$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa File: b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa (raw, json) Hash identifier: 2R2/sQE3985gWCYUqIqER62y/7FQ/U+jgTlXtcfvFBY= Subject key identifier: EF:1A:83:95:C6:28:2D:16:3D:9D:11:03:C4:7E:98:91:8E:57:22:80 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4304E5F24E8C2D59AE9B87E2677B326EB178EF6D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa Signing time: Tue 05 Aug 2025 18:11:11 +0000 ROA not before: Tue 05 Aug 2025 18:11:11 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:385::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:04:e5:f2:4e:8c:2d:59:ae:9b:87:e2:67:7b:32:6e:b1:78:ef:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 5 18:11:11 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=482b431a90b558df9176ee9be267d456227b6f6cc04c0521fd543ce9fcf60e51, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:1c:e2:52:56:85:ce:83:2f:cc:a5:0b:94: 25:8a:14:03:47:b6:a6:df:2e:78:3b:06:15:f4:82: 7d:e8:37:37:ce:41:d1:cd:9b:1f:4b:b1:c3:b3:e4: 7c:1e:ba:c9:51:54:f4:73:cc:be:5a:77:17:91:62: 6b:78:f7:d3:95:ee:b3:f7:2d:5b:00:74:7b:f4:39: 48:1a:f3:de:6e:08:b6:a7:37:47:77:fc:59:b8:78: 2b:df:d3:d7:71:82:14:75:e1:79:4e:3f:8f:2c:96: 4c:da:bd:d2:ad:62:c6:2c:cf:96:a1:b3:8e:b6:6b: 0b:01:bd:28:22:cb:32:77:ac:52:92:c6:84:62:14: d7:01:e0:03:71:80:51:6d:71:f9:e7:7d:b9:6d:1f: e4:2c:d3:b9:a9:b8:62:01:93:f5:f5:ea:f9:85:fc: 8e:cf:61:bc:30:72:cf:d9:61:08:86:d6:07:59:95: 90:07:c7:56:a9:00:75:a3:ac:de:21:81:62:94:8d: 94:91:cf:29:cb:d2:f8:cb:7d:7a:b2:9f:14:fc:f1: 13:f0:ef:ad:cf:ec:b0:32:d4:43:0e:90:3b:c1:df: c7:3b:54:38:fa:d0:e0:5d:09:ab:10:7a:8e:52:f4: 99:8e:7c:f8:b2:ba:08:4b:33:ec:75:e7:f6:d8:8f: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1A:83:95:C6:28:2D:16:3D:9D:11:03:C4:7E:98:91:8E:57:22:80 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:385::/48 Signature Algorithm: sha256WithRSAEncryption 72:d1:df:1e:44:79:4b:36:d1:f5:c2:59:fa:5d:e5:b2:d6:d2: b1:ca:8c:52:de:33:fb:b5:9e:39:25:43:11:e1:57:73:de:9d: 55:1e:8f:86:d2:63:6e:a1:ec:37:de:7a:ca:0d:85:a3:7d:b1: dc:15:8f:d3:f1:9c:1c:14:42:eb:08:74:ad:ad:40:57:74:f8: 8b:bd:0c:2b:d8:48:68:f6:ed:53:50:1e:ff:95:c3:7a:51:63: 5c:18:e1:80:a1:7c:01:24:4d:87:9b:45:51:7b:fe:76:f0:f5: 5a:88:d7:e0:ad:63:bd:7e:2d:53:44:05:e7:b4:ab:a5:4a:00: 34:08:d2:33:66:d6:e5:1b:c6:f4:b2:09:f1:ea:f9:b1:b8:8e: e3:2a:79:e7:3c:cb:be:20:41:f2:da:2f:1e:19:ff:fd:78:0a: ea:37:6d:b4:54:75:0c:44:eb:77:77:26:bb:2c:49:2d:84:6f: 45:8c:e1:3e:18:b1:81:5d:08:f9:a1:09:91:25:64:b5:a0:87: 6b:2f:87:16:18:87:4d:e6:c5:94:60:24:34:f1:87:fc:b1:a2: a8:b7:21:5e:84:c5:6f:46:be:26:a0:43:ad:1b:01:b3:f1:bf: c8:09:7c:1d:a8:99:63:de:a5:6b:eb:c7:55:56:f2:0d:23:71: a4:44:4a:cb -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUQwTl8k6MLVmum4fiZ3sybrF4720wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODA1MTgxMTExWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODJiNDMxYTkwYjU1OGRmOTE3NmVlOWJlMjY3ZDQ1NjIy N2I2ZjZjYzA0YzA1MjFmZDU0M2NlOWZjZjYwZTUxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC25xziUlaFzoMvzKULlCWKFANHtqbfLng7BhX0gn3oNzfO QdHNmx9LscOz5HweuslRVPRzzL5adxeRYmt499OV7rP3LVsAdHv0OUga895uCLan N0d3/Fm4eCvf09dxghR14XlOP48slkzavdKtYsYsz5ahs462awsBvSgiyzJ3rFKS xoRiFNcB4ANxgFFtcfnnfbltH+Qs07mpuGIBk/X16vmF/I7PYbwwcs/ZYQiG1gdZ lZAHx1apAHWjrN4hgWKUjZSRzynL0vjLfXqynxT88RPw763P7LAy1EMOkDvB38c7 VDj60OBdCasQeo5S9JmOfPiyughLM+x15/bYjwShAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU7xqDlcYoLRY9nREDxH6YkY5XIoAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IzMTA5ZTk5LWYxZjQtNGMzYi1iNTBkLTJkOWE5MzUzM2ExMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA4UwDQYJKoZIhvcNAQELBQADggEBAHLR3x5EeUs20fXCWfpd5bLW 0rHKjFLeM/u1njklQxHhV3PenVUej4bSY26h7DfeesoNhaN9sdwVj9PxnBwUQusI dK2tQFd0+Iu9DCvYSGj27VNQHv+Vw3pRY1wY4YChfAEkTYebRVF7/nbw9VqI1+Ct Y71+LVNEBee0q6VKADQI0jNm1uUbxvSyCfHq+bG4juMqeec8y74gQfLaLx4Z//14 Cuo3bbRUdQxE63d3JrssSS2Eb0WM4T4YsYFdCPmhCZElZLWgh2svhxYYh03mxZRg JDTxh/yxoqi3IV6ExW9GviagQ60bAbPxv8gJfB2omWPepWvrx1VW8g0jcaRESss= -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:28 2025 by rpki-client