$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c4bd10f7-4532-468b-8647-e7dca834ad1c.roa File: c4bd10f7-4532-468b-8647-e7dca834ad1c.roa (raw, json) Hash identifier: 4LoDyjJAqUJX8PVJ7WDBeGkY2XGw4PLtBMin+Xefu7g= Subject key identifier: E6:DB:D5:FC:BE:BD:52:4D:41:DD:AF:09:7A:94:D0:E5:F4:76:E3:9E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 5BB4B57C4752F91E819B2E05A825E8C94BE1655E Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c4bd10f7-4532-468b-8647-e7dca834ad1c.roa Signing time: Tue 20 May 2025 17:50:31 +0000 ROA not before: Tue 20 May 2025 17:50:31 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b4:b5:7c:47:52:f9:1e:81:9b:2e:05:a8:25:e8:c9:4b:e1:65:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 20 17:50:31 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=8d96272f41600a15c4fd91c4faf70611ec715907307a16855517aa4934a653ac, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:a4:2b:33:6e:6b:65:11:03:ae:d3:c3:87: d3:f0:4b:5d:7b:45:6a:0b:6b:42:1d:79:0b:8f:8e: 47:20:e3:3f:c9:b1:28:0d:69:9a:21:81:2f:6a:7b: 2a:e9:ba:07:dc:fe:2f:93:56:bf:5d:51:98:ca:73: 30:f2:77:cc:a7:e6:d9:7c:d6:60:48:92:d8:d4:3e: 69:db:84:3b:94:6b:1f:e6:63:37:9d:a6:63:74:3a: e4:80:ea:5c:b6:44:1c:a3:11:f3:6f:48:5e:47:72: 6a:41:94:47:7c:63:48:41:2e:92:e4:66:21:98:d8: 21:0e:86:56:46:61:d8:fe:70:f9:2c:b4:4b:67:3e: ac:46:0b:c3:14:7b:6b:d1:ec:9c:3a:a8:5f:b1:de: 85:d8:92:b8:e8:95:6f:6d:73:c1:f1:60:b6:1d:3a: 3f:2a:56:70:f6:c4:9a:e0:2e:3a:76:f2:e4:25:f4: a1:cf:f2:d0:b9:54:1b:18:0c:38:53:ff:29:81:2d: 56:e2:4b:b6:5a:fa:29:0a:54:8b:85:69:9d:ce:46: f4:df:55:c2:24:6e:ab:7a:07:db:84:90:af:69:c1: f0:bc:f0:de:94:c5:0c:17:56:1d:05:2a:84:5e:ae: 76:a0:93:c6:7a:0f:0a:7a:25:47:5e:c5:bd:1e:19: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DB:D5:FC:BE:BD:52:4D:41:DD:AF:09:7A:94:D0:E5:F4:76:E3:9E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c4bd10f7-4532-468b-8647-e7dca834ad1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.12.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:62:a0:28:f0:06:56:5f:09:e6:78:d2:bd:92:e0:99:2b:0b: b1:9c:0d:ce:35:86:84:b0:3c:b6:76:8c:84:19:af:cc:5c:0c: 83:7d:44:69:ae:af:7d:15:a8:7e:ce:14:2f:ad:06:b2:6e:e7: 39:1a:03:d3:bb:c3:c8:b4:0a:9b:4b:08:c1:ff:50:b4:a5:f6: 4d:3b:2b:e9:6e:1c:09:8d:4f:39:ab:fd:b4:3d:0e:53:1f:d5: ae:46:aa:59:e9:4b:df:56:13:ff:78:b0:8e:98:13:7e:c4:5f: f2:23:c5:8f:c3:2d:29:de:fb:df:f0:d0:eb:1f:35:5c:16:da: b2:14:6d:01:e9:c6:bc:ea:04:5a:91:02:58:94:ad:cb:f7:9c: 6f:52:77:72:26:28:63:66:5a:03:57:05:c9:9c:c4:43:90:e7: 84:cf:4d:19:cf:d0:84:d6:fe:fa:4e:94:e1:28:42:90:6f:6e: 64:85:2f:be:53:52:cd:1b:48:af:68:d4:0f:43:10:b4:14:23: 09:b2:84:a9:24:99:74:25:4d:d8:47:fb:8b:bc:ea:36:83:d4: 5c:0e:84:fb:7c:bd:cd:2d:d9:81:9d:0c:57:ff:81:76:52:be: 90:f3:ad:f1:75:92:71:ba:1d:34:a8:87:9a:d5:1d:3a:52:5b: bb:c8:f2:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW7S1fEdS+R6Bmy4FqCXoyUvhZV4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIwMTc1MDMxWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDk2MjcyZjQxNjAwYTE1YzRmZDkxYzRmYWY3MDYxMWVj NzE1OTA3MzA3YTE2ODU1NTE3YWE0OTM0YTY1M2FjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQsaQrM25rZREDrtPDh9PwS117RWoLa0IdeQuPjkcg4z/J sSgNaZohgS9qeyrpugfc/i+TVr9dUZjKczDyd8yn5tl81mBIktjUPmnbhDuUax/m YzedpmN0OuSA6ly2RByjEfNvSF5HcmpBlEd8Y0hBLpLkZiGY2CEOhlZGYdj+cPks tEtnPqxGC8MUe2vR7Jw6qF+x3oXYkrjolW9tc8HxYLYdOj8qVnD2xJrgLjp28uQl 9KHP8tC5VBsYDDhT/ymBLVbiS7Za+ikKVIuFaZ3ORvTfVcIkbqt6B9uEkK9pwfC8 8N6UxQwXVh0FKoRernagk8Z6Dwp6JUdexb0eGQqHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5tvV/L69Uk1B3a8JepTQ5fR2454wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2M0YmQxMGY3LTQ1MzItNDY4Yi04NjQ3LWU3ZGNhODM0YWQxYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUgwwDQYJKoZIhvcNAQELBQADggEBAGtioCjwBlZfCeZ40r2S4JkrC7Gc Dc41hoSwPLZ2jIQZr8xcDIN9RGmur30VqH7OFC+tBrJu5zkaA9O7w8i0CptLCMH/ ULSl9k07K+luHAmNTzmr/bQ9DlMf1a5GqlnpS99WE/94sI6YE37EX/IjxY/DLSne +9/w0OsfNVwW2rIUbQHpxrzqBFqRAliUrcv3nG9Sd3ImKGNmWgNXBcmcxEOQ54TP TRnP0ITW/vpOlOEoQpBvbmSFL75TUs0bSK9o1A9DELQUIwmyhKkkmXQlTdhH+4u8 6jaD1FwOhPt8vc0t2YGdDFf/gXZSvpDzrfF1knG6HTSoh5rVHTpSW7vI8oc= -----END CERTIFICATE-----Generated at Fri Jun 6 03:16:12 2025 by rpki-client