$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b78ad018-6881-4671-9a78-0dc8f34501ca.roa File: b78ad018-6881-4671-9a78-0dc8f34501ca.roa (raw, json) Hash identifier: d8PLcpoCxoGmQd+UxvJFOpqi0/BxibzjopNMUYSJE2k= Subject key identifier: 17:A5:87:48:F3:55:E4:7F:88:A9:A8:AC:1F:FF:74:41:24:99:76:01 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 25BF412AFF6BAF3EEC41C3727C974D4089C0A663 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b78ad018-6881-4671-9a78-0dc8f34501ca.roa Signing time: Tue 19 Aug 2025 16:40:15 +0000 ROA not before: Tue 19 Aug 2025 16:40:15 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bf:41:2a:ff:6b:af:3e:ec:41:c3:72:7c:97:4d:40:89:c0:a6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 19 16:40:15 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=4876635e844c96253e321aaf0b58e02befbde1d9808312e1555db867a04a6953, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:47:db:77:33:61:0b:43:49:f6:e4:2a:54: 24:7a:d3:5c:44:fa:01:34:a6:7e:5b:a0:b3:b3:da: cd:15:e3:4a:68:b4:c1:3d:77:67:13:3e:be:99:57: ee:c8:36:94:a5:56:31:00:d2:9d:60:d9:13:06:36: c1:46:c2:8b:87:7c:6b:1e:d6:dd:8a:97:68:6c:d6: e8:2d:f9:29:7b:0e:4c:49:3c:27:17:b0:3c:7e:1b: 40:34:e2:46:60:90:28:e4:e0:13:83:d9:c2:4e:63: f4:99:67:e7:47:fc:77:62:46:a2:5c:2a:c3:1a:8c: 63:ee:b3:b0:06:25:03:26:88:ec:d7:6a:50:c5:c6: e2:f5:81:3b:54:f1:9b:69:72:cc:a7:6c:1c:bf:a5: 03:cc:6d:54:93:28:25:18:fb:f8:88:83:ae:df:35: 00:7a:61:53:2a:04:c8:88:fa:89:fa:35:e4:90:0d: c1:72:e8:1f:60:01:e8:6a:0a:cb:5b:8f:2f:6c:45: 53:9c:d7:81:90:38:bb:e8:b4:68:07:6b:c3:b5:80: fb:e2:be:40:29:e5:cf:db:71:6c:9d:1f:27:64:1c: 72:03:ca:8e:e2:55:ad:89:65:df:81:0e:8c:83:44: 96:f4:1a:ed:b8:5a:94:ca:0b:a0:e4:28:8e:cc:b2: 22:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A5:87:48:F3:55:E4:7F:88:A9:A8:AC:1F:FF:74:41:24:99:76:01 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b78ad018-6881-4671-9a78-0dc8f34501ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.66.0/24 Signature Algorithm: sha256WithRSAEncryption 94:38:0f:82:82:a4:c2:a0:fe:e8:c6:a4:fb:91:60:cd:f6:2d: 24:7d:7a:a8:8d:9c:1a:1e:ee:06:bd:91:78:00:fd:26:3b:fb: 79:0d:5a:3e:56:72:48:17:87:9b:60:c2:b9:95:57:c6:b8:8f: 73:92:b6:37:e2:8e:52:0f:36:8c:ff:33:a0:6b:da:8d:e2:e9: 24:8c:30:4d:3c:de:57:44:9a:cb:98:89:c7:86:b6:35:5b:42: be:ac:01:8d:ed:d6:07:ea:ac:10:a4:44:f0:57:18:d1:39:8d: 17:54:e7:53:cd:46:e7:27:c5:9c:fd:af:96:ca:23:67:5d:71: 52:48:18:b5:ab:7c:bd:f1:09:76:ed:2e:04:6e:04:5c:21:38: 17:cc:d9:4c:a0:21:ed:cb:bd:c0:7f:a9:cd:26:8e:42:c1:c0: a1:ae:18:01:a1:76:e4:3b:3f:e5:62:00:a1:bb:2f:2d:22:92: 22:87:2b:26:90:aa:0f:e6:a3:ee:16:ee:49:44:b4:68:9c:8c: 9d:79:12:7d:25:ab:59:ce:10:2f:63:ce:c1:9b:a0:ee:c2:9f: 65:c7:45:07:03:7c:39:84:e2:3c:21:44:8e:40:ad:d2:b2:b6: 8f:6b:7b:eb:fb:f8:f6:ec:53:9f:eb:bd:d9:dd:94:49:29:d4: 57:59:0e:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJb9BKv9rrz7sQcNyfJdNQInApmMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE5MTY0MDE1WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODc2NjM1ZTg0NGM5NjI1M2UzMjFhYWYwYjU4ZTAyYmVm YmRlMWQ5ODA4MzEyZTE1NTVkYjg2N2EwNGE2OTUzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM0UfbdzNhC0NJ9uQqVCR601xE+gE0pn5boLOz2s0V40po tME9d2cTPr6ZV+7INpSlVjEA0p1g2RMGNsFGwouHfGse1t2Kl2hs1ugt+Sl7DkxJ PCcXsDx+G0A04kZgkCjk4BOD2cJOY/SZZ+dH/HdiRqJcKsMajGPus7AGJQMmiOzX alDFxuL1gTtU8ZtpcsynbBy/pQPMbVSTKCUY+/iIg67fNQB6YVMqBMiI+on6NeSQ DcFy6B9gAehqCstbjy9sRVOc14GQOLvotGgHa8O1gPvivkAp5c/bcWydHydkHHID yo7iVa2JZd+BDoyDRJb0Gu24WpTKC6DkKI7MsiJPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUF6WHSPNV5H+IqaisH/90QSSZdgEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2I3OGFkMDE4LTY4ODEtNDY3MS05YTc4LTBkYzhmMzQ1MDFjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUkIwDQYJKoZIhvcNAQELBQADggEBAJQ4D4KCpMKg/ujGpPuRYM32LSR9 eqiNnBoe7ga9kXgA/SY7+3kNWj5WckgXh5tgwrmVV8a4j3OStjfijlIPNoz/M6Br 2o3i6SSMME083ldEmsuYiceGtjVbQr6sAY3t1gfqrBCkRPBXGNE5jRdU51PNRucn xZz9r5bKI2ddcVJIGLWrfL3xCXbtLgRuBFwhOBfM2UygIe3LvcB/qc0mjkLBwKGu GAGhduQ7P+ViAKG7Ly0ikiKHKyaQqg/mo+4W7klEtGicjJ15En0lq1nOEC9jzsGb oO7Cn2XHRQcDfDmE4jwhRI5ArdKyto9re+v7+PbsU5/rvdndlEkp1FdZDv4= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:33 2025 by rpki-client