$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cfd74af0-795d-4117-9aad-7835075a2cc5.roa File: cfd74af0-795d-4117-9aad-7835075a2cc5.roa (raw, json) Hash identifier: 9hmXqlwBheZ/1JMGNqN45eSknAhWIsiOUbN0hq+gJsI= Subject key identifier: 94:DB:B0:63:77:40:7D:33:D8:2D:1F:00:87:56:F6:AA:F3:17:1A:E0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 65328D83A313DE49EB39ECB407814EA49F01301A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cfd74af0-795d-4117-9aad-7835075a2cc5.roa Signing time: Wed 25 Jun 2025 00:30:46 +0000 ROA not before: Wed 25 Jun 2025 00:30:46 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:c0b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:32:8d:83:a3:13:de:49:eb:39:ec:b4:07:81:4e:a4:9f:01:30:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 25 00:30:46 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=ea28136b035c90e0061bd27b7f45387ada2512bdc201fcf2c26d4952b93394ff, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:bd:52:c9:59:51:01:cf:a7:18:75:d0:68: e7:56:ec:fb:5f:b3:71:21:59:b9:dc:d6:15:ee:a8: d0:73:a8:f4:a4:e8:6f:dd:0c:6e:88:62:fa:b9:e7: c8:41:6f:fd:58:36:87:90:0b:85:ec:3f:a1:50:69: 3c:73:11:ed:c4:55:77:ff:a2:00:74:e2:68:ce:70: 3d:f0:53:60:68:f4:77:75:9c:d2:94:10:99:48:01: 6c:81:8f:8c:77:cf:3c:f9:af:4c:12:4a:ff:4a:02: d5:e3:27:55:73:00:c3:41:55:21:9f:51:cd:24:21: a1:70:50:17:24:68:3b:e2:18:41:92:ba:5b:01:26: a4:c6:fb:73:a3:4b:cc:11:8a:24:13:1f:fb:8b:db: dd:da:2d:2c:02:c8:ce:b4:a8:aa:09:6b:49:d5:a6: 6f:de:18:cd:d3:3f:59:43:22:32:16:ec:46:35:ef: 8e:0d:12:4a:b1:a7:b9:d6:7f:92:6c:ef:4e:3c:15: c5:74:ce:00:bb:94:e6:c9:10:1c:f6:e2:3f:cc:61: 75:f5:ee:33:8d:37:87:db:35:de:73:67:ce:32:55: 11:da:4c:7e:51:77:82:18:48:23:11:dc:2e:02:15: ea:91:2b:4b:70:f0:4a:1c:e1:3b:21:a3:29:ed:e0: 96:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:B0:63:77:40:7D:33:D8:2D:1F:00:87:56:F6:AA:F3:17:1A:E0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cfd74af0-795d-4117-9aad-7835075a2cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c0b::/48 Signature Algorithm: sha256WithRSAEncryption 78:07:02:c4:50:48:a9:3f:b3:a1:09:c9:fe:ae:0b:5d:94:7a: 1c:a9:b6:50:c7:d8:c3:6f:dd:9f:f4:15:5f:22:37:23:22:5a: ef:7f:5c:6c:7c:d8:91:2e:be:cc:53:9c:0f:91:97:54:04:25: 2b:1b:1c:3a:8f:a3:15:b8:68:11:d3:f8:05:bb:83:25:83:30: 30:88:39:0b:29:57:3e:92:60:74:4a:d4:23:c8:ca:10:ea:0f: 80:40:e7:e8:3f:73:a6:b9:9d:1d:12:57:22:94:30:8a:82:f3: 1b:54:06:fd:33:5e:2c:bb:05:4e:3c:64:6d:66:c3:f7:86:c7: 6c:f7:e8:67:ef:a6:98:e4:ae:98:3d:ac:49:03:ee:ca:74:95: 0f:3b:19:6f:9d:c4:69:11:b1:da:c4:0a:13:e6:59:49:15:a2: 09:36:fc:f2:eb:7b:26:87:7c:64:e5:36:87:14:ef:89:07:1e: 77:97:1a:85:b4:48:4d:cc:92:aa:c0:b9:c1:27:3d:1f:0b:95: 97:21:be:b9:ed:fb:57:57:04:e9:c9:1c:8d:2a:a0:d8:47:ed: c4:81:0d:69:55:e2:af:91:c7:64:55:b8:a3:0a:40:a1:d8:a9: ec:3f:ce:b1:c7:25:04:57:77:29:9f:9e:45:39:44:c5:c6:68: 57:ce:9c:6c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUZTKNg6MT3knrOey0B4FOpJ8BMBowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjI1MDAzMDQ2WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTI4MTM2YjAzNWM5MGUwMDYxYmQyN2I3ZjQ1Mzg3YWRh MjUxMmJkYzIwMWZjZjJjMjZkNDk1MmI5MzM5NGZmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5eL1SyVlRAc+nGHXQaOdW7Ptfs3EhWbnc1hXuqNBzqPSk 6G/dDG6IYvq558hBb/1YNoeQC4XsP6FQaTxzEe3EVXf/ogB04mjOcD3wU2Bo9Hd1 nNKUEJlIAWyBj4x3zzz5r0wSSv9KAtXjJ1VzAMNBVSGfUc0kIaFwUBckaDviGEGS ulsBJqTG+3OjS8wRiiQTH/uL293aLSwCyM60qKoJa0nVpm/eGM3TP1lDIjIW7EY1 744NEkqxp7nWf5Js7048FcV0zgC7lObJEBz24j/MYXX17jONN4fbNd5zZ84yVRHa TH5Rd4IYSCMR3C4CFeqRK0tw8Eoc4Tshoynt4JaJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUlNuwY3dAfTPYLR8Ah1b2qvMXGuAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NmZDc0YWYwLTc5NWQtNDExNy05YWFkLTc4MzUwNzVhMmNjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAswDQYJKoZIhvcNAQELBQADggEBAHgHAsRQSKk/s6EJyf6uC12U ehyptlDH2MNv3Z/0FV8iNyMiWu9/XGx82JEuvsxTnA+Rl1QEJSsbHDqPoxW4aBHT +AW7gyWDMDCIOQspVz6SYHRK1CPIyhDqD4BA5+g/c6a5nR0SVyKUMIqC8xtUBv0z Xiy7BU48ZG1mw/eGx2z36Gfvppjkrpg9rEkD7sp0lQ87GW+dxGkRsdrEChPmWUkV ogk2/PLreyaHfGTlNocU74kHHneXGoW0SE3MkqrAucEnPR8LlZchvrnt+1dXBOnJ HI0qoNhH7cSBDWlV4q+Rx2RVuKMKQKHYqew/zrHHJQRXdymfnkU5RMXGaFfOnGw= -----END CERTIFICATE-----Generated at Sun Jun 29 11:31:34 2025 by rpki-client