$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c0b0172-d659-4706-bab8-89b4e66cce65.roa File: 2c0b0172-d659-4706-bab8-89b4e66cce65.roa (raw, json) Hash identifier: 3Iy5hPvLU7k1j7YXgVK97TsDh+IUih4Lnhn1rdW8Guo= Subject key identifier: 06:D7:76:7C:FF:E3:36:29:56:36:8E:39:F7:76:28:7C:77:90:FE:D5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 42715EE0723ACDAFB114ABE380CF8D23387F5C62 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c0b0172-d659-4706-bab8-89b4e66cce65.roa Signing time: Fri 11 Jul 2025 18:00:14 +0000 ROA not before: Fri 11 Jul 2025 18:00:14 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:71:5e:e0:72:3a:cd:af:b1:14:ab:e3:80:cf:8d:23:38:7f:5c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 11 18:00:14 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=b030c5b025a4b26a77ded3ba2cf591aebcc1250ec444453c549b096f28964bf8, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:40:a4:b6:9b:57:7c:4b:d9:b1:94:10:68: 84:be:f4:b6:76:d7:ef:43:31:45:57:1a:ab:34:9a: 54:88:3c:75:43:5f:51:b1:03:58:36:50:8f:ca:9b: 82:cd:99:7c:d7:7a:11:9b:9a:cb:20:32:43:58:17: 25:5c:dd:a1:51:b0:66:84:99:7b:76:e0:b2:9e:82: c2:98:c8:91:7b:29:14:ec:a4:47:8c:53:c5:9a:b7: 13:ec:e9:6d:88:08:01:76:e2:f7:fc:ba:01:d1:d7: 47:7a:a5:f6:cb:07:ce:5e:99:8e:af:1d:80:df:0e: dc:19:a9:b3:42:3a:3d:a3:23:4d:e5:86:7e:60:20: 99:30:0a:e6:c0:54:b9:a0:5d:df:e5:04:4c:bb:53: 8b:1d:75:53:fb:17:8a:99:2a:1a:0a:42:0d:a2:03: c2:d9:04:19:f6:4b:9e:d7:fd:1d:19:c0:f7:b7:cd: b5:96:0b:6c:61:fa:6b:10:65:13:8a:bd:f2:59:93: 7a:e5:2a:b1:7f:51:dc:95:1e:30:60:e0:35:75:d7: d5:a6:4d:00:3f:18:12:c6:8e:a9:93:e7:9e:ae:ef: af:d2:66:e1:93:a3:5b:c8:8b:f2:30:03:d5:07:0c: 3f:56:d9:9c:92:6b:b8:27:51:4b:c9:b2:1a:6f:47: 76:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D7:76:7C:FF:E3:36:29:56:36:8E:39:F7:76:28:7C:77:90:FE:D5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2c0b0172-d659-4706-bab8-89b4e66cce65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.89.0/24 Signature Algorithm: sha256WithRSAEncryption ae:42:16:5d:8a:dc:d8:01:1d:d0:0c:06:b7:22:cb:13:6a:14: 20:e2:cc:3e:50:4e:aa:0c:54:52:0e:ab:6b:92:ac:fb:eb:7d: bd:0f:55:ff:7c:4e:d9:ed:c4:c7:8d:d4:03:44:6d:3c:64:97: 8e:c8:81:4a:8d:26:bd:50:97:29:12:0c:8d:4b:86:ea:f7:0b: 9a:ee:9c:a6:36:1b:ea:3a:83:de:5a:41:c7:98:6f:24:42:fc: 1a:1a:fe:08:ea:73:d7:af:c4:42:76:78:12:cd:57:50:47:82: 0f:b5:2f:2e:ea:b9:5a:61:19:c4:cc:fa:ef:94:50:88:10:74: db:5d:e9:2d:f5:c4:72:fb:86:d6:40:52:db:16:86:1d:c6:3c: ba:9e:e2:d5:9d:31:ef:78:cc:e8:15:ed:f0:65:8c:ef:a6:c1: cc:9c:e0:3e:5a:25:d2:f2:4e:71:13:53:44:90:d3:16:e7:b5: 1a:82:f2:1e:fa:b6:25:dc:1d:56:de:b6:e6:92:c2:d8:aa:1c: f7:ed:dc:41:f7:08:e7:d2:86:cb:88:49:06:89:d4:8a:87:e8: 85:fd:a8:c8:05:bc:1c:84:f8:5b:40:39:8e:d9:c6:8b:fd:9a: 61:ca:67:cb:1e:c0:49:73:4f:55:fb:64:94:7e:99:40:9e:45: e7:90:e5:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQnFe4HI6za+xFKvjgM+NIzh/XGIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzExMTgwMDE0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDMwYzViMDI1YTRiMjZhNzdkZWQzYmEyY2Y1OTFhZWJj YzEyNTBlYzQ0NDQ1M2M1NDliMDk2ZjI4OTY0YmY4MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeoECktptXfEvZsZQQaIS+9LZ21+9DMUVXGqs0mlSIPHVD X1GxA1g2UI/Km4LNmXzXehGbmssgMkNYFyVc3aFRsGaEmXt24LKegsKYyJF7KRTs pEeMU8WatxPs6W2ICAF24vf8ugHR10d6pfbLB85emY6vHYDfDtwZqbNCOj2jI03l hn5gIJkwCubAVLmgXd/lBEy7U4sddVP7F4qZKhoKQg2iA8LZBBn2S57X/R0ZwPe3 zbWWC2xh+msQZROKvfJZk3rlKrF/UdyVHjBg4DV119WmTQA/GBLGjqmT556u76/S ZuGTo1vIi/IwA9UHDD9W2ZySa7gnUUvJshpvR3ZXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBtd2fP/jNilWNo4593YofHeQ/tUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzJjMGIwMTcyLWQ2NTktNDcwNi1iYWI4LTg5YjRlNjZjY2U2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUlkwDQYJKoZIhvcNAQELBQADggEBAK5CFl2K3NgBHdAMBrciyxNqFCDi zD5QTqoMVFIOq2uSrPvrfb0PVf98TtntxMeN1ANEbTxkl47IgUqNJr1QlykSDI1L hur3C5runKY2G+o6g95aQceYbyRC/Boa/gjqc9evxEJ2eBLNV1BHgg+1Ly7quVph GcTM+u+UUIgQdNtd6S31xHL7htZAUtsWhh3GPLqe4tWdMe94zOgV7fBljO+mwcyc 4D5aJdLyTnETU0SQ0xbntRqC8h76tiXcHVbetuaSwtiqHPft3EH3COfShsuISQaJ 1IqH6IX9qMgFvByE+FtAOY7Zxov9mmHKZ8sewElzT1X7ZJR+mUCeReeQ5cw= -----END CERTIFICATE-----Generated at Mon Aug 4 21:48:09 2025 by rpki-client