$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04f5a71b-93f6-4367-a363-e37651f9b3c2.roa File: 04f5a71b-93f6-4367-a363-e37651f9b3c2.roa (raw, json) Hash identifier: qnTTGjJwpZLU4Sjvx2zgsgyjnNqMEQf08fuiW1OImj4= Subject key identifier: 45:31:23:A3:4D:F3:7F:94:84:59:D3:15:24:F2:6E:F6:9D:34:E5:96 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 49462E21FCFF2140DE692EB5A0079011C70ECE7F Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04f5a71b-93f6-4367-a363-e37651f9b3c2.roa Signing time: Mon 21 Jul 2025 16:20:40 +0000 ROA not before: Mon 21 Jul 2025 16:20:40 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:46:2e:21:fc:ff:21:40:de:69:2e:b5:a0:07:90:11:c7:0e:ce:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:20:40 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=15e4139cd9eb16ce8b72296984716a6ebd2e658a5210aa74803591da27ce10d8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:6f:32:fb:b4:cb:ed:fa:39:7f:51:ab:31: fa:0e:74:be:a2:0a:2a:0a:49:81:f9:37:f9:c9:2f: 38:31:db:c3:14:64:cf:99:d6:c6:10:3d:ec:79:bc: 71:85:af:c0:47:f4:84:ee:56:75:64:0b:9f:8e:a0: 2c:46:48:5e:36:2e:71:ee:3d:8f:fe:a0:b6:36:11: fb:f6:08:d7:0b:42:4b:96:87:95:b0:b4:52:ac:24: 6e:12:aa:f2:7f:ef:4b:fd:14:9a:a8:38:c8:8c:69: 80:09:db:ba:37:3c:54:54:be:54:0a:af:bf:6e:3d: 8d:3b:a7:7b:29:6d:ce:98:53:53:35:d0:0b:5b:f2: 23:cd:60:3f:d9:64:9d:93:68:72:3e:55:87:7e:d9: 58:28:63:d8:bd:b0:c9:aa:68:41:6d:22:57:78:1a: 5b:05:3b:dd:e7:7c:19:3f:84:dd:6b:75:af:a4:9a: 71:77:0e:94:b4:61:eb:92:17:60:d7:5b:47:d3:93: f8:47:44:ae:e3:dc:e7:a2:65:c0:45:8d:08:94:d9: d9:47:be:be:01:40:52:0b:e6:5a:5f:11:22:4c:0d: a2:9d:77:29:bc:43:71:88:c9:75:bd:e1:41:31:6c: 74:56:fa:1b:e3:87:4c:73:f8:06:37:6d:df:33:38: 1c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:31:23:A3:4D:F3:7F:94:84:59:D3:15:24:F2:6E:F6:9D:34:E5:96 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04f5a71b-93f6-4367-a363-e37651f9b3c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0f::/48 Signature Algorithm: sha256WithRSAEncryption 1a:2d:2d:43:4e:9a:61:0a:61:7e:f4:2d:af:c8:3b:ad:fe:32: 4b:89:28:a3:d4:bb:53:19:32:2d:f9:d6:0e:7c:b2:38:5c:d2: 78:2f:66:e1:fc:27:a5:2f:05:c4:f8:19:40:08:3d:83:e4:95: 1f:1b:57:61:ed:1f:1c:7e:e6:7e:42:05:24:2a:f5:62:8d:c2: 5f:f0:3b:69:a3:7c:7c:8b:1d:ed:75:78:27:5b:f6:7f:92:f9: 24:75:f2:f8:be:ce:76:b5:97:d2:32:e3:73:d2:b6:c3:21:9b: 35:b6:f8:b5:fb:45:d3:80:d8:3f:08:8c:06:29:46:9d:f8:9d: ae:06:22:d5:a8:61:e1:3e:19:9c:53:a3:f5:0f:e8:5f:f3:ff: b2:7a:2e:f6:4d:8b:f8:ca:7f:7a:14:ee:65:dd:37:4f:36:86: 4c:94:8c:71:8e:65:5e:ce:06:d4:ff:07:06:5c:77:a1:47:91: 7e:d1:a5:b6:47:a2:d2:34:5f:f5:d5:1b:56:3f:bd:9c:c9:94: fd:fe:f9:19:56:7b:a0:f7:d1:0c:cb:33:e6:a6:05:7b:81:1e: d3:f9:ba:2b:60:89:ce:6f:cf:45:37:ff:86:1e:31:71:08:f2: 56:67:e8:a3:1e:16:cb:74:28:76:7b:48:d8:72:fd:86:8c:a4: ad:a0:f0:46 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSUYuIfz/IUDeaS61oAeQEccOzn8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYyMDQwWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWU0MTM5Y2Q5ZWIxNmNlOGI3MjI5Njk4NDcxNmE2ZWJk MmU2NThhNTIxMGFhNzQ4MDM1OTFkYTI3Y2UxMGQ4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvJW8y+7TL7fo5f1GrMfoOdL6iCioKSYH5N/nJLzgx28MU ZM+Z1sYQPex5vHGFr8BH9ITuVnVkC5+OoCxGSF42LnHuPY/+oLY2Efv2CNcLQkuW h5WwtFKsJG4SqvJ/70v9FJqoOMiMaYAJ27o3PFRUvlQKr79uPY07p3spbc6YU1M1 0Atb8iPNYD/ZZJ2TaHI+VYd+2VgoY9i9sMmqaEFtIld4GlsFO93nfBk/hN1rda+k mnF3DpS0YeuSF2DXW0fTk/hHRK7j3OeiZcBFjQiU2dlHvr4BQFIL5lpfESJMDaKd dym8Q3GIyXW94UExbHRW+hvjh0xz+AY3bd8zOBxJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQURTEjo03zf5SEWdMVJPJu9p005ZYwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzA0ZjVhNzFiLTkzZjYtNDM2Ny1hMzYzLWUzNzY1MWY5YjNjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADA8wDQYJKoZIhvcNAQELBQADggEBABotLUNOmmEKYX70La/IO63+ MkuJKKPUu1MZMi351g58sjhc0ngvZuH8J6UvBcT4GUAIPYPklR8bV2HtHxx+5n5C BSQq9WKNwl/wO2mjfHyLHe11eCdb9n+S+SR18vi+zna1l9Iy43PStsMhmzW2+LX7 RdOA2D8IjAYpRp34na4GItWoYeE+GZxTo/UP6F/z/7J6LvZNi/jKf3oU7mXdN082 hkyUjHGOZV7OBtT/BwZcd6FHkX7RpbZHotI0X/XVG1Y/vZzJlP3++RlWe6D30QzL M+amBXuBHtP5uitgic5vz0U3/4YeMXEI8lZn6KMeFst0KHZ7SNhy/YaMpK2g8EY= -----END CERTIFICATE-----Generated at Wed Aug 6 12:27:18 2025 by rpki-client