$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa File: 172fda76-2a7e-45b7-aaf8-d11d16161720.roa (raw, json) Hash identifier: VDRTx54a3TB/jaUIExvKCMVKVUT+P3PqvQuHBIvy7mc= Subject key identifier: 31:C9:8E:B9:19:BF:81:EE:45:EB:06:89:8E:07:4D:46:58:0B:83:9D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2CFC2484A3180577D3E358F4E93B37461F0867F8 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa Signing time: Tue 01 Apr 2025 00:50:40 +0000 ROA not before: Tue 01 Apr 2025 00:50:40 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:30e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fc:24:84:a3:18:05:77:d3:e3:58:f4:e9:3b:37:46:1f:08:67:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 1 00:50:40 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:14:95:a3:31:b5:03:d0:fc:6c:36:27:f4:8c: 83:4a:b3:48:ba:fd:8f:fe:a3:6c:ff:0f:d9:ad:0e: 2f:b3:03:6e:8f:b3:17:f2:b3:15:19:07:ab:69:a6: 5f:83:ce:5e:a5:e7:68:88:13:70:b3:ec:5c:ac:9b: 24:23:19:f0:06:7b:dc:7c:ee:2e:45:b2:11:a8:3a: 9e:22:16:6f:34:89:32:05:77:06:96:7d:a7:4e:53: df:ae:e9:65:87:4c:ff:bf:a3:1b:87:66:5d:b8:88: 41:1c:9a:93:0c:98:bd:50:66:6f:fa:24:e9:54:16: c6:6f:eb:57:a3:b0:38:dd:83:08:0f:79:f6:b3:d9: 5a:03:45:50:ce:2a:75:36:a2:bc:fc:5a:ec:0d:cf: f0:59:3b:01:19:06:56:d8:da:79:20:c2:0d:ce:44: c8:02:d0:0f:be:98:ed:90:e4:89:cc:55:ac:d5:13: 06:e0:2e:88:0d:ae:55:eb:46:70:02:92:46:a2:2f: 7c:41:27:35:cb:c5:05:6e:6c:1e:d5:e2:57:e3:35: fd:d0:f0:f4:f7:17:83:92:03:5c:7f:d2:8d:73:ee: 53:b6:df:51:fe:84:20:f1:5b:8b:9c:1d:a7:83:1b: f2:0d:2d:a5:62:fa:7c:17:2c:29:a9:6a:29:51:b5: 7d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C9:8E:B9:19:BF:81:EE:45:EB:06:89:8E:07:4D:46:58:0B:83:9D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/172fda76-2a7e-45b7-aaf8-d11d16161720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:30e::/48 Signature Algorithm: sha256WithRSAEncryption 75:fe:31:f2:a7:6e:3f:c1:8c:f0:57:d9:63:60:27:2e:b2:63: db:0e:68:1a:35:99:8c:50:10:95:93:d7:3a:d6:2a:28:e9:7d: ed:0d:47:68:40:9b:d6:a8:5a:3c:7a:a9:af:a8:26:c7:a5:ee: c6:6a:10:5e:89:ce:29:7f:bb:1c:97:4a:c4:21:f8:9b:14:c9: 18:b4:f4:fa:09:75:d4:b7:b9:13:48:13:7f:b9:b5:26:d0:60: 24:56:c2:83:fd:f1:4e:2e:85:fd:ad:87:95:36:77:4f:ad:98: e6:1d:3b:3e:05:ab:79:1c:b9:56:c4:8b:09:b0:c8:88:bf:ee: b4:d0:10:cd:dc:67:67:58:b9:c5:dd:c4:57:37:12:2b:47:64: 6d:c6:0e:79:b9:67:56:56:2f:54:3a:49:af:33:e5:38:48:f2: eb:b5:99:5d:a5:87:4a:e5:c2:01:21:1a:35:df:fa:f4:49:e6: 59:b2:45:94:27:9f:a4:db:83:ec:03:8e:47:67:0f:c5:14:fa: a5:d0:4d:83:0e:43:cf:66:34:99:f8:6d:8c:d3:35:2b:ae:3f: 10:f7:ac:3d:e6:f5:ac:d6:0f:a2:d6:7b:bf:4d:87:03:d1:68: 6a:2e:52:dd:c4:cf:72:d1:d8:1a:64:c0:4c:1c:e9:85:9b:e2: 09:8b:9b:9e -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULPwkhKMYBXfT41j06Ts3Rh8IZ/gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDAxMDA1MDQwWhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWMwZjg1ODAzODMyODNkOWM1NmJkYzhjMmM2ZTZmODlj YmQ0M2QxYTMwZDBhYWRjNjVlMzNlYzkwMmJlOWZkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVFJWjMbUD0PxsNif0jINKs0i6/Y/+o2z/D9mtDi+zA26P sxfysxUZB6tppl+Dzl6l52iIE3Cz7FysmyQjGfAGe9x87i5FshGoOp4iFm80iTIF dwaWfadOU9+u6WWHTP+/oxuHZl24iEEcmpMMmL1QZm/6JOlUFsZv61ejsDjdgwgP efaz2VoDRVDOKnU2orz8WuwNz/BZOwEZBlbY2nkgwg3ORMgC0A++mO2Q5InMVazV EwbgLogNrlXrRnACkkaiL3xBJzXLxQVubB7V4lfjNf3Q8PT3F4OSA1x/0o1z7lO2 31H+hCDxW4ucHaeDG/INLaVi+nwXLCmpailRtX1dAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUMcmOuRm/ge5F6waJjgdNRlgLg50wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzE3MmZkYTc2LTJhN2UtNDViNy1hYWY4LWQxMWQxNjE2MTcyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzAAw4wDQYJKoZIhvcNAQELBQADggEBAHX+MfKnbj/BjPBX2WNgJy6y Y9sOaBo1mYxQEJWT1zrWKijpfe0NR2hAm9aoWjx6qa+oJsel7sZqEF6Jzil/uxyX SsQh+JsUyRi09PoJddS3uRNIE3+5tSbQYCRWwoP98U4uhf2th5U2d0+tmOYdOz4F q3kcuVbEiwmwyIi/7rTQEM3cZ2dYucXdxFc3EitHZG3GDnm5Z1ZWL1Q6Sa8z5ThI 8uu1mV2lh0rlwgEhGjXf+vRJ5lmyRZQnn6Tbg+wDjkdnD8UU+qXQTYMOQ89mNJn4 bYzTNSuuPxD3rD3m9azWD6LWe79NhwPRaGouUt3Ez3LR2BpkwEwc6YWb4gmLm54= -----END CERTIFICATE-----Generated at Fri Apr 4 23:25:44 2025 by rpki-client