$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b69c114-d1ae-4ca1-9d42-1401c8e8cd37.roa File: 5b69c114-d1ae-4ca1-9d42-1401c8e8cd37.roa (raw, json) Hash identifier: qvfmyW135K/EDZu89uOle6ISJhKRJwiVkPZAM5bcNUw= Subject key identifier: AC:B6:EB:D1:F0:0F:08:1D:26:79:CD:14:2A:D4:9D:5A:18:63:BD:C8 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 57295A4473641E81F420B3CE3E7746DA5CFDCBD7 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b69c114-d1ae-4ca1-9d42-1401c8e8cd37.roa Signing time: Fri 25 Jul 2025 16:30:07 +0000 ROA not before: Fri 25 Jul 2025 16:30:07 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:29:5a:44:73:64:1e:81:f4:20:b3:ce:3e:77:46:da:5c:fd:cb:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 25 16:30:07 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=d563d8b01ffa57fabbf52fdddcbe01ebe0f98e0ab4da63dc592432aab5cbaf43, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:fd:e0:fe:f2:6d:e5:fc:a0:0e:69:4d:f7: 29:93:4c:38:b2:6c:be:23:26:49:91:0e:2c:cb:a7: a5:f0:04:98:ac:29:92:8e:5e:67:48:79:a8:25:8e: 33:39:7b:2f:f3:fb:08:36:c0:53:4a:cc:94:21:98: 61:f5:c2:f9:17:7d:8a:a8:e9:8c:e6:bc:18:05:f8: b0:4b:18:9f:67:7f:db:e3:dc:4f:c0:42:c9:9c:3f: 7a:de:9c:92:c7:03:06:f0:46:1d:41:0f:4d:f7:cc: ce:03:40:53:e9:60:e1:7b:80:88:c7:4f:bb:e7:97: 14:df:fa:d3:72:2c:c2:bb:7a:df:69:11:6c:67:d8: 0c:11:ec:93:23:7c:9a:9d:56:10:e6:fd:f8:6b:c9: ea:e0:a4:22:1d:79:a5:06:8a:5e:ca:bb:9e:b0:fb: 8a:aa:1e:40:fc:48:ef:70:d6:81:67:0c:6b:eb:e2: 2e:25:92:d1:12:39:42:69:01:82:3f:5d:1c:7d:70: 65:29:c2:81:08:3d:21:98:05:04:66:e3:26:25:94: 53:6d:aa:95:77:f8:d7:2e:89:ef:b0:cf:84:2f:2f: ae:20:7d:34:63:e9:46:4a:7b:06:94:73:9a:e7:15: 7d:e1:04:b2:55:6f:fb:82:36:49:a1:4a:fb:22:0c: 71:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B6:EB:D1:F0:0F:08:1D:26:79:CD:14:2A:D4:9D:5A:18:63:BD:C8 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5b69c114-d1ae-4ca1-9d42-1401c8e8cd37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.77.0/24 Signature Algorithm: sha256WithRSAEncryption 03:dd:e6:c7:06:51:81:55:4c:42:69:d0:82:27:55:2f:0b:8c: ef:07:5e:c0:47:25:2f:7b:32:75:61:5f:a4:cd:1e:04:25:93: 64:e9:87:4f:60:6a:0d:80:b1:10:1d:6f:8f:93:88:e4:05:ef: 45:9c:e1:7b:06:27:45:3a:24:30:bd:4f:58:80:c2:cf:49:fa: bc:68:63:1f:f5:d8:ba:34:14:d5:82:7e:65:e9:b3:52:5a:cf: 81:13:7d:cc:58:29:61:ac:bb:1d:b7:6e:18:11:b8:b6:8c:fa: ea:8e:b0:60:cb:13:00:84:89:5f:82:c6:41:59:24:22:0e:f9: 02:8a:18:e0:ab:be:ca:ce:41:88:c4:0a:79:b8:f9:e5:f3:8c: 45:36:7c:cc:9f:01:86:70:a0:bd:c5:44:0a:d3:2b:55:48:f5: 92:9c:62:8f:4b:fe:35:4e:9d:af:8a:2c:b6:a9:11:38:eb:82: 40:61:8c:cb:22:a1:78:bf:f0:12:1e:5e:04:35:f9:c2:b1:af: e8:51:7f:8b:4c:81:a4:3e:c3:01:0e:1e:4e:ab:1f:e7:2a:ac: ff:49:ae:c6:5f:f7:4e:2a:90:43:25:21:db:d3:4e:ad:8f:43: de:ad:b5:d0:b4:f8:f3:fe:5c:ac:2e:49:d2:56:a7:ff:be:62: 44:a3:be:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVylaRHNkHoH0ILPOPndG2lz9y9cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzI1MTYzMDA3WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTYzZDhiMDFmZmE1N2ZhYmJmNTJmZGRkY2JlMDFlYmUw Zjk4ZTBhYjRkYTYzZGM1OTI0MzJhYWI1Y2JhZjQzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3gv3g/vJt5fygDmlN9ymTTDiybL4jJkmRDizLp6XwBJis KZKOXmdIeagljjM5ey/z+wg2wFNKzJQhmGH1wvkXfYqo6YzmvBgF+LBLGJ9nf9vj 3E/AQsmcP3renJLHAwbwRh1BD033zM4DQFPpYOF7gIjHT7vnlxTf+tNyLMK7et9p EWxn2AwR7JMjfJqdVhDm/fhryergpCIdeaUGil7Ku56w+4qqHkD8SO9w1oFnDGvr 4i4lktESOUJpAYI/XRx9cGUpwoEIPSGYBQRm4yYllFNtqpV3+Ncuie+wz4QvL64g fTRj6UZKewaUc5rnFX3hBLJVb/uCNkmhSvsiDHFnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrLbr0fAPCB0mec0UKtSdWhhjvcgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzViNjljMTE0LWQxYWUtNGNhMS05ZDQyLTE0MDFjOGU4Y2QzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUk0wDQYJKoZIhvcNAQELBQADggEBAAPd5scGUYFVTEJp0IInVS8LjO8H XsBHJS97MnVhX6TNHgQlk2Tph09gag2AsRAdb4+TiOQF70Wc4XsGJ0U6JDC9T1iA ws9J+rxoYx/12Lo0FNWCfmXps1Jaz4ETfcxYKWGsux23bhgRuLaM+uqOsGDLEwCE iV+CxkFZJCIO+QKKGOCrvsrOQYjECnm4+eXzjEU2fMyfAYZwoL3FRArTK1VI9ZKc Yo9L/jVOna+KLLapETjrgkBhjMsioXi/8BIeXgQ1+cKxr+hRf4tMgaQ+wwEOHk6r H+cqrP9JrsZf904qkEMlIdvTTq2PQ96ttdC0+PP+XKwuSdJWp/++YkSjvsw= -----END CERTIFICATE-----Generated at Tue Aug 5 16:41:08 2025 by rpki-client