$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/297c1031-a356-464c-a545-9d3b278c4ae9.roa File: 297c1031-a356-464c-a545-9d3b278c4ae9.roa (raw, json) Hash identifier: /dyh6yrXBohJX5OaFA+fa3aLMb1jXUpTaEmAwFIHTZA= Subject key identifier: 84:35:A6:F7:D0:43:08:EC:A0:E5:39:3D:D6:40:2F:3B:BB:24:F4:ED Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 37BB1CD065798F9DDEE1D78212389424E8F4AEB0 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/297c1031-a356-464c-a545-9d3b278c4ae9.roa Signing time: Mon 31 Mar 2025 18:20:26 +0000 ROA not before: Mon 31 Mar 2025 18:20:26 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:bb:1c:d0:65:79:8f:9d:de:e1:d7:82:12:38:94:24:e8:f4:ae:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 31 18:20:26 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:50:28:5a:18:38:26:a6:ec:27:93:3b:df: 42:ed:30:cd:22:28:04:23:38:e1:21:8e:58:9e:d3: f3:be:50:25:46:ae:30:77:21:c4:e2:2b:9f:6e:ac: 20:22:f9:e8:2d:70:0b:bb:38:55:c6:d8:e9:ab:72: 8c:7f:f3:12:b4:52:89:83:ed:ca:37:9f:6c:cb:33: 6a:d2:4b:3a:54:9f:33:75:b2:ca:33:2a:f2:a1:0e: f1:32:37:9f:f8:70:c7:5a:bb:b7:be:49:26:21:24: 0c:f8:e9:7b:85:26:5b:cb:35:15:35:93:c4:3c:36: 7d:56:a7:9a:de:b8:e3:6f:a0:32:9a:4e:da:2a:ca: b1:e2:ec:12:4d:c1:89:bc:bc:03:8f:78:4d:0d:b6: 39:55:7b:1a:4d:a1:80:e0:fd:18:e7:d1:f8:6a:6e: 23:02:b4:5d:76:48:d8:22:2c:d8:69:bf:3e:c0:ea: f1:9d:00:01:0f:10:b0:8f:f7:51:26:fa:a4:2b:59: 90:d1:e8:b6:d9:58:0f:c4:2f:b0:7a:15:3d:87:37: 61:e5:dd:17:80:c3:48:d2:ee:5c:fd:41:f4:df:83: 72:89:7d:06:05:e0:19:f7:89:12:95:e5:85:6c:d5: cd:b5:b3:51:ef:71:ec:35:d4:ac:1c:f5:4e:9a:40: fd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:35:A6:F7:D0:43:08:EC:A0:E5:39:3D:D6:40:2F:3B:BB:24:F4:ED X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/297c1031-a356-464c-a545-9d3b278c4ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.97.0/24 Signature Algorithm: sha256WithRSAEncryption 10:c3:f2:fa:c8:e3:66:14:df:4a:aa:f6:78:95:47:41:c8:a9: c1:3b:95:7e:fe:d3:35:7f:92:85:53:cc:ba:d6:15:3d:ba:a2: 6d:34:10:66:ec:6c:d4:64:16:08:0d:c0:fa:8f:33:d5:9c:52: 2c:7f:de:71:f2:ed:72:e4:e3:5f:51:07:21:e2:a1:fe:02:5d: 52:1b:50:49:1b:9e:8c:e8:58:6a:f6:71:65:a5:81:00:05:33: 48:ed:ad:85:24:16:de:4f:15:3b:75:10:7b:c3:a5:62:87:63: d1:bb:6d:e7:35:1d:0b:bc:70:26:ca:90:0f:1c:da:81:43:de: 2a:da:28:79:c9:1e:31:ff:b3:18:e9:7c:83:b7:27:7b:74:b6: a3:57:f1:7b:f5:62:79:9f:ce:85:8b:34:04:64:2f:cb:8a:f9: 8a:a6:70:82:cb:35:68:19:04:6c:0a:5d:4d:af:bd:09:f9:19: c7:89:e3:a2:96:d1:56:83:0d:14:c2:58:21:64:d4:e6:c3:b4: ff:35:91:2e:82:50:0b:d5:93:cf:14:92:46:60:4f:64:48:4d: 84:bd:ae:52:95:1b:f3:3b:06:83:d7:15:d3:03:89:9b:b0:f7: a9:38:8c:18:d7:14:2b:6f:13:3d:b4:ab:3c:e5:e8:db:07:42: fb:ee:81:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN7sc0GV5j53e4deCEjiUJOj0rrAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzMxMTgyMDI2WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MWRlYTRmY2U5YzZhNWNhMmQ2MjVmZjc4YWZkNWEzZTMy MDRmN2IwZTFlMmE3ZmQ3OGMwZjUxNGM4MTMwN2EwMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5hVAoWhg4JqbsJ5M730LtMM0iKAQjOOEhjlie0/O+UCVG rjB3IcTiK59urCAi+egtcAu7OFXG2Omrcox/8xK0UomD7co3n2zLM2rSSzpUnzN1 ssozKvKhDvEyN5/4cMdau7e+SSYhJAz46XuFJlvLNRU1k8Q8Nn1Wp5reuONvoDKa TtoqyrHi7BJNwYm8vAOPeE0NtjlVexpNoYDg/Rjn0fhqbiMCtF12SNgiLNhpvz7A 6vGdAAEPELCP91Em+qQrWZDR6LbZWA/EL7B6FT2HN2Hl3ReAw0jS7lz9QfTfg3KJ fQYF4Bn3iRKV5YVs1c21s1Hvcew11Kwc9U6aQP2fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhDWm99BDCOyg5Tk91kAvO7sk9O0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzI5N2MxMDMxLWEzNTYtNDY0Yy1hNTQ1LTlkM2IyNzhjNGFlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUmEwDQYJKoZIhvcNAQELBQADggEBABDD8vrI42YU30qq9niVR0HIqcE7 lX7+0zV/koVTzLrWFT26om00EGbsbNRkFggNwPqPM9WcUix/3nHy7XLk419RByHi of4CXVIbUEkbnozoWGr2cWWlgQAFM0jtrYUkFt5PFTt1EHvDpWKHY9G7bec1HQu8 cCbKkA8c2oFD3iraKHnJHjH/sxjpfIO3J3t0tqNX8Xv1YnmfzoWLNARkL8uK+Yqm cILLNWgZBGwKXU2vvQn5GceJ46KW0VaDDRTCWCFk1ObDtP81kS6CUAvVk88UkkZg T2RITYS9rlKVG/M7BoPXFdMDiZuw96k4jBjXFCtvEz20qzzl6NsHQvvugU8= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:21 2025 by rpki-client