$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b78dc6a-5ef7-42e2-adc0-1cfe7fe9f97c.roa File: 1b78dc6a-5ef7-42e2-adc0-1cfe7fe9f97c.roa (raw, json) Hash identifier: jEkqUTThexMzTbAHGjobCCxbWXLT6NPBK6dnZUMK82I= Subject key identifier: 8B:E4:6E:5A:D3:55:74:93:F7:A6:64:7B:E3:85:F9:2B:C0:B8:B3:96 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5D44C388C7C1386FEAD3F3E5E717B20604BE84AC Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b78dc6a-5ef7-42e2-adc0-1cfe7fe9f97c.roa Signing time: Tue 05 Aug 2025 18:00:39 +0000 ROA not before: Tue 05 Aug 2025 18:00:39 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:44:c3:88:c7:c1:38:6f:ea:d3:f3:e5:e7:17:b2:06:04:be:84:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 5 18:00:39 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=5b0c4dcfa2ba5f025309a0aa63987ef2efd914dd135103bfc05ed685856c34eb, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:e5:e4:b8:14:63:27:ef:ab:71:2d:30:57: 4d:96:02:86:7b:5c:31:3d:a9:a5:24:5c:e0:f2:2a: ce:de:1a:78:bd:33:f2:a9:84:15:ba:b5:8b:cd:cc: 33:71:ed:00:4d:5f:da:ee:28:1e:03:f2:e8:98:39: ae:b1:0d:75:ce:7c:e5:bf:7d:34:a5:12:42:4f:fb: 8e:b8:e5:fb:85:42:15:3d:f7:e2:90:36:c8:71:5d: 88:ce:08:b8:c5:07:8a:14:ef:7c:a2:85:e4:63:46: 1c:a0:e6:ef:a1:09:b6:fb:9f:a6:6f:dc:b3:85:16: 0f:4d:56:10:b5:99:1e:ec:29:56:7f:03:7b:0c:7d: e5:aa:f9:3d:f1:08:59:7b:e8:31:b0:e0:21:80:c8: 55:02:d0:2c:31:78:69:39:fb:6a:d1:23:e4:53:9f: 27:16:25:51:bd:60:3b:89:f7:3c:2c:db:58:e6:ec: aa:43:c6:41:8b:94:a4:af:0f:1b:ea:0b:02:4b:85: 23:22:7d:74:28:6d:f6:16:c3:fb:61:99:e5:ba:b3: 96:56:4c:9a:92:c5:39:95:e8:48:be:d2:ff:e1:de: 96:28:ba:3c:66:3e:bd:d5:72:92:46:f0:da:b7:de: 6b:ca:7d:af:25:3d:0d:5f:f0:2c:63:08:de:05:7a: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E4:6E:5A:D3:55:74:93:F7:A6:64:7B:E3:85:F9:2B:C0:B8:B3:96 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b78dc6a-5ef7-42e2-adc0-1cfe7fe9f97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.95.0/24 Signature Algorithm: sha256WithRSAEncryption 85:9d:74:a0:ba:6c:8e:c8:d1:32:44:13:50:65:aa:8b:c0:00: bd:30:92:26:f6:eb:52:6d:46:f0:f4:f2:b3:b1:e6:be:0f:a3: 9f:fa:e6:30:37:69:65:3e:cd:0d:4e:84:01:98:59:76:2a:b8: 9b:45:d7:fa:25:d5:40:66:93:d8:98:05:cb:ef:85:bb:e7:7c: a4:fa:85:d0:d3:98:2e:18:b6:cd:d8:95:24:e6:04:9b:5a:ee: 31:cf:04:c6:a2:ed:05:50:54:4f:91:f4:c2:e5:3d:9a:d0:b5: 9b:bb:55:a2:95:02:34:16:d4:c7:25:79:d8:93:8a:c2:be:2a: e2:de:9c:16:df:08:74:8b:3c:8f:5d:30:57:6f:da:42:31:77: 71:54:31:cb:68:8b:39:88:93:7d:48:94:83:75:a1:84:b0:95: 65:f3:d2:52:7c:ee:32:87:0c:b7:aa:6f:08:0b:05:5b:a0:c1: 07:8f:07:4a:35:ca:24:54:40:41:73:ff:4a:0c:7d:d9:79:88: 56:e0:fe:30:7b:b7:4e:39:55:07:ab:03:bf:98:ba:a9:01:88: 15:2e:38:a0:58:bb:41:8f:d1:96:13:68:32:1a:c1:b0:18:8d: 63:1c:6c:c0:8c:e4:fe:eb:11:f0:21:68:86:5d:47:a3:1d:a6: f7:8b:6f:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXUTDiMfBOG/q0/Pl5xeyBgS+hKwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODA1MTgwMDM5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjBjNGRjZmEyYmE1ZjAyNTMwOWEwYWE2Mzk4N2VmMmVm ZDkxNGRkMTM1MTAzYmZjMDVlZDY4NTg1NmMzNGViMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWr+XkuBRjJ++rcS0wV02WAoZ7XDE9qaUkXODyKs7eGni9 M/KphBW6tYvNzDNx7QBNX9ruKB4D8uiYOa6xDXXOfOW/fTSlEkJP+4645fuFQhU9 9+KQNshxXYjOCLjFB4oU73yiheRjRhyg5u+hCbb7n6Zv3LOFFg9NVhC1mR7sKVZ/ A3sMfeWq+T3xCFl76DGw4CGAyFUC0CwxeGk5+2rRI+RTnycWJVG9YDuJ9zws21jm 7KpDxkGLlKSvDxvqCwJLhSMifXQobfYWw/thmeW6s5ZWTJqSxTmV6Ei+0v/h3pYo ujxmPr3VcpJG8Nq33mvKfa8lPQ1f8CxjCN4Feu2XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUi+RuWtNVdJP3pmR744X5K8C4s5YwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFiNzhkYzZhLTVlZjctNDJlMi1hZGMwLTFjZmU3ZmU5Zjk3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUl8wDQYJKoZIhvcNAQELBQADggEBAIWddKC6bI7I0TJEE1BlqovAAL0w kib261JtRvD08rOx5r4Po5/65jA3aWU+zQ1OhAGYWXYquJtF1/ol1UBmk9iYBcvv hbvnfKT6hdDTmC4Yts3YlSTmBJta7jHPBMai7QVQVE+R9MLlPZrQtZu7VaKVAjQW 1MclediTisK+KuLenBbfCHSLPI9dMFdv2kIxd3FUMctoizmIk31IlIN1oYSwlWXz 0lJ87jKHDLeqbwgLBVugwQePB0o1yiRUQEFz/0oMfdl5iFbg/jB7t045VQerA7+Y uqkBiBUuOKBYu0GP0ZYTaDIawbAYjWMcbMCM5P7rEfAhaIZdR6MdpveLbyU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:38:04 2025 by rpki-client