$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/494ac592-fba5-41f1-ab2a-ccd1bdb60cab.roa File: 494ac592-fba5-41f1-ab2a-ccd1bdb60cab.roa (raw, json) Hash identifier: U+4yhiaY4Mpjbs/4yjlz5i27VGum6AEYLxs914Dtmqc= Subject key identifier: B0:5F:6A:54:34:75:75:91:CB:92:73:35:07:DF:B9:E8:0C:9B:07:10 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 2C00717BC8811305EEB99836DEB8A9FA34B401FE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/494ac592-fba5-41f1-ab2a-ccd1bdb60cab.roa Signing time: Tue 19 Aug 2025 16:40:25 +0000 ROA not before: Tue 19 Aug 2025 16:40:25 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:00:71:7b:c8:81:13:05:ee:b9:98:36:de:b8:a9:fa:34:b4:01:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 19 16:40:25 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=14a685c73b5271023a6607a9d5b3a8fd2f9c84efc45fb44d5d2eeb3a6e917fa3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:a1:dd:98:27:b4:f9:5a:3b:76:87:ca:8c: fe:97:0c:63:68:4e:0d:d5:ee:cf:a2:1b:68:ae:f8: 0d:e7:94:e0:32:23:d5:7d:c2:7a:5c:5c:6e:60:a1: d3:08:ff:cb:67:87:3a:0f:ff:9b:de:aa:2d:6b:f9: d1:7a:b0:d3:5c:23:3a:62:ac:c0:17:cc:74:94:07: 0c:f2:9c:2d:ab:7a:73:a6:c1:61:42:ab:2d:1b:b6: 97:6f:d6:7a:fc:2b:2a:dc:d7:ea:69:14:bd:ae:5a: fa:84:4e:72:e3:42:70:86:d2:3c:fc:ab:a5:9e:03: 6c:b8:16:de:78:d1:f5:43:6c:ae:8c:ad:7e:7b:24: 9e:3c:9b:74:0d:d1:29:18:b3:2c:8c:04:e9:b2:01: 71:40:c6:2d:14:76:a3:0c:75:39:e7:70:ea:fc:89: 27:37:3e:83:ab:43:1a:85:c4:39:d3:ca:0d:f2:60: fc:af:fb:8e:8e:87:ad:03:fe:87:19:f6:2a:5c:03: d0:0a:f2:69:8a:b3:33:0e:f9:3b:42:5c:5a:6e:7e: b5:9d:69:58:4e:55:73:0f:5e:09:4a:48:3b:2e:03: e5:ea:06:26:55:0f:1e:14:58:37:23:66:f1:15:81: 2a:be:e1:62:f1:93:0c:9d:eb:df:ff:38:87:2c:2f: 88:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5F:6A:54:34:75:75:91:CB:92:73:35:07:DF:B9:E8:0C:9B:07:10 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/494ac592-fba5-41f1-ab2a-ccd1bdb60cab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.72.0/24 Signature Algorithm: sha256WithRSAEncryption 34:b5:bf:51:9b:d9:9a:07:4a:2c:3a:b0:4d:5a:f8:63:37:a1: 17:7d:54:1c:dc:45:eb:e7:7b:bd:65:1e:2c:53:9b:3b:a3:9b: fa:79:6d:6f:1e:a6:5e:0e:16:7a:35:b8:3e:93:dc:8b:ef:3d: 65:3a:ac:1c:9a:20:3c:bc:fd:bb:14:dd:0c:8b:78:84:4b:80: d1:be:99:96:ea:4f:9e:da:f4:e8:10:2c:d7:7e:1d:70:00:29: 30:d8:54:55:e4:d8:a9:e6:6c:4c:ac:a8:3f:a9:44:0a:d0:15: a8:71:f4:16:22:a3:2f:c3:81:87:84:3b:de:d0:31:b0:99:cf: 31:15:2b:aa:e2:eb:5a:2e:9b:e1:9a:a1:f1:2f:93:83:fe:07: b3:5b:4b:20:1e:f9:24:ae:cd:b1:1e:3c:c1:72:28:46:b0:d4: ef:bc:f5:ec:f1:ed:56:23:cb:2f:ad:c3:f4:f8:d7:9f:63:ef: e9:d9:31:be:9f:17:ad:eb:23:4a:47:2d:e3:ab:0f:25:5c:a3: 62:3e:12:57:12:91:51:30:66:29:fb:f3:d9:2f:04:e5:08:f8: 99:9f:75:22:14:7f:ea:b2:6f:5d:01:a8:5c:87:b1:f8:09:a2: d1:c8:92:9b:4b:93:76:00:58:6d:6f:d9:c6:2a:31:d8:c0:7c: 19:bf:20:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULABxe8iBEwXuuZg23rip+jS0Af4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE5MTY0MDI1WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNGE2ODVjNzNiNTI3MTAyM2E2NjA3YTlkNWIzYThmZDJm OWM4NGVmYzQ1ZmI0NGQ1ZDJlZWIzYTZlOTE3ZmEzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRjqHdmCe0+Vo7dofKjP6XDGNoTg3V7s+iG2iu+A3nlOAy I9V9wnpcXG5godMI/8tnhzoP/5veqi1r+dF6sNNcIzpirMAXzHSUBwzynC2renOm wWFCqy0btpdv1nr8Kyrc1+ppFL2uWvqETnLjQnCG0jz8q6WeA2y4Ft540fVDbK6M rX57JJ48m3QN0SkYsyyMBOmyAXFAxi0UdqMMdTnncOr8iSc3PoOrQxqFxDnTyg3y YPyv+46Oh60D/ocZ9ipcA9AK8mmKszMO+TtCXFpufrWdaVhOVXMPXglKSDsuA+Xq BiZVDx4UWDcjZvEVgSq+4WLxkwyd69//OIcsL4j9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsF9qVDR1dZHLknM1B9+56AybBxAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQ5NGFjNTkyLWZiYTUtNDFmMS1hYjJhLWNjZDFiZGI2MGNhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUkgwDQYJKoZIhvcNAQELBQADggEBADS1v1Gb2ZoHSiw6sE1a+GM3oRd9 VBzcRevne71lHixTmzujm/p5bW8epl4OFno1uD6T3IvvPWU6rByaIDy8/bsU3QyL eIRLgNG+mZbqT57a9OgQLNd+HXAAKTDYVFXk2KnmbEysqD+pRArQFahx9BYioy/D gYeEO97QMbCZzzEVK6ri61oum+GaofEvk4P+B7NbSyAe+SSuzbEePMFyKEaw1O+8 9ezx7VYjyy+tw/T4159j7+nZMb6fF63rI0pHLeOrDyVco2I+ElcSkVEwZin789kv BOUI+JmfdSIUf+qyb10BqFyHsfgJotHIkptLk3YAWG1v2cYqMdjAfBm/IC8= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:35 2025 by rpki-client