$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa File: b2a4ddb8-c852-4876-b718-a984606f10af.roa (raw, json) Hash identifier: Zypc7FoxnPtbTQG46cLTnARhqHFoq8e5R+ig2DYT0Vg= Subject key identifier: 15:F9:92:02:9F:95:9A:32:30:65:3C:F3:21:FC:38:49:C2:DB:24:90 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7B1495885EE277CE059B6753C2488870D1EE1387 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa Signing time: Wed 25 Jun 2025 00:30:52 +0000 ROA not before: Wed 25 Jun 2025 00:30:52 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:14:95:88:5e:e2:77:ce:05:9b:67:53:c2:48:88:70:d1:ee:13:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:30:52 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=dbcbcbed1170fe809d8b0c3ae462c53d8f0d251a57951089a3ec88eb502bfdd2, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:d3:a2:0b:7a:03:63:5d:10:6a:a8:0b:e8: 26:49:f2:ff:28:18:56:af:c5:ba:29:54:21:08:31: 7a:4e:57:d9:c2:65:36:49:c7:ed:10:ac:44:3d:e6: ad:b4:f6:14:f8:dd:e1:9d:a4:b6:10:ec:d3:dd:61: 99:aa:cb:12:3a:bd:c9:3a:60:ff:3a:ef:7e:e5:a2: cf:63:a6:46:52:4f:5c:0d:d3:f2:ea:59:cc:67:da: 09:22:32:9d:34:57:71:f1:0b:35:5b:a6:07:69:06: 1c:08:c6:4f:28:ec:d5:d7:12:43:09:47:54:04:d3: a7:67:58:fa:29:d6:70:f6:ee:8f:44:bf:9a:0c:0a: 3e:99:67:f3:4b:93:a3:80:e6:e9:13:11:48:1f:47: a8:63:31:3c:b7:5c:89:09:14:7f:f3:b3:9d:bd:03: 68:db:2e:45:02:8f:3b:98:3f:88:9f:db:cf:a1:5c: 24:e8:0c:c8:0d:32:53:3b:dc:04:9a:0f:be:36:cc: d2:87:32:49:07:d6:d1:1e:87:f6:a5:7c:a2:fd:be: 9e:36:b6:8a:55:8d:36:33:fd:5e:eb:a2:e2:76:70: 58:40:d1:2f:8e:7c:a5:fc:8a:7b:cc:63:0c:fa:ce: ec:ea:e3:e0:6b:58:6e:8c:5b:4a:78:a4:2a:c7:f0: 41:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F9:92:02:9F:95:9A:32:30:65:3C:F3:21:FC:38:49:C2:DB:24:90 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b2a4ddb8-c852-4876-b718-a984606f10af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0c::/48 Signature Algorithm: sha256WithRSAEncryption 84:b5:6d:71:c4:e6:1d:53:5c:ef:95:11:a7:6f:c3:65:de:36: 88:c4:b6:e6:b8:04:9d:8a:5f:ba:08:30:8a:11:a5:08:94:1d: 54:f4:20:eb:7c:93:d8:a2:d3:01:52:54:b7:e0:dc:8c:b1:84: 4f:c3:c6:9e:a5:76:ed:52:aa:ed:41:e5:af:e3:5b:b3:e4:34: cb:8e:f2:67:be:68:4b:4c:87:e4:16:72:f2:57:fb:d1:03:c7: 23:ee:92:57:a5:cc:26:94:1c:e8:13:fb:ac:4a:eb:38:96:bb: e2:df:1b:78:bd:e3:54:26:08:08:45:49:e8:86:26:17:d2:e2: 1e:8f:a0:f2:14:f6:f5:41:dc:93:58:9c:c1:91:75:6c:a7:5a: 21:b0:c4:b3:60:ba:a5:86:e0:cc:d6:fe:35:89:36:48:43:35: 13:06:2f:15:3d:77:cf:21:69:62:0e:8d:22:22:c2:aa:54:a9: 15:de:26:d0:b8:ce:d0:8f:ac:7c:4a:13:e7:b5:40:dd:ce:8a: fe:25:d8:04:1e:a8:77:95:eb:69:84:d0:85:2f:78:d0:5b:9e: 9a:ac:03:1d:6a:0c:a3:e9:ff:ce:37:26:80:c9:3f:f8:ba:cb: 51:fc:23:5e:c9:04:35:ba:a6:8d:67:77:18:3a:df:5c:24:75: 6d:7a:1b:d9 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUexSViF7id84Fm2dTwkiIcNHuE4cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDAzMDUyWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmNiY2JlZDExNzBmZTgwOWQ4YjBjM2FlNDYyYzUzZDhm MGQyNTFhNTc5NTEwODlhM2VjODhlYjUwMmJmZGQyMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+LtOiC3oDY10QaqgL6CZJ8v8oGFavxbopVCEIMXpOV9nC ZTZJx+0QrEQ95q209hT43eGdpLYQ7NPdYZmqyxI6vck6YP86737los9jpkZST1wN 0/LqWcxn2gkiMp00V3HxCzVbpgdpBhwIxk8o7NXXEkMJR1QE06dnWPop1nD27o9E v5oMCj6ZZ/NLk6OA5ukTEUgfR6hjMTy3XIkJFH/zs529A2jbLkUCjzuYP4if28+h XCToDMgNMlM73ASaD742zNKHMkkH1tEeh/alfKL9vp42topVjTYz/V7rouJ2cFhA 0S+OfKX8invMYwz6zuzq4+BrWG6MW0p4pCrH8EHpAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUFfmSAp+VmjIwZTzzIfw4ScLbJJAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2IyYTRkZGI4LWM4NTItNDg3Ni1iNzE4LWE5ODQ2MDZmMTBhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAwwDQYJKoZIhvcNAQELBQADggEBAIS1bXHE5h1TXO+VEadvw2Xe NojEtua4BJ2KX7oIMIoRpQiUHVT0IOt8k9ii0wFSVLfg3IyxhE/Dxp6ldu1Squ1B 5a/jW7PkNMuO8me+aEtMh+QWcvJX+9EDxyPuklelzCaUHOgT+6xK6ziWu+LfG3i9 41QmCAhFSeiGJhfS4h6PoPIU9vVB3JNYnMGRdWynWiGwxLNguqWG4MzW/jWJNkhD NRMGLxU9d88haWIOjSIiwqpUqRXeJtC4ztCPrHxKE+e1QN3Oiv4l2AQeqHeV62mE 0IUveNBbnpqsAx1qDKPp/843JoDJP/i6y1H8I17JBDW6po1ndxg631wkdW16G9k= -----END CERTIFICATE-----Generated at Sun Jun 29 15:00:16 2025 by rpki-client