$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5fdd81f8-db5f-4144-aac5-a9b268abbb71.roa File: 5fdd81f8-db5f-4144-aac5-a9b268abbb71.roa (raw, json) Hash identifier: EK1Ab/d18oxE41NKx6BB7pUe8khPGQIR6QGeM2Idolw= Subject key identifier: 7B:74:46:FC:9A:9F:AE:C5:D7:55:E3:2F:6E:66:83:50:A0:F7:98:08 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 57D6E307E4A4A289052E5EC7D05F49557BCC1D58 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5fdd81f8-db5f-4144-aac5-a9b268abbb71.roa Signing time: Tue 06 May 2025 00:20:03 +0000 ROA not before: Tue 06 May 2025 00:20:03 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d6:e3:07:e4:a4:a2:89:05:2e:5e:c7:d0:5f:49:55:7b:cc:1d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 6 00:20:03 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=f7dcfc848be0246ce10f83323ad0f9dddcde411f2dcf261830ba19b5890a4607, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:6c:80:8d:44:04:68:f4:b6:5d:4c:8d:3d: d2:ba:89:06:c4:d0:01:99:b5:9d:73:61:3d:58:62: 21:88:6f:82:00:a4:8b:d8:e1:f5:d5:55:05:09:de: 12:3e:19:a4:50:27:bc:9f:dd:88:5e:72:e8:b6:9c: 9e:32:28:76:00:82:69:26:2c:41:89:2c:1c:61:f4: f3:e0:b3:17:69:e7:e3:94:b4:9c:b9:cf:b2:45:3b: 5d:bf:29:29:6e:2d:dd:27:0c:4f:18:5c:f2:f5:34: ca:00:a7:f1:2c:86:80:67:5f:b5:db:8b:53:21:3b: 87:16:13:ce:73:05:b8:aa:30:4a:32:ca:bf:af:85: eb:33:86:fe:a7:87:c9:d8:70:a0:26:59:34:24:d4: 1c:84:c2:34:84:39:2f:ee:51:ff:df:94:42:22:67: 60:e6:d8:a2:e9:97:75:2e:fd:57:f3:91:3b:ee:e6: c0:29:f2:53:a6:ea:42:0c:9b:c3:7e:0e:05:78:71: a3:fd:80:59:1f:35:6f:ee:0b:e3:d4:26:d7:c5:59: 96:99:d0:f8:e0:51:7a:7c:51:d1:ea:42:cd:62:1a: 97:d0:fa:63:fb:56:5f:5f:d3:da:a6:ac:77:5f:3a: d4:e7:b8:37:a5:db:92:b5:4f:8b:5a:e4:4c:61:f3: c6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:74:46:FC:9A:9F:AE:C5:D7:55:E3:2F:6E:66:83:50:A0:F7:98:08 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5fdd81f8-db5f-4144-aac5-a9b268abbb71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.63.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:35:e8:be:8f:e8:6e:e6:d0:9b:b2:b0:b7:5f:12:7f:33:25: d6:5a:20:fd:11:dd:fd:2e:66:96:3c:d2:05:c8:a4:59:d6:45: 24:6a:3c:07:5a:33:5e:07:a7:21:c4:a7:29:fa:1a:c2:da:80: 6e:b5:3c:53:89:93:37:3e:ff:3c:95:51:6d:ba:d5:2f:66:b5: 48:5c:b5:21:ff:31:66:ca:eb:4d:3e:ed:0a:15:f8:44:49:82: 60:a3:13:64:00:db:e8:3a:a0:14:18:2f:60:a4:b8:d0:ea:93: f2:91:5d:02:a5:db:3e:7e:0d:b9:63:20:61:5c:e7:5d:6a:81: 2e:14:36:10:7c:9b:8d:0e:c9:91:f7:12:3f:6f:35:99:3a:b2: 99:6f:b6:82:90:d8:aa:0d:df:76:d8:4e:f9:5c:32:08:c2:4e: ec:d1:6a:35:9e:9a:e3:96:84:16:39:22:d8:1a:4e:3b:3b:60: df:57:bb:72:95:04:c8:75:48:5d:ea:7f:d3:ba:62:98:cc:e9: 7a:9a:c1:eb:65:46:7f:af:4e:c6:93:70:ee:37:7a:2b:0f:c6: 51:a1:99:5c:69:44:c7:b5:ca:61:c3:3a:af:ce:41:b2:e6:94: ff:4d:da:7a:e6:19:b7:af:68:e9:1b:8e:84:de:93:0f:97:ae: a7:0f:dc:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV9bjB+SkookFLl7H0F9JVXvMHVgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTA2MDAyMDAzWhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2RjZmM4NDhiZTAyNDZjZTEwZjgzMzIzYWQwZjlkZGRj ZGU0MTFmMmRjZjI2MTgzMGJhMTliNTg5MGE0NjA3MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSSWyAjUQEaPS2XUyNPdK6iQbE0AGZtZ1zYT1YYiGIb4IA pIvY4fXVVQUJ3hI+GaRQJ7yf3Yhecui2nJ4yKHYAgmkmLEGJLBxh9PPgsxdp5+OU tJy5z7JFO12/KSluLd0nDE8YXPL1NMoAp/EshoBnX7Xbi1MhO4cWE85zBbiqMEoy yr+vheszhv6nh8nYcKAmWTQk1ByEwjSEOS/uUf/flEIiZ2Dm2KLpl3Uu/VfzkTvu 5sAp8lOm6kIMm8N+DgV4caP9gFkfNW/uC+PUJtfFWZaZ0PjgUXp8UdHqQs1iGpfQ +mP7Vl9f09qmrHdfOtTnuDel25K1T4ta5Exh88ZzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUe3RG/JqfrsXXVeMvbmaDUKD3mAgwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzVmZGQ4MWY4LWRiNWYtNDE0NC1hYWM1LWE5YjI2OGFiYmI3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUj8wDQYJKoZIhvcNAQELBQADggEBAHo16L6P6G7m0JuysLdfEn8zJdZa IP0R3f0uZpY80gXIpFnWRSRqPAdaM14HpyHEpyn6GsLagG61PFOJkzc+/zyVUW26 1S9mtUhctSH/MWbK600+7QoV+ERJgmCjE2QA2+g6oBQYL2CkuNDqk/KRXQKl2z5+ DbljIGFc511qgS4UNhB8m40OyZH3Ej9vNZk6splvtoKQ2KoN33bYTvlcMgjCTuzR ajWemuOWhBY5ItgaTjs7YN9Xu3KVBMh1SF3qf9O6YpjM6XqawetlRn+vTsaTcO43 eisPxlGhmVxpRMe1ymHDOq/OQbLmlP9N2nrmGbevaOkbjoTekw+XrqcP3PY= -----END CERTIFICATE-----Generated at Fri May 9 10:10:25 2025 by rpki-client