$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa File: 84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa (raw, json) Hash identifier: BTeN30U1/42C7jiAfXj/JUxO7m+KJAEwRx5Tppla94Y= Subject key identifier: 24:3C:2B:E8:2E:62:86:FD:24:B7:2E:CF:12:49:DE:5B:80:82:BB:F1 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0BBF02C484E9B78AF67D620A908C1F6F87084DF9 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa Signing time: Fri 11 Jul 2025 18:11:28 +0000 ROA not before: Fri 11 Jul 2025 18:11:28 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2605:9cc0:c40::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:bf:02:c4:84:e9:b7:8a:f6:7d:62:0a:90:8c:1f:6f:87:08:4d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:11:28 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=bd9a63c8d53f46bf57ee6aa31a5bd7d282b9914586506f6919f1ae87d0de5ff6, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b9:a1:f0:e2:f9:bf:c2:d5:ef:65:c2:cc:65: 84:bc:e7:44:82:1b:a2:21:4c:88:9a:60:46:d3:a1: 2f:4f:93:40:eb:fb:83:d2:f7:ba:19:ce:17:5f:c7: ba:16:b3:4f:60:5b:8d:9c:32:5e:bd:17:87:30:09: a4:fa:fc:b3:b2:9f:d8:99:1a:12:5c:54:c0:0c:ac: f9:e9:d8:e2:4b:0a:21:fa:65:34:02:df:cb:ed:31: 97:e9:ad:91:28:8f:3c:11:47:c0:97:a5:2c:a0:1f: 5c:ff:c0:12:68:d8:0c:12:60:4e:5d:a6:24:2c:9d: ef:75:fe:0c:f9:0e:d0:4d:13:80:b3:d7:a0:7e:72: ed:3d:da:06:e5:7b:e7:c8:5b:42:18:e1:d8:38:f5: 5f:aa:7a:b8:13:19:31:60:83:b3:b2:3a:b9:9d:b9: a0:6b:1b:72:0f:79:a6:7a:71:11:d6:a5:7c:1b:a6: a3:86:40:64:fc:dd:01:8f:e4:22:f5:7e:c4:c7:be: e2:a7:69:2a:5c:0e:4c:a9:73:be:00:d9:b3:49:3f: ec:fd:90:4f:a9:65:9c:19:bf:70:90:f3:5a:05:27: b7:45:1e:f4:5e:b7:90:6c:7b:cf:09:14:15:53:ba: 98:b9:8e:2b:4b:48:fe:23:e6:e2:ed:d8:f4:d3:8e: 33:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3C:2B:E8:2E:62:86:FD:24:B7:2E:CF:12:49:DE:5B:80:82:BB:F1 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/84ac7714-eba5-4f7d-a5ee-79b6eed77b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c40::/45 Signature Algorithm: sha256WithRSAEncryption 79:bc:5c:54:ad:df:b8:d5:9a:7a:fe:8c:8a:d1:0d:85:b6:8e: 66:43:62:75:dc:2d:2e:4b:dc:50:74:5c:32:8b:0c:a3:31:49: 0c:9b:f9:8c:f6:33:9e:80:4e:8b:a4:fe:8e:f0:03:35:e6:d5: 8b:55:45:84:c8:9b:dd:c8:17:ef:d6:55:6d:e6:be:bd:3f:c8: c9:71:ef:2b:b2:a3:e9:c3:73:e9:99:f7:77:ad:10:6a:a8:30: 43:25:eb:5b:19:52:36:ee:f6:a7:42:be:85:a8:16:0d:f3:98: 1b:9f:d9:19:60:6b:d6:fb:c2:60:8f:4b:92:2d:59:65:68:37: f1:86:cc:8f:0a:86:66:10:49:a4:d1:e0:dc:87:61:ec:4b:d3: c6:94:db:dd:be:a6:05:87:2d:de:59:50:5d:3e:79:3c:17:a3: f8:bb:54:3e:79:95:75:ec:e4:64:ee:60:cc:90:5a:f1:11:02: 9d:f2:3d:04:71:7c:c0:d2:75:fe:1b:5d:5e:ee:49:e5:2d:8a: 96:0c:72:a5:fa:21:fd:7f:81:9a:59:dd:41:c5:fa:d0:6a:81: 30:f4:6a:64:02:cf:bd:0f:2a:ad:fd:f5:d1:40:eb:66:2b:23: 8a:00:88:a5:b0:72:2a:98:85:c7:7a:dd:32:cc:d8:89:30:b1: 29:89:8c:2f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUC78CxITpt4r2fWIKkIwfb4cITfkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMTI4WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDlhNjNjOGQ1M2Y0NmJmNTdlZTZhYTMxYTViZDdkMjgy Yjk5MTQ1ODY1MDZmNjkxOWYxYWU4N2QwZGU1ZmY2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfuaHw4vm/wtXvZcLMZYS850SCG6IhTIiaYEbToS9Pk0Dr +4PS97oZzhdfx7oWs09gW42cMl69F4cwCaT6/LOyn9iZGhJcVMAMrPnp2OJLCiH6 ZTQC38vtMZfprZEojzwRR8CXpSygH1z/wBJo2AwSYE5dpiQsne91/gz5DtBNE4Cz 16B+cu092gble+fIW0IY4dg49V+qergTGTFgg7OyOrmduaBrG3IPeaZ6cRHWpXwb pqOGQGT83QGP5CL1fsTHvuKnaSpcDkypc74A2bNJP+z9kE+pZZwZv3CQ81oFJ7dF HvRet5Bse88JFBVTupi5jitLSP4j5uLt2PTTjjPRAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUJDwr6C5ihv0kty7PEkneW4CCu/EwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzg0YWM3NzE0LWViYTUtNGY3ZC1hNWVlLTc5YjZlZWQ3N2I3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwMmBZzADEAwDQYJKoZIhvcNAQELBQADggEBAHm8XFSt37jVmnr+jIrRDYW2 jmZDYnXcLS5L3FB0XDKLDKMxSQyb+Yz2M56ATouk/o7wAzXm1YtVRYTIm93IF+/W VW3mvr0/yMlx7yuyo+nDc+mZ93etEGqoMEMl61sZUjbu9qdCvoWoFg3zmBuf2Rlg a9b7wmCPS5ItWWVoN/GGzI8KhmYQSaTR4NyHYexL08aU292+pgWHLd5ZUF0+eTwX o/i7VD55lXXs5GTuYMyQWvERAp3yPQRxfMDSdf4bXV7uSeUtipYMcqX6If1/gZpZ 3UHF+tBqgTD0amQCz70PKq399dFA62YrI4oAiKWwciqYhcd63TLM2IkwsSmJjC8= -----END CERTIFICATE-----Generated at Mon Aug 4 22:18:14 2025 by rpki-client