$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f02d3a40-b034-4d92-872a-57ed67af80de.roa File: f02d3a40-b034-4d92-872a-57ed67af80de.roa (raw, json) Hash identifier: 6H4wn8hevbtEGo8/AgM1kyUu87NWRBRRFTRiTyrC4XQ= Subject key identifier: 8C:9F:43:F1:EA:9D:E2:EC:20:F2:ED:EC:65:F8:3E:F8:6B:31:6B:91 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7E24D6DCAB88474F7F7C0093A3527F1B3BA0BBF1 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f02d3a40-b034-4d92-872a-57ed67af80de.roa Signing time: Fri 11 Jul 2025 18:10:05 +0000 ROA not before: Fri 11 Jul 2025 18:10:05 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:48f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:24:d6:dc:ab:88:47:4f:7f:7c:00:93:a3:52:7f:1b:3b:a0:bb:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:10:05 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=353f5d6c2636f231d52c5fe69f857bd8b05ccb5422d8e56cc16b8efeca8394fd, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:94:26:42:64:e3:c2:a4:13:84:cd:1c:13: b1:9d:e5:35:de:74:18:0d:1a:d1:93:b7:f4:a2:29: 25:35:c5:67:7e:cc:d6:7a:7d:50:13:34:12:15:3f: 5d:d1:62:35:49:6f:5e:ed:2f:2b:66:a0:9c:84:64: b0:31:a9:be:43:2d:f1:ae:51:ad:92:9a:9d:90:de: cc:23:96:7b:ca:c9:82:b7:1e:06:3f:82:31:ff:d0: 91:b4:ba:5d:f4:48:9e:c3:ab:5a:8c:35:9a:42:a6: be:28:7e:a1:73:e5:2f:a1:9c:4a:92:9a:49:d4:85: 4c:d8:c3:86:01:0d:ba:0d:eb:c0:2c:77:38:e9:91: 3e:0d:a3:6d:a6:e0:ed:36:97:2f:6e:e0:93:92:0c: 5f:37:06:5a:c5:c7:50:eb:7e:f6:23:36:2d:10:3f: f1:06:6f:c5:7a:3c:cc:d0:83:eb:cc:06:1f:08:f9: a0:52:40:84:8a:d7:43:fd:fd:1e:73:50:41:e2:fc: 50:b4:15:3f:d7:c9:52:74:5a:7c:21:0e:ab:15:60: d8:57:e3:6d:fe:78:ad:69:7b:a0:2a:e0:b6:7c:6d: 5c:ca:18:5f:43:6e:22:73:d5:6e:6a:d0:23:f4:82: 75:a5:68:ae:36:a8:64:57:20:f0:58:8a:2a:ad:8f: 7f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9F:43:F1:EA:9D:E2:EC:20:F2:ED:EC:65:F8:3E:F8:6B:31:6B:91 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f02d3a40-b034-4d92-872a-57ed67af80de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:48f::/48 Signature Algorithm: sha256WithRSAEncryption 93:c1:12:7f:59:76:6e:38:ae:f8:3b:43:43:6b:54:a4:5d:15: 41:69:ba:42:ab:2e:2e:4d:73:3d:97:d3:d1:43:64:82:79:9e: 56:51:7e:cb:31:3f:1d:3b:66:75:fa:cc:03:1f:d6:85:57:69: 6c:f6:61:d5:24:91:47:d6:33:7a:1c:0a:25:6e:7c:58:ac:b7: c2:86:40:66:c7:91:8f:a5:09:e0:79:78:18:89:3f:0d:01:57: 68:34:a6:a9:a1:e7:40:c8:78:34:39:a1:cb:e4:c7:2a:82:ba: 80:b1:5a:79:b5:1f:b3:2d:0d:74:dc:f6:f7:a9:20:3b:7d:21: 30:a3:0d:1a:68:ae:42:84:82:86:06:04:2f:72:1a:4f:ec:4c: 2a:b6:cf:a7:bf:8f:9e:55:6c:d1:90:68:6c:44:cd:24:ba:56: 93:a0:59:15:de:b4:cb:88:3d:eb:97:cd:94:1e:e2:df:0d:bb: d1:23:4c:dc:d1:bc:84:d5:1d:45:72:47:c0:d1:bc:fa:02:a2: 60:7d:66:ec:68:5b:23:fc:97:b0:fb:66:ce:d3:72:64:d3:db: de:10:ab:73:2a:b8:08:dc:01:6b:4f:a2:1c:64:ac:46:c8:cb: 3a:c8:3e:f1:35:10:55:8f:bb:c7:ae:51:59:ea:d8:01:15:82: 36:07:b2:f5 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUfiTW3KuIR09/fACTo1J/Gzugu/EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgxMDA1WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTNmNWQ2YzI2MzZmMjMxZDUyYzVmZTY5Zjg1N2JkOGIw NWNjYjU0MjJkOGU1NmNjMTZiOGVmZWNhODM5NGZkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClIJQmQmTjwqQThM0cE7Gd5TXedBgNGtGTt/SiKSU1xWd+ zNZ6fVATNBIVP13RYjVJb17tLytmoJyEZLAxqb5DLfGuUa2Smp2Q3swjlnvKyYK3 HgY/gjH/0JG0ul30SJ7Dq1qMNZpCpr4ofqFz5S+hnEqSmknUhUzYw4YBDboN68As dzjpkT4No22m4O02ly9u4JOSDF83BlrFx1DrfvYjNi0QP/EGb8V6PMzQg+vMBh8I +aBSQISK10P9/R5zUEHi/FC0FT/XyVJ0WnwhDqsVYNhX423+eK1pe6Aq4LZ8bVzK GF9DbiJz1W5q0CP0gnWlaK42qGRXIPBYiiqtj39VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUjJ9D8eqd4uwg8u3sZfg++Gsxa5EwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2YwMmQzYTQwLWIwMzQtNGQ5Mi04NzJhLTU3ZWQ2N2FmODBkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABI8wDQYJKoZIhvcNAQELBQADggEBAJPBEn9Zdm44rvg7Q0NrVKRd FUFpukKrLi5Ncz2X09FDZIJ5nlZRfssxPx07ZnX6zAMf1oVXaWz2YdUkkUfWM3oc CiVufFist8KGQGbHkY+lCeB5eBiJPw0BV2g0pqmh50DIeDQ5ocvkxyqCuoCxWnm1 H7MtDXTc9vepIDt9ITCjDRporkKEgoYGBC9yGk/sTCq2z6e/j55VbNGQaGxEzSS6 VpOgWRXetMuIPeuXzZQe4t8Nu9EjTNzRvITVHUVyR8DRvPoComB9ZuxoWyP8l7D7 Zs7TcmTT294Qq3MquAjcAWtPohxkrEbIyzrIPvE1EFWPu8euUVnq2AEVgjYHsvU= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:51 2025 by rpki-client