$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/59de13fe-c933-4e7f-b762-62adbcdbfec5.roa File: 59de13fe-c933-4e7f-b762-62adbcdbfec5.roa (raw, json) Hash identifier: GTSTG/6gxYDpfEPJI7/QiEAlXiCRCgJRTfg0VswT+6E= Subject key identifier: AB:64:0A:29:A4:FE:7D:EE:CE:64:D7:49:AC:70:EA:2F:00:A3:DC:9E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0A08FFFDC9AE2DF3733F691D8AD9657598E36915 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/59de13fe-c933-4e7f-b762-62adbcdbfec5.roa Signing time: Mon 28 Jul 2025 16:00:11 +0000 ROA not before: Mon 28 Jul 2025 16:00:11 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:3b40::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:08:ff:fd:c9:ae:2d:f3:73:3f:69:1d:8a:d9:65:75:98:e3:69:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 28 16:00:11 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=9ec6301105395af009206b2422f7cb68356500b9f2e3659e6f1f58ea35908779, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:87:ad:9e:e5:2d:53:ac:d1:57:8d:be:f9: 0d:18:01:2c:e3:32:db:8d:9e:a9:da:17:21:48:21: f4:ba:c5:f6:22:d3:14:df:51:b6:6d:c5:a8:df:01: 54:42:22:bc:a4:00:0e:ca:f4:3b:b8:a5:3b:05:d3: d4:dc:8f:55:8b:0e:e0:9b:34:9b:91:2f:9c:d8:1d: 2c:74:48:b7:24:0b:1f:3c:f9:48:66:3d:d3:70:03: 16:b7:8e:8f:dd:fa:01:0f:da:0a:c5:bc:b3:1f:ca: 3a:0d:0f:0a:12:4a:a8:29:2d:0a:21:c9:7d:56:93: 56:14:30:04:23:e5:07:a6:6f:fb:fc:ca:21:37:a5: 9f:12:51:a1:76:90:60:15:55:83:e6:45:4d:26:79: ae:04:56:5d:3d:39:87:ac:4e:1d:fd:fe:94:57:3a: d2:a3:56:0b:0d:1f:56:9a:27:91:10:89:83:ba:7c: 60:83:5d:9f:ee:c4:73:8d:dc:bc:26:0b:a5:27:cd: 08:0e:7e:30:76:43:18:d2:8d:56:47:3b:a2:4b:2f: 64:5a:17:9d:a3:66:f0:a5:b0:c0:56:61:fd:5c:51: 81:71:e7:15:fe:1b:d1:ba:92:ec:16:73:3f:34:58: 3a:8a:18:cc:ef:aa:98:07:00:af:bf:9d:94:32:46: 84:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:64:0A:29:A4:FE:7D:EE:CE:64:D7:49:AC:70:EA:2F:00:A3:DC:9E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/59de13fe-c933-4e7f-b762-62adbcdbfec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3b40::/46 Signature Algorithm: sha256WithRSAEncryption 62:bb:95:78:a9:9e:e6:49:de:9f:42:2f:b4:06:c9:de:ed:6a: 9d:32:df:a0:65:0b:b5:13:48:f3:62:c5:2d:1b:ea:14:64:47: 60:74:74:36:a1:a8:5a:02:ad:aa:98:9b:62:c2:fa:e9:e6:ca: a1:d0:60:97:fa:a3:72:67:ee:b7:0b:92:86:91:3b:ec:c3:a6: fd:59:17:e7:39:af:7e:46:75:a1:36:02:bf:b9:95:24:6f:b7: 92:8f:1a:3e:97:81:a3:9c:7a:6b:51:cf:e8:d9:ed:1e:40:47: b8:34:6a:ee:61:d2:06:41:a1:98:81:c5:ad:8f:da:af:76:a5: 45:cb:7b:e9:c0:a6:b8:f4:a7:cc:84:ac:ab:50:37:3d:38:42: 4a:f9:65:de:04:62:83:7f:05:4a:8d:da:f7:e7:da:5a:dd:b0: 2c:0c:a7:c5:39:9f:77:73:c3:cb:b6:5f:4e:0b:10:8b:47:ed: 1b:b3:e2:20:2e:61:c0:cf:8e:89:70:64:cd:6a:72:28:e4:f4: ae:39:0a:c7:35:06:7e:73:68:88:c0:d6:cd:21:45:46:38:28: 8e:db:f5:39:fd:31:b9:dc:d5:e8:8c:f4:12:f8:f9:79:64:87: 86:06:9a:d6:f4:8f:f5:4e:9e:bd:52:9b:7a:7d:aa:21:5e:2b: 7d:b0:cd:ca -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCgj//cmuLfNzP2kditlldZjjaRUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzI4MTYwMDExWhcNMjUwOTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZWM2MzAxMTA1Mzk1YWYwMDkyMDZiMjQyMmY3Y2I2ODM1 NjUwMGI5ZjJlMzY1OWU2ZjFmNThlYTM1OTA4Nzc5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCstoetnuUtU6zRV42++Q0YASzjMtuNnqnaFyFIIfS6xfYi 0xTfUbZtxajfAVRCIrykAA7K9Du4pTsF09Tcj1WLDuCbNJuRL5zYHSx0SLckCx88 +UhmPdNwAxa3jo/d+gEP2grFvLMfyjoNDwoSSqgpLQohyX1Wk1YUMAQj5Qemb/v8 yiE3pZ8SUaF2kGAVVYPmRU0mea4EVl09OYesTh39/pRXOtKjVgsNH1aaJ5EQiYO6 fGCDXZ/uxHON3LwmC6UnzQgOfjB2QxjSjVZHO6JLL2RaF52jZvClsMBWYf1cUYFx 5xX+G9G6kuwWcz80WDqKGMzvqpgHAK+/nZQyRoRDAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUq2QKKaT+fe7OZNdJrHDqLwCj3J4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzU5ZGUxM2ZlLWM5MzMtNGU3Zi1iNzYyLTYyYWRiY2RiZmVjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImBZzAO0AwDQYJKoZIhvcNAQELBQADggEBAGK7lXipnuZJ3p9CL7QGyd7t ap0y36BlC7UTSPNixS0b6hRkR2B0dDahqFoCraqYm2LC+unmyqHQYJf6o3Jn7rcL koaRO+zDpv1ZF+c5r35GdaE2Ar+5lSRvt5KPGj6XgaOcemtRz+jZ7R5AR7g0au5h 0gZBoZiBxa2P2q92pUXLe+nAprj0p8yErKtQNz04Qkr5Zd4EYoN/BUqN2vfn2lrd sCwMp8U5n3dzw8u2X04LEItH7Ruz4iAuYcDPjolwZM1qcijk9K45Csc1Bn5zaIjA 1s0hRUY4KI7b9Tn9Mbnc1eiM9BL4+Xlkh4YGmtb0j/VOnr1Sm3p9qiFeK32wzco= -----END CERTIFICATE-----Generated at Tue Aug 5 08:22:07 2025 by rpki-client