$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7886a458-feff-41db-ba90-69c2775beda9.roa File: 7886a458-feff-41db-ba90-69c2775beda9.roa (raw, json) Hash identifier: IoY2sGPT19HxlhrRZozweUyFGDVwvxek25y1bc3uMfk= Subject key identifier: 67:6A:9D:EF:6C:6C:E9:6D:BD:B6:D6:56:50:AB:9F:4C:4C:97:92:DF Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6378EDF94F2136820BF1C0BBA4C74788BCF76C15 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7886a458-feff-41db-ba90-69c2775beda9.roa Signing time: Mon 16 Jun 2025 18:50:06 +0000 ROA not before: Mon 16 Jun 2025 18:50:06 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:78:ed:f9:4f:21:36:82:0b:f1:c0:bb:a4:c7:47:88:bc:f7:6c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jun 16 18:50:06 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=c0518c9008e952f8fbc779cc71767d54179d1ace9b4dd11fb2bbdcd78786eada, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:21:5b:70:b5:28:98:2d:f9:78:a7:52:4e: 67:c8:8a:1b:92:35:4b:6b:d5:a9:81:0b:7e:ea:75: 12:43:ce:05:9a:19:ee:72:30:d0:68:fd:ba:0a:08: 39:8e:d1:27:99:11:cd:d5:99:d5:73:f4:f6:87:1b: 6e:fd:a1:d2:09:36:4c:ca:5b:e3:5b:47:3e:93:46: da:16:41:c0:46:1d:c3:6d:5b:04:f7:b9:75:e0:aa: ed:09:bc:d4:bb:ae:01:2e:a6:16:04:92:df:17:0e: 04:82:74:20:c1:1a:d7:39:73:5c:3d:c7:bf:04:e2: 4a:64:82:f2:c2:41:d2:e3:67:2d:9e:66:1a:71:76: 55:45:06:09:c9:b9:5e:d9:87:f6:a7:6d:07:9b:4f: 0a:cd:28:07:10:ce:c1:97:43:f9:00:6d:b7:74:bd: cd:07:e8:93:26:27:ef:46:71:20:e4:23:d8:ab:4e: 09:d7:dd:ef:01:18:9b:ea:7b:d1:26:23:30:fa:fb: c9:9e:ab:18:99:ef:bd:0e:56:b4:fe:8a:aa:05:f8: 03:b1:ca:1f:a5:ca:d1:6f:c2:ab:1a:f5:a3:df:ca: b7:cd:d0:ab:d0:35:7b:77:0b:3d:bb:63:0d:7b:f8: e4:04:b1:5a:1a:db:f2:17:f4:9f:c1:8a:df:fd:b2: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6A:9D:EF:6C:6C:E9:6D:BD:B6:D6:56:50:AB:9F:4C:4C:97:92:DF X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7886a458-feff-41db-ba90-69c2775beda9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.18.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:4a:e8:70:de:04:1f:07:2f:60:52:9d:ed:72:f4:8b:c4:bc: 67:66:dc:5f:38:93:02:6b:6b:7a:df:ea:a2:86:b9:9d:a1:74: b3:b1:da:11:d9:78:4b:63:b0:bc:b5:b2:5b:25:95:74:25:9c: 67:ca:d1:f5:3b:df:a2:bc:fb:f4:9a:d2:b3:d0:d1:d1:09:70: 21:f6:f3:7a:6a:5d:b0:01:0e:0a:c7:4d:44:ce:e4:19:ab:a3: 70:d4:bb:19:b4:19:dd:65:9d:df:91:d0:34:41:f2:82:4e:53: da:91:ff:b1:9a:01:f1:f1:fe:af:a6:61:f0:9f:e4:d3:f3:87: 76:1a:0b:0d:eb:17:77:dc:b1:7d:12:9a:9a:e5:ab:65:97:77: bf:8e:0f:50:61:0e:b5:e2:61:d4:35:4b:54:b0:a8:4b:94:84: b6:10:65:fd:82:fb:f2:a4:b9:54:3b:78:d4:ba:67:f4:71:e9: 4a:33:66:d4:56:be:68:e7:f5:29:9c:79:87:67:87:c1:0d:4b: 08:a6:02:8f:05:65:e5:d4:43:91:84:a9:b9:3e:e3:ac:88:88: 87:cf:46:ac:97:33:dc:99:d7:2a:b8:e4:07:59:da:78:50:6a: c6:07:22:f9:1f:a6:f7:8a:f5:8c:e7:cd:3a:2c:0a:d4:72:c1: 5d:e0:71:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY3jt+U8hNoIL8cC7pMdHiLz3bBUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNjE2MTg1MDA2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDUxOGM5MDA4ZTk1MmY4ZmJjNzc5Y2M3MTc2N2Q1NDE3 OWQxYWNlOWI0ZGQxMWZiMmJiZGNkNzg3ODZlYWRhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLkyFbcLUomC35eKdSTmfIihuSNUtr1amBC37qdRJDzgWa Ge5yMNBo/boKCDmO0SeZEc3VmdVz9PaHG279odIJNkzKW+NbRz6TRtoWQcBGHcNt WwT3uXXgqu0JvNS7rgEuphYEkt8XDgSCdCDBGtc5c1w9x78E4kpkgvLCQdLjZy2e ZhpxdlVFBgnJuV7Zh/anbQebTwrNKAcQzsGXQ/kAbbd0vc0H6JMmJ+9GcSDkI9ir TgnX3e8BGJvqe9EmIzD6+8meqxiZ770OVrT+iqoF+AOxyh+lytFvwqsa9aPfyrfN 0KvQNXt3Cz27Yw17+OQEsVoa2/IX9J/Bit/9sv//AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ2qd72xs6W29ttZWUKufTEyXkt8wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzc4ODZhNDU4LWZlZmYtNDFkYi1iYTkwLTY5YzI3NzViZWRhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUhIwDQYJKoZIhvcNAQELBQADggEBAExK6HDeBB8HL2BSne1y9IvEvGdm 3F84kwJra3rf6qKGuZ2hdLOx2hHZeEtjsLy1slsllXQlnGfK0fU736K8+/Sa0rPQ 0dEJcCH283pqXbABDgrHTUTO5Bmro3DUuxm0Gd1lnd+R0DRB8oJOU9qR/7GaAfHx /q+mYfCf5NPzh3YaCw3rF3fcsX0Smprlq2WXd7+OD1BhDrXiYdQ1S1SwqEuUhLYQ Zf2C+/KkuVQ7eNS6Z/Rx6UozZtRWvmjn9SmceYdnh8ENSwimAo8FZeXUQ5GEqbk+ 46yIiIfPRqyXM9yZ1yq45AdZ2nhQasYHIvkfpveK9YznzTosCtRywV3gcRs= -----END CERTIFICATE-----Generated at Sun Jun 29 04:38:19 2025 by rpki-client