$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/79b32b20-868a-4a87-a60c-1099af423e6a.roa File: 79b32b20-868a-4a87-a60c-1099af423e6a.roa (raw, json) Hash identifier: GA7zqKflAxn4m4JhOAaNThTmPWbpzFSqXbz6akfezsg= Subject key identifier: 85:EE:88:3B:B3:04:A9:8F:C2:F9:5C:D6:67:1A:30:E8:45:4B:B8:DD Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7120511D22CA1C105BC5A2F72229B4A71FAB4FFE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/79b32b20-868a-4a87-a60c-1099af423e6a.roa Signing time: Wed 04 Jun 2025 00:50:15 +0000 ROA not before: Wed 04 Jun 2025 00:50:15 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:20:51:1d:22:ca:1c:10:5b:c5:a2:f7:22:29:b4:a7:1f:ab:4f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 4 00:50:15 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=2510c375e2f80cbd1b9ab52da2e9102decc764bb25eb74445acce6ad22c876a3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:55:e2:d7:6d:f8:2d:d0:c3:ae:b5:af:2d: 8d:e7:3c:d7:be:8c:b5:4e:ea:dd:7c:70:ef:18:09: c4:d9:93:5b:2a:85:c8:c4:0e:9b:c8:33:9a:76:f5: b3:3f:2f:98:07:58:ca:6d:75:2e:60:b5:0e:24:48: bb:08:86:ec:a7:f2:b8:b7:a1:1d:2b:35:37:0b:f2: 8f:b0:76:77:2b:21:94:6c:6d:80:b5:2f:57:a8:04: a1:4a:3d:65:8d:3a:53:86:fe:7a:8c:10:4b:6c:e9: 0e:7b:e9:91:99:a0:67:82:36:af:6b:e3:57:2c:7a: c6:02:77:bc:be:47:1a:d6:31:78:6e:ca:ae:37:c1: 57:94:66:39:5b:b8:62:6c:98:8c:c0:88:86:30:ab: 7d:5d:86:95:87:e2:1a:80:c4:47:80:65:50:4b:56: 21:76:c1:e0:c5:c0:29:62:91:5a:25:31:57:68:fd: 65:47:b3:6e:4e:51:88:a1:8d:ed:0f:68:60:6e:ec: eb:b4:9c:41:56:8b:74:8a:d1:ae:50:82:72:e1:b7: 4d:99:ba:09:b2:c0:be:3b:b9:01:b4:ad:28:4a:23: fa:78:73:9b:e8:22:7f:d9:11:0a:aa:7e:a6:6c:66: 5a:4e:81:16:91:6b:14:b8:ec:3a:94:ba:c0:90:34: 7b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EE:88:3B:B3:04:A9:8F:C2:F9:5C:D6:67:1A:30:E8:45:4B:B8:DD X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/79b32b20-868a-4a87-a60c-1099af423e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.67.0/24 Signature Algorithm: sha256WithRSAEncryption 89:35:86:98:21:9a:aa:22:75:46:6d:01:9e:dc:70:b8:60:55: f3:69:13:41:31:80:67:f8:b4:57:6d:d7:6c:83:d9:53:80:b4: d3:a9:60:38:31:c0:0f:3a:74:91:57:f5:d3:0e:73:89:18:ae: f7:65:26:eb:c4:3b:b6:f5:ad:e8:14:be:96:fd:b0:cb:c2:ab: 4f:ed:03:a5:6a:b4:dd:fe:6c:f5:20:d5:ba:a3:e4:b2:76:a5: 89:09:bd:c4:d0:76:65:e9:73:a0:8a:5a:06:51:8b:b2:c2:22: 78:65:44:dd:03:1b:cf:8d:a4:6c:54:80:2d:47:7d:fd:8a:73: bb:25:6e:a8:29:cc:27:d5:df:a0:5d:2e:cc:75:0b:5a:03:41: a2:f9:47:0f:4a:d2:a0:e6:75:ca:fc:a3:46:7d:ad:e1:26:f0: 2a:52:f4:e5:c2:53:35:0c:94:85:b8:8c:bc:6d:8f:04:8b:12: 0a:bc:fc:81:e4:c8:8e:02:1c:b8:3a:43:6c:42:8e:cf:04:8a: 0c:a7:0d:be:1e:79:a2:da:76:15:ee:15:33:ce:ac:2f:91:fa: 48:6a:7b:83:03:2e:04:80:9a:84:47:0e:19:dc:c9:ad:0f:5f: f5:a1:69:d6:48:56:0c:3b:ec:b4:23:b8:da:a1:6e:a9:c3:c3: 66:4d:92:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcSBRHSLKHBBbxaL3Iim0px+rT/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjA0MDA1MDE1WhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTEwYzM3NWUyZjgwY2JkMWI5YWI1MmRhMmU5MTAyZGVj Yzc2NGJiMjVlYjc0NDQ1YWNjZTZhZDIyYzg3NmEzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCccVXi1234LdDDrrWvLY3nPNe+jLVO6t18cO8YCcTZk1sq hcjEDpvIM5p29bM/L5gHWMptdS5gtQ4kSLsIhuyn8ri3oR0rNTcL8o+wdncrIZRs bYC1L1eoBKFKPWWNOlOG/nqMEEts6Q576ZGZoGeCNq9r41csesYCd7y+RxrWMXhu yq43wVeUZjlbuGJsmIzAiIYwq31dhpWH4hqAxEeAZVBLViF2weDFwClikVolMVdo /WVHs25OUYihje0PaGBu7Ou0nEFWi3SK0a5QgnLht02ZugmywL47uQG0rShKI/p4 c5voIn/ZEQqqfqZsZlpOgRaRaxS47DqUusCQNHtDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhe6IO7MEqY/C+VzWZxow6EVLuN0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzc5YjMyYjIwLTg2OGEtNGE4Ny1hNjBjLTEwOTlhZjQyM2U2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUkMwDQYJKoZIhvcNAQELBQADggEBAIk1hpghmqoidUZtAZ7ccLhgVfNp E0ExgGf4tFdt12yD2VOAtNOpYDgxwA86dJFX9dMOc4kYrvdlJuvEO7b1regUvpb9 sMvCq0/tA6VqtN3+bPUg1bqj5LJ2pYkJvcTQdmXpc6CKWgZRi7LCInhlRN0DG8+N pGxUgC1Hff2Kc7slbqgpzCfV36BdLsx1C1oDQaL5Rw9K0qDmdcr8o0Z9reEm8CpS 9OXCUzUMlIW4jLxtjwSLEgq8/IHkyI4CHLg6Q2xCjs8EigynDb4eeaLadhXuFTPO rC+R+khqe4MDLgSAmoRHDhncya0PX/WhadZIVgw77LQjuNqhbqnDw2ZNkpU= -----END CERTIFICATE-----Generated at Fri Jun 6 03:55:39 2025 by rpki-client