$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4747cb3a-dada-4e4c-b2af-99fedfffda48.roa File: 4747cb3a-dada-4e4c-b2af-99fedfffda48.roa (raw, json) Hash identifier: 7Qzy8R0I9vR2+xrzT1dULvNJ0RURLj3K1xcIhXaUrvg= Subject key identifier: 24:CF:AA:AC:1D:44:9E:E6:58:3A:AB:04:2A:AF:35:95:72:0B:28:19 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 494A205913CF158504D68B7935598BE632717618 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4747cb3a-dada-4e4c-b2af-99fedfffda48.roa Signing time: Mon 16 Jun 2025 18:50:18 +0000 ROA not before: Mon 16 Jun 2025 18:50:18 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 173.82.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4a:20:59:13:cf:15:85:04:d6:8b:79:35:59:8b:e6:32:71:76:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 18:50:18 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=5472000be053efda2316a363b0a6108e85c4117cedff26da8de35acc3ec3282d, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:ac:50:ef:c4:d2:28:eb:94:5e:c5:08:d1: 6c:f9:cf:e8:be:3f:44:fd:3f:fa:bb:69:e2:64:ef: 3c:76:3a:7d:a7:0d:93:38:cb:d0:0b:da:3b:f4:9d: 6d:3d:62:35:50:bc:ec:bb:1d:54:05:39:39:c5:7d: 03:66:e4:76:84:62:15:a2:e8:b8:38:df:73:16:3e: 2b:fd:d7:f0:68:32:6c:20:b5:f0:19:88:c6:70:dd: e7:7c:4e:1e:7c:c8:f4:df:2a:8e:32:a2:02:4c:c5: cc:53:7c:e8:48:a0:17:1c:d0:81:f3:9c:fe:91:bb: b6:f5:55:31:4e:0c:d0:62:89:2a:60:ee:56:9f:a0: 51:05:f5:04:ad:46:46:46:3a:01:be:5c:e4:25:08: c5:b6:39:73:88:ca:c8:a3:48:c9:a8:fc:30:0a:a4: cd:16:f4:33:ba:ee:5c:04:2a:7d:3c:fe:07:ef:e6: fd:64:57:36:94:f0:32:a2:90:4e:3e:c8:02:b3:08: c9:df:43:0d:e7:bc:bd:29:f3:8c:f1:22:6f:6e:fd: b3:11:a5:09:ef:02:c9:56:e1:d3:3b:19:22:f7:8f: a1:89:3f:e9:b8:40:a4:7a:eb:8e:72:0c:9c:e0:88: bf:41:4e:8f:e4:c7:98:34:c4:b3:b7:fa:62:9f:94: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CF:AA:AC:1D:44:9E:E6:58:3A:AB:04:2A:AF:35:95:72:0B:28:19 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4747cb3a-dada-4e4c-b2af-99fedfffda48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.5.0/24 Signature Algorithm: sha256WithRSAEncryption 50:2e:91:c1:0b:14:ef:3b:9b:d0:db:71:56:77:d6:e1:d6:54: 08:c6:06:4f:12:f3:a0:e7:b6:e4:10:7a:9e:c4:6a:11:28:db: 4d:93:fb:85:b1:a3:1c:10:de:5c:1e:15:58:8a:ad:de:f4:74: 91:40:93:3c:c7:02:50:71:69:99:23:94:25:d3:6f:13:2d:6f: 4d:9e:25:2b:63:f8:cb:68:46:f1:40:15:4e:c1:8d:11:51:f0: ad:69:60:89:aa:8c:a0:10:68:a8:f2:e9:b0:30:50:17:32:48: 79:96:37:2d:76:32:c7:b1:c2:86:b7:5f:d4:83:fb:57:e6:96: ba:6e:c0:eb:1e:ef:3f:88:1a:02:4b:f7:83:04:18:f6:51:48: 68:39:af:cf:12:83:a6:d4:9b:4a:b8:2d:26:e3:c4:40:dd:e2: fd:50:20:1c:81:a1:a4:35:a6:78:91:77:53:91:5b:88:d0:6a: 8f:d5:db:8c:da:28:ea:52:d2:b2:65:7d:bc:2e:b0:f1:ee:a8: 58:9f:45:71:7a:2b:f3:4a:ba:b7:c2:37:00:14:13:34:bc:f9: 02:8d:56:d7:ff:a5:7c:03:d6:7b:bf:3d:0d:b7:4a:bc:c5:ac: b1:8e:cc:df:d8:b9:07:62:14:2e:db:0a:af:aa:15:aa:0e:77: fd:fe:f7:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSUogWRPPFYUE1ot5NVmL5jJxdhgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTg1MDE4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDcyMDAwYmUwNTNlZmRhMjMxNmEzNjNiMGE2MTA4ZTg1 YzQxMTdjZWRmZjI2ZGE4ZGUzNWFjYzNlYzMyODJkMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkHqxQ78TSKOuUXsUI0Wz5z+i+P0T9P/q7aeJk7zx2On2n DZM4y9AL2jv0nW09YjVQvOy7HVQFOTnFfQNm5HaEYhWi6Lg433MWPiv91/BoMmwg tfAZiMZw3ed8Th58yPTfKo4yogJMxcxTfOhIoBcc0IHznP6Ru7b1VTFODNBiiSpg 7lafoFEF9QStRkZGOgG+XOQlCMW2OXOIysijSMmo/DAKpM0W9DO67lwEKn08/gfv 5v1kVzaU8DKikE4+yAKzCMnfQw3nvL0p84zxIm9u/bMRpQnvAslW4dM7GSL3j6GJ P+m4QKR6645yDJzgiL9BTo/kx5g0xLO3+mKflBUHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJM+qrB1EnuZYOqsEKq81lXILKBkwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQ3NDdjYjNhLWRhZGEtNGU0Yy1iMmFmLTk5ZmVkZmZmZGE0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUgUwDQYJKoZIhvcNAQELBQADggEBAFAukcELFO87m9DbcVZ31uHWVAjG Bk8S86DntuQQep7EahEo202T+4WxoxwQ3lweFViKrd70dJFAkzzHAlBxaZkjlCXT bxMtb02eJStj+MtoRvFAFU7BjRFR8K1pYImqjKAQaKjy6bAwUBcySHmWNy12Msex woa3X9SD+1fmlrpuwOse7z+IGgJL94MEGPZRSGg5r88Sg6bUm0q4LSbjxEDd4v1Q IByBoaQ1pniRd1ORW4jQao/V24zaKOpS0rJlfbwusPHuqFifRXF6K/NKurfCNwAU EzS8+QKNVtf/pXwD1nu/PQ23SrzFrLGOzN/YuQdiFC7bCq+qFaoOd/3+97o= -----END CERTIFICATE-----Generated at Sun Jun 29 01:30:56 2025 by rpki-client