$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c715fe80-d529-43c6-8fe3-0fe4f18f0712.roa File: c715fe80-d529-43c6-8fe3-0fe4f18f0712.roa (raw, json) Hash identifier: lbuEiNQ7JldFEXOunmZ3hTa8oFPOtZJDmtUO7MOJbog= Subject key identifier: 3E:FF:D0:03:43:E1:E0:E1:B8:2F:9E:DE:9A:AF:9D:37:B8:27:6A:B5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0F3656ACA2587DF68A5D6F80509CD0218300F9FE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c715fe80-d529-43c6-8fe3-0fe4f18f0712.roa Signing time: Tue 20 May 2025 17:50:28 +0000 ROA not before: Tue 20 May 2025 17:50:28 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:36:56:ac:a2:58:7d:f6:8a:5d:6f:80:50:9c:d0:21:83:00:f9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 20 17:50:28 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=97607ff39f34bd74cb00ad2bb157cc3a43b92ed67238e7a407a2228686046a7f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ca:d0:07:33:3c:a9:d2:a4:b7:5c:16:5a:08: ef:03:90:3c:39:5e:2c:53:83:b9:3a:10:62:2f:10: 41:4d:80:42:f6:4f:4d:72:01:c0:aa:64:98:a0:36: d5:f4:a1:f9:da:7f:7f:8f:d9:f5:37:58:aa:33:a9: f8:14:b2:3c:95:30:c5:c4:65:9a:8d:70:3f:1d:0c: 49:56:61:98:16:2d:34:3d:f4:f1:43:dc:0e:a7:c5: 53:a0:88:17:68:24:16:2f:80:db:4d:8e:bd:72:1c: ef:be:bb:14:08:09:f3:5a:c3:fa:b7:82:55:3a:53: 0a:85:bf:ec:bc:b0:d2:e0:91:48:79:a5:44:b8:ba: 2b:95:21:db:07:ce:79:b9:b6:91:8d:92:df:7b:ef: 2a:ed:fa:ad:70:d5:69:94:98:7c:29:87:61:99:6a: bf:eb:a5:b3:12:d7:e5:89:30:52:28:dc:aa:16:61: 7e:b0:e7:15:95:01:c9:53:8b:52:b8:0b:64:86:b3: b6:4b:8f:0e:13:c1:d0:5f:82:be:59:5c:69:d3:df: 1a:91:6f:c3:1d:42:ae:b1:36:ba:95:96:03:28:a9: 31:62:6f:23:26:55:e8:6b:8f:82:e9:f6:60:9b:7b: 5c:89:e8:05:22:5e:d8:1e:fd:9c:b3:da:70:b3:63: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FF:D0:03:43:E1:E0:E1:B8:2F:9E:DE:9A:AF:9D:37:B8:27:6A:B5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c715fe80-d529-43c6-8fe3-0fe4f18f0712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.10.0/24 Signature Algorithm: sha256WithRSAEncryption 06:f9:14:ee:61:83:7e:32:5b:b1:92:03:ad:e7:06:ba:38:ad: 22:72:23:96:bb:2b:d5:2e:37:1b:db:70:b6:3b:b0:65:7a:5b: bc:ce:1a:33:38:88:e4:23:cf:23:f9:3e:a0:7b:12:66:ba:ce: 80:ff:13:85:b5:67:13:7f:10:2c:d9:e8:6c:c0:96:52:84:8e: 1d:06:c7:cd:ab:e0:bc:be:c1:5d:15:c4:e6:bd:cb:9d:e2:2b: 6c:81:38:d8:c9:28:b2:2e:62:82:82:33:18:34:ea:b3:b9:df: 73:54:a8:d2:a0:2e:2c:3b:f5:e9:38:75:94:6a:86:99:01:22: 66:46:4b:2b:a4:18:74:35:ae:87:81:a6:4a:ad:66:fc:0a:a2: 0f:93:0e:be:53:c6:6d:0b:43:5c:a6:ef:ea:f4:01:ed:78:b6: 20:92:60:63:9b:8d:dc:3e:90:03:1c:3d:f6:b9:ec:20:4b:8f: d0:63:76:a8:c8:22:ba:4b:c0:ed:ef:96:e9:93:65:20:11:41: c0:ea:8c:96:51:e3:31:ec:53:64:d3:62:99:9c:26:79:35:cc: a8:1a:25:9a:74:03:26:63:e8:80:e9:a9:7c:45:64:45:11:bf: 55:4a:38:20:b1:90:f7:4b:48:de:a9:85:9e:c5:f6:07:08:13: 2e:92:f9:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDzZWrKJYffaKXW+AUJzQIYMA+f4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIwMTc1MDI4WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzYwN2ZmMzlmMzRiZDc0Y2IwMGFkMmJiMTU3Y2MzYTQz YjkyZWQ2NzIzOGU3YTQwN2EyMjI4Njg2MDQ2YTdmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUytAHMzyp0qS3XBZaCO8DkDw5XixTg7k6EGIvEEFNgEL2 T01yAcCqZJigNtX0ofnaf3+P2fU3WKozqfgUsjyVMMXEZZqNcD8dDElWYZgWLTQ9 9PFD3A6nxVOgiBdoJBYvgNtNjr1yHO++uxQICfNaw/q3glU6UwqFv+y8sNLgkUh5 pUS4uiuVIdsHznm5tpGNkt977yrt+q1w1WmUmHwph2GZar/rpbMS1+WJMFIo3KoW YX6w5xWVAclTi1K4C2SGs7ZLjw4TwdBfgr5ZXGnT3xqRb8MdQq6xNrqVlgMoqTFi byMmVehrj4Lp9mCbe1yJ6AUiXtge/Zyz2nCzY1mpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPv/QA0Ph4OG4L57emq+dN7gnarUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2M3MTVmZTgwLWQ1MjktNDNjNi04ZmUzLTBmZTRmMThmMDcxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUgowDQYJKoZIhvcNAQELBQADggEBAAb5FO5hg34yW7GSA63nBro4rSJy I5a7K9UuNxvbcLY7sGV6W7zOGjM4iOQjzyP5PqB7Ema6zoD/E4W1ZxN/ECzZ6GzA llKEjh0Gx82r4Ly+wV0VxOa9y53iK2yBONjJKLIuYoKCMxg06rO533NUqNKgLiw7 9ek4dZRqhpkBImZGSyukGHQ1roeBpkqtZvwKog+TDr5Txm0LQ1ym7+r0Ae14tiCS YGObjdw+kAMcPfa57CBLj9BjdqjIIrpLwO3vlumTZSARQcDqjJZR4zHsU2TTYpmc Jnk1zKgaJZp0AyZj6IDpqXxFZEURv1VKOCCxkPdLSN6phZ7F9gcIEy6S+Qk= -----END CERTIFICATE-----Generated at Sat Jun 14 05:56:04 2025 by rpki-client