$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/494ac592-fba5-41f1-ab2a-ccd1bdb60cab.roa File: 494ac592-fba5-41f1-ab2a-ccd1bdb60cab.roa (raw, json) Hash identifier: ujb+w2maqcAceD4Y6080qaw1r6Dox3IvhiZPEKheFh0= Subject key identifier: 4B:0C:AA:FA:AB:5F:16:17:C2:E0:83:7E:09:E6:83:EA:0D:17:60:AD Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 31C3D28C79E39171071CEDAAA1204EBF9C17C591 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/494ac592-fba5-41f1-ab2a-ccd1bdb60cab.roa Signing time: Fri 21 Mar 2025 00:50:34 +0000 ROA not before: Fri 21 Mar 2025 00:50:34 +0000 ROA not after: Fri 25 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c3:d2:8c:79:e3:91:71:07:1c:ed:aa:a1:20:4e:bf:9c:17:c5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 21 00:50:34 2025 GMT Not After : Apr 25 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:08:d5:4c:b9:21:a2:88:4f:82:81:e3:62: b9:0f:6a:d5:93:4c:fe:55:32:de:de:76:29:83:61: 91:b8:9e:58:2f:da:75:b3:74:39:a2:ff:5b:00:9f: 63:cb:0c:a7:61:77:91:d4:e8:3b:b4:86:a5:b2:55: db:71:26:6f:1a:5a:07:72:5f:f5:fa:31:c9:75:58: b2:b3:fd:e9:64:ca:87:ee:77:1d:8d:56:ba:11:05: ef:3b:84:21:d6:bc:05:6f:c4:94:89:8d:18:ed:ac: 1f:94:a1:12:09:c1:f3:4d:dc:ed:93:2a:18:7c:6c: 19:28:fe:f5:16:2c:b0:2c:a9:f1:44:49:90:56:54: 8f:88:2f:3b:0b:b4:a8:e4:54:ba:b7:2e:b7:77:28: ad:e5:f6:7a:28:40:23:fc:ee:d5:82:6c:27:6d:fb: 58:e3:71:f0:1e:53:d1:1c:24:c8:fd:3f:66:d0:de: 78:da:d9:dc:62:16:fb:2f:12:67:b8:42:d8:be:37: 73:04:f8:39:85:7c:2e:ad:02:12:06:36:e9:8b:53: 43:02:86:be:77:c4:05:c5:43:8c:96:09:b3:56:6b: d0:17:b3:e3:d6:d2:9c:42:b4:c0:07:1b:cf:92:e3: 7f:b3:a4:69:9a:41:d4:96:cb:50:7d:63:8e:3f:7b: 47:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0C:AA:FA:AB:5F:16:17:C2:E0:83:7E:09:E6:83:EA:0D:17:60:AD X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/494ac592-fba5-41f1-ab2a-ccd1bdb60cab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.72.0/24 Signature Algorithm: sha256WithRSAEncryption 56:17:2e:61:ad:50:6d:f9:69:75:cd:36:5a:5f:50:b7:93:9f: 26:70:14:00:d3:d4:c2:22:9d:24:be:85:34:a6:95:81:a5:98: d8:b1:db:40:35:16:00:00:e7:25:70:7b:d2:62:2e:9f:87:7a: c5:4c:ca:25:9f:c0:e9:3d:fd:bd:98:e7:e4:91:50:30:5b:64: 9e:83:9e:c1:ab:d4:08:a3:99:e8:c9:81:8d:78:7f:52:50:8b: 10:7b:9d:8b:2f:60:86:54:8b:a4:b7:f7:88:14:20:8a:32:21: 79:e1:b2:d9:62:c3:78:9c:21:16:be:55:da:77:fc:6b:9d:cc: ca:42:bd:7a:51:c7:19:f1:ce:2f:bf:ad:88:a8:aa:1d:9d:63: d5:42:6b:61:06:e7:da:97:7c:48:eb:33:0b:29:36:22:f4:3f: 37:1d:51:45:0d:62:45:3b:a0:64:07:6f:d3:1e:95:ea:fe:a1: 58:98:52:89:eb:f6:74:40:5f:a0:f0:4a:0f:22:15:45:d3:b0: 7d:d5:94:31:3f:a5:68:09:46:5a:d0:49:97:fb:20:8d:13:ee: 87:4b:6c:77:5f:73:dc:c8:b6:89:aa:82:13:96:41:67:52:5c: aa:2e:b2:bb:38:06:45:0a:21:ee:3b:cd:52:2c:8f:14:fa:92: ed:20:10:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMcPSjHnjkXEHHO2qoSBOv5wXxZEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzIxMDA1MDM0WhcNMjUwNDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjAyZTcyNTJlOWNjY2QxNDlmZDQ4OGNmNzIyMTg5OThl NzYxNzIwNGQwODFkZTc4MzJhOWY2MTQ2MTM4OTUxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIOwjVTLkhoohPgoHjYrkPatWTTP5VMt7edimDYZG4nlgv 2nWzdDmi/1sAn2PLDKdhd5HU6Du0hqWyVdtxJm8aWgdyX/X6Mcl1WLKz/elkyofu dx2NVroRBe87hCHWvAVvxJSJjRjtrB+UoRIJwfNN3O2TKhh8bBko/vUWLLAsqfFE SZBWVI+ILzsLtKjkVLq3Lrd3KK3l9nooQCP87tWCbCdt+1jjcfAeU9EcJMj9P2bQ 3nja2dxiFvsvEme4Qti+N3ME+DmFfC6tAhIGNumLU0MChr53xAXFQ4yWCbNWa9AX s+PW0pxCtMAHG8+S43+zpGmaQdSWy1B9Y44/e0d5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSwyq+qtfFhfC4IN+CeaD6g0XYK0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQ5NGFjNTkyLWZiYTUtNDFmMS1hYjJhLWNjZDFiZGI2MGNhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUkgwDQYJKoZIhvcNAQELBQADggEBAFYXLmGtUG35aXXNNlpfULeTnyZw FADT1MIinSS+hTSmlYGlmNix20A1FgAA5yVwe9JiLp+HesVMyiWfwOk9/b2Y5+SR UDBbZJ6DnsGr1AijmejJgY14f1JQixB7nYsvYIZUi6S394gUIIoyIXnhstliw3ic IRa+Vdp3/GudzMpCvXpRxxnxzi+/rYioqh2dY9VCa2EG59qXfEjrMwspNiL0Pzcd UUUNYkU7oGQHb9Meler+oViYUonr9nRAX6DwSg8iFUXTsH3VlDE/pWgJRlrQSZf7 II0T7odLbHdfc9zItomqghOWQWdSXKousrs4BkUKIe47zVIsjxT6ku0gEM8= -----END CERTIFICATE-----Generated at Sat Apr 5 12:25:10 2025 by rpki-client