$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/60f92b89-d001-48c5-9a79-ac7a1a17f5c8.roa File: 60f92b89-d001-48c5-9a79-ac7a1a17f5c8.roa (raw, json) Hash identifier: YbnV4NJcyZ3vodOJNWBZtzykDz/aFGMYdydnr1RMPJE= Subject key identifier: 8D:AB:2B:1C:06:97:D2:40:68:E8:A4:CF:07:F7:33:D5:03:49:10:25 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0C936B15CF62DA2F455FA51D2430B8528CFD9958 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/60f92b89-d001-48c5-9a79-ac7a1a17f5c8.roa Signing time: Mon 21 Jul 2025 16:10:27 +0000 ROA not before: Mon 21 Jul 2025 16:10:27 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:93:6b:15:cf:62:da:2f:45:5f:a5:1d:24:30:b8:52:8c:fd:99:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:10:27 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=ebd0cb40c75a222ea4480e2d5a2aefc252cc0b3d9849e706704e0d80044f5d40, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d7:24:89:94:10:6d:96:8c:3b:5f:77:25:86: f3:be:73:8e:f8:fc:45:51:55:6e:0d:5c:40:94:f4: 25:ef:f3:42:41:6d:5c:3b:c8:76:3f:42:54:c2:86: 7c:14:7c:5a:c8:98:4b:7e:f8:09:a5:5f:e1:4b:94: fe:4d:5b:ff:ad:a7:a5:82:6d:40:b2:9c:14:82:99: 2b:86:3c:e9:bc:ec:32:b9:4d:d4:f1:1b:0a:cf:7b: e7:ec:e1:6a:5d:23:47:73:3c:16:cb:60:27:50:93: a5:81:6f:72:c0:1a:c6:cd:cc:88:d9:a9:5c:5b:17: de:ca:c5:3a:38:f6:62:3d:39:ef:84:c3:e6:63:a5: c0:01:95:57:e5:13:c8:45:f1:33:6c:8a:51:34:dc: 87:2a:61:54:cb:22:a0:53:08:a2:84:a3:ba:67:f8: 9e:c3:97:93:70:95:79:7e:a6:8d:9a:98:ce:32:3f: fd:8e:0f:7e:f3:99:39:2e:d8:a9:36:e5:82:a3:4d: bb:85:f5:ed:55:29:3c:3d:5a:9f:2e:5b:8c:ba:44: e5:4f:e4:ba:f6:11:68:84:73:66:d4:a7:34:9f:9c: af:0f:91:e9:be:de:4f:39:06:00:29:06:66:1a:c8: e7:cd:3f:34:0a:b6:b7:11:66:d5:71:0a:2c:87:85: 50:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AB:2B:1C:06:97:D2:40:68:E8:A4:CF:07:F7:33:D5:03:49:10:25 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/60f92b89-d001-48c5-9a79-ac7a1a17f5c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c04::/48 Signature Algorithm: sha256WithRSAEncryption a3:93:29:fe:40:09:fe:4c:5e:63:76:8b:d6:e8:dc:e6:b8:34: 3e:50:22:1a:43:e9:38:5c:99:f4:0b:d3:b8:8d:3d:45:46:89: 21:48:ec:e1:03:e6:41:bc:90:79:12:61:f1:8a:b3:09:5b:0d: 9c:b1:63:a8:61:e0:b0:65:a5:eb:38:1b:cf:73:2c:70:f9:4d: e4:1f:59:33:ee:3b:fa:83:8c:55:12:d9:55:6f:95:36:9e:07: 44:b2:43:20:18:ef:e1:ae:a7:31:54:ad:ce:9c:51:65:bf:1f: d1:26:f2:df:89:e9:2f:b2:a2:22:77:92:97:b2:ef:d1:79:fe: c0:cd:e0:3f:d0:f6:bb:29:9a:5d:88:a2:5f:ef:05:a3:b7:69: e9:51:ef:0b:21:10:71:b7:8f:a8:ce:0c:c3:2d:ab:84:43:ce: 31:71:1f:50:dc:47:0b:78:91:8c:f2:76:35:95:76:ab:bc:72: 30:1c:54:d8:b1:a0:1b:b3:bd:b9:ab:58:40:0c:f4:45:9e:8c: 9e:dc:72:08:7a:59:f4:2e:5e:f2:56:9b:b1:91:da:75:08:74: c1:85:43:38:20:0e:22:3b:77:e6:cf:73:c0:f2:4b:a9:be:9e: d8:12:c8:68:88:a5:a4:3a:d6:fe:6b:3e:90:26:e2:80:08:7e: 1c:a1:17:6c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDJNrFc9i2i9FX6UdJDC4Uoz9mVgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYxMDI3WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYmQwY2I0MGM3NWEyMjJlYTQ0ODBlMmQ1YTJhZWZjMjUy Y2MwYjNkOTg0OWU3MDY3MDRlMGQ4MDA0NGY1ZDQwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg1ySJlBBtlow7X3clhvO+c474/EVRVW4NXECU9CXv80JB bVw7yHY/QlTChnwUfFrImEt++AmlX+FLlP5NW/+tp6WCbUCynBSCmSuGPOm87DK5 TdTxGwrPe+fs4WpdI0dzPBbLYCdQk6WBb3LAGsbNzIjZqVxbF97KxTo49mI9Oe+E w+ZjpcABlVflE8hF8TNsilE03IcqYVTLIqBTCKKEo7pn+J7Dl5NwlXl+po2amM4y P/2OD37zmTku2Kk25YKjTbuF9e1VKTw9Wp8uW4y6ROVP5Lr2EWiEc2bUpzSfnK8P kem+3k85BgApBmYayOfNPzQKtrcRZtVxCiyHhVAbAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjasrHAaX0kBo6KTPB/cz1QNJECUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzYwZjkyYjg5LWQwMDEtNDhjNS05YTc5LWFjN2ExYTE3ZjVjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAQwDQYJKoZIhvcNAQELBQADggEBAKOTKf5ACf5MXmN2i9bo3Oa4 ND5QIhpD6ThcmfQL07iNPUVGiSFI7OED5kG8kHkSYfGKswlbDZyxY6hh4LBlpes4 G89zLHD5TeQfWTPuO/qDjFUS2VVvlTaeB0SyQyAY7+GupzFUrc6cUWW/H9Em8t+J 6S+yoiJ3kpey79F5/sDN4D/Q9rspml2Iol/vBaO3aelR7wshEHG3j6jODMMtq4RD zjFxH1DcRwt4kYzydjWVdqu8cjAcVNixoBuzvbmrWEAM9EWejJ7ccgh6WfQuXvJW m7GR2nUIdMGFQzggDiI7d+bPc8DyS6m+ntgSyGiIpaQ61v5rPpAm4oAIfhyhF2w= -----END CERTIFICATE-----Generated at Thu Jul 24 04:52:02 2025 by rpki-client