$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa File: b2a4ddb8-c852-4876-b718-a984606f10af.roa (raw, json) Hash identifier: KY/iXOEDeieA7IURd8/g88xNsbyaGk1clzfcK2M6wOQ= Subject key identifier: 98:E2:BF:1B:97:B1:AA:38:86:24:0C:EF:98:AC:5D:21:E1:7E:42:34 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7B911F8FF522DF9CD82F985FE6AF635430E32973 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa Signing time: Mon 21 Jul 2025 16:20:14 +0000 ROA not before: Mon 21 Jul 2025 16:20:14 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:91:1f:8f:f5:22:df:9c:d8:2f:98:5f:e6:af:63:54:30:e3:29:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:20:14 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=8e84a817a02846a460d74246ff76348ba7f9ceef410fdfc0f4cc61ed19df6585, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:12:de:b2:c1:4c:7b:3e:d8:2c:89:cb:eb:ed: 1c:fd:3e:1f:30:a5:4b:bc:1b:f9:8f:75:88:ea:a3: eb:29:26:59:62:e0:e9:04:f5:de:26:62:af:bf:4c: 9c:ce:41:ec:fa:36:18:05:ac:5a:fa:5b:8f:b9:be: 6c:f2:76:c1:06:f1:a3:bf:34:a5:8c:31:6c:76:5a: 8d:9e:60:0d:64:d4:b3:9b:01:82:4a:86:a5:bc:f8: ce:13:b2:e3:27:50:39:cb:05:f9:60:9f:78:2e:f4: f9:1d:79:2c:e6:b0:66:d1:99:e9:ee:da:ea:9c:6e: 6e:a3:d4:71:39:92:77:44:c3:95:a0:fb:a5:e3:fa: e9:c7:e5:90:2e:6e:7f:fc:a1:44:e2:1a:8a:cd:ee: 2e:dc:08:e6:18:e2:dd:6a:41:fc:3a:01:d3:6e:4a: db:eb:7b:c2:66:06:53:ba:db:3a:9d:9f:7b:d7:09: a8:50:12:dd:77:cf:0e:f3:33:02:d3:22:4e:af:d8: 21:81:2c:e6:15:87:0e:3a:66:cb:21:ba:b8:05:32: dd:67:ac:0d:c4:8d:42:30:01:2e:97:a9:7c:e7:93: 0a:3e:15:4e:b6:a9:e1:d0:1b:5f:a5:4b:ee:05:2f: 1c:49:da:ac:f4:30:ec:3f:a8:9d:63:9f:5a:35:f0: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E2:BF:1B:97:B1:AA:38:86:24:0C:EF:98:AC:5D:21:E1:7E:42:34 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0c::/48 Signature Algorithm: sha256WithRSAEncryption 69:15:2d:39:5b:48:12:49:db:0d:ee:86:25:dd:a2:c9:0c:ef: d8:79:c1:68:33:5a:0b:be:9f:4a:17:18:ed:c4:92:d8:53:62: a3:e7:7c:7e:b9:29:4a:d2:ba:73:e3:0a:af:e7:2f:0a:ce:69: 34:dd:67:1c:bd:10:4b:fa:d5:f4:3c:8f:f3:51:77:74:67:b2: 32:ed:dc:0b:24:f8:d8:a2:65:e5:0c:f3:e3:2b:0e:6e:7b:ec: 9f:b0:b1:9c:3b:80:73:4c:5c:5f:15:d2:97:1e:c3:1b:2e:2a: d9:28:e2:30:b2:93:92:21:b2:e2:4b:0a:68:5b:6b:ef:2c:8c: aa:ef:42:4c:cd:55:df:48:11:ce:90:dd:07:aa:fe:90:6b:7c: e1:5c:d9:d2:63:cd:70:5f:47:60:09:ae:18:cf:1c:aa:22:94: 31:70:69:5b:65:41:63:ce:04:e2:57:c7:fb:a8:40:8c:9a:9b: c4:75:ca:36:74:f3:cc:71:ec:79:10:a6:02:31:32:ba:4a:a9: 4a:bd:e6:92:34:7d:f1:f2:c0:10:74:11:01:c3:ef:90:ea:c3: 6e:cb:10:59:f9:8b:15:a8:8c:a8:3e:a6:c8:15:ee:60:e4:d4: b1:71:dd:d9:3c:b8:76:79:b4:70:8e:fb:37:17:43:e8:57:37: 08:e3:dc:64 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUe5Efj/Ui35zYL5hf5q9jVDDjKXMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYyMDE0WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTg0YTgxN2EwMjg0NmE0NjBkNzQyNDZmZjc2MzQ4YmE3 ZjljZWVmNDEwZmRmYzBmNGNjNjFlZDE5ZGY2NTg1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHEt6ywUx7Ptgsicvr7Rz9Ph8wpUu8G/mPdYjqo+spJlli 4OkE9d4mYq+/TJzOQez6NhgFrFr6W4+5vmzydsEG8aO/NKWMMWx2Wo2eYA1k1LOb AYJKhqW8+M4TsuMnUDnLBflgn3gu9PkdeSzmsGbRmenu2uqcbm6j1HE5kndEw5Wg +6Xj+unH5ZAubn/8oUTiGorN7i7cCOYY4t1qQfw6AdNuStvre8JmBlO62zqdn3vX CahQEt13zw7zMwLTIk6v2CGBLOYVhw46ZsshurgFMt1nrA3EjUIwAS6XqXznkwo+ FU62qeHQG1+lS+4FLxxJ2qz0MOw/qJ1jn1o18ArlAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmOK/G5exqjiGJAzvmKxdIeF+QjQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IyYTRkZGI4LWM4NTItNDg3Ni1iNzE4LWE5ODQ2MDZmMTBhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAwwDQYJKoZIhvcNAQELBQADggEBAGkVLTlbSBJJ2w3uhiXdoskM 79h5wWgzWgu+n0oXGO3EkthTYqPnfH65KUrSunPjCq/nLwrOaTTdZxy9EEv61fQ8 j/NRd3RnsjLt3Ask+NiiZeUM8+MrDm577J+wsZw7gHNMXF8V0pcewxsuKtko4jCy k5IhsuJLCmhba+8sjKrvQkzNVd9IEc6Q3Qeq/pBrfOFc2dJjzXBfR2AJrhjPHKoi lDFwaVtlQWPOBOJXx/uoQIyam8R1yjZ088xx7HkQpgIxMrpKqUq95pI0ffHywBB0 EQHD75Dqw27LEFn5ixWojKg+psgV7mDk1LFx3dk8uHZ5tHCO+zcXQ+hXNwjj3GQ= -----END CERTIFICATE-----Generated at Tue Jul 22 11:45:22 2025 by rpki-client