$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/717f5e93-b9de-4290-9c65-f643bb0d3642.roa File: 717f5e93-b9de-4290-9c65-f643bb0d3642.roa (raw, json) Hash identifier: gzfsXmJthXvqiP85/3HJk8jMPpogjju5849cKIGGT7U= Subject key identifier: 0F:97:EE:2C:B7:BC:87:53:30:B6:D5:B5:0E:13:EF:39:00:27:02:4A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 526B548E0BEC5F47863F2A0C698FA60E0881FDA5 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/717f5e93-b9de-4290-9c65-f643bb0d3642.roa Signing time: Wed 05 Feb 2025 00:00:00 +0000 ROA not before: Wed 05 Feb 2025 00:00:00 +0000 ROA not after: Wed 12 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6b:54:8e:0b:ec:5f:47:86:3f:2a:0c:69:8f:a6:0e:08:81:fd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Feb 5 00:00:00 2025 GMT Not After : Mar 12 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:d9:e8:b6:34:9c:c9:f1:14:d6:b6:7b:65: 8a:9c:ad:5b:d1:dc:55:67:48:90:4a:58:fe:85:df: 2a:fd:05:30:6e:0d:33:2d:ac:4c:ab:12:1c:98:36: a2:c0:3d:d4:28:9b:32:b8:d7:8e:7a:01:16:e1:24: ea:03:19:02:d4:83:98:86:63:7b:bd:0c:a5:f5:f3: 7e:4b:03:25:b0:6f:85:d8:bf:ad:7a:5e:5d:82:a8: e1:6f:21:3b:97:66:a0:f2:5a:70:ae:48:6a:a1:75: 73:5a:c4:15:8d:38:a3:a5:3f:96:52:b5:d5:75:c9: 9d:c1:20:b9:08:61:05:f7:ac:9b:75:67:58:a7:d0: 1b:6b:5f:53:59:47:62:c1:3b:2a:8b:ae:8f:bf:1f: 9a:60:94:16:b1:0e:24:30:3a:6f:54:1d:54:00:d5: 12:51:d4:9e:87:98:82:84:72:b7:30:d2:a7:6d:ec: e3:e4:fd:53:16:dd:9d:6c:2a:8e:c1:9d:5b:20:24: 2d:0d:66:dd:f6:2f:49:76:68:85:34:02:05:d2:a2: 6f:4c:c1:2e:90:88:83:06:90:b2:8c:5c:c4:cf:d0: 32:9c:59:ca:42:01:c0:bb:52:3e:9c:a8:9c:a4:99: b8:4b:c7:11:14:3c:f1:ef:84:55:59:de:fe:a0:97: 05:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:97:EE:2C:B7:BC:87:53:30:B6:D5:B5:0E:13:EF:39:00:27:02:4A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/717f5e93-b9de-4290-9c65-f643bb0d3642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.8.0/24 Signature Algorithm: sha256WithRSAEncryption 91:8d:78:1f:36:99:70:67:4c:6b:8c:7e:e7:ea:04:b3:02:3e: 4c:af:9b:f5:94:93:5e:5a:22:1e:4f:81:9d:be:9a:2b:cf:5c: ab:e5:78:71:6e:ab:50:83:96:63:33:97:bb:30:c3:23:35:d9: b1:af:a7:fb:09:ac:cd:da:5a:f1:58:75:d6:62:0e:21:51:44: 2c:c5:20:47:d5:05:b6:ec:1d:88:f8:67:bb:87:8c:10:9d:3a: 1f:d3:8c:a4:cb:45:0d:a0:9d:df:11:10:9e:fb:0d:7c:57:c7: dd:6f:07:de:f0:53:fc:b6:78:16:a2:c8:ff:1d:01:d2:19:40: bf:59:0b:ef:02:18:3b:3d:c3:21:cd:0b:5f:cd:14:67:1d:89: 46:96:85:a6:b1:64:24:d2:f1:d4:62:d0:4b:79:85:a5:de:6a: fd:59:94:e5:ae:c1:27:1f:e3:a8:48:af:7e:44:bf:85:3a:11: 7a:a8:78:ee:e7:4c:41:26:f9:16:4a:30:f0:fe:2c:24:5f:63: 26:87:48:f4:b7:e7:f6:98:02:18:6f:47:fb:33:2f:5a:71:b3: f8:09:85:cd:42:85:2e:5a:99:77:19:fa:30:97:86:04:38:6c: 33:d7:5f:87:49:7f:ff:e1:b7:54:35:4c:f9:d5:6d:06:a1:48: e1:19:be:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUmtUjgvsX0eGPyoMaY+mDgiB/aUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMjA1MDAwMDAwWhcNMjUwMzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTI2MDA0N2E3MmZiYmY2ODAwZTI3ZTJhZTBkODRkNzI1 YTE1Y2E0ZjFjMDA1ZTc3ZTBmMDk0ODk3MmIyZGMzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs2tnotjScyfEU1rZ7ZYqcrVvR3FVnSJBKWP6F3yr9BTBu DTMtrEyrEhyYNqLAPdQomzK41456ARbhJOoDGQLUg5iGY3u9DKX1835LAyWwb4XY v616Xl2CqOFvITuXZqDyWnCuSGqhdXNaxBWNOKOlP5ZStdV1yZ3BILkIYQX3rJt1 Z1in0BtrX1NZR2LBOyqLro+/H5pglBaxDiQwOm9UHVQA1RJR1J6HmIKEcrcw0qdt 7OPk/VMW3Z1sKo7BnVsgJC0NZt32L0l2aIU0AgXSom9MwS6QiIMGkLKMXMTP0DKc WcpCAcC7Uj6cqJykmbhLxxEUPPHvhFVZ3v6glwWXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD5fuLLe8h1MwttW1DhPvOQAnAkowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzcxN2Y1ZTkzLWI5ZGUtNDI5MC05YzY1LWY2NDNiYjBkMzY0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUggwDQYJKoZIhvcNAQELBQADggEBAJGNeB82mXBnTGuMfufqBLMCPkyv m/WUk15aIh5PgZ2+mivPXKvleHFuq1CDlmMzl7swwyM12bGvp/sJrM3aWvFYddZi DiFRRCzFIEfVBbbsHYj4Z7uHjBCdOh/TjKTLRQ2gnd8REJ77DXxXx91vB97wU/y2 eBaiyP8dAdIZQL9ZC+8CGDs9wyHNC1/NFGcdiUaWhaaxZCTS8dRi0Et5haXeav1Z lOWuwScf46hIr35Ev4U6EXqoeO7nTEEm+RZKMPD+LCRfYyaHSPS35/aYAhhvR/sz L1pxs/gJhc1ChS5amXcZ+jCXhgQ4bDPXX4dJf//ht1Q1TPnVbQahSOEZvug= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:16 2025 by rpki-client