$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a3e33fb-72cf-452b-86f9-913d47674dfa.roa File: 9a3e33fb-72cf-452b-86f9-913d47674dfa.roa (raw, json) Hash identifier: 5N/NFgZdR1oScV6kj50k4gutUr2YKhEnCIHIN83gKTc= Subject key identifier: 0C:83:2C:4D:78:F0:54:C6:85:7E:DE:F9:84:49:CB:3B:E0:39:60:FD Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 6C99AB44D95720F0B90E88BFD5CCE828CDAC3576 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a3e33fb-72cf-452b-86f9-913d47674dfa.roa Signing time: Tue 20 May 2025 17:40:09 +0000 ROA not before: Tue 20 May 2025 17:40:09 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:99:ab:44:d9:57:20:f0:b9:0e:88:bf:d5:cc:e8:28:cd:ac:35:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: May 20 17:40:09 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=b48c5fee95167cf01f6e5cbf9f20feaee014e1ec107365e17fe08b3cbbc29316, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:db:20:c8:ec:81:60:c5:d7:94:73:c4:64:be: b5:60:09:54:a6:28:89:f9:9c:aa:59:f7:54:50:c8: 90:9f:eb:58:69:07:d3:00:31:71:9d:61:fe:96:26: 1d:6d:31:36:9c:64:c7:f6:45:30:88:ef:e2:57:ee: 6b:19:7e:4f:e8:40:2d:f5:a1:a5:8e:4b:b9:c4:b2: 8b:f6:68:0d:db:a7:c3:e3:5a:c4:44:ed:b9:34:73: 38:4b:75:d7:af:9f:6c:42:a1:71:fe:d4:2d:01:e4: 68:8e:b4:26:db:d6:72:42:12:ce:4c:2a:f9:ee:e9: c4:38:30:a4:01:8d:5f:10:bb:ff:9d:12:3a:50:71: 05:92:99:78:b3:d5:6c:d7:c0:01:fd:54:39:0a:da: b6:51:52:9e:1c:2d:e6:24:16:e3:ac:db:5c:94:e8: 49:7f:01:ae:ea:4b:1f:7e:f8:54:b2:9b:65:6f:c9: 52:17:e1:a8:8f:80:eb:7a:69:98:cf:15:3e:1c:7f: 9a:11:d2:74:67:d7:ba:a7:c1:63:cf:ab:c8:7c:17: 68:c7:19:9a:f3:97:4f:3e:e9:fd:4b:cf:5b:63:b4: fe:6d:b6:62:24:71:6e:e7:61:63:b7:ee:69:c3:a1: 0e:82:93:a7:bd:1e:d0:91:04:ff:17:10:6b:1d:8d: b0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:83:2C:4D:78:F0:54:C6:85:7E:DE:F9:84:49:CB:3B:E0:39:60:FD X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/9a3e33fb-72cf-452b-86f9-913d47674dfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.13.0/24 Signature Algorithm: sha256WithRSAEncryption 81:b6:28:d3:36:d6:ba:0d:24:21:d4:d3:76:78:38:cf:14:0e: 59:e9:c4:7f:14:39:3f:60:56:d2:cb:d3:a4:a6:7a:0d:93:73: ec:21:ca:38:9e:a7:f7:83:9a:9d:e4:58:be:49:b3:14:55:3d: 4e:fa:76:07:ab:30:9f:1e:e6:8c:12:2f:8c:a1:6b:a3:11:cd: 39:a5:2d:b7:59:f7:33:2e:8f:95:b3:d2:89:56:d7:7e:07:69: e2:d2:34:9b:84:08:61:6b:0a:03:ad:18:ca:e8:c2:43:d0:2b: 54:f9:64:79:b7:ef:6f:43:f2:58:e7:df:b5:00:f7:38:10:f7: 3a:94:ba:71:a3:14:ea:f2:1c:1b:7d:cd:d3:2f:0a:61:06:c6: 47:ce:e2:ed:f2:44:a7:da:73:db:fb:ad:8e:e3:05:19:69:c6: c2:a4:ec:40:ce:f2:ca:52:4c:5b:7f:20:ef:8c:93:41:03:2a: d6:85:23:30:b3:6d:01:ef:b6:3f:37:d6:32:31:6d:ba:33:fc: 18:7c:c9:2d:15:e3:cc:3f:02:2b:8b:55:18:f7:16:ce:d0:e6: 8e:b6:9e:b3:e6:53:fb:58:fa:59:25:dc:9d:da:c1:cf:71:ab: f9:be:64:03:0d:75:70:0d:58:ce:41:3c:41:7f:af:19:2f:4d: 26:46:5c:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbJmrRNlXIPC5Doi/1czoKM2sNXYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNTIwMTc0MDA5WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDhjNWZlZTk1MTY3Y2YwMWY2ZTVjYmY5ZjIwZmVhZWUw MTRlMWVjMTA3MzY1ZTE3ZmUwOGIzY2JiYzI5MzE2MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf2yDI7IFgxdeUc8RkvrVgCVSmKIn5nKpZ91RQyJCf61hp B9MAMXGdYf6WJh1tMTacZMf2RTCI7+JX7msZfk/oQC31oaWOS7nEsov2aA3bp8Pj WsRE7bk0czhLddevn2xCoXH+1C0B5GiOtCbb1nJCEs5MKvnu6cQ4MKQBjV8Qu/+d EjpQcQWSmXiz1WzXwAH9VDkK2rZRUp4cLeYkFuOs21yU6El/Aa7qSx9++FSym2Vv yVIX4aiPgOt6aZjPFT4cf5oR0nRn17qnwWPPq8h8F2jHGZrzl08+6f1Lz1tjtP5t tmIkcW7nYWO37mnDoQ6Ck6e9HtCRBP8XEGsdjbBTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDIMsTXjwVMaFft75hEnLO+A5YP0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzlhM2UzM2ZiLTcyY2YtNDUyYi04NmY5LTkxM2Q0NzY3NGRmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUg0wDQYJKoZIhvcNAQELBQADggEBAIG2KNM21roNJCHU03Z4OM8UDlnp xH8UOT9gVtLL06Smeg2Tc+whyjiep/eDmp3kWL5JsxRVPU76dgerMJ8e5owSL4yh a6MRzTmlLbdZ9zMuj5Wz0olW134HaeLSNJuECGFrCgOtGMrowkPQK1T5ZHm3729D 8ljn37UA9zgQ9zqUunGjFOryHBt9zdMvCmEGxkfO4u3yRKfac9v7rY7jBRlpxsKk 7EDO8spSTFt/IO+Mk0EDKtaFIzCzbQHvtj831jIxbboz/Bh8yS0V48w/AiuLVRj3 Fs7Q5o62nrPmU/tY+lkl3J3awc9xq/m+ZAMNdXANWM5BPEF/rxkvTSZGXK0= -----END CERTIFICATE-----Generated at Fri Jun 6 03:04:38 2025 by rpki-client