$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33c6cee3-a286-4e9a-92d2-4b7bfb8ab501.roa File: 33c6cee3-a286-4e9a-92d2-4b7bfb8ab501.roa (raw, json) Hash identifier: 7Ii3fdoJa4+N+4rMleO6wA2i9kHU05DOVrjve2YcZ54= Subject key identifier: B8:6B:FC:AC:68:7D:E6:AA:F4:AB:8B:0A:C9:0A:42:E9:50:5A:A0:CA Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 297C5BC6438598896ABA66DFCAD5E4F0EFA19FD2 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33c6cee3-a286-4e9a-92d2-4b7bfb8ab501.roa Signing time: Fri 11 Jul 2025 18:10:10 +0000 ROA not before: Fri 11 Jul 2025 18:10:10 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:545::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7c:5b:c6:43:85:98:89:6a:ba:66:df:ca:d5:e4:f0:ef:a1:9f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:10:10 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=ec6ceb47b88b3139aa9c6f42e90accacef1bba0241bd36d1b30d8275b6521dbd, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:3e:f3:38:b2:e7:55:f2:9e:50:ca:bd:43: 43:b2:a0:c9:f3:64:19:48:de:99:c6:fc:90:f9:c0: 20:e5:5c:86:71:f5:95:42:5b:fe:b9:5f:d8:b2:37: b0:fc:27:d9:df:54:7b:31:c8:49:62:33:7f:76:69: 1e:f3:7a:0a:e5:2e:a8:ee:f5:3f:69:ed:48:ee:8b: 36:aa:aa:a4:b9:8f:56:54:6b:49:ca:6d:7a:55:3d: ac:4e:d6:b7:da:8e:c1:02:ff:d8:e4:02:03:8f:96: df:23:e4:2a:cd:47:ce:9d:55:15:5a:33:b7:50:7b: a8:05:08:e3:ea:28:4e:28:df:c8:1b:a6:36:e3:b7: b2:5a:5f:ec:be:a5:6d:c5:90:6c:9d:af:5b:f0:0f: 5b:8c:dc:c2:f4:ef:c6:0a:64:bc:69:26:a8:ce:c7: 08:21:98:5d:32:b8:12:4f:38:70:0b:2d:82:6d:34: 1a:4a:43:9d:cc:db:47:6b:ef:42:9a:f3:8f:49:a5: 81:bf:87:30:41:db:a9:31:05:42:d8:80:85:09:9d: f9:2f:99:36:92:33:ee:82:81:01:26:52:ab:8b:e5: d6:d9:2c:be:e4:f6:3e:e6:39:6f:bd:82:2f:70:43: 9d:00:b5:b0:95:3b:45:6f:20:a5:8a:47:5c:4a:e2: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6B:FC:AC:68:7D:E6:AA:F4:AB:8B:0A:C9:0A:42:E9:50:5A:A0:CA X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/33c6cee3-a286-4e9a-92d2-4b7bfb8ab501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:545::/48 Signature Algorithm: sha256WithRSAEncryption 4c:cd:09:3e:bc:61:f0:57:c8:af:fb:63:f8:b9:19:0f:02:55: dd:d7:57:ab:e3:98:67:bd:ee:f0:8d:90:a1:7e:55:0f:cb:3f: 74:45:51:1c:8c:58:59:ed:80:64:a1:34:68:dc:19:62:b7:7c: 41:ba:93:2c:86:91:a4:43:69:da:d0:14:eb:28:52:4e:7a:79: ac:ca:f6:17:5c:98:63:c8:95:00:57:49:f7:6a:f2:5c:e6:45: 47:95:4d:10:3a:34:e0:ae:fa:0b:79:e8:14:00:c3:04:df:1a: 92:bd:92:38:2e:3e:58:b7:a3:d9:55:ae:bf:1c:0e:77:83:9a: c6:5a:c7:d9:ca:7d:9b:b3:79:6a:70:9e:43:f7:ad:2e:5a:29: 6b:90:46:fc:ce:e4:58:79:dc:99:75:93:ed:d8:54:51:6d:5e: 45:bb:ef:5c:70:87:01:62:b6:e8:69:3f:c7:62:27:7a:88:e7: ff:f3:ec:11:08:f5:a8:a9:91:9e:92:54:50:d1:d6:2a:be:c1: 4a:4e:60:f4:32:6c:e4:20:13:05:14:f8:1e:12:89:6c:9c:29: cb:b9:b7:26:04:58:b3:9c:18:6b:d0:9e:ac:ec:f0:09:38:dc: 8f:e4:bb:4e:2d:94:27:92:55:a3:6d:0a:8f:61:24:34:2d:af: 30:c5:94:8e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUKXxbxkOFmIlqumbfytXk8O+hn9IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMDEwWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzZjZWI0N2I4OGIzMTM5YWE5YzZmNDJlOTBhY2NhY2Vm MWJiYTAyNDFiZDM2ZDFiMzBkODI3NWI2NTIxZGJkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnoD7zOLLnVfKeUMq9Q0OyoMnzZBlI3pnG/JD5wCDlXIZx 9ZVCW/65X9iyN7D8J9nfVHsxyEliM392aR7zegrlLqju9T9p7UjuizaqqqS5j1ZU a0nKbXpVPaxO1rfajsEC/9jkAgOPlt8j5CrNR86dVRVaM7dQe6gFCOPqKE4o38gb pjbjt7JaX+y+pW3FkGydr1vwD1uM3ML078YKZLxpJqjOxwghmF0yuBJPOHALLYJt NBpKQ53M20dr70Ka849JpYG/hzBB26kxBULYgIUJnfkvmTaSM+6CgQEmUquL5dbZ LL7k9j7mOW+9gi9wQ50AtbCVO0VvIKWKR1xK4tMNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUuGv8rGh95qr0q4sKyQpC6VBaoMowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzMzYzZjZWUzLWEyODYtNGU5YS05MmQyLTRiN2JmYjhhYjUwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUUwDQYJKoZIhvcNAQELBQADggEBAEzNCT68YfBXyK/7Y/i5GQ8C Vd3XV6vjmGe97vCNkKF+VQ/LP3RFURyMWFntgGShNGjcGWK3fEG6kyyGkaRDadrQ FOsoUk56eazK9hdcmGPIlQBXSfdq8lzmRUeVTRA6NOCu+gt56BQAwwTfGpK9kjgu Pli3o9lVrr8cDneDmsZax9nKfZuzeWpwnkP3rS5aKWuQRvzO5Fh53Jl1k+3YVFFt XkW771xwhwFituhpP8diJ3qI5//z7BEI9aipkZ6SVFDR1iq+wUpOYPQybOQgEwUU +B4SiWycKcu5tyYEWLOcGGvQnqzs8Ak43I/ku04tlCeSVaNtCo9hJDQtrzDFlI4= -----END CERTIFICATE-----Generated at Mon Aug 4 21:40:23 2025 by rpki-client