$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa File: 172fda76-2a7e-45b7-aaf8-d11d16161720.roa (raw, json) Hash identifier: 1ZH3B/bh1I8Mog5bldp2RQAofcIbA0faw0Qm8H7ZyTY= Subject key identifier: 64:A9:BA:39:70:8E:BE:96:35:E9:07:D7:95:F6:79:A8:9B:8D:D6:E2 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 17A37B524923D9C2564DE7C71755D9749ECEA092 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa Signing time: Wed 21 May 2025 00:51:17 +0000 ROA not before: Wed 21 May 2025 00:51:17 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:30e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a3:7b:52:49:23:d9:c2:56:4d:e7:c7:17:55:d9:74:9e:ce:a0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 21 00:51:17 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=b014a7a5e121b0b5d277492877d3038702318ce5fdb7a2243e8d57fa0831befe, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:95:70:44:2e:37:0a:b5:2c:aa:f0:74:bc:f3: 20:b2:98:19:6a:d5:0b:b9:6e:6f:ff:14:bf:ee:6e: 13:87:45:6a:be:a8:09:7a:02:26:d1:65:e7:bc:b1: d3:85:0a:bc:ef:99:5b:11:9e:40:67:e0:fe:d9:83: b3:03:fc:89:45:de:5d:12:87:03:ca:eb:07:37:78: 86:01:5b:cf:97:5e:f4:d5:12:ff:45:8c:c4:43:68: 33:45:27:dd:f0:29:b2:6a:85:b0:27:b2:bb:f1:ec: 5a:c9:8b:d2:7b:70:bc:1e:ac:28:75:cd:67:8c:b3: 6a:ba:59:32:02:2d:2f:57:f0:c4:58:6f:2f:94:36: e5:fe:53:f1:f4:52:0c:82:17:7f:29:25:57:33:89: f5:a5:22:66:87:ef:ba:38:be:cb:3c:64:9e:ac:e7: 7c:20:4f:94:df:7b:14:41:07:15:23:5f:51:0f:d5: ea:d9:26:42:cc:12:9e:67:a4:51:67:1a:d3:f1:30: 5c:c9:7c:21:0b:e2:b9:41:70:76:ff:e3:ef:55:cb: 60:09:15:0b:6e:f9:ff:c3:78:a6:92:1d:fc:0a:81: a1:5a:f2:36:b9:68:f9:b2:8b:95:5e:d9:a0:d0:73: 84:19:08:53:e6:d7:0e:bc:c0:5c:bc:10:aa:62:47: 31:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A9:BA:39:70:8E:BE:96:35:E9:07:D7:95:F6:79:A8:9B:8D:D6:E2 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30e::/48 Signature Algorithm: sha256WithRSAEncryption 85:ba:29:5f:85:71:bf:fc:5d:66:98:6e:89:05:2a:71:fd:63: 15:aa:fb:f1:4c:1d:cd:ca:5a:c1:f4:69:39:19:f7:f1:91:7b: eb:ae:3e:b2:61:88:06:07:f8:e2:4f:84:34:76:90:f2:ba:a1: e3:9b:84:1a:07:e4:f6:ac:8f:5c:42:ac:83:ca:85:8f:a8:e1: 7e:0a:c6:d4:db:d3:49:9c:ab:9a:0d:85:3e:3f:e3:98:d6:01: f0:b4:1d:9b:9b:8c:6e:81:57:d8:c1:c7:fe:32:17:8a:39:4d: 1b:76:1e:05:c9:ce:39:bb:ad:ce:d4:0c:e1:8d:f2:cb:36:21: bd:d7:63:12:4c:1c:3f:3b:01:8a:5e:cd:bc:a1:d1:a1:ee:f1: 13:96:64:b5:74:2d:87:8f:d9:3d:05:a2:93:a7:79:06:fc:83: ce:46:58:61:87:ad:d6:63:d1:56:60:08:c5:f5:fb:c0:ab:c9: 38:be:6b:fd:80:19:62:a7:f8:00:c0:81:d3:43:d1:a0:bb:30: 01:a8:ba:b5:f8:95:f0:2c:b9:ce:bc:73:c0:51:b4:50:63:8d: 0d:93:e0:b3:04:e6:d9:5b:e2:0e:fa:f6:41:99:61:d5:36:7b: 2e:ec:9a:97:58:8b:01:98:43:c8:6f:3f:6a:d4:03:c4:91:16: ff:fa:aa:dd -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUF6N7Ukkj2cJWTefHF1XZdJ7OoJIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIxMDA1MTE3WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDE0YTdhNWUxMjFiMGI1ZDI3NzQ5Mjg3N2QzMDM4NzAy MzE4Y2U1ZmRiN2EyMjQzZThkNTdmYTA4MzFiZWZlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6lXBELjcKtSyq8HS88yCymBlq1Qu5bm//FL/ubhOHRWq+ qAl6AibRZee8sdOFCrzvmVsRnkBn4P7Zg7MD/IlF3l0ShwPK6wc3eIYBW8+XXvTV Ev9FjMRDaDNFJ93wKbJqhbAnsrvx7FrJi9J7cLwerCh1zWeMs2q6WTICLS9X8MRY by+UNuX+U/H0UgyCF38pJVczifWlImaH77o4vss8ZJ6s53wgT5TfexRBBxUjX1EP 1erZJkLMEp5npFFnGtPxMFzJfCEL4rlBcHb/4+9Vy2AJFQtu+f/DeKaSHfwKgaFa 8ja5aPmyi5Ve2aDQc4QZCFPm1w68wFy8EKpiRzEdAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUZKm6OXCOvpY16QfXlfZ5qJuN1uIwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzE3MmZkYTc2LTJhN2UtNDViNy1hYWY4LWQxMWQxNjE2MTcyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAw4wDQYJKoZIhvcNAQELBQADggEBAIW6KV+Fcb/8XWaYbokFKnH9 YxWq+/FMHc3KWsH0aTkZ9/GRe+uuPrJhiAYH+OJPhDR2kPK6oeObhBoH5Pasj1xC rIPKhY+o4X4KxtTb00mcq5oNhT4/45jWAfC0HZubjG6BV9jBx/4yF4o5TRt2HgXJ zjm7rc7UDOGN8ss2Ib3XYxJMHD87AYpezbyh0aHu8ROWZLV0LYeP2T0FopOneQb8 g85GWGGHrdZj0VZgCMX1+8CryTi+a/2AGWKn+ADAgdND0aC7MAGourX4lfAsuc68 c8BRtFBjjQ2T4LME5tlb4g769kGZYdU2ey7smpdYiwGYQ8hvP2rUA8SRFv/6qt0= -----END CERTIFICATE-----Generated at Sat Jun 14 23:44:38 2025 by rpki-client