$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3459b28-5505-461b-b15f-b4f61186ef44.roa File: a3459b28-5505-461b-b15f-b4f61186ef44.roa (raw, json) Hash identifier: IibXj9l33dUcb4ZikONdSmVz5Ioc3IRjqhmpiHvbRQQ= Subject key identifier: B7:4E:88:B3:4A:8F:44:4B:D9:27:25:A6:C6:C4:A1:2F:46:CB:EA:19 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0A470EB3D88C9F30741F3D04C3D5AECCD83261C8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3459b28-5505-461b-b15f-b4f61186ef44.roa Signing time: Mon 21 Jul 2025 16:31:15 +0000 ROA not before: Mon 21 Jul 2025 16:31:15 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 40045 IP address blocks: 2605:9cc0:c1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:47:0e:b3:d8:8c:9f:30:74:1f:3d:04:c3:d5:ae:cc:d8:32:61:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:31:15 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=a3b98c11c9e8f56a2cf03442c0957de60d87f22da9210a3a71a48bba956cc1ca, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:86:f6:94:2b:e6:7b:53:2a:15:3e:d1:f2:29: bc:d7:50:d2:db:f9:7e:0c:2f:d0:58:4a:85:4f:b7: a1:e1:b9:27:14:51:e6:c4:86:b3:72:2b:a0:97:ec: 8a:8a:ae:e5:1a:13:a6:5a:95:7d:9e:b3:3e:9e:a7: d4:b9:dc:3d:f2:8a:5f:46:26:2f:fb:1d:c3:0d:4e: 4d:a6:93:6b:5b:2e:e4:b3:4f:2c:a9:c9:93:68:89: d0:0e:9b:fe:29:50:76:18:cb:78:c3:ce:e2:8e:25: 05:71:8e:a8:f9:7a:8e:fd:37:d0:ef:2e:fa:f8:c2: 3a:b6:79:10:89:95:bb:01:df:a9:ff:8f:99:15:5a: 40:59:6a:7c:b2:ca:5a:c0:2d:75:07:39:6c:6b:c9: af:9f:b4:18:40:4e:3c:3b:60:bc:9a:42:e2:85:2f: fb:85:7e:07:09:82:1a:e6:a3:db:1d:52:56:26:7b: d3:df:b4:46:d7:0e:c9:71:1a:6d:6f:14:43:93:f9: f2:3e:d9:bd:ba:78:6a:e1:aa:d6:43:b9:29:43:74: 9c:fd:14:57:90:99:44:f3:4b:1b:b3:ca:bd:85:89: 8c:68:6c:8e:3e:b6:36:33:7c:68:b3:08:fc:de:f4: dc:d9:19:0d:3b:8f:d6:85:37:06:62:da:78:55:c2: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4E:88:B3:4A:8F:44:4B:D9:27:25:A6:C6:C4:A1:2F:46:CB:EA:19 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3459b28-5505-461b-b15f-b4f61186ef44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c1c::/48 Signature Algorithm: sha256WithRSAEncryption 45:3f:a5:05:82:f7:49:a2:b3:83:cd:3a:b5:82:96:d7:83:ad: 01:41:17:a1:20:be:2f:19:92:3e:72:b6:85:68:66:81:9a:f6: 94:a3:d6:e9:3e:ab:00:04:0c:0a:fe:8e:c8:cb:95:26:6b:87: 23:af:36:7e:07:24:4d:0a:49:1c:50:73:5a:2c:89:3f:59:15: af:89:4d:7e:ba:06:2e:f9:1e:e9:d2:08:81:bb:c3:7e:9a:8c: 83:65:19:4e:55:ac:bb:bd:01:46:a4:f8:4a:ed:88:f5:ba:82: 8a:b8:fa:ea:80:2a:b3:4f:87:3a:ac:37:c6:ec:24:14:e0:11: f1:fe:8c:c0:a7:a5:7a:4b:cc:5d:f0:d6:2c:a8:8b:71:0c:26: e0:44:fe:af:03:69:d9:83:ae:36:9a:28:cc:4a:92:23:d1:09: f5:b3:71:60:0e:3c:41:c1:9b:2a:b7:a8:7d:76:ce:6d:81:40: ff:fd:9c:62:cd:5a:91:cd:29:68:bc:e8:bc:94:38:6e:3a:53: c5:aa:d3:ac:14:0a:21:48:ee:3c:8b:3d:97:e7:3e:df:df:99: dc:f2:93:17:60:38:57:06:60:2b:be:cc:ef:e7:54:4d:73:dc: 33:29:bb:92:06:59:0d:32:7f:ab:83:c6:33:19:09:32:df:53: 29:fb:41:42 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCkcOs9iMnzB0Hz0Ew9WuzNgyYcgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYzMTE1WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2I5OGMxMWM5ZThmNTZhMmNmMDM0NDJjMDk1N2RlNjBk ODdmMjJkYTkyMTBhM2E3MWE0OGJiYTk1NmNjMWNhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6hvaUK+Z7UyoVPtHyKbzXUNLb+X4ML9BYSoVPt6HhuScU UebEhrNyK6CX7IqKruUaE6ZalX2esz6ep9S53D3yil9GJi/7HcMNTk2mk2tbLuSz TyypyZNoidAOm/4pUHYYy3jDzuKOJQVxjqj5eo79N9DvLvr4wjq2eRCJlbsB36n/ j5kVWkBZanyyylrALXUHOWxrya+ftBhATjw7YLyaQuKFL/uFfgcJghrmo9sdUlYm e9PftEbXDslxGm1vFEOT+fI+2b26eGrhqtZDuSlDdJz9FFeQmUTzSxuzyr2FiYxo bI4+tjYzfGizCPze9NzZGQ07j9aFNwZi2nhVwt7fAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUt06Is0qPREvZJyWmxsShL0bL6hkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2EzNDU5YjI4LTU1MDUtNDYxYi1iMTVmLWI0ZjYxMTg2ZWY0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADBwwDQYJKoZIhvcNAQELBQADggEBAEU/pQWC90mis4PNOrWClteD rQFBF6Egvi8Zkj5ytoVoZoGa9pSj1uk+qwAEDAr+jsjLlSZrhyOvNn4HJE0KSRxQ c1osiT9ZFa+JTX66Bi75HunSCIG7w36ajINlGU5VrLu9AUak+ErtiPW6goq4+uqA KrNPhzqsN8bsJBTgEfH+jMCnpXpLzF3w1iyoi3EMJuBE/q8DadmDrjaaKMxKkiPR CfWzcWAOPEHBmyq3qH12zm2BQP/9nGLNWpHNKWi86LyUOG46U8Wq06wUCiFI7jyL PZfnPt/fmdzykxdgOFcGYCu+zO/nVE1z3DMpu5IGWQ0yf6uDxjMZCTLfUyn7QUI= -----END CERTIFICATE-----Generated at Wed Aug 6 12:33:59 2025 by rpki-client