$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7a60eded-a7e8-4c0f-b13c-d04bb244a35b.roa File: 7a60eded-a7e8-4c0f-b13c-d04bb244a35b.roa (raw, json) Hash identifier: bnhVuxINtsbfGCxMf0xiy4zj54wRT4hagXeLFjGIodQ= Subject key identifier: 92:3B:45:50:80:57:6B:B2:A2:6F:9A:AB:EB:F8:DD:98:A7:1D:3B:05 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 4CEE631946611C3A1B285C28EB08F8F2408B1F9A Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7a60eded-a7e8-4c0f-b13c-d04bb244a35b.roa Signing time: Fri 04 Apr 2025 00:20:53 +0000 ROA not before: Fri 04 Apr 2025 00:20:53 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 173.82.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ee:63:19:46:61:1c:3a:1b:28:5c:28:eb:08:f8:f2:40:8b:1f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 4 00:20:53 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fc:be:c6:b8:62:14:bf:e7:b7:87:c3:e2:df: 39:0e:b3:c6:80:3e:77:73:74:5b:25:43:dc:1d:47: 1d:a0:bf:de:39:28:a6:4c:92:f0:15:30:57:19:e3: df:5d:72:c6:29:8a:1e:e2:1a:ec:ee:a8:5a:8a:bd: 09:f9:c8:a3:98:db:99:50:36:d2:92:81:0a:db:8f: 15:d7:a9:dd:d0:87:5f:e3:b6:88:42:a9:ae:35:96: a3:5e:b1:50:b0:29:78:ee:f4:02:54:ee:d3:a4:24: 0d:88:ed:59:6f:cf:7b:d3:53:c2:a4:a6:f0:4e:46: 97:00:d3:00:fd:19:89:93:ee:df:d6:1b:87:b1:06: e8:c8:6d:52:f7:1a:ba:38:2b:33:8f:6b:d0:55:4e: 14:a1:93:47:74:46:0e:ee:c2:f8:11:89:c6:60:5d: d0:83:8e:fc:df:49:59:35:55:bf:14:55:41:64:65: 87:e8:49:d1:8f:a4:f0:7b:12:c5:33:c9:9a:79:34: 47:11:c2:50:c0:3a:fb:66:81:ec:a3:bb:f4:b5:b5: 2b:ff:a4:45:66:78:64:03:8e:48:04:d2:8e:04:f9: 53:67:1d:93:28:41:1a:a0:77:47:fb:76:61:48:7c: 1d:04:07:0a:7c:64:6d:f4:43:78:e4:ae:dc:bf:c4: da:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3B:45:50:80:57:6B:B2:A2:6F:9A:AB:EB:F8:DD:98:A7:1D:3B:05 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7a60eded-a7e8-4c0f-b13c-d04bb244a35b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.255.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:2f:36:42:7c:f9:33:0f:9a:2f:54:73:33:82:06:7d:e8:7d: b5:d5:39:fa:64:ae:f3:89:40:dd:41:70:69:42:fd:e3:8a:98: 88:0d:26:9d:f9:2c:a8:43:8a:9e:4b:fe:9e:d3:53:69:fe:3e: de:4c:39:c3:27:a9:6a:69:99:e3:66:dd:62:86:37:b7:61:2a: e4:ac:a2:8d:bb:f1:60:fe:b1:8d:80:d1:71:72:39:cd:c8:57: 0b:c6:a5:4a:57:1b:90:ca:1b:8b:82:7f:b4:51:3d:8e:09:6b: b0:98:9b:9b:e2:3b:6e:80:04:0c:28:83:5d:28:9d:e2:c4:e2: dd:49:56:03:75:30:94:68:94:e0:39:da:32:87:3c:d1:00:0c: 0b:31:bf:e3:c1:b2:f7:ce:10:a3:3f:ce:cc:12:49:28:c2:f7: d6:d6:f6:a5:a8:6e:96:58:01:5c:6d:58:02:d1:ed:51:aa:5a: 74:f3:79:c3:5d:c8:85:ec:b6:c7:9c:81:e0:9d:41:bf:64:b4: a3:fc:34:23:c4:b9:93:63:13:d7:b7:f2:23:c2:c8:93:09:95: 0b:c0:c0:8c:0d:63:a4:dc:21:75:be:59:04:05:7f:98:ab:43: a5:91:05:c8:c0:e2:67:74:c4:bf:c1:88:ae:2e:75:ff:ea:54: 2e:58:0b:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTO5jGUZhHDobKFwo6wj48kCLH5owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDA0MDAyMDUzWhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YWJhNmY4NjJiZTUyNjBiYjU5NTIzYmI2NzQ1Y2ZiN2Mz NDNjMWE0ODM5ZTRhMzNhZjlmNjIwOWIzMjY4NGIxMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZ/L7GuGIUv+e3h8Pi3zkOs8aAPndzdFslQ9wdRx2gv945 KKZMkvAVMFcZ499dcsYpih7iGuzuqFqKvQn5yKOY25lQNtKSgQrbjxXXqd3Qh1/j tohCqa41lqNesVCwKXju9AJU7tOkJA2I7Vlvz3vTU8KkpvBORpcA0wD9GYmT7t/W G4exBujIbVL3Gro4KzOPa9BVThShk0d0Rg7uwvgRicZgXdCDjvzfSVk1Vb8UVUFk ZYfoSdGPpPB7EsUzyZp5NEcRwlDAOvtmgeyju/S1tSv/pEVmeGQDjkgE0o4E+VNn HZMoQRqgd0f7dmFIfB0EBwp8ZG30Q3jkrty/xNrxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkjtFUIBXa7Kib5qr6/jdmKcdOwUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzdhNjBlZGVkLWE3ZTgtNGMwZi1iMTNjLWQwNGJiMjQ0YTM1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUv8wDQYJKoZIhvcNAQELBQADggEBAC8vNkJ8+TMPmi9UczOCBn3ofbXV OfpkrvOJQN1BcGlC/eOKmIgNJp35LKhDip5L/p7TU2n+Pt5MOcMnqWppmeNm3WKG N7dhKuSsoo278WD+sY2A0XFyOc3IVwvGpUpXG5DKG4uCf7RRPY4Ja7CYm5viO26A BAwog10oneLE4t1JVgN1MJRolOA52jKHPNEADAsxv+PBsvfOEKM/zswSSSjC99bW 9qWobpZYAVxtWALR7VGqWnTzecNdyIXstsecgeCdQb9ktKP8NCPEuZNjE9e38iPC yJMJlQvAwIwNY6TcIXW+WQQFf5irQ6WRBcjA4md0xL/BiK4udf/qVC5YC5s= -----END CERTIFICATE-----Generated at Fri Apr 4 23:23:36 2025 by rpki-client