$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1d13217f-f773-4398-981b-ffc64bffbbc2.roa File: 1d13217f-f773-4398-981b-ffc64bffbbc2.roa (raw, json) Hash identifier: cPOxrP0qIV/8GLpOUpjM9S0pUNjZwQU9DYE7yZfJdKI= Subject key identifier: 7C:09:D7:5F:42:49:A3:05:A1:26:70:E9:25:2F:BF:16:51:13:EB:07 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 40A837E3C9E00990B7BE9548255DD80C6714BFFE Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1d13217f-f773-4398-981b-ffc64bffbbc2.roa Signing time: Fri 21 Mar 2025 00:50:25 +0000 ROA not before: Fri 21 Mar 2025 00:50:25 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a8:37:e3:c9:e0:09:90:b7:be:95:48:25:5d:d8:0c:67:14:bf:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 21 00:50:25 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cd:ac:f2:4a:e5:51:3e:2a:82:a8:0f:01:a2: bc:5c:5a:3c:f4:33:e4:e9:e8:14:2c:ed:2c:41:62: e0:12:66:04:f4:b0:89:f5:f9:92:d9:70:6e:46:c9: 7a:1b:58:d4:45:d9:e7:69:43:50:ff:bf:1b:2d:06: 2a:8d:8a:cb:e4:b8:aa:f1:65:ed:61:4c:6b:56:46: e3:ff:69:83:07:0f:24:1d:7e:bb:79:43:d8:10:63: 1f:af:4a:21:94:2f:2b:a4:f6:22:40:ef:db:2e:da: eb:fc:f4:e6:42:0f:55:6c:76:9b:4c:85:cd:e2:aa: fa:23:25:7b:d5:65:b0:ad:fb:37:66:69:74:3e:47: 55:b2:a8:d0:ce:7d:47:a6:57:32:cb:37:67:78:f5: 48:5b:7d:ef:d0:22:8e:b3:c7:70:93:16:bc:85:85: 87:a7:d2:0b:ab:27:07:2c:5e:c4:38:55:bd:36:e1: 3c:e6:b4:85:11:91:ad:41:a4:ad:ac:8e:22:82:0e: aa:ad:c2:e3:09:b6:6c:48:7f:29:1f:9c:48:8a:17: 09:c2:3c:dd:e3:a0:0e:2e:1c:a4:82:09:5d:3b:7b: 46:51:3c:d5:15:87:3e:e4:0c:77:2d:07:81:a4:31: a8:52:1a:14:79:3d:74:20:40:01:33:3f:54:d6:7b: b4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:09:D7:5F:42:49:A3:05:A1:26:70:E9:25:2F:BF:16:51:13:EB:07 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1d13217f-f773-4398-981b-ffc64bffbbc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.17.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:59:1d:04:9e:fa:a6:49:e3:3d:be:85:b4:63:d3:3b:03:d6: 6d:bf:fd:e3:a0:a6:9c:a5:98:8e:98:87:5e:75:a0:dd:a8:14: 80:ae:0c:ab:20:3a:aa:97:95:11:b8:85:56:d6:0d:c0:1d:5d: b7:39:cc:60:18:3f:21:e5:e7:21:ba:40:fe:c1:89:2d:82:aa: 43:cb:d1:f1:52:ea:84:d8:07:75:33:f0:c4:64:6d:21:84:f7: fd:6b:d2:0b:c1:86:5a:d4:86:0c:50:69:c9:b1:11:88:c3:16: 19:fb:63:ed:45:c9:21:84:1c:8b:5d:86:35:73:0c:b3:a5:56: 36:33:fd:6a:a3:96:cf:a7:2e:69:e3:64:f5:47:ab:e3:ea:f1: 5a:6f:46:c3:0d:34:37:3f:76:e2:5f:62:ce:22:06:91:01:05: 02:f3:28:3c:38:6f:76:aa:bd:06:04:48:20:a7:02:6f:c7:0a: 1d:95:88:12:1a:3e:52:ed:e7:1c:71:b5:8d:e9:d5:ce:3e:d5: d5:06:ff:83:1c:ef:12:28:04:70:6a:e5:2b:a3:34:6a:07:b3: 81:c7:45:0a:d0:24:e5:24:a2:7d:5e:ca:1b:7c:4a:87:ec:80: dd:e7:1c:aa:ad:4b:9f:7c:a8:42:89:72:df:be:27:a7:c7:07: 8b:ad:6b:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQKg348ngCZC3vpVIJV3YDGcUv/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzIxMDA1MDI1WhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTk1NmM2ODM0ZWE5YjAxOGM4MGZjYTYxMjhjOTFhNDQ1 OGZmZWU1NDVmYWNiODk5NDIzMWU1YmZjYzdjNTk1MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRzazySuVRPiqCqA8BorxcWjz0M+Tp6BQs7SxBYuASZgT0 sIn1+ZLZcG5GyXobWNRF2edpQ1D/vxstBiqNisvkuKrxZe1hTGtWRuP/aYMHDyQd frt5Q9gQYx+vSiGULyuk9iJA79su2uv89OZCD1VsdptMhc3iqvojJXvVZbCt+zdm aXQ+R1WyqNDOfUemVzLLN2d49Uhbfe/QIo6zx3CTFryFhYen0gurJwcsXsQ4Vb02 4TzmtIURka1BpK2sjiKCDqqtwuMJtmxIfykfnEiKFwnCPN3joA4uHKSCCV07e0ZR PNUVhz7kDHctB4GkMahSGhR5PXQgQAEzP1TWe7QNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfAnXX0JJowWhJnDpJS+/FlET6wcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFkMTMyMTdmLWY3NzMtNDM5OC05ODFiLWZmYzY0YmZmYmJjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUhEwDQYJKoZIhvcNAQELBQADggEBADpZHQSe+qZJ4z2+hbRj0zsD1m2/ /eOgppylmI6Yh151oN2oFICuDKsgOqqXlRG4hVbWDcAdXbc5zGAYPyHl5yG6QP7B iS2CqkPL0fFS6oTYB3Uz8MRkbSGE9/1r0gvBhlrUhgxQacmxEYjDFhn7Y+1FySGE HItdhjVzDLOlVjYz/Wqjls+nLmnjZPVHq+Pq8VpvRsMNNDc/duJfYs4iBpEBBQLz KDw4b3aqvQYESCCnAm/HCh2ViBIaPlLt5xxxtY3p1c4+1dUG/4Mc7xIoBHBq5Suj NGoHs4HHRQrQJOUkon1eyht8SofsgN3nHKqtS598qEKJct++J6fHB4uta10= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:33 2025 by rpki-client