$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d50b4be5-b548-4743-92e1-1e17267f722d.roa File: d50b4be5-b548-4743-92e1-1e17267f722d.roa (raw, json) Hash identifier: n1bY+zqj/rZypKqKIL10F/XXR4qUtQHaQmd1BA4s+n0= Subject key identifier: 6F:44:74:2B:A1:F4:F2:32:11:A0:46:D3:5D:AD:96:3F:AD:B9:19:77 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 19F34A2FB6EE33601D9E726111E23235DDD90050 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d50b4be5-b548-4743-92e1-1e17267f722d.roa Signing time: Fri 11 Jul 2025 18:10:19 +0000 ROA not before: Fri 11 Jul 2025 18:10:19 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:548::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f3:4a:2f:b6:ee:33:60:1d:9e:72:61:11:e2:32:35:dd:d9:00:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:10:19 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=60f3ecd495432a352e689c0cca38eb6fd41f8f1d5a16bce5409d35b0a666a194, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:3a:f0:cb:1c:b3:4c:9a:c3:9b:74:ca:2a: 93:1d:e5:1b:18:46:2c:1b:56:cd:77:12:4b:63:45: f1:94:b9:c5:75:ca:6a:18:43:7b:96:3c:13:ca:a7: c9:5b:e6:6f:48:a5:5f:54:3b:18:24:3d:e8:08:6a: 07:36:7d:5d:db:9a:74:d2:3d:9b:b3:7b:a6:53:ae: 14:dc:2a:3d:6f:6e:ec:f9:39:00:98:90:63:b3:f1: 2f:2b:92:19:a0:b0:d8:38:93:0c:b4:cf:9e:8c:77: 80:05:f7:ca:9c:b6:45:ee:5b:9b:74:65:d0:67:6d: b1:b7:67:a2:33:ef:5a:6f:ee:22:8b:9a:0f:27:af: ab:b2:43:c4:24:f9:0a:a2:e0:3e:00:54:34:ce:04: 83:76:b3:10:76:fe:4c:d2:8c:26:dd:e3:c5:3e:44: 7d:21:fb:6f:d3:27:9c:19:e5:ed:99:9a:97:cb:fe: 2d:e6:cf:5b:4d:75:73:a7:c7:20:3a:39:ed:8e:4d: 45:a4:f2:a2:cc:f0:1e:e3:ca:b6:d5:3f:cc:cc:54: 88:ae:c3:41:5f:73:ab:52:18:28:bd:5a:1c:16:a0: 92:c1:f2:79:94:86:47:7d:88:23:f5:ea:9c:37:2b: b4:91:31:16:d0:6f:68:05:ef:83:9d:3b:71:9e:d9: 6b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:44:74:2B:A1:F4:F2:32:11:A0:46:D3:5D:AD:96:3F:AD:B9:19:77 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d50b4be5-b548-4743-92e1-1e17267f722d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:548::/48 Signature Algorithm: sha256WithRSAEncryption 32:72:2b:ab:7a:3d:3d:fd:cf:37:07:03:77:a0:04:f2:6f:40: 47:7c:90:0c:56:9c:e3:e5:4e:f7:f6:b5:ee:07:53:7a:ef:1d: 05:4b:18:58:88:b1:a0:b3:5d:bf:a1:76:c6:47:99:10:35:41: 6a:02:0d:c8:2a:c7:66:58:f9:58:58:6b:e5:08:86:69:31:6a: 65:78:4e:f3:28:b2:31:f5:19:71:13:01:46:83:86:33:30:fc: d5:99:56:0d:43:03:ee:d4:ec:e3:20:fe:43:4b:46:62:87:51: 4e:17:56:ab:26:79:fa:14:d1:9d:ea:29:2f:f9:95:fa:e8:ca: 02:5a:7c:dc:59:f7:47:05:e0:92:bb:b0:64:e5:dc:93:13:0b: 8b:c2:63:6e:0a:ce:67:7b:83:d9:49:bf:1e:3a:2b:72:83:0d: 6b:34:e4:2a:ae:90:eb:56:4e:0c:f6:51:89:3c:ab:67:e6:60: 39:f9:d0:39:a7:81:79:ba:ce:af:07:b2:23:21:49:5d:85:f6: 25:5e:ab:76:47:db:c8:14:20:ed:8d:4a:66:b1:6f:23:7f:bb: 10:af:c2:b4:07:f2:9d:45:af:ec:0e:71:a7:2b:ae:09:2b:db: 5e:57:2d:07:b2:7e:46:ef:aa:32:9b:ed:fe:48:13:c1:fc:26: 87:41:bb:72 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUGfNKL7buM2AdnnJhEeIyNd3ZAFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMDE5WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MGYzZWNkNDk1NDMyYTM1MmU2ODljMGNjYTM4ZWI2ZmQ0 MWY4ZjFkNWExNmJjZTU0MDlkMzViMGE2NjZhMTk0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPAzrwyxyzTJrDm3TKKpMd5RsYRiwbVs13EktjRfGUucV1 ymoYQ3uWPBPKp8lb5m9IpV9UOxgkPegIagc2fV3bmnTSPZuze6ZTrhTcKj1vbuz5 OQCYkGOz8S8rkhmgsNg4kwy0z56Md4AF98qctkXuW5t0ZdBnbbG3Z6Iz71pv7iKL mg8nr6uyQ8Qk+Qqi4D4AVDTOBIN2sxB2/kzSjCbd48U+RH0h+2/TJ5wZ5e2ZmpfL /i3mz1tNdXOnxyA6Oe2OTUWk8qLM8B7jyrbVP8zMVIiuw0Ffc6tSGCi9WhwWoJLB 8nmUhkd9iCP16pw3K7SRMRbQb2gF74OdO3Ge2Wt/AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUb0R0K6H08jIRoEbTXa2WP625GXcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2Q1MGI0YmU1LWI1NDgtNDc0My05MmUxLTFlMTcyNjdmNzIyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUgwDQYJKoZIhvcNAQELBQADggEBADJyK6t6PT39zzcHA3egBPJv QEd8kAxWnOPlTvf2te4HU3rvHQVLGFiIsaCzXb+hdsZHmRA1QWoCDcgqx2ZY+VhY a+UIhmkxamV4TvMosjH1GXETAUaDhjMw/NWZVg1DA+7U7OMg/kNLRmKHUU4XVqsm efoU0Z3qKS/5lfroygJafNxZ90cF4JK7sGTl3JMTC4vCY24Kzmd7g9lJvx46K3KD DWs05CqukOtWTgz2UYk8q2fmYDn50DmngXm6zq8HsiMhSV2F9iVeq3ZH28gUIO2N SmaxbyN/uxCvwrQH8p1Fr+wOcacrrgkr215XLQeyfkbvqjKb7f5IE8H8JodBu3I= -----END CERTIFICATE-----Generated at Mon Jul 21 23:18:33 2025 by rpki-client