$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7fa37aaa-0fab-4469-8db2-5ab72b7949ad.roa File: 7fa37aaa-0fab-4469-8db2-5ab72b7949ad.roa (raw, json) Hash identifier: VzjWHLkCfqO0ZRBWjaA/6mqkPW/sLomF5GoTIa4MALk= Subject key identifier: CC:68:80:DE:96:90:C1:50:B1:88:EE:79:C7:EE:A1:F4:FB:7C:E0:97 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 0396B931BC87B5736FFBEBDE2EBA7503B6399698 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7fa37aaa-0fab-4469-8db2-5ab72b7949ad.roa Signing time: Mon 31 Mar 2025 18:20:15 +0000 ROA not before: Mon 31 Mar 2025 18:20:15 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 173.82.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:96:b9:31:bc:87:b5:73:6f:fb:eb:de:2e:ba:75:03:b6:39:96:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Mar 31 18:20:15 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:4d:00:5d:89:00:f2:fd:60:bf:60:69:4e: 28:0f:ae:41:19:0b:27:5a:c1:f1:b1:55:62:a4:64: 48:0d:98:ac:d3:42:b5:11:8a:76:45:b2:7f:e4:6b: 3a:29:33:15:27:a7:42:f9:f5:f4:cf:2b:67:95:51: 91:37:e2:dc:8c:9b:c9:68:2c:65:35:d5:db:1b:47: f9:c4:64:14:c3:f9:fd:e6:98:c8:07:f5:6f:5a:47: 46:c5:c2:dc:5f:11:c9:76:7c:c0:71:de:10:15:55: ad:65:1b:96:b5:ab:b0:a6:15:84:f7:17:d4:3e:dc: 7e:c1:d8:2d:60:22:90:04:b0:74:89:52:7e:3e:74: 84:e9:d2:b1:f8:45:0c:33:76:5f:e6:07:47:8d:b9: 4b:d6:ae:1a:dd:69:49:6f:21:36:c4:08:27:39:02: 24:d2:45:a1:cb:35:c0:33:d3:01:f5:11:9a:e9:c3: 70:d0:3d:9e:c9:e3:bf:16:71:51:ab:8a:81:fe:34: 6c:31:9e:87:0d:40:01:4a:71:c6:aa:47:b5:b9:d9: b0:42:28:46:8d:b4:83:e3:0a:50:40:99:60:42:fc: 09:83:c0:a0:c9:a9:f0:14:82:03:e2:55:34:d2:5e: 80:0d:ac:7f:a4:b9:86:0a:ce:50:bd:ed:b1:55:79: b7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:68:80:DE:96:90:C1:50:B1:88:EE:79:C7:EE:A1:F4:FB:7C:E0:97 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/7fa37aaa-0fab-4469-8db2-5ab72b7949ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.6.0/24 Signature Algorithm: sha256WithRSAEncryption a3:dc:d7:d9:a2:c3:0b:9f:56:9e:cd:5c:5e:e2:fe:01:f6:79: c6:fd:2f:4f:27:38:8a:29:91:02:94:01:3e:d6:79:62:68:7d: d2:5f:a5:82:b9:f7:b4:26:6c:49:3f:35:cd:52:74:7d:eb:66: a6:c5:db:a2:b4:6d:7e:fa:af:7c:7e:24:4c:2a:a7:a8:5a:e2: 8e:ea:00:ac:77:d6:99:c2:6a:10:03:e2:35:f0:b5:0e:b2:fa: 4f:c5:de:ea:78:68:42:a0:b1:72:ba:8d:d8:54:b3:4a:ad:4f: 05:53:cc:69:c9:6d:76:33:b3:3c:30:2b:83:11:6c:ca:bd:04: 61:2c:42:00:72:bc:b5:ff:c4:fe:27:36:25:f6:68:7b:46:9e: 6f:80:c5:08:fb:dc:b6:53:a2:a0:92:97:3f:64:10:0e:b0:56: 02:74:11:6f:cc:3e:ce:e2:74:a2:77:20:90:21:ac:f0:7f:38: 70:11:cf:0d:b9:14:4c:33:95:c5:cb:51:ef:f4:3a:95:0a:1d: 69:05:73:7e:03:6f:58:83:e7:7b:ab:5b:47:03:73:0a:da:46: 02:7d:8b:bb:83:d6:93:95:68:0b:4a:14:a9:61:4c:29:eb:b7: da:bf:84:90:cd:4a:30:d5:31:95:8f:3f:cc:13:ed:4a:d1:8f: ba:b6:45:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA5a5MbyHtXNv++veLrp1A7Y5lpgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwMzMxMTgyMDE1WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDg4MmIzZGEwOWI5MDIwZDg5NmM2ZTU2OGJlYTRiNzc4 NTEwZTc1MDk2ZjMxMjIyZDUxODJlZjMyZmQxNzJlMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtrU0AXYkA8v1gv2BpTigPrkEZCydawfGxVWKkZEgNmKzT QrURinZFsn/kazopMxUnp0L59fTPK2eVUZE34tyMm8loLGU11dsbR/nEZBTD+f3m mMgH9W9aR0bFwtxfEcl2fMBx3hAVVa1lG5a1q7CmFYT3F9Q+3H7B2C1gIpAEsHSJ Un4+dITp0rH4RQwzdl/mB0eNuUvWrhrdaUlvITbECCc5AiTSRaHLNcAz0wH1EZrp w3DQPZ7J478WcVGrioH+NGwxnocNQAFKccaqR7W52bBCKEaNtIPjClBAmWBC/AmD wKDJqfAUggPiVTTSXoANrH+kuYYKzlC97bFVebcXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzGiA3paQwVCxiO55x+6h9Pt84JcwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzdmYTM3YWFhLTBmYWItNDQ2OS04ZGIyLTVhYjcyYjc5NDlhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUgYwDQYJKoZIhvcNAQELBQADggEBAKPc19miwwufVp7NXF7i/gH2ecb9 L08nOIopkQKUAT7WeWJofdJfpYK597QmbEk/Nc1SdH3rZqbF26K0bX76r3x+JEwq p6ha4o7qAKx31pnCahAD4jXwtQ6y+k/F3up4aEKgsXK6jdhUs0qtTwVTzGnJbXYz szwwK4MRbMq9BGEsQgByvLX/xP4nNiX2aHtGnm+AxQj73LZToqCSlz9kEA6wVgJ0 EW/MPs7idKJ3IJAhrPB/OHARzw25FEwzlcXLUe/0OpUKHWkFc34Db1iD53urW0cD cwraRgJ9i7uD1pOVaAtKFKlhTCnrt9q/hJDNSjDVMZWPP8wT7UrRj7q2RXc= -----END CERTIFICATE-----Generated at Fri Apr 4 23:28:07 2025 by rpki-client