$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa File: 5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa (raw, json) Hash identifier: 3UWDiUKALcmFKX9UwtbczzBzMBQStiD65Ubs3zoCUik= Subject key identifier: B1:50:FE:AA:77:F8:E2:D8:0E:5B:2A:D1:53:AA:C9:EE:AA:54:0F:E0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4B1E0F834DE7612E5DD34D0B111C45C09566DA08 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa Signing time: Mon 21 Jul 2025 16:30:12 +0000 ROA not before: Mon 21 Jul 2025 16:30:12 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1e:0f:83:4d:e7:61:2e:5d:d3:4d:0b:11:1c:45:c0:95:66:da:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:30:12 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=b67b80bb58750c364ec4b8469c7ea337a3378a6f429226f797be3316d45921d1, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:b8:cb:af:eb:7c:ba:b9:4a:b6:66:25:2c: b6:a3:8a:86:7a:26:1b:f8:86:d1:1d:ab:7b:78:0e: 85:c6:47:45:3b:02:e5:2d:c6:c9:1b:f9:3f:a8:1c: 60:1a:75:1e:c5:23:f5:1a:79:c4:d5:20:d1:cf:99: 0c:df:5e:34:c9:b4:5b:a4:e1:77:a1:5d:1c:2d:a9: 10:58:14:a6:81:eb:be:4b:c7:a4:9b:2a:09:d1:e7: fa:45:bf:ec:4d:36:84:6f:1b:7b:d7:b9:ac:68:6d: 2c:02:f3:e8:9c:ec:e9:29:cd:8b:63:67:6c:a3:ca: ec:9e:17:6c:dd:b8:9d:b0:d9:3a:60:e0:37:6f:84: 3b:dd:74:20:54:c6:14:8e:a6:72:86:17:b3:b5:40: fa:99:42:8b:37:52:9c:59:65:23:95:51:bc:07:b7: c0:2c:2d:f4:8c:82:62:a3:59:dc:54:91:e5:b8:1d: 01:7f:6c:56:99:ba:fd:b5:f2:90:92:7c:b2:fc:5d: a8:51:0e:cc:f7:12:24:e9:84:b2:1b:5c:fa:d4:57: 05:0b:ae:29:53:22:90:ad:ad:ae:13:03:a4:88:8b: 80:56:80:d2:c6:a2:7d:2b:d4:e1:97:75:75:08:7a: 40:d6:8f:50:dd:27:32:29:4d:4b:97:e9:11:fe:05: 32:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:50:FE:AA:77:F8:E2:D8:0E:5B:2A:D1:53:AA:C9:EE:AA:54:0F:E0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c3979d3-e1c0-4d6d-94a7-34bc1e7b3b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c16::/48 Signature Algorithm: sha256WithRSAEncryption 38:8e:2d:7d:40:80:28:fc:cf:8d:b7:5c:5e:00:d3:91:82:91: ac:45:d9:fc:09:45:78:a8:31:ab:d8:02:1a:42:cb:1c:6a:c7: 40:f8:a2:01:42:4c:24:24:cf:ae:37:bf:55:86:22:a7:e6:03: b9:13:dc:64:5d:72:bd:f5:b6:aa:f7:4e:a5:e1:65:ff:90:7f: 07:9e:9b:06:e6:a9:23:fe:00:02:91:3a:b9:f7:28:8f:f6:cb: f1:70:0e:59:4d:d2:0b:a9:1d:2f:a9:c7:57:be:cc:12:c6:97: 64:2b:f5:6c:7d:2f:4a:57:21:47:4c:60:5e:02:5b:4a:83:4a: 5a:56:e4:40:bb:a4:8d:53:2f:52:e7:28:bd:a1:20:cf:fc:dd: dd:9e:27:44:a8:c6:39:b6:c1:ca:97:29:c0:c0:26:87:17:8a: 3a:e8:81:46:64:6a:5c:1b:53:e2:2c:8c:f3:00:1b:49:5e:3e: d0:c9:82:a8:e8:c8:ba:db:62:8c:48:9c:4d:41:d6:d4:f5:cb: 4b:8e:f5:fb:06:e5:d6:a9:fa:b2:d0:d0:fb:45:e8:c8:92:b3: 01:d4:74:bf:0a:2b:91:30:03:e1:83:2f:99:e1:4e:90:cf:01: 0a:bf:da:1b:4c:ed:ea:28:9f:20:18:a2:24:90:33:31:13:94: e9:db:9d:57 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSx4Pg03nYS5d000LERxFwJVm2ggwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYzMDEyWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNjdiODBiYjU4NzUwYzM2NGVjNGI4NDY5YzdlYTMzN2Ez Mzc4YTZmNDI5MjI2Zjc5N2JlMzMxNmQ0NTkyMWQxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2z7jLr+t8urlKtmYlLLajioZ6Jhv4htEdq3t4DoXGR0U7 AuUtxskb+T+oHGAadR7FI/UaecTVINHPmQzfXjTJtFuk4XehXRwtqRBYFKaB675L x6SbKgnR5/pFv+xNNoRvG3vXuaxobSwC8+ic7OkpzYtjZ2yjyuyeF2zduJ2w2Tpg 4DdvhDvddCBUxhSOpnKGF7O1QPqZQos3UpxZZSOVUbwHt8AsLfSMgmKjWdxUkeW4 HQF/bFaZuv218pCSfLL8XahRDsz3EiTphLIbXPrUVwULrilTIpCtra4TA6SIi4BW gNLGon0r1OGXdXUIekDWj1DdJzIpTUuX6RH+BTKNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUsVD+qnf44tgOWyrRU6rJ7qpUD+AwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVjMzk3OWQzLWUxYzAtNGQ2ZC05NGE3LTM0YmMxZTdiM2IwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBYwDQYJKoZIhvcNAQELBQADggEBADiOLX1AgCj8z423XF4A05GC kaxF2fwJRXioMavYAhpCyxxqx0D4ogFCTCQkz643v1WGIqfmA7kT3GRdcr31tqr3 TqXhZf+QfweemwbmqSP+AAKROrn3KI/2y/FwDllN0gupHS+px1e+zBLGl2Qr9Wx9 L0pXIUdMYF4CW0qDSlpW5EC7pI1TL1LnKL2hIM/83d2eJ0Soxjm2wcqXKcDAJocX ijrogUZkalwbU+IsjPMAG0lePtDJgqjoyLrbYoxInE1B1tT1y0uO9fsG5dap+rLQ 0PtF6MiSswHUdL8KK5EwA+GDL5nhTpDPAQq/2htM7eoonyAYoiSQMzETlOnbnVc= -----END CERTIFICATE-----Generated at Tue Aug 5 08:10:40 2025 by rpki-client