$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e1133321-dc3d-4778-889e-c80f1cc829c7.roa File: e1133321-dc3d-4778-889e-c80f1cc829c7.roa (raw, json) Hash identifier: yHiDBd2sXwa9XJzZOK+0oWdrjXdlyXHMbuL9jcnYcO0= Subject key identifier: AF:8B:26:54:A8:72:EF:60:36:3C:7C:E5:5F:33:12:D7:38:84:39:60 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7208493762F640441BC9455E4DF49AB7B31D3A37 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e1133321-dc3d-4778-889e-c80f1cc829c7.roa Signing time: Tue 19 Aug 2025 16:40:14 +0000 ROA not before: Tue 19 Aug 2025 16:40:14 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:08:49:37:62:f6:40:44:1b:c9:45:5e:4d:f4:9a:b7:b3:1d:3a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Aug 19 16:40:14 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=c9ece483df30f829efa61c58f1c0c0f7f32da39fab095523a6d9ab0ab9327f9e, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:22:88:7b:17:d1:e8:c0:67:ab:0b:35:26:31: ba:b8:d0:af:37:3e:d5:02:23:45:2c:97:c1:81:6e: 00:08:1d:df:71:ca:37:c2:9f:26:8a:09:1e:3b:29: 56:04:66:23:50:85:79:eb:39:37:76:2e:0c:df:68: e1:53:ca:d9:a6:ab:05:69:85:a5:52:7f:b8:2f:0b: 1d:1c:be:ea:b8:b4:25:62:68:1e:c7:f2:35:27:cb: 19:dc:07:f0:43:b5:52:19:16:db:2e:56:a1:58:d1: 29:64:89:3b:5f:eb:46:d5:54:4d:c2:6c:9e:ea:88: 44:a9:b3:72:b9:95:92:a5:b7:08:24:ed:b0:a4:cc: 55:b8:03:b7:b9:35:c2:1f:4a:a1:9c:76:82:26:8c: 85:73:e6:09:3d:fa:cc:2a:e0:5a:ed:5e:e0:5e:6c: d4:b8:12:51:11:33:dd:3f:fe:39:b3:10:3a:05:6a: b4:0d:cd:30:02:19:48:74:a9:c7:c1:83:d4:ce:7d: a3:51:e8:0d:f3:ec:78:f6:43:e1:bc:14:cb:1c:85: d4:eb:b7:00:12:e5:23:e2:a6:c0:9f:25:bc:01:5f: 33:25:f4:23:87:4b:de:0b:66:ad:63:16:2c:cc:03: 69:df:00:53:d1:67:10:f0:da:56:6c:07:7b:62:9e: b2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8B:26:54:A8:72:EF:60:36:3C:7C:E5:5F:33:12:D7:38:84:39:60 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e1133321-dc3d-4778-889e-c80f1cc829c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.76.0/24 Signature Algorithm: sha256WithRSAEncryption 01:78:82:0a:4c:eb:0e:c8:d2:6b:91:c8:d6:cf:9d:22:0c:19: 2d:35:d4:d1:de:eb:b0:74:87:5c:00:11:b2:32:db:41:02:68: 3c:12:c1:96:8b:f4:f3:2f:68:6a:48:05:06:b5:12:bd:02:0c: 59:f9:f7:7a:8c:0e:22:44:a9:a3:14:87:56:fe:71:db:bb:f9: 7c:dd:09:1d:63:69:8e:d2:6f:a9:8e:eb:77:4f:c3:31:c4:ae: ca:20:34:ec:bc:cc:5f:66:d1:c8:9f:31:ef:e3:21:bd:d6:91: 3a:dd:21:8a:3b:a2:7e:a9:23:ff:e7:f6:6a:f2:a7:c1:9f:11: 4f:5b:8c:77:6d:17:1d:79:64:5c:ae:7e:da:f0:57:83:b3:cb: 4b:fe:d3:cc:3d:4c:8f:aa:60:93:4f:53:aa:03:94:af:07:10: 92:1f:d8:53:0b:0b:5f:f9:fd:33:f6:e0:78:9e:2f:e9:dc:04: bd:2d:d2:f8:bf:ec:00:8b:9e:4d:89:8e:37:89:1b:ef:78:27: 3d:d0:f1:c8:21:7d:78:8e:6b:e8:a2:82:a9:3a:44:d5:ba:07: 8d:29:c4:d9:c9:4a:02:0a:26:47:e0:83:ed:50:be:5d:e7:02: 13:3b:2a:60:0d:d6:05:40:a9:e5:73:7e:03:b0:09:a8:1f:a6: 60:2b:d5:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcghJN2L2QEQbyUVeTfSat7MdOjcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwODE5MTY0MDE0WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWVjZTQ4M2RmMzBmODI5ZWZhNjFjNThmMWMwYzBmN2Yz MmRhMzlmYWIwOTU1MjNhNmQ5YWIwYWI5MzI3ZjllMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJIoh7F9HowGerCzUmMbq40K83PtUCI0Usl8GBbgAIHd9x yjfCnyaKCR47KVYEZiNQhXnrOTd2LgzfaOFTytmmqwVphaVSf7gvCx0cvuq4tCVi aB7H8jUnyxncB/BDtVIZFtsuVqFY0SlkiTtf60bVVE3CbJ7qiESps3K5lZKltwgk 7bCkzFW4A7e5NcIfSqGcdoImjIVz5gk9+swq4FrtXuBebNS4ElERM90//jmzEDoF arQNzTACGUh0qcfBg9TOfaNR6A3z7Hj2Q+G8FMschdTrtwAS5SPipsCfJbwBXzMl 9COHS94LZq1jFizMA2nfAFPRZxDw2lZsB3tinrKFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr4smVKhy72A2PHzlXzMS1ziEOWAwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2UxMTMzMzIxLWRjM2QtNDc3OC04ODllLWM4MGYxY2M4MjljNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUkwwDQYJKoZIhvcNAQELBQADggEBAAF4ggpM6w7I0muRyNbPnSIMGS01 1NHe67B0h1wAEbIy20ECaDwSwZaL9PMvaGpIBQa1Er0CDFn593qMDiJEqaMUh1b+ cdu7+XzdCR1jaY7Sb6mO63dPwzHErsogNOy8zF9m0cifMe/jIb3WkTrdIYo7on6p I//n9mryp8GfEU9bjHdtFx15ZFyuftrwV4Ozy0v+08w9TI+qYJNPU6oDlK8HEJIf 2FMLC1/5/TP24HieL+ncBL0t0vi/7ACLnk2JjjeJG+94Jz3Q8cghfXiOa+iigqk6 RNW6B40pxNnJSgIKJkfgg+1Qvl3nAhM7KmAN1gVAqeVzfgOwCagfpmAr1cM= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:49 2025 by rpki-client