$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c715fe80-d529-43c6-8fe3-0fe4f18f0712.roa File: c715fe80-d529-43c6-8fe3-0fe4f18f0712.roa (raw, json) Hash identifier: sAou4hqLjoP2VrdvwB2+OkBitx7flY/B0i1JDX7w+N0= Subject key identifier: F2:1B:83:69:C7:2B:C2:BA:CC:7D:5D:7D:88:A4:7B:88:A0:98:47:BC Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 43A4E6EDFFECB80CE4E0ECE8EAFCB61B04E2B95C Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c715fe80-d529-43c6-8fe3-0fe4f18f0712.roa Signing time: Tue 05 Aug 2025 18:01:12 +0000 ROA not before: Tue 05 Aug 2025 18:01:12 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a4:e6:ed:ff:ec:b8:0c:e4:e0:ec:e8:ea:fc:b6:1b:04:e2:b9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 5 18:01:12 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=a08cc557f88011df98faa7298f8fb0df7cb34aeb010a5015e9c4f44133f6aac3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cc:39:af:98:31:54:c6:5e:3c:f9:95:01:c9: cf:f5:34:55:e0:39:f4:5b:bb:d4:87:fa:1f:03:2e: 87:10:04:ae:1f:59:6e:e5:d1:d4:02:e7:27:cb:d2: 9b:bb:45:8d:85:3c:70:27:79:8e:0d:ce:fc:ee:96: 7e:ca:ac:72:ca:73:eb:31:07:ac:a9:9a:51:23:49: 53:d8:17:e6:ae:30:e1:02:b7:05:2a:06:9b:85:88: 8f:a5:f3:58:df:21:ad:e2:e0:b1:ab:05:72:f8:b7: db:25:fa:4f:82:de:d8:2c:ac:9a:50:39:8c:19:75: 6f:32:23:9a:2b:5b:73:14:a1:fe:0d:af:bb:e7:22: 73:72:e2:1c:21:1f:ce:e2:3a:a7:a8:a4:14:fd:7b: a0:fb:53:c0:75:01:cc:0d:26:dd:b7:69:08:2c:c4: 30:a8:dd:26:89:17:0c:76:f1:8d:1d:f4:d7:cb:aa: 56:a0:df:b3:19:79:85:97:1e:00:e0:8c:61:8d:6d: 46:32:ac:62:21:ee:8a:03:b8:a8:44:fe:04:e3:64: f1:0b:1d:e0:b9:e9:23:6e:a0:c0:db:2e:60:47:1b: 1e:72:ce:f8:fc:e9:23:c9:69:b1:e6:c4:f1:b9:67: 95:0f:63:10:f4:63:f5:9b:fd:a6:6a:34:eb:cf:29: 2e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1B:83:69:C7:2B:C2:BA:CC:7D:5D:7D:88:A4:7B:88:A0:98:47:BC X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c715fe80-d529-43c6-8fe3-0fe4f18f0712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.10.0/24 Signature Algorithm: sha256WithRSAEncryption 62:89:40:b8:27:a7:76:b6:1d:45:cc:c0:cf:3d:46:e8:d5:85: 77:69:38:fc:20:69:3e:81:2c:6d:10:ac:0b:ba:e6:84:98:17: 3a:08:26:cf:fd:ff:9e:e5:2f:56:b5:26:34:25:98:5d:32:d7: 3c:95:3d:0b:8d:a5:86:df:db:62:94:97:87:23:a5:ca:75:51: cc:b6:e6:fa:ac:9d:aa:ef:77:af:73:7a:78:ca:bb:97:1e:58: f8:c0:a2:e2:a8:8d:09:6e:a3:85:9a:94:19:b0:b0:78:d7:f7: 18:55:3e:5a:77:32:47:0a:f5:b6:da:22:cf:28:30:64:ee:77: b2:37:c7:36:8a:c0:f8:6a:3b:c8:d0:a4:6b:7d:42:cd:13:19: 39:76:a3:93:36:b1:ad:53:36:a4:cd:82:38:54:f1:8e:77:bc: 82:98:73:62:fd:a3:8f:5e:20:05:31:73:0e:f7:41:d3:4e:8a: d3:60:42:de:bd:1f:28:30:c3:66:12:c0:b5:96:aa:c8:36:18: 3e:78:7e:77:0b:63:0f:96:a2:ae:b2:f0:61:32:87:eb:09:4c: ab:9d:29:4f:1e:26:24:75:c2:50:68:c0:1d:d0:fb:74:d8:2f: 77:ca:fd:1e:34:81:1e:d6:d9:97:65:dc:17:d6:21:0b:a5:e1: 9d:00:26:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ6Tm7f/suAzk4Ozo6vy2GwTiuVwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODA1MTgwMTEyWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDhjYzU1N2Y4ODAxMWRmOThmYWE3Mjk4ZjhmYjBkZjdj YjM0YWViMDEwYTUwMTVlOWM0ZjQ0MTMzZjZhYWMzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNzDmvmDFUxl48+ZUByc/1NFXgOfRbu9SH+h8DLocQBK4f WW7l0dQC5yfL0pu7RY2FPHAneY4Nzvzuln7KrHLKc+sxB6ypmlEjSVPYF+auMOEC twUqBpuFiI+l81jfIa3i4LGrBXL4t9sl+k+C3tgsrJpQOYwZdW8yI5orW3MUof4N r7vnInNy4hwhH87iOqeopBT9e6D7U8B1AcwNJt23aQgsxDCo3SaJFwx28Y0d9NfL qlag37MZeYWXHgDgjGGNbUYyrGIh7ooDuKhE/gTjZPELHeC56SNuoMDbLmBHGx5y zvj86SPJabHmxPG5Z5UPYxD0Y/Wb/aZqNOvPKS4VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8huDaccrwrrMfV19iKR7iKCYR7wwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2M3MTVmZTgwLWQ1MjktNDNjNi04ZmUzLTBmZTRmMThmMDcxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUgowDQYJKoZIhvcNAQELBQADggEBAGKJQLgnp3a2HUXMwM89RujVhXdp OPwgaT6BLG0QrAu65oSYFzoIJs/9/57lL1a1JjQlmF0y1zyVPQuNpYbf22KUl4cj pcp1Ucy25vqsnarvd69zenjKu5ceWPjAouKojQluo4WalBmwsHjX9xhVPlp3MkcK 9bbaIs8oMGTud7I3xzaKwPhqO8jQpGt9Qs0TGTl2o5M2sa1TNqTNgjhU8Y53vIKY c2L9o49eIAUxcw73QdNOitNgQt69Hygww2YSwLWWqsg2GD54fncLYw+Woq6y8GEy h+sJTKudKU8eJiR1wlBowB3Q+3TYL3fK/R40gR7W2Zdl3BfWIQul4Z0AJmY= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:43 2025 by rpki-client