$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/69125cac-84d7-4be1-b082-147e5e98a7ae.roa File: 69125cac-84d7-4be1-b082-147e5e98a7ae.roa (raw, json) Hash identifier: W+G/hH1lo5/Wxk1HJNSjS7UBUGkAFT4Jhc3UsQ15FFA= Subject key identifier: 0F:D1:D7:33:88:F1:95:5E:22:D1:9E:41:6B:50:19:AE:BF:34:ED:C3 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4317D66229B04A1AAE1F315F5C3FC0E250412CBE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/69125cac-84d7-4be1-b082-147e5e98a7ae.roa Signing time: Fri 15 Aug 2025 15:30:05 +0000 ROA not before: Fri 15 Aug 2025 15:30:05 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2606:8140::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:17:d6:62:29:b0:4a:1a:ae:1f:31:5f:5c:3f:c0:e2:50:41:2c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 15 15:30:05 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=aa3c25a7f6878534fe6312655801aa61d1a653f6811cb7ace0d08de675c15464, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:20:11:da:cc:83:2a:cf:89:58:9e:d2:a3:be: f5:05:bc:5d:89:29:2a:b9:75:7c:85:18:39:96:e4: e7:2e:21:e8:d8:ec:d7:b7:2d:44:66:4d:f6:52:51: 57:5c:ed:f0:f9:b0:b6:30:de:b0:95:f3:b2:36:af: 65:04:8f:c8:73:78:20:6c:e9:a1:18:67:ea:6d:c9: 5c:2b:3d:7e:70:1a:88:45:d5:c2:4f:ec:ed:eb:f7: 5d:28:f3:32:49:1b:59:56:64:39:81:9a:65:bb:d2: 92:86:40:50:33:44:7a:53:71:2d:b1:28:84:48:bd: 00:3b:2f:a7:3a:d7:81:8d:17:7d:34:6d:7d:f0:a5: 95:f8:b7:8e:cb:4f:02:80:71:e0:fa:a3:8b:43:d1: 7e:a6:bd:66:48:4e:ce:f4:7a:77:51:b0:c5:5a:cb: 25:af:be:6f:51:cf:9e:59:21:46:35:aa:8f:d3:11: ba:36:4e:30:f4:35:67:98:c7:e9:77:90:0d:fb:46: a7:d0:c1:1d:0a:38:b0:47:c8:18:47:56:e9:64:db: 6d:32:17:40:41:66:00:a5:8b:9f:b7:38:30:42:59: 06:90:1f:e9:60:c8:c7:ca:30:ff:78:70:ac:52:56: 28:f2:38:24:fd:f2:c6:e5:97:2b:29:d4:5c:f5:87: 51:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D1:D7:33:88:F1:95:5E:22:D1:9E:41:6B:50:19:AE:BF:34:ED:C3 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/69125cac-84d7-4be1-b082-147e5e98a7ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140::/32 Signature Algorithm: sha256WithRSAEncryption 99:03:b4:d7:39:0a:89:9a:73:a7:a1:ff:25:6c:26:a6:f1:f6: 48:e4:e2:0f:88:08:11:83:20:58:c9:4f:39:55:91:e2:da:ed: b7:69:b6:61:70:73:5e:c3:c3:4d:75:d6:7c:2f:b6:2b:01:68: 9b:7d:dd:b0:2c:54:d3:99:b2:e1:00:0c:1b:a1:c0:c0:1c:04: f4:52:18:ba:16:c8:fa:97:4a:0c:70:2c:e6:3f:33:41:e8:72: 66:c0:67:a5:7a:12:f0:15:ab:a0:86:03:92:4e:d3:6b:6b:a2: e3:0e:85:b1:6f:97:1c:b1:18:47:d1:fa:1c:c1:61:26:0f:67: a0:c5:cc:7c:43:e6:88:03:de:c3:a5:a0:15:dc:9b:e0:c8:94: 22:4d:11:31:a5:b2:c6:1d:89:b2:36:e2:69:06:89:c2:75:c6: 41:c6:ad:fd:bf:ff:f5:1a:2a:96:2f:74:a1:43:1c:1e:c4:5a: 63:2b:e4:68:23:6f:f0:fe:3d:0e:d4:5a:b5:7e:d8:9c:52:9b: 5a:f4:63:7b:3f:49:8c:bb:f1:82:5b:6e:24:be:2c:0f:cb:d5: 7c:40:79:ba:ac:14:63:81:42:e2:fc:5d:38:2a:36:40:ee:e9: 2d:21:da:2b:73:ce:ba:79:65:73:fc:7c:0b:66:06:a1:8f:c1: 65:85:a7:50 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUQxfWYimwShquHzFfXD/A4lBBLL4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE1MTUzMDA1WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTNjMjVhN2Y2ODc4NTM0ZmU2MzEyNjU1ODAxYWE2MWQx YTY1M2Y2ODExY2I3YWNlMGQwOGRlNjc1YzE1NDY0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRIBHazIMqz4lYntKjvvUFvF2JKSq5dXyFGDmW5OcuIejY 7Ne3LURmTfZSUVdc7fD5sLYw3rCV87I2r2UEj8hzeCBs6aEYZ+ptyVwrPX5wGohF 1cJP7O3r910o8zJJG1lWZDmBmmW70pKGQFAzRHpTcS2xKIRIvQA7L6c614GNF300 bX3wpZX4t47LTwKAceD6o4tD0X6mvWZITs70endRsMVayyWvvm9Rz55ZIUY1qo/T Ebo2TjD0NWeYx+l3kA37RqfQwR0KOLBHyBhHVulk220yF0BBZgCli5+3ODBCWQaQ H+lgyMfKMP94cKxSVijyOCT98sbllysp1Fz1h1H7AgMBAAGjggKyMIICrjAdBgNV HQ4EFgQUD9HXM4jxlV4i0Z5Ba1AZrr807cMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzY5MTI1Y2FjLTg0ZDctNGJlMS1iMDgyLTE0N2U1ZTk4YTdhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAmBoFAMA0GCSqGSIb3DQEBCwUAA4IBAQCZA7TXOQqJmnOnof8lbCam8fZI 5OIPiAgRgyBYyU85VZHi2u23abZhcHNew8NNddZ8L7YrAWibfd2wLFTTmbLhAAwb ocDAHAT0Uhi6Fsj6l0oMcCzmPzNB6HJmwGelehLwFaughgOSTtNra6LjDoWxb5cc sRhH0focwWEmD2egxcx8Q+aIA97DpaAV3JvgyJQiTRExpbLGHYmyNuJpBonCdcZB xq39v//1GiqWL3ShQxwexFpjK+RoI2/w/j0O1Fq1fticUpta9GN7P0mMu/GCW24k viwPy9V8QHm6rBRjgULi/F04KjZA7uktIdorc866eWVz/HwLZgahj8FlhadQ -----END CERTIFICATE-----Generated at Wed Aug 20 13:19:31 2025 by rpki-client