$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa File: 1311a895-43fc-49eb-996b-222d911710a4.roa (raw, json) Hash identifier: rTzvU/LRkdl2JTF0Lt8UXmHMPJBq5ieVF20p3H18Ooc= Subject key identifier: 06:E5:D4:15:83:C0:98:67:57:57:42:6B:29:AD:A3:2F:C7:6D:7D:B9 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5874D0ECD0878DC3C50C760EABA0E13C5B610F8E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa Signing time: Mon 21 Jul 2025 16:10:08 +0000 ROA not before: Mon 21 Jul 2025 16:10:08 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:74:d0:ec:d0:87:8d:c3:c5:0c:76:0e:ab:a0:e1:3c:5b:61:0f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:10:08 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=b2f18cdbe76c543bd07a1c5589a4f71dfa5fb1f1d4b599bb56a558b8c21db96f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e6:75:9a:3b:09:2f:e2:37:b1:95:91:49:6a: 49:9d:b7:cb:9e:aa:56:65:a9:97:27:6e:cf:b7:d1: dd:46:e4:45:7a:84:31:54:e5:71:92:a9:5d:96:ba: 6e:a7:cf:2c:f6:61:da:33:4e:64:d8:a2:90:6a:7a: 75:0f:8b:f6:48:c2:e9:7c:72:11:53:34:2a:11:ef: 31:98:c4:9b:a7:83:4c:9e:39:3b:80:64:06:08:04: 2a:a6:56:aa:68:86:12:60:ef:f1:ce:80:c3:3a:9a: fd:ac:ff:96:9a:12:79:5f:7b:bf:55:3c:a6:85:59: f0:8e:fa:f9:49:f7:53:94:92:8b:18:28:28:20:62: 24:e4:22:c6:43:db:50:66:52:14:5d:3a:9f:d0:fd: 55:02:9e:54:fa:32:a3:6c:f1:2c:c7:5f:dc:f5:54: bf:83:7b:03:b2:6e:3b:df:74:fb:1e:07:37:1c:84: a6:b3:a1:40:b6:20:11:a9:f3:c2:1a:f2:b6:18:58: fa:d7:dc:5f:d2:09:a9:3b:29:73:e0:4b:23:83:6c: b5:cb:f9:e1:91:c4:b2:ab:71:ec:1e:3a:c9:36:1d: ee:56:0b:c5:9f:36:72:b6:cd:80:18:8f:f9:04:71: 95:d0:62:d0:62:c5:17:c6:f9:6e:df:a7:81:2f:fc: 6a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E5:D4:15:83:C0:98:67:57:57:42:6B:29:AD:A3:2F:C7:6D:7D:B9 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c00::/48 Signature Algorithm: sha256WithRSAEncryption 00:87:2a:9a:80:56:51:f1:9f:ad:03:01:70:4f:05:56:c8:93: 17:ad:b4:06:7f:77:54:e5:14:00:81:f0:8d:6f:fb:e3:24:4c: 8e:7a:65:2e:77:55:74:0b:06:0c:9e:03:14:8b:23:9f:6f:80: 5c:91:01:42:f6:93:c3:4d:47:a2:16:30:53:6a:35:51:84:36: 21:c7:aa:6f:7b:42:32:aa:4c:cb:dd:4b:be:da:68:2a:7c:82: 78:23:dd:12:c3:20:69:b7:10:ee:55:f6:56:a6:71:e5:df:95: 54:37:b7:94:09:a5:03:ed:7b:25:7d:5d:62:26:4e:54:40:19: e1:2d:49:12:ab:56:87:6b:38:16:85:31:76:0f:67:88:cc:62: a3:75:8b:9a:88:6c:7c:ad:59:6c:f5:94:93:d8:ba:31:75:48: 2e:0b:4e:ee:98:63:0f:1f:e3:f2:e9:a5:1c:61:8c:a6:50:26: f9:e5:e8:d1:be:d2:ab:ca:4b:33:67:ca:b3:d0:a7:8f:23:ff: 57:95:ab:f1:7c:5a:9a:5c:4e:ba:e2:ff:8c:af:10:7e:60:8b: 73:a5:0d:05:04:86:ad:c1:f2:50:09:98:6c:5d:38:d9:f7:4a: 94:bb:71:88:a8:39:bb:84:02:c2:b8:32:25:a8:b7:3a:9a:a5: d7:47:ef:77 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUWHTQ7NCHjcPFDHYOq6DhPFthD44wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYxMDA4WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmYxOGNkYmU3NmM1NDNiZDA3YTFjNTU4OWE0ZjcxZGZh NWZiMWYxZDRiNTk5YmI1NmE1NThiOGMyMWRiOTZmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDk5nWaOwkv4jexlZFJakmdt8ueqlZlqZcnbs+30d1G5EV6 hDFU5XGSqV2Wum6nzyz2YdozTmTYopBqenUPi/ZIwul8chFTNCoR7zGYxJung0ye OTuAZAYIBCqmVqpohhJg7/HOgMM6mv2s/5aaEnlfe79VPKaFWfCO+vlJ91OUkosY KCggYiTkIsZD21BmUhRdOp/Q/VUCnlT6MqNs8SzHX9z1VL+DewOybjvfdPseBzcc hKazoUC2IBGp88Ia8rYYWPrX3F/SCak7KXPgSyODbLXL+eGRxLKrceweOsk2He5W C8WfNnK2zYAYj/kEcZXQYtBixRfG+W7fp4Ev/GqJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUBuXUFYPAmGdXV0JrKa2jL8dtfbkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzEzMTFhODk1LTQzZmMtNDllYi05OTZiLTIyMmQ5MTE3MTBhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAAwDQYJKoZIhvcNAQELBQADggEBAACHKpqAVlHxn60DAXBPBVbI kxettAZ/d1TlFACB8I1v++MkTI56ZS53VXQLBgyeAxSLI59vgFyRAUL2k8NNR6IW MFNqNVGENiHHqm97QjKqTMvdS77aaCp8gngj3RLDIGm3EO5V9lamceXflVQ3t5QJ pQPteyV9XWImTlRAGeEtSRKrVodrOBaFMXYPZ4jMYqN1i5qIbHytWWz1lJPYujF1 SC4LTu6YYw8f4/LppRxhjKZQJvnl6NG+0qvKSzNnyrPQp48j/1eVq/F8WppcTrri /4yvEH5gi3OlDQUEhq3B8lAJmGxdONn3SpS7cYioObuEAsK4MiWotzqapddH73c= -----END CERTIFICATE-----Generated at Thu Jul 24 04:53:30 2025 by rpki-client