$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e358e7f2-c50f-4210-96c3-6da6a0d2248e.roa File: e358e7f2-c50f-4210-96c3-6da6a0d2248e.roa (raw, json) Hash identifier: aNynuqfujqF9ywaTuZ+SyNXuBM4grOMWLQTFoRIjdb4= Subject key identifier: B9:52:28:14:2B:D3:0D:D4:9B:36:29:72:82:37:3D:14:4F:D9:C0:F0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 086072B83C122875DEAEACD1FAA13ED629A0D01A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e358e7f2-c50f-4210-96c3-6da6a0d2248e.roa Signing time: Fri 24 Oct 2025 15:37:50 +0000 ROA not before: Fri 24 Oct 2025 15:37:50 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2606:8140:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:60:72:b8:3c:12:28:75:de:ae:ac:d1:fa:a1:3e:d6:29:a0:d0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 15:37:50 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=73cc6a236783612bff61e9deac9ccc410ade96c03adfe0b6c2eeb54f13ea89eb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bc:98:67:05:77:1d:2a:1d:6a:fc:2e:f3:06: b7:58:b0:19:d2:30:35:c4:8c:d6:08:a7:e2:8c:fb: 72:b2:ea:1d:dd:87:b1:43:21:d8:35:80:7a:87:f1: f9:1f:ba:e9:85:30:85:f3:3b:2b:b9:c2:2a:c6:5b: 9a:05:15:f0:75:62:2e:7f:43:16:3d:dd:89:67:89: db:2a:b3:2e:35:21:57:02:a8:a2:52:0d:31:e8:18: 6c:18:8d:56:07:d3:45:ba:9a:06:80:5e:12:97:10: 7d:e9:dd:8e:61:28:9f:92:e8:7e:12:9c:1d:a0:1e: 4a:ca:87:41:bd:47:76:0c:24:01:8c:03:0c:cc:6d: 91:bb:04:de:19:f6:d4:e2:47:64:4d:55:39:87:b3: 7e:44:b1:17:f8:0f:42:95:c1:8c:54:5c:5f:c3:14: 3e:22:59:02:61:d4:c2:bd:34:78:c2:0a:8f:04:c2: fd:f6:3e:9c:61:38:2c:5e:93:bd:fa:72:b8:da:b8: 1a:3f:b7:cf:b8:29:af:e5:75:4d:91:2f:73:c2:d9: 23:b1:ba:24:f7:63:cb:91:b4:55:51:9f:97:e2:5c: e0:32:6b:26:0a:a2:97:46:37:08:34:1f:24:ad:ca: 16:2d:57:e7:2f:e5:b8:d3:01:e3:a2:5b:07:d7:0b: 23:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:52:28:14:2B:D3:0D:D4:9B:36:29:72:82:37:3D:14:4F:D9:C0:F0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e358e7f2-c50f-4210-96c3-6da6a0d2248e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2606:8140:200::/40 Signature Algorithm: sha256WithRSAEncryption 55:6a:7f:10:fb:cb:75:3c:5b:14:60:c3:1b:1e:c1:c9:36:c5: 04:8d:29:e6:c1:1a:95:85:50:54:a2:bf:e8:2a:09:b4:5b:a1: fd:17:71:74:76:bc:51:07:1f:cd:91:49:9e:48:9a:75:f5:7c: 35:ab:a7:80:2c:f4:1e:e6:ce:3d:4e:cf:0c:a8:1c:ad:3b:b0: 87:e8:f9:52:47:41:4b:30:16:a5:0f:a7:39:f7:89:6b:b5:10: 7a:8d:b6:98:3f:fe:19:53:e9:05:a7:ed:fc:48:d9:44:7e:43: 9e:16:91:31:fa:de:7a:e2:38:ca:5c:a3:1d:ea:64:50:61:10: 6a:d5:22:b7:13:78:05:be:95:05:47:98:20:6f:60:02:88:f3: 3f:fa:ef:e6:8e:2a:a4:f7:bd:94:87:58:42:c2:6c:28:8a:5b: 69:cf:aa:e1:c3:0d:cd:3f:d1:cd:84:c1:b3:23:c3:cd:7f:fb: d5:a7:99:1c:2a:97:28:c5:5c:92:bf:5d:76:f8:9b:4f:ec:2d: 25:66:85:ae:b7:50:b0:1a:a9:df:09:18:c8:af:30:c0:30:f2: d9:57:5a:7f:84:e8:7d:8d:93:01:8c:53:8c:01:d5:a5:ab:ef: 94:ef:00:60:b8:54:4b:eb:5d:40:16:35:a2:d3:b5:f9:75:36: 91:66:a3:5d -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUCGByuDwSKHXerqzR+qE+1img0BowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDI0MTUzNzUwWhcNMjUxMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3M2NjNmEyMzY3ODM2MTJiZmY2MWU5ZGVhYzljY2M0MTBh ZGU5NmMwM2FkZmUwYjZjMmVlYjU0ZjEzZWE4OWViMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQvJhnBXcdKh1q/C7zBrdYsBnSMDXEjNYIp+KM+3Ky6h3d h7FDIdg1gHqH8fkfuumFMIXzOyu5wirGW5oFFfB1Yi5/QxY93Ylnidsqsy41IVcC qKJSDTHoGGwYjVYH00W6mgaAXhKXEH3p3Y5hKJ+S6H4SnB2gHkrKh0G9R3YMJAGM AwzMbZG7BN4Z9tTiR2RNVTmHs35EsRf4D0KVwYxUXF/DFD4iWQJh1MK9NHjCCo8E wv32PpxhOCxek736crjauBo/t8+4Ka/ldU2RL3PC2SOxuiT3Y8uRtFVRn5fiXOAy ayYKopdGNwg0HyStyhYtV+cv5bjTAeOiWwfXCyMfAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUuVIoFCvTDdSbNilygjc9FE/ZwPAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2UzNThlN2YyLWM1MGYtNDIxMC05NmMzLTZkYTZhMGQyMjQ4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmBoFAAjANBgkqhkiG9w0BAQsFAAOCAQEAVWp/EPvLdTxbFGDDGx7ByTbF BI0p5sEalYVQVKK/6CoJtFuh/RdxdHa8UQcfzZFJnkiadfV8NaungCz0HubOPU7P DKgcrTuwh+j5UkdBSzAWpQ+nOfeJa7UQeo22mD/+GVPpBaft/EjZRH5DnhaRMfre euI4ylyjHepkUGEQatUitxN4Bb6VBUeYIG9gAojzP/rv5o4qpPe9lIdYQsJsKIpb ac+q4cMNzT/RzYTBsyPDzX/71aeZHCqXKMVckr9ddvibT+wtJWaFrrdQsBqp3wkY yK8wwDDy2Vdaf4TofY2TAYxTjAHVpavvlO8AYLhUS+tdQBY1otO1+XU2kWajXQ== -----END CERTIFICATE-----Generated at Fri Oct 31 21:00:51 2025 by rpki-client