$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99479912-3c63-442a-a1c0-4057977a054b.roa File: 99479912-3c63-442a-a1c0-4057977a054b.roa (raw, json) Hash identifier: esB5i73UDxjhD81rSNE9vthhrIUyW0d51HDQl5xTSwo= Subject key identifier: 5E:A4:84:50:74:65:EE:5A:AE:CB:10:CD:D2:8F:75:D7:3F:FC:F9:3A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0379349CA8757041A635CA5A9CFE3F45BA84D236 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99479912-3c63-442a-a1c0-4057977a054b.roa Signing time: Mon 28 Jul 2025 16:00:13 +0000 ROA not before: Mon 28 Jul 2025 16:00:13 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:3c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:79:34:9c:a8:75:70:41:a6:35:ca:5a:9c:fe:3f:45:ba:84:d2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 28 16:00:13 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=97013a57f4d805fefbb0adcf5fee64f146e1c97fbc9f7ab860cfc93c0bc70936, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:27:cd:77:4a:2f:28:9a:d5:f9:35:45:2f: 14:22:b0:46:55:8b:02:ea:22:1f:3b:97:8b:85:ad: fb:02:85:b8:a7:bd:6a:24:58:44:58:1b:c3:92:a8: f8:f0:27:78:38:2e:12:f1:90:2e:b7:44:19:9f:a5: 45:1b:fb:d9:53:71:f0:e7:29:24:83:4a:79:c1:67: 20:ba:7f:d3:73:b9:80:5d:ea:60:8e:22:19:e1:ea: 1c:a1:79:ae:12:4c:27:d7:8c:32:42:29:0b:5b:00: d2:37:16:6c:94:03:b2:37:b9:c5:12:fd:4b:5f:2c: 21:69:42:f3:fa:17:f4:29:73:8b:a7:b6:be:c3:c4: 71:19:51:86:7b:f5:49:60:80:cc:19:e2:67:99:59: 52:ce:cf:98:b6:52:cc:57:27:ff:16:cd:38:39:1a: 37:0f:32:4e:18:2f:18:bb:c3:62:6c:ef:39:fb:07: 03:30:80:7e:8d:08:82:59:fd:20:92:06:5d:cb:5f: ec:35:ea:89:e8:00:ad:eb:93:70:32:34:2e:a9:47: d0:66:89:6a:67:22:b6:ac:13:85:82:49:7e:ab:ab: ee:74:4c:a0:eb:ec:9d:21:70:a7:39:2c:48:11:b0: d1:0e:d3:5c:9d:df:74:35:d7:ba:00:a5:22:22:ef: a9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A4:84:50:74:65:EE:5A:AE:CB:10:CD:D2:8F:75:D7:3F:FC:F9:3A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/99479912-3c63-442a-a1c0-4057977a054b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:3c2::/48 Signature Algorithm: sha256WithRSAEncryption 9f:cf:cb:e6:ea:01:09:9b:6f:44:1e:3b:75:16:18:a7:da:91: 82:2d:6b:31:c3:b7:12:19:7f:18:14:65:17:19:06:83:1b:1e: f2:a7:3a:03:a3:12:50:0e:b5:f2:47:97:d5:ec:b7:ff:51:ef: 06:a5:26:ad:93:c1:ae:4a:ff:88:fd:e1:73:e4:67:9b:3b:c1: 54:ac:39:99:f2:ca:c4:5e:3b:64:6e:ac:37:58:e0:cc:a9:18: 8b:45:bb:37:2f:27:66:c4:f2:a3:3e:4e:17:00:e3:b2:2f:18: 0a:5a:ed:df:4a:b5:f6:ed:dc:c5:c9:3c:60:18:04:d3:3b:f3: 6d:99:6b:22:40:8a:d4:34:1b:0d:e3:da:1c:06:51:32:a6:e7: 00:38:3d:86:ff:f8:5c:7b:36:9f:c9:b4:6b:d9:4f:e1:d4:80: 68:83:b7:84:a9:1a:79:2d:5b:65:c1:e3:71:e4:85:9b:12:75: c4:48:95:4c:80:e3:a0:53:7c:43:d2:b7:2c:14:91:ab:17:0d: fa:9a:c4:46:6c:9c:c0:ac:30:6d:fe:1f:76:17:82:cf:dd:41: 75:40:d4:5f:9d:17:6e:27:7a:2a:0f:c7:ed:85:8d:65:d7:0d: 86:ef:3b:4c:e5:60:80:f5:f3:b9:f3:8b:37:ce:2e:f8:8b:ff: 0a:9c:7f:58 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUA3k0nKh1cEGmNcpanP4/RbqE0jYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzI4MTYwMDEzWhcNMjUwOTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzAxM2E1N2Y0ZDgwNWZlZmJiMGFkY2Y1ZmVlNjRmMTQ2 ZTFjOTdmYmM5ZjdhYjg2MGNmYzkzYzBiYzcwOTM2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdWyfNd0ovKJrV+TVFLxQisEZViwLqIh87l4uFrfsChbin vWokWERYG8OSqPjwJ3g4LhLxkC63RBmfpUUb+9lTcfDnKSSDSnnBZyC6f9NzuYBd 6mCOIhnh6hyhea4STCfXjDJCKQtbANI3FmyUA7I3ucUS/UtfLCFpQvP6F/Qpc4un tr7DxHEZUYZ79UlggMwZ4meZWVLOz5i2UsxXJ/8WzTg5GjcPMk4YLxi7w2Js7zn7 BwMwgH6NCIJZ/SCSBl3LX+w16onoAK3rk3AyNC6pR9BmiWpnIrasE4WCSX6rq+50 TKDr7J0hcKc5LEgRsNEO01yd33Q117oApSIi76nLAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUXqSEUHRl7lquyxDN0o911z/8+TowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzk5NDc5OTEyLTNjNjMtNDQyYS1hMWMwLTQwNTc5NzdhMDU0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAA8IwDQYJKoZIhvcNAQELBQADggEBAJ/Py+bqAQmbb0QeO3UWGKfa kYItazHDtxIZfxgUZRcZBoMbHvKnOgOjElAOtfJHl9Xst/9R7walJq2Twa5K/4j9 4XPkZ5s7wVSsOZnyysReO2RurDdY4MypGItFuzcvJ2bE8qM+ThcA47IvGApa7d9K tfbt3MXJPGAYBNM7822ZayJAitQ0Gw3j2hwGUTKm5wA4PYb/+Fx7Np/JtGvZT+HU gGiDt4SpGnktW2XB43HkhZsSdcRIlUyA46BTfEPStywUkasXDfqaxEZsnMCsMG3+ H3YXgs/dQXVA1F+dF24neioPx+2FjWXXDYbvO0zlYID187nzizfOLviL/wqcf1g= -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:29 2025 by rpki-client