkZTRiNWJjNzdkN2E4ZDg0 YmQzMzA3NDI2OTc0MGQxZDk4MzFjNzYwNTk4MDI2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDMqzYZQG2y4Vtk/PTsvexl8scku+l68ozqSfVUMHGxqe+ CeTVb2yOsU63hNk1fEy7wsSpRGawr98SUQg2lijq1LlhkfxATnszayBJlfv7tM6w TKsHDMtIsN1sto1/oPtrTPI6g9Qw3TwKVMNYdz/XPsN622oOZUO+L/a/eeIKHz82 AFVVttpHfrL43mmSJ8nrMIvYDgw61T6LWixea51KAW7D1D9X2j0lPBecL4j63kEd dGnXTrcxrv3Jmo3p9yMDRqVlpetYA3zvT4iNv5X0PmDOsnIbPoaYAOmxlJd7krxT j/rYdUj4XbRRENzIvkrey5kQkAd/ePQ1KeZ7hh9LAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQU+Zv570wq8o5gNGVBsqQRM5YTV6kwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzE2NjBkNjAxLWVhMDEtNDc0OS1hZmNlLWQxMjNmYzVmMGRkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBoFAAjANBgkqhkiG9w0BAQsFAAOCAQEAV7siHSf3d2uyp1H8ShrQjGsl izC+FKhF1VkmjLWj/fJ4KiMrdtp/0Nr6qwkHQowgmYWZPNSevYeL/JV67PkpOvXo Ojr/FxXMasYX6XnoukQbzd8aND1cYNNjvprOQrS0xJspEoV5ZZaDQ52fd35e/4EY WSovTZYWRjDC1w7ARHO8s/ZvNFjzXrg8iywhYH+7CKmoAoFaEodT340ELqQ2V26M gigl9sNSsFpkUX/aqF+ofE2Whrlb63yQhi1KKyExYsatXyg1Qw9Bd/14ZhMcJPno SwTwRYTKJqhagjzrdGuab2FCkYJ740NKVD8R99gV53iXfZaPtIDJTQDUrOuABA== -----END CERTIFICATE-----Generated at Fri Oct 31 20:51:04 2025 by rpki-client