$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa File: 172fda76-2a7e-45b7-aaf8-d11d16161720.roa (raw, json) Hash identifier: C+v6TW+2TH4LkdZOsl3rrT3yP64dR2wXlqfOgCZjsMQ= Subject key identifier: 1A:D3:01:90:1C:FA:02:81:B1:73:5F:D2:37:DC:4F:B1:FD:9E:10:AE Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3B86F2B58C8C64B01EC9F3008B6CAE0E762C860A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa Signing time: Mon 16 Jun 2025 19:00:48 +0000 ROA not before: Mon 16 Jun 2025 19:00:48 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:30e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:86:f2:b5:8c:8c:64:b0:1e:c9:f3:00:8b:6c:ae:0e:76:2c:86:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 19:00:48 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=bb6332fd5d4b340ac87d0be03aa06ff752d99251ae82e8b8a6996f7f24354509, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:ca:2e:fe:b3:57:ae:c4:da:86:17:e4:34: 47:14:fd:7d:ff:d0:ee:f6:f0:f1:7b:00:bd:88:cd: 2f:63:7b:60:84:2c:6c:c0:8e:03:b6:18:cc:5f:4d: 2f:b6:ab:81:ca:6b:47:54:7f:51:82:d3:a7:5f:a0: 93:e2:99:17:18:17:4d:7a:9a:1f:cd:85:2c:35:9a: 70:a1:b3:5b:d1:26:28:6e:d0:c4:d7:b8:11:79:56: 83:aa:74:94:6b:88:8a:c3:40:17:d2:b2:8f:31:1d: 43:96:21:3b:ef:a4:fe:be:5f:f2:c4:5a:b7:d6:e9: a5:41:cd:66:c1:1f:2b:0f:4a:08:d5:0b:9e:84:04: 27:17:05:40:0d:9a:e7:20:1a:ae:d1:44:0c:ef:e3: 58:0b:b9:5e:02:7e:d9:10:e3:34:96:99:85:71:59: 28:f3:9f:e2:e5:a1:a0:f2:00:0f:45:0d:ca:71:49: 24:89:32:04:22:be:1e:44:12:a6:a9:75:92:4c:02: b3:98:8b:59:df:eb:fd:47:48:80:b6:f4:43:e8:72: dd:19:88:8f:2e:8c:7a:ee:98:78:ae:55:39:d2:06: fd:28:ed:c2:66:f5:7f:51:44:0a:66:76:74:b6:fb: 01:27:51:33:40:4d:f9:97:4d:70:66:92:61:91:0f: 8f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D3:01:90:1C:FA:02:81:B1:73:5F:D2:37:DC:4F:B1:FD:9E:10:AE X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30e::/48 Signature Algorithm: sha256WithRSAEncryption 62:c4:c1:b5:9f:e6:1a:16:b1:b0:6c:87:66:e4:8a:ee:5f:2a: 3f:57:32:c8:d6:93:b8:09:84:ea:9e:bb:01:3b:4b:8d:2d:a7: 90:f3:dc:62:47:14:2d:74:26:25:6e:7f:c3:48:52:93:f7:35: fe:e9:0a:07:49:83:ec:92:3c:bd:be:9a:2d:a9:ae:80:e4:91: a8:b7:b0:74:34:74:0c:63:bd:f1:79:63:a9:96:87:b3:ff:b6: a2:e2:ef:c2:fc:84:6e:61:2d:e1:56:30:f6:c1:64:14:e1:db: 19:5f:e2:6f:89:9d:61:93:62:96:92:f7:b4:f4:de:e4:b4:77: d5:1a:31:c7:25:a6:f1:51:4c:25:6c:15:b5:31:d7:0a:64:df: 03:78:20:33:8d:bd:a3:91:f4:f6:ae:14:34:7b:94:87:46:d3: 51:0f:29:d5:b4:df:cf:13:09:61:4b:0c:c1:17:87:e0:aa:8a: 29:db:33:ef:cb:ad:0e:ab:80:b0:35:df:af:1a:b5:53:a2:f7: 0d:77:f2:90:09:af:a8:5e:7c:21:1d:a7:be:f1:8d:28:fe:7f: 6a:76:86:97:16:35:ce:04:d8:85:d3:cd:c5:e7:73:2a:3d:22: b9:8a:f2:88:3b:6c:d0:44:da:76:b8:8d:d7:d0:1f:2f:f2:65: d2:20:05:7b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUO4bytYyMZLAeyfMAi2yuDnYshgowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTkwMDQ4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjYzMzJmZDVkNGIzNDBhYzg3ZDBiZTAzYWEwNmZmNzUy ZDk5MjUxYWU4MmU4YjhhNjk5NmY3ZjI0MzU0NTA5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC18cou/rNXrsTahhfkNEcU/X3/0O728PF7AL2IzS9je2CE LGzAjgO2GMxfTS+2q4HKa0dUf1GC06dfoJPimRcYF016mh/NhSw1mnChs1vRJihu 0MTXuBF5VoOqdJRriIrDQBfSso8xHUOWITvvpP6+X/LEWrfW6aVBzWbBHysPSgjV C56EBCcXBUANmucgGq7RRAzv41gLuV4CftkQ4zSWmYVxWSjzn+LloaDyAA9FDcpx SSSJMgQivh5EEqapdZJMArOYi1nf6/1HSIC29EPoct0ZiI8ujHrumHiuVTnSBv0o 7cJm9X9RRApmdnS2+wEnUTNATfmXTXBmkmGRD4/VAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUGtMBkBz6AoGxc1/SN9xPsf2eEK4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzE3MmZkYTc2LTJhN2UtNDViNy1hYWY4LWQxMWQxNjE2MTcyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAw4wDQYJKoZIhvcNAQELBQADggEBAGLEwbWf5hoWsbBsh2bkiu5f Kj9XMsjWk7gJhOqeuwE7S40tp5Dz3GJHFC10JiVuf8NIUpP3Nf7pCgdJg+ySPL2+ mi2proDkkai3sHQ0dAxjvfF5Y6mWh7P/tqLi78L8hG5hLeFWMPbBZBTh2xlf4m+J nWGTYpaS97T03uS0d9UaMcclpvFRTCVsFbUx1wpk3wN4IDONvaOR9PauFDR7lIdG 01EPKdW0388TCWFLDMEXh+CqiinbM+/LrQ6rgLA1368atVOi9w138pAJr6hefCEd p77xjSj+f2p2hpcWNc4E2IXTzcXncyo9IrmK8og7bNBE2na4jdfQHy/yZdIgBXs= -----END CERTIFICATE-----Generated at Sun Jun 29 00:14:09 2025 by rpki-client