$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7ea881c9-cef8-42c2-a799-42fc26355ba1.roa File: 7ea881c9-cef8-42c2-a799-42fc26355ba1.roa (raw, json) Hash identifier: Yoes8H0t3v4lJoKZIpH4J8LmIkmGzk+66/cSrSXQ50w= Subject key identifier: 28:7B:52:46:CE:0F:63:03:DF:51:07:C5:38:23:C3:8B:65:BD:2A:14 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4848BF323C1D98CCED3DE6568FF75B2F05ED162B Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7ea881c9-cef8-42c2-a799-42fc26355ba1.roa Signing time: Mon 21 Jul 2025 16:11:09 +0000 ROA not before: Mon 21 Jul 2025 16:11:09 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:64d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:48:bf:32:3c:1d:98:cc:ed:3d:e6:56:8f:f7:5b:2f:05:ed:16:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:11:09 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=f94b7a582d953678b46493c5718e2fe72ad122f060beed99f7f979486f79cd08, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:b3:a5:84:bc:8f:93:81:85:f5:30:aa:9a: a9:bc:7e:d5:7a:cb:4d:98:29:d0:2f:68:15:1f:ec: f9:f6:33:dc:5f:03:2f:31:f7:4c:0d:fa:9e:bb:24: 55:a9:10:73:c8:e0:38:0b:2e:f6:0c:70:ff:96:fd: 05:06:42:47:1e:a3:d1:2e:6c:0f:75:96:6d:da:e0: 46:1b:7a:fd:a3:ce:32:8f:08:2b:da:78:cd:31:de: cc:f1:3e:3f:5a:77:55:f7:fa:2f:81:5f:12:25:88: d0:54:03:11:0f:8a:8d:c3:0d:00:24:5b:b1:07:19: 2c:a4:73:a7:2c:08:c3:47:f6:0c:cf:7f:3d:f0:10: 87:6d:4e:54:84:10:56:91:47:7e:78:7e:73:28:3a: 73:88:12:15:21:a2:21:3c:5d:60:48:76:c1:74:08: 5e:d8:f6:1c:2a:d7:82:04:5f:8b:33:91:0b:b7:5e: 8b:81:a5:30:65:8e:5f:50:a7:17:45:df:f1:2b:91: 5a:f8:74:51:6e:e8:82:df:f5:25:dc:d6:21:7d:87: ec:60:9f:f7:f7:5e:08:40:85:7a:4f:3f:12:02:7e: d8:22:3a:d1:93:fe:e0:59:c9:56:e3:22:8a:85:09: 8b:19:43:38:07:d1:7e:7c:77:56:9e:cd:15:b9:9e: 8f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:7B:52:46:CE:0F:63:03:DF:51:07:C5:38:23:C3:8B:65:BD:2A:14 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7ea881c9-cef8-42c2-a799-42fc26355ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:64d::/48 Signature Algorithm: sha256WithRSAEncryption 1e:4b:b0:0f:b3:f0:80:41:4f:8f:9b:cc:2f:87:56:1b:a9:a9: b9:88:bb:c0:09:1f:a3:3f:5d:51:93:f6:5b:61:41:1a:c2:f1: 04:16:3d:9a:1d:1b:34:a2:e9:24:94:ca:86:de:02:d1:01:af: 8a:03:20:0e:25:07:d5:a5:62:7d:5b:d6:c5:1d:ef:ce:7d:4e: 38:ba:02:c0:ef:34:8e:7a:a6:81:56:ba:4a:0c:9b:7d:d4:05: 3b:33:fe:8c:62:93:57:c5:0e:74:18:0b:1b:98:9b:3b:68:3a: 46:b4:2e:8f:d4:f7:6c:71:f6:0b:d3:54:c0:b8:ae:49:ac:5d: cd:f7:99:ec:3f:38:bd:94:b3:b6:a7:1a:1a:e7:77:e7:69:95: bd:6d:2b:53:63:8f:96:b5:26:bc:14:4f:a7:4e:cd:44:22:1c: 38:b3:ca:e5:65:68:4b:47:11:df:dc:a7:df:91:01:07:c4:5c: 96:e7:b1:67:5e:65:07:91:a5:a1:78:a0:da:aa:45:2c:29:f2: 7d:cc:2d:a7:d5:79:96:be:04:ac:2f:d8:3e:41:82:9a:f7:26: 46:8e:92:02:ba:c7:0b:92:29:d9:86:2d:01:c5:d9:37:77:39: 51:24:3f:f9:e5:02:a0:17:bb:c8:38:82:e7:4e:84:5b:25:f9: 44:e0:20:90 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSEi/MjwdmMztPeZWj/dbLwXtFiswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYxMTA5WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTRiN2E1ODJkOTUzNjc4YjQ2NDkzYzU3MThlMmZlNzJh ZDEyMmYwNjBiZWVkOTlmN2Y5Nzk0ODZmNzljZDA4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCycbOlhLyPk4GF9TCqmqm8ftV6y02YKdAvaBUf7Pn2M9xf Ay8x90wN+p67JFWpEHPI4DgLLvYMcP+W/QUGQkceo9EubA91lm3a4EYbev2jzjKP CCvaeM0x3szxPj9ad1X3+i+BXxIliNBUAxEPio3DDQAkW7EHGSykc6csCMNH9gzP fz3wEIdtTlSEEFaRR354fnMoOnOIEhUhoiE8XWBIdsF0CF7Y9hwq14IEX4szkQu3 XouBpTBljl9QpxdF3/ErkVr4dFFu6ILf9SXc1iF9h+xgn/f3XghAhXpPPxICftgi OtGT/uBZyVbjIoqFCYsZQzgH0X58d1aezRW5no+3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKHtSRs4PYwPfUQfFOCPDi2W9KhQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzdlYTg4MWM5LWNlZjgtNDJjMi1hNzk5LTQyZmMyNjM1NWJhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABk0wDQYJKoZIhvcNAQELBQADggEBAB5LsA+z8IBBT4+bzC+HVhup qbmIu8AJH6M/XVGT9lthQRrC8QQWPZodGzSi6SSUyobeAtEBr4oDIA4lB9WlYn1b 1sUd7859Tji6AsDvNI56poFWukoMm33UBTsz/oxik1fFDnQYCxuYmztoOka0Lo/U 92xx9gvTVMC4rkmsXc33mew/OL2Us7anGhrnd+dplb1tK1Njj5a1JrwUT6dOzUQi HDizyuVlaEtHEd/cp9+RAQfEXJbnsWdeZQeRpaF4oNqqRSwp8n3MLafVeZa+BKwv 2D5Bgpr3JkaOkgK6xwuSKdmGLQHF2Td3OVEkP/nlAqAXu8g4gudOhFsl+UTgIJA= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:26 2025 by rpki-client