$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/717f5e93-b9de-4290-9c65-f643bb0d3642.roa File: 717f5e93-b9de-4290-9c65-f643bb0d3642.roa (raw, json) Hash identifier: yliDyGtzULxl5WBeDR1NemHyx9JojBaEJApkhUuSwj0= Subject key identifier: 62:E3:92:A3:11:17:2E:6E:DA:0B:BA:BD:53:08:9D:A9:43:D0:2F:94 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 01DDF448A92D752FEF6AD0ED68C3779B292B1DEB Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/717f5e93-b9de-4290-9c65-f643bb0d3642.roa Signing time: Mon 16 Jun 2025 18:50:20 +0000 ROA not before: Mon 16 Jun 2025 18:50:20 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:dd:f4:48:a9:2d:75:2f:ef:6a:d0:ed:68:c3:77:9b:29:2b:1d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 18:50:20 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=a52058c3a2b871a974d11e2f2ec8e3eb360f9d7795fe96a3615e3b7da9ff7b63, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e9:d1:6c:ad:bd:a5:21:bc:36:1c:76:a6:2a: 03:41:64:61:2f:a8:44:63:c6:09:a9:d8:36:b6:de: 45:aa:85:c4:8e:44:03:c7:4f:15:bf:68:0f:6c:2f: 1e:ba:a1:e8:d5:d0:09:0f:58:b5:b8:32:ac:4c:28: 71:4f:62:f7:1f:18:97:8e:a2:68:26:01:b1:94:0b: b5:8c:1e:d1:12:d5:76:66:3a:55:61:5a:e9:a5:12: 37:2b:30:96:f1:63:bc:bd:4e:86:52:5c:92:d2:26: 60:f6:ab:2d:b4:53:96:61:08:ce:5e:26:46:a0:f3: 82:87:e0:51:06:ed:80:d9:14:b4:19:93:07:79:ba: c3:9f:b6:8d:97:40:66:7f:3a:de:eb:4b:cb:9f:eb: 58:63:69:2a:b3:cf:f3:e4:57:df:48:89:29:1d:fb: ac:a3:28:05:ac:7b:f5:80:0b:5b:83:39:72:da:e6: da:17:e3:5d:ac:bf:69:3f:96:f2:a1:8b:54:34:17: 8b:13:13:cb:b9:4f:4e:1d:a7:47:94:7e:92:d4:0d: b1:38:c7:53:c2:ba:95:e8:c6:8f:32:59:50:eb:80: f7:a9:4e:06:ae:7d:25:af:52:a6:38:09:49:0a:9c: 9c:05:b1:b4:22:b5:ad:fe:a2:81:bd:92:b0:5c:25: 0b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E3:92:A3:11:17:2E:6E:DA:0B:BA:BD:53:08:9D:A9:43:D0:2F:94 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/717f5e93-b9de-4290-9c65-f643bb0d3642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.8.0/24 Signature Algorithm: sha256WithRSAEncryption 37:34:58:d0:f8:68:d5:1e:ed:b4:59:49:b8:23:a8:1e:c3:c3: ce:3f:8b:35:3c:70:18:bd:89:26:85:29:9f:23:4b:09:3d:a1: 6a:79:aa:20:51:59:da:9a:ce:71:01:66:dc:65:7d:b5:8a:22: 0e:4c:1d:34:d2:d0:c6:67:e1:91:85:bf:ca:04:2a:4a:80:87: 79:99:79:1b:23:d7:19:5d:11:f9:ad:29:bd:ba:37:e4:93:2b: 6a:0c:f4:b4:42:95:98:9b:41:7f:a6:ce:37:eb:d2:03:26:2c: 35:df:fd:99:bd:07:92:d7:d8:eb:27:8a:ec:0b:64:79:3d:be: 68:9a:07:b6:a1:b7:cf:07:6b:8d:36:db:b9:ab:56:77:c2:e3: 78:72:3c:7f:9a:af:6b:e3:cd:b2:19:88:e0:32:2a:65:5d:05: a6:f0:8c:4d:e5:df:ca:c0:de:27:86:bc:46:76:4a:5d:2c:87: 11:eb:2f:60:81:0f:84:8d:75:20:44:71:aa:45:a9:64:b2:9a: 9f:96:07:05:2c:c4:81:4f:28:af:24:78:e0:b4:ec:f6:de:fb: e9:d6:b4:a5:2b:ce:ef:35:1d:ca:5f:92:3a:da:b7:e7:1b:7f: 37:3f:48:05:6f:83:0d:44:3f:0c:68:85:d3:06:8d:6a:91:67: c6:20:39:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAd30SKktdS/vatDtaMN3mykrHeswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTg1MDIwWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTIwNThjM2EyYjg3MWE5NzRkMTFlMmYyZWM4ZTNlYjM2 MGY5ZDc3OTVmZTk2YTM2MTVlM2I3ZGE5ZmY3YjYzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCU6dFsrb2lIbw2HHamKgNBZGEvqERjxgmp2Da23kWqhcSO RAPHTxW/aA9sLx66oejV0AkPWLW4MqxMKHFPYvcfGJeOomgmAbGUC7WMHtES1XZm OlVhWumlEjcrMJbxY7y9ToZSXJLSJmD2qy20U5ZhCM5eJkag84KH4FEG7YDZFLQZ kwd5usOfto2XQGZ/Ot7rS8uf61hjaSqzz/PkV99IiSkd+6yjKAWse/WAC1uDOXLa 5toX412sv2k/lvKhi1Q0F4sTE8u5T04dp0eUfpLUDbE4x1PCupXoxo8yWVDrgPep TgaufSWvUqY4CUkKnJwFsbQita3+ooG9krBcJQtTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYuOSoxEXLm7aC7q9UwidqUPQL5QwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzcxN2Y1ZTkzLWI5ZGUtNDI5MC05YzY1LWY2NDNiYjBkMzY0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUggwDQYJKoZIhvcNAQELBQADggEBADc0WND4aNUe7bRZSbgjqB7Dw84/ izU8cBi9iSaFKZ8jSwk9oWp5qiBRWdqaznEBZtxlfbWKIg5MHTTS0MZn4ZGFv8oE KkqAh3mZeRsj1xldEfmtKb26N+STK2oM9LRClZibQX+mzjfr0gMmLDXf/Zm9B5LX 2OsniuwLZHk9vmiaB7aht88Ha40227mrVnfC43hyPH+ar2vjzbIZiOAyKmVdBabw jE3l38rA3ieGvEZ2Sl0shxHrL2CBD4SNdSBEcapFqWSymp+WBwUsxIFPKK8keOC0 7Pbe++nWtKUrzu81Hcpfkjrat+cbfzc/SAVvgw1EPwxohdMGjWqRZ8YgOfA= -----END CERTIFICATE-----Generated at Sun Jun 29 04:07:16 2025 by rpki-client