$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/290764c5-d8b5-4ef5-a548-14fbec8dba2e.roa File: 290764c5-d8b5-4ef5-a548-14fbec8dba2e.roa (raw, json) Hash identifier: auWxSvcLEnpWTRkxpKxwhK7vjSGfkRyf4T0BCCQ1Q3I= Subject key identifier: C2:00:36:B4:05:8C:B3:AC:D8:69:90:9A:1A:A2:EF:16:6D:1E:FD:A0 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 18F311E4C074808077A29FF1A51E3E8B97038B8D Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/290764c5-d8b5-4ef5-a548-14fbec8dba2e.roa Signing time: Mon 16 Jun 2025 18:50:12 +0000 ROA not before: Mon 16 Jun 2025 18:50:12 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f3:11:e4:c0:74:80:80:77:a2:9f:f1:a5:1e:3e:8b:97:03:8b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 18:50:12 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=1dda1e281d9f267a0b0fce36778b7fb5ccf221a026ded5f5a047072a820e1277, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:01:cd:23:c1:3d:fd:d3:56:db:d9:0e:7b: 68:7a:1d:77:c2:b4:d5:01:a5:8e:d1:3f:8f:5b:a6: 40:ed:60:c7:ec:b2:f3:ac:4a:36:a3:f3:43:4a:2f: a8:29:ad:3b:ec:9c:52:c6:b8:66:b5:1a:d7:84:8b: 6c:98:40:c7:ac:1d:83:a6:65:65:a3:b3:62:50:e1: 11:fe:b9:6a:6d:b8:ab:9c:60:fa:2d:ef:43:33:30: 32:e1:71:d1:06:98:d4:87:2f:1c:1f:01:25:01:0f: 0e:89:e9:1c:75:4e:51:f9:cd:9e:34:e2:ce:43:fb: 1f:75:d1:6e:ba:43:36:fc:80:5b:12:44:d6:26:52: 9d:52:32:61:f8:c2:a1:44:ce:e5:aa:84:d3:e9:be: 04:2c:12:10:57:32:e6:83:2a:05:79:6c:0a:6c:84: 2b:90:a5:f7:0f:0d:28:d8:95:2d:dd:60:d2:17:af: 79:87:2a:8c:d4:78:5d:16:24:8d:b0:a7:2d:e6:a7: e2:6b:8b:ba:1a:cb:1b:ae:4e:08:21:bb:d0:03:fa: 23:4a:95:49:fe:94:05:e9:73:e5:38:6c:a5:58:2c: 53:02:4a:c1:e3:80:ff:64:0a:74:d6:c4:b8:ae:a0: 9c:f4:35:12:38:d5:91:8a:86:01:2d:8b:21:2c:60: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:00:36:B4:05:8C:B3:AC:D8:69:90:9A:1A:A2:EF:16:6D:1E:FD:A0 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/290764c5-d8b5-4ef5-a548-14fbec8dba2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.6.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:54:ae:b5:75:cc:68:a6:67:50:c5:20:29:fd:60:b0:5c:2f: 1f:c6:6f:e3:a8:57:18:3f:0b:aa:64:d0:26:d9:48:cd:4a:cb: d4:b7:a0:6d:70:e0:1b:88:d2:50:7e:ff:f8:91:e7:dc:21:04: c8:a3:36:83:96:fd:a2:1f:95:a1:f9:05:66:38:97:c8:9b:cd: 42:a8:66:3d:7a:62:21:a3:4a:92:8a:f1:05:96:4a:7d:08:3f: 0e:01:7c:39:96:bc:6d:26:0c:ec:7b:15:73:fd:51:5d:03:e1: a9:6d:3e:ca:d2:43:c1:05:61:bb:67:c6:76:72:f0:3e:98:b9: 45:ee:5c:18:74:0a:2e:a9:0f:44:b1:2b:c7:36:06:da:0a:a7: e2:e5:fe:de:2b:49:bb:33:b3:b8:3f:ab:4d:5c:b9:6c:7f:9e: 40:95:3f:54:9c:31:c8:e4:04:d7:7c:6d:37:2d:7d:88:cb:d1: 8a:e6:c3:d1:7f:31:47:f7:74:07:9c:7c:86:78:2c:83:d0:a8: 9b:4c:61:5a:63:d1:a5:1a:30:0d:c7:40:b7:2f:1b:94:2b:47: 59:b3:e7:b2:64:5e:c5:35:37:8f:13:db:1b:13:d4:57:1d:aa: c5:68:0b:b5:a7:e6:e6:f1:51:84:67:cf:c9:2a:e9:67:19:ff: 73:c6:69:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGPMR5MB0gIB3op/xpR4+i5cDi40wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTg1MDEyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGRhMWUyODFkOWYyNjdhMGIwZmNlMzY3NzhiN2ZiNWNj ZjIyMWEwMjZkZWQ1ZjVhMDQ3MDcyYTgyMGUxMjc3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH3wHNI8E9/dNW29kOe2h6HXfCtNUBpY7RP49bpkDtYMfs svOsSjaj80NKL6gprTvsnFLGuGa1GteEi2yYQMesHYOmZWWjs2JQ4RH+uWptuKuc YPot70MzMDLhcdEGmNSHLxwfASUBDw6J6Rx1TlH5zZ404s5D+x910W66Qzb8gFsS RNYmUp1SMmH4wqFEzuWqhNPpvgQsEhBXMuaDKgV5bApshCuQpfcPDSjYlS3dYNIX r3mHKozUeF0WJI2wpy3mp+Jri7oayxuuTgghu9AD+iNKlUn+lAXpc+U4bKVYLFMC SsHjgP9kCnTWxLiuoJz0NRI41ZGKhgEtiyEsYJphAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwgA2tAWMs6zYaZCaGqLvFm0e/aAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI5MDc2NGM1LWQ4YjUtNGVmNS1hNTQ4LTE0ZmJlYzhkYmEyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUgYwDQYJKoZIhvcNAQELBQADggEBAJ5UrrV1zGimZ1DFICn9YLBcLx/G b+OoVxg/C6pk0CbZSM1Ky9S3oG1w4BuI0lB+//iR59whBMijNoOW/aIflaH5BWY4 l8ibzUKoZj16YiGjSpKK8QWWSn0IPw4BfDmWvG0mDOx7FXP9UV0D4altPsrSQ8EF YbtnxnZy8D6YuUXuXBh0Ci6pD0SxK8c2BtoKp+Ll/t4rSbszs7g/q01cuWx/nkCV P1ScMcjkBNd8bTctfYjL0Yrmw9F/MUf3dAecfIZ4LIPQqJtMYVpj0aUaMA3HQLcv G5QrR1mz57JkXsU1N48T2xsT1FcdqsVoC7Wn5ubxUYRnz8kq6WcZ/3PGafE= -----END CERTIFICATE-----Generated at Mon Jun 30 22:42:46 2025 by rpki-client