$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/845a3102-27ea-4c97-8d05-2688587d8229.roa File: 845a3102-27ea-4c97-8d05-2688587d8229.roa (raw, json) Hash identifier: 80Bcg4qG6oidkd2XjDhuNt0bd7mMvv0kl72bVwyJk2I= Subject key identifier: 3E:44:72:E3:01:D1:F7:E6:30:FD:F6:70:EB:84:D4:F4:E9:44:B0:77 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 577F04EBE373116BB48F42BEADD15A9DF265D65C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/845a3102-27ea-4c97-8d05-2688587d8229.roa Signing time: Mon 28 Jul 2025 16:00:17 +0000 ROA not before: Mon 28 Jul 2025 16:00:17 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:e00::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7f:04:eb:e3:73:11:6b:b4:8f:42:be:ad:d1:5a:9d:f2:65:d6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 28 16:00:17 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=e4aec3798465a37626bf1f8c03f70fac0add63f4e897c4cdb75a72052b359758, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:4f:a7:97:0d:89:e4:ff:13:ae:0e:55:a6: 2e:22:c4:2c:dd:21:88:6b:a7:bf:0e:ae:c0:ed:cb: f1:aa:d0:91:a1:09:36:6e:0a:67:ec:11:5c:93:58: 7a:16:45:4d:ab:65:d5:6d:26:b0:1c:bd:ac:c6:4d: f4:3e:10:99:f1:ff:61:48:ff:0f:07:b7:95:51:33: e2:f5:76:df:ee:79:d1:2e:f6:e1:00:d2:6e:d3:f3: 21:48:3c:de:7f:80:5a:7a:b6:24:00:da:de:02:a3: af:c1:24:e3:b8:0d:c2:b7:7b:28:da:72:64:4b:cd: 33:d5:c7:90:5e:65:cf:51:57:5e:c3:9d:9a:6d:5f: 64:a3:bf:ee:60:90:df:30:92:1d:7f:ac:4b:a8:f8: bc:b3:05:f3:09:77:3c:58:56:9e:2d:8e:a2:69:8f: fb:f9:cc:ce:f8:dd:de:31:73:8c:26:5c:69:c8:7a: 7c:9d:6e:d7:26:e7:5f:25:9c:51:c0:89:10:a0:19: 15:10:b8:ec:d8:51:9c:b1:d6:d2:2a:e5:1a:93:22: 85:38:b0:d8:35:2c:bc:ce:7a:b2:c7:17:2e:95:9c: cd:e2:98:d7:c7:ca:85:4a:58:ac:4a:fd:ce:63:99: 57:32:3d:2b:95:7b:26:28:9a:9a:a9:4d:f2:ac:fd: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:44:72:E3:01:D1:F7:E6:30:FD:F6:70:EB:84:D4:F4:E9:44:B0:77 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/845a3102-27ea-4c97-8d05-2688587d8229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:e00::/43 Signature Algorithm: sha256WithRSAEncryption 64:bb:ef:b3:ba:0b:8f:55:d9:d3:eb:ab:f0:d8:69:4a:c0:e1: 62:dd:9c:12:18:28:3e:2a:33:e1:6b:8d:72:a9:d1:38:e4:a7: 85:d6:00:9e:2b:56:90:cf:f5:72:42:6c:eb:f1:95:6f:2d:e1: ca:af:2f:13:0f:2c:df:35:64:40:b3:10:ad:bb:8b:38:c7:f8: 90:a3:f4:6f:1b:60:89:91:da:ef:85:38:ab:bf:71:a7:17:01: 67:32:35:61:36:a6:74:13:7b:cb:e6:0e:39:07:ac:dc:5d:28: 6a:b8:72:c9:73:9c:be:c1:66:fc:92:61:08:f7:64:ef:64:73: 8c:56:ee:a9:a2:0f:9f:01:c8:1e:0a:c8:99:20:ed:ec:5b:47: 98:40:64:3f:5f:39:7c:52:6a:70:9f:fc:03:34:86:e0:13:cb: c4:e2:78:50:ee:70:56:83:a9:c2:fa:0a:97:64:a3:57:87:eb: 57:f3:44:29:98:de:5e:3d:fd:51:73:ce:84:72:90:71:91:b5: af:1d:fc:06:87:f9:86:98:e2:c5:5a:12:1c:61:ba:e7:25:5f: ab:b9:87:20:34:aa:47:7d:67:1d:5f:90:d6:2f:29:2e:41:51: 37:27:24:56:7a:06:5a:1e:60:33:de:84:da:44:eb:8b:89:6d: 6d:cd:5e:52 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUV38E6+NzEWu0j0K+rdFanfJl1lwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzI4MTYwMDE3WhcNMjUwOTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGFlYzM3OTg0NjVhMzc2MjZiZjFmOGMwM2Y3MGZhYzBh ZGQ2M2Y0ZTg5N2M0Y2RiNzVhNzIwNTJiMzU5NzU4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrZU+nlw2J5P8Trg5Vpi4ixCzdIYhrp78OrsDty/Gq0JGh CTZuCmfsEVyTWHoWRU2rZdVtJrAcvazGTfQ+EJnx/2FI/w8Ht5VRM+L1dt/uedEu 9uEA0m7T8yFIPN5/gFp6tiQA2t4Co6/BJOO4DcK3eyjacmRLzTPVx5BeZc9RV17D nZptX2Sjv+5gkN8wkh1/rEuo+LyzBfMJdzxYVp4tjqJpj/v5zM743d4xc4wmXGnI enydbtcm518lnFHAiRCgGRUQuOzYUZyx1tIq5RqTIoU4sNg1LLzOerLHFy6VnM3i mNfHyoVKWKxK/c5jmVcyPSuVeyYompqpTfKs/QdvAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUPkRy4wHR9+Yw/fZw64TU9OlEsHcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg0NWEzMTAyLTI3ZWEtNGM5Ny04ZDA1LTI2ODg1ODdkODIyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwUmBZzADgAwDQYJKoZIhvcNAQELBQADggEBAGS777O6C49V2dPrq/DYaUrA 4WLdnBIYKD4qM+FrjXKp0Tjkp4XWAJ4rVpDP9XJCbOvxlW8t4cqvLxMPLN81ZECz EK27izjH+JCj9G8bYImR2u+FOKu/cacXAWcyNWE2pnQTe8vmDjkHrNxdKGq4cslz nL7BZvySYQj3ZO9kc4xW7qmiD58ByB4KyJkg7exbR5hAZD9fOXxSanCf/AM0huAT y8TieFDucFaDqcL6Cpdko1eH61fzRCmY3l49/VFzzoRykHGRta8d/AaH+YaY4sVa EhxhuuclX6u5hyA0qkd9Zx1fkNYvKS5BUTcnJFZ6BloeYDPehNpE64uJbW3NXlI= -----END CERTIFICATE-----Generated at Tue Aug 5 17:19:06 2025 by rpki-client