$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4747cb3a-dada-4e4c-b2af-99fedfffda48.roa File: 4747cb3a-dada-4e4c-b2af-99fedfffda48.roa (raw, json) Hash identifier: r1o+AFBYcfjwAnFeGqarmj6Brhshly+y7W5AyfInlpE= Subject key identifier: 18:21:11:67:2D:C8:AE:67:84:75:27:9D:6E:B6:FB:F7:FA:B4:A2:5B Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3EE43C504AF0560B46A41E7ACADC75C47C8A98F3 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4747cb3a-dada-4e4c-b2af-99fedfffda48.roa Signing time: Mon 31 Mar 2025 18:20:28 +0000 ROA not before: Mon 31 Mar 2025 18:20:28 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 173.82.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e4:3c:50:4a:f0:56:0b:46:a4:1e:7a:ca:dc:75:c4:7c:8a:98:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 31 18:20:28 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:9b:06:b7:9e:82:f1:94:f5:b1:08:90:e5: d8:46:b1:8a:c7:34:0e:eb:94:4e:80:3f:a3:41:e6: e4:1a:28:bd:e7:a1:5d:b2:6d:20:21:74:f9:2c:55: d3:14:ac:f7:4f:0c:77:17:87:38:a6:a9:72:c7:bc: 54:2f:8d:b6:86:44:67:7a:06:d4:2d:1a:3c:4f:c7: cb:64:26:ec:81:85:7f:4f:bf:35:4a:a3:73:d4:9c: 40:72:ad:36:97:86:6d:f9:a8:b5:98:97:8a:1f:81: 07:e3:5e:56:6c:41:2f:d9:54:ce:1c:e2:6f:df:03: 8a:c7:f8:ac:ad:97:fb:84:9d:b7:3d:d0:57:35:c2: 8d:96:e0:9f:a9:8a:ed:f7:86:5e:e1:18:7f:2a:63: fa:d0:a1:ed:45:8b:2d:12:24:aa:8b:6a:d7:c8:6a: 10:e8:65:74:4a:5a:8d:60:91:e9:31:f4:f8:6f:d0: a9:ed:3f:22:90:1f:f0:94:17:21:ba:90:b4:b9:75: 81:49:28:17:9b:d4:70:75:4f:86:df:93:1d:f3:b0: 51:a9:0d:ed:e9:e4:3b:f9:69:d9:23:32:b6:8a:59: 90:e2:71:87:94:e6:3e:ad:e7:09:52:2a:92:38:56: dd:62:17:c8:cc:43:ac:e4:13:3c:6b:07:fd:93:df: 94:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:21:11:67:2D:C8:AE:67:84:75:27:9D:6E:B6:FB:F7:FA:B4:A2:5B X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4747cb3a-dada-4e4c-b2af-99fedfffda48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.5.0/24 Signature Algorithm: sha256WithRSAEncryption 09:d6:4e:6c:47:06:22:ab:3e:a3:72:34:4c:e8:15:d9:a0:bd: b9:82:db:4a:8b:3c:da:58:8a:43:60:ce:bb:d2:1f:3b:2d:b2: d9:ef:9a:5b:6e:4a:7c:3a:da:6c:dd:76:47:22:a7:cf:43:3a: 31:97:bf:a8:cd:d7:b6:20:3e:fa:15:61:1a:dc:ea:64:06:eb: da:07:4d:2d:75:6d:a5:38:71:88:84:f9:ca:56:00:20:e1:75: 82:3e:86:16:ba:64:b8:e8:a9:4a:f7:cf:3c:fc:02:1e:e3:8d: 19:7e:01:a2:f8:1e:dc:70:a8:db:2b:d1:4b:70:1f:98:2c:84: 09:c7:da:ca:9b:34:83:79:5b:53:4f:41:d9:88:82:08:f2:91: 59:66:4c:e4:df:23:f0:be:4f:62:65:fa:6c:e9:cd:c7:8c:55: 61:7b:9b:97:8c:d0:b8:06:47:c0:6a:c8:a2:c8:76:36:30:94: df:fa:84:ea:03:03:6b:25:70:6e:47:fa:b1:3f:2f:2e:28:ee: 81:d2:70:42:fb:32:5f:ae:dd:06:2c:e0:c0:67:89:81:cb:16: 7d:e4:28:61:8d:5b:bd:b3:b2:6e:09:e6:11:e0:43:78:fe:17: 7a:0e:8e:75:9c:bc:ae:0e:63:97:21:35:a4:35:8d:d4:98:67: c2:e5:4c:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPuQ8UErwVgtGpB56ytx1xHyKmPMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzMxMTgyMDI4WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTg1ZmFjNWZiY2FkYWE5N2ZkNmFjMGI4MzkwMGIzYThl MDNlNzE1MjAzYjYyZmJjMjhkMjJlMTcyMWViMjFiMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1eJsGt56C8ZT1sQiQ5dhGsYrHNA7rlE6AP6NB5uQaKL3n oV2ybSAhdPksVdMUrPdPDHcXhzimqXLHvFQvjbaGRGd6BtQtGjxPx8tkJuyBhX9P vzVKo3PUnEByrTaXhm35qLWYl4ofgQfjXlZsQS/ZVM4c4m/fA4rH+Kytl/uEnbc9 0Fc1wo2W4J+piu33hl7hGH8qY/rQoe1Fiy0SJKqLatfIahDoZXRKWo1gkekx9Phv 0KntPyKQH/CUFyG6kLS5dYFJKBeb1HB1T4bfkx3zsFGpDe3p5Dv5adkjMraKWZDi cYeU5j6t5wlSKpI4Vt1iF8jMQ6zkEzxrB/2T35S3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGCERZy3IrmeEdSedbrb79/q0olswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzQ3NDdjYjNhLWRhZGEtNGU0Yy1iMmFmLTk5ZmVkZmZmZGE0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUgUwDQYJKoZIhvcNAQELBQADggEBAAnWTmxHBiKrPqNyNEzoFdmgvbmC 20qLPNpYikNgzrvSHzststnvmltuSnw62mzddkcip89DOjGXv6jN17YgPvoVYRrc 6mQG69oHTS11baU4cYiE+cpWACDhdYI+hha6ZLjoqUr3zzz8Ah7jjRl+AaL4Htxw qNsr0UtwH5gshAnH2sqbNIN5W1NPQdmIggjykVlmTOTfI/C+T2Jl+mzpzceMVWF7 m5eM0LgGR8BqyKLIdjYwlN/6hOoDA2slcG5H+rE/Ly4o7oHScEL7Ml+u3QYs4MBn iYHLFn3kKGGNW72zsm4J5hHgQ3j+F3oOjnWcvK4OY5chNaQ1jdSYZ8LlTOY= -----END CERTIFICATE-----Generated at Fri Apr 4 23:34:09 2025 by rpki-client