$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/558c9df2-c6fb-4925-840a-5de1f74ec31b.roa File: 558c9df2-c6fb-4925-840a-5de1f74ec31b.roa (raw, json) Hash identifier: YKAeVGnK+Z91cAv0yQzSNJERmUJXBWpZisCt+cum8Os= Subject key identifier: 98:ED:9E:26:C9:65:AA:7B:A5:F7:88:F3:9E:3E:DE:66:41:33:22:8F Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 08AAD47AACD2CAEAAD95943C97CCAE6F3B6670D5 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/558c9df2-c6fb-4925-840a-5de1f74ec31b.roa Signing time: Tue 05 Aug 2025 18:11:14 +0000 ROA not before: Tue 05 Aug 2025 18:11:14 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:386::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:aa:d4:7a:ac:d2:ca:ea:ad:95:94:3c:97:cc:ae:6f:3b:66:70:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 5 18:11:14 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=0467d10843311774e1a9dc79f2050940c4e77b477cb0643b84688d96ad1e2fa6, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:fe:20:f2:c4:be:88:e4:a6:17:b5:d2:57: 26:bb:da:a2:dc:87:3e:de:ff:1f:0b:79:4f:88:0b: d6:a6:7b:f6:45:18:0a:79:46:3e:7a:ca:5f:da:de: 4b:3a:99:cb:d6:12:4a:e7:58:6c:54:8d:9d:62:f4: 9a:f5:67:5a:80:b5:e0:76:58:95:7f:cb:03:54:5f: d8:32:3e:65:05:92:53:f8:a9:a1:91:65:ed:46:50: a1:dc:fa:68:fb:ab:53:93:64:01:8a:f2:e0:a8:99: a7:0b:6b:64:db:2f:15:a4:d3:a0:1e:b6:be:6a:37: de:40:e0:4c:42:f3:1f:53:8e:2c:2c:61:de:7e:83: 3d:21:96:f0:d4:73:67:71:71:90:f6:ff:50:dd:40: 9e:39:08:9c:d6:bc:58:f1:dc:f3:48:f2:85:fd:99: 3d:39:8c:18:e7:88:61:6e:65:28:27:21:74:dd:00: 3e:7b:e3:14:ce:e5:9f:87:58:3f:46:bb:e8:46:05: 12:ee:c8:c0:6f:6e:62:17:88:0c:a1:46:f6:ad:fe: c4:ad:17:42:fb:9e:9b:ac:64:69:11:2e:0a:98:92: bc:9d:00:33:41:ac:87:c8:62:32:d9:95:05:19:1b: 54:72:85:80:11:ee:70:be:7b:b4:bf:e1:ad:65:84: fc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:ED:9E:26:C9:65:AA:7B:A5:F7:88:F3:9E:3E:DE:66:41:33:22:8F X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/558c9df2-c6fb-4925-840a-5de1f74ec31b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:386::/48 Signature Algorithm: sha256WithRSAEncryption 2a:32:39:8c:7c:5b:2d:6f:94:34:0f:bc:f0:d6:bb:02:69:30: ae:73:c5:0d:f6:d7:68:ea:8a:2a:6c:5e:e2:5f:9b:4c:35:ed: 65:1d:a1:ae:4d:8e:e3:69:c6:51:de:b1:ac:1d:ca:60:a3:22: b1:03:6a:8f:6b:8d:b3:c5:6b:c5:86:c8:02:cb:14:68:3b:9e: 12:ba:84:e3:20:ee:69:f8:53:f0:ce:a9:5f:2a:72:91:3e:6f: 7e:7a:61:ca:02:ad:30:4e:8e:2f:15:30:01:33:04:96:2c:18: 75:74:19:27:82:9d:85:f7:bd:87:ea:1a:a2:38:f7:0c:27:f9: 82:3a:0c:92:0b:7c:2c:99:41:93:5d:57:0b:a5:50:24:7b:67: f2:ed:38:06:89:4c:4d:db:8a:21:cd:46:82:58:38:12:b9:d5: 34:1a:9e:95:23:f9:aa:1e:e3:d0:17:5b:95:86:f2:0f:3f:27: 38:27:d8:98:ad:3e:51:aa:8c:f7:75:31:5f:dc:b1:02:d5:04: f6:98:f7:3b:d1:ad:3c:41:58:80:32:93:1f:ae:83:99:92:74: af:e1:9f:d9:a9:4a:26:4e:59:3d:7a:39:b3:a3:87:91:7b:a9: 2d:e0:50:8b:e9:2e:fa:1c:05:40:59:7b:6e:01:88:0a:67:d6: e4:d0:89:25 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCKrUeqzSyuqtlZQ8l8yubztmcNUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODA1MTgxMTE0WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDY3ZDEwODQzMzExNzc0ZTFhOWRjNzlmMjA1MDk0MGM0 ZTc3YjQ3N2NiMDY0M2I4NDY4OGQ5NmFkMWUyZmE2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjOv4g8sS+iOSmF7XSVya72qLchz7e/x8LeU+IC9ame/ZF GAp5Rj56yl/a3ks6mcvWEkrnWGxUjZ1i9Jr1Z1qAteB2WJV/ywNUX9gyPmUFklP4 qaGRZe1GUKHc+mj7q1OTZAGK8uComacLa2TbLxWk06Aetr5qN95A4ExC8x9Tjiws Yd5+gz0hlvDUc2dxcZD2/1DdQJ45CJzWvFjx3PNI8oX9mT05jBjniGFuZSgnIXTd AD574xTO5Z+HWD9Gu+hGBRLuyMBvbmIXiAyhRvat/sStF0L7npusZGkRLgqYkryd ADNBrIfIYjLZlQUZG1RyhYAR7nC+e7S/4a1lhPx7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUmO2eJsllqnul94jznj7eZkEzIo8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU1OGM5ZGYyLWM2ZmItNDkyNS04NDBhLTVkZTFmNzRlYzMxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4YwDQYJKoZIhvcNAQELBQADggEBACoyOYx8Wy1vlDQPvPDWuwJp MK5zxQ3212jqiipsXuJfm0w17WUdoa5NjuNpxlHesawdymCjIrEDao9rjbPFa8WG yALLFGg7nhK6hOMg7mn4U/DOqV8qcpE+b356YcoCrTBOji8VMAEzBJYsGHV0GSeC nYX3vYfqGqI49wwn+YI6DJILfCyZQZNdVwulUCR7Z/LtOAaJTE3biiHNRoJYOBK5 1TQanpUj+aoe49AXW5WG8g8/Jzgn2JitPlGqjPd1MV/csQLVBPaY9zvRrTxBWIAy kx+ug5mSdK/hn9mpSiZOWT16ObOjh5F7qS3gUIvpLvocBUBZe24BiApn1uTQiSU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:11 2025 by rpki-client