$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1807722b-6239-464f-b361-a2bdd368c5eb.roa File: 1807722b-6239-464f-b361-a2bdd368c5eb.roa (raw, json) Hash identifier: X06nJozJaQV0/lWyF+RovGGCA95yxpqpR7kiGcGBs5g= Subject key identifier: A4:22:21:5B:8F:BC:B0:CC:78:B0:5F:E6:65:8D:54:50:5A:00:90:91 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 184225AA4D07E4F2943AE3F8406DD05BB66C5A45 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1807722b-6239-464f-b361-a2bdd368c5eb.roa Signing time: Fri 21 Mar 2025 00:50:33 +0000 ROA not before: Fri 21 Mar 2025 00:50:33 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:42:25:aa:4d:07:e4:f2:94:3a:e3:f8:40:6d:d0:5b:b6:6c:5a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 21 00:50:33 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:d4:01:8e:af:ec:07:c2:ba:c5:63:8c:1a: dd:3b:58:41:af:99:08:18:ae:53:e4:b6:f8:11:ec: fb:ba:b6:de:7b:56:d5:ec:8e:39:88:92:c0:7c:f2: f8:33:80:96:0d:4f:47:45:a5:46:d2:1f:f9:40:9a: 47:3a:b2:b4:a8:32:a5:15:8e:17:f2:27:90:1e:7d: ee:47:fd:06:ca:5a:d8:e3:11:84:44:48:7e:34:cb: ca:cc:84:0f:b3:df:a9:b7:bc:e9:b4:05:94:f5:56: 0e:f2:97:d3:2a:9e:7a:b2:8f:53:ae:ce:e6:5c:dc: c1:fa:d3:8b:d5:f4:a3:69:a6:d3:09:90:07:e3:67: 40:8f:49:25:a8:73:f8:5b:54:b8:80:da:a1:e2:4d: ac:53:8c:57:5c:1a:46:cf:83:82:2d:9f:d1:1d:83: e9:56:20:6f:74:f8:ff:d2:cc:a9:d7:a1:db:df:ea: fe:d3:34:d4:3e:dd:08:ee:52:85:a3:52:47:02:56: fe:4e:e6:3d:44:10:55:c5:cb:4e:ab:fe:83:0c:88: df:66:f7:49:12:16:b4:a2:e0:1b:8a:a7:b3:de:08: 8a:1c:a0:c0:db:95:09:5c:c3:d8:3f:12:1f:81:a7: 49:2a:ec:f3:31:ec:8e:1c:25:34:f2:1a:42:f9:cd: 95:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:22:21:5B:8F:BC:B0:CC:78:B0:5F:E6:65:8D:54:50:5A:00:90:91 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1807722b-6239-464f-b361-a2bdd368c5eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.78.0/24 Signature Algorithm: sha256WithRSAEncryption 69:26:fb:84:67:b0:48:68:7d:4a:99:32:c9:e9:10:ee:ea:72: 2b:ca:77:a8:a3:ce:b2:27:5f:7d:89:a9:8c:07:3b:a5:78:dd: 39:be:8d:92:2a:9a:c4:22:6c:ac:be:08:63:60:0a:ad:30:3d: 03:da:12:47:69:93:9f:73:e6:a5:12:6e:a6:a1:26:fb:46:39: 52:6c:b1:00:d4:ec:d6:3a:3a:27:9f:df:c8:7c:f5:1e:54:ab: 5f:49:58:6d:a6:90:0f:d5:f5:88:4c:ba:a3:f3:51:80:e0:01: af:01:1f:af:b1:d1:02:61:57:5f:c2:ed:61:69:72:de:79:d8: 4e:f4:b6:6a:0e:95:cb:59:3d:df:d4:a9:04:72:30:63:82:5f: db:3d:07:7f:4f:45:be:6b:24:fc:d2:c4:fc:c9:18:fe:81:f7: 6b:bb:38:c5:5b:09:de:5f:85:9f:78:3f:a9:d9:ab:bf:d0:79: 0c:91:c8:73:17:9f:f3:71:7b:5a:12:23:d5:b5:36:25:04:9a: 8d:e6:35:aa:91:a9:f2:b4:c5:07:21:00:9c:47:2b:75:d8:d0: ed:b4:82:de:1e:f7:26:24:94:9b:aa:b8:ae:81:34:ed:4c:2c: 96:9b:58:c8:aa:7e:13:2a:be:b4:ae:d1:46:13:e4:96:2d:13: 97:30:51:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGEIlqk0H5PKUOuP4QG3QW7ZsWkUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzIxMDA1MDMzWhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTkyZDBmYjI5MjIzNzFlZTk3MmYzMDNjZjI3YWQ3MmJk ZGI5MGM2NDgyOThkZmU1Y2FjN2MyMmNjZjI3N2QwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCizNQBjq/sB8K6xWOMGt07WEGvmQgYrlPktvgR7Pu6tt57 VtXsjjmIksB88vgzgJYNT0dFpUbSH/lAmkc6srSoMqUVjhfyJ5Aefe5H/QbKWtjj EYRESH40y8rMhA+z36m3vOm0BZT1Vg7yl9Mqnnqyj1OuzuZc3MH604vV9KNpptMJ kAfjZ0CPSSWoc/hbVLiA2qHiTaxTjFdcGkbPg4Itn9Edg+lWIG90+P/SzKnXodvf 6v7TNNQ+3QjuUoWjUkcCVv5O5j1EEFXFy06r/oMMiN9m90kSFrSi4BuKp7PeCIoc oMDblQlcw9g/Eh+Bp0kq7PMx7I4cJTTyGkL5zZVfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpCIhW4+8sMx4sF/mZY1UUFoAkJEwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzE4MDc3MjJiLTYyMzktNDY0Zi1iMzYxLWEyYmRkMzY4YzVlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUk4wDQYJKoZIhvcNAQELBQADggEBAGkm+4RnsEhofUqZMsnpEO7qcivK d6ijzrInX32JqYwHO6V43Tm+jZIqmsQibKy+CGNgCq0wPQPaEkdpk59z5qUSbqah JvtGOVJssQDU7NY6Oief38h89R5Uq19JWG2mkA/V9YhMuqPzUYDgAa8BH6+x0QJh V1/C7WFpct552E70tmoOlctZPd/UqQRyMGOCX9s9B39PRb5rJPzSxPzJGP6B92u7 OMVbCd5fhZ94P6nZq7/QeQyRyHMXn/Nxe1oSI9W1NiUEmo3mNaqRqfK0xQchAJxH K3XY0O20gt4e9yYklJuquK6BNO1MLJabWMiqfhMqvrSu0UYT5JYtE5cwUTs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:08 2025 by rpki-client