$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b78dc6a-5ef7-42e2-adc0-1cfe7fe9f97c.roa File: 1b78dc6a-5ef7-42e2-adc0-1cfe7fe9f97c.roa (raw, json) Hash identifier: ZvITSueMt0fC+IVu1lWAYS2xUQhmOOwDjPyI9kkiatQ= Subject key identifier: 87:39:CD:B2:7B:AD:E4:39:C4:25:55:28:AB:63:A3:44:2F:D7:7D:C4 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 16ACC5E200F698C0490952B70ACF9FEF7EFEEA64 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b78dc6a-5ef7-42e2-adc0-1cfe7fe9f97c.roa Signing time: Fri 25 Apr 2025 17:30:43 +0000 ROA not before: Fri 25 Apr 2025 17:30:43 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ac:c5:e2:00:f6:98:c0:49:09:52:b7:0a:cf:9f:ef:7e:fe:ea:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 25 17:30:43 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=1921df40204568053f5a9063fe865e5b51fde3891a8b2c9744ca2a74031bfbc3, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:52:99:72:30:42:71:cc:8c:61:0c:ee:ea: 3a:8a:37:d8:c5:62:46:01:3e:25:4e:31:f6:89:cd: 8b:82:5a:8d:88:8c:83:88:d6:6e:eb:60:5f:d0:b6: 43:98:50:0e:aa:20:d2:72:40:3e:ff:58:72:06:fe: b8:0a:3d:97:c1:c3:5d:1a:9c:6d:86:61:c6:1a:5a: 90:ee:60:8a:cf:22:95:00:db:62:af:3d:5d:44:ed: 23:b3:0e:1d:e4:18:41:c8:6d:25:25:31:4d:8f:fb: 15:c1:45:ea:ee:24:c3:7c:6f:f4:6d:6c:1d:9e:95: c0:45:6d:a9:5a:e1:80:5e:7a:99:17:2b:de:81:d0: 01:98:3a:fd:20:00:bf:33:44:a4:7d:42:d7:b8:c6: 73:73:72:eb:90:a6:12:27:80:c8:aa:33:87:ec:92: d3:e2:48:ed:69:45:54:99:75:b3:36:09:41:fc:22: 9e:65:f7:98:c2:c5:7b:7a:4c:23:8b:db:6d:ce:53: 54:c1:1f:58:d2:af:12:a9:8d:1b:d4:69:2a:db:94: 07:cd:46:f1:bf:a0:87:d4:4b:29:19:88:60:64:19: 32:2a:c9:78:bd:f7:30:2f:bd:1b:27:b5:70:43:d5: a8:12:7c:24:16:de:33:9c:09:c8:e0:3f:4e:4a:82: 21:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:39:CD:B2:7B:AD:E4:39:C4:25:55:28:AB:63:A3:44:2F:D7:7D:C4 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1b78dc6a-5ef7-42e2-adc0-1cfe7fe9f97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.95.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:2d:34:b7:d0:57:12:9e:e5:95:0d:5f:ab:3c:4d:de:6d:21: 6b:cf:58:70:2c:b8:f5:8c:c9:d0:39:2b:d1:4d:01:bc:23:13: 24:9b:84:e8:89:cd:85:75:c1:fb:ee:da:cb:9d:46:48:af:d2: d1:08:4a:fa:9f:9c:a8:ad:50:37:85:b7:22:61:4f:ac:47:07: 9c:69:bc:72:e2:1e:a0:14:77:6b:97:94:ec:08:a7:36:6e:d3: a3:84:ec:d0:a6:a0:6a:e7:dd:14:f2:6a:c6:07:82:30:3f:d9: 90:1e:2d:fe:35:a3:b8:33:f5:6e:db:6f:8a:83:78:87:b1:a0: 0a:63:98:73:8c:89:d2:ae:4c:90:28:30:8a:2a:7a:cd:d9:5b: 84:c1:21:eb:f2:19:af:91:8c:bd:1b:3f:25:eb:71:07:3c:63: d1:eb:0a:70:9d:cb:a2:bb:1b:af:a4:3e:0d:c1:47:59:84:cc: e6:b7:a1:c9:84:fe:a9:34:d1:70:45:0e:33:07:99:c9:22:b2: 41:39:99:f1:44:3c:f9:62:67:54:44:b8:a9:8f:8d:c7:96:a1: 58:f9:a5:6a:2e:a9:6b:53:f6:94:d6:cf:ee:ad:63:df:ed:a8: 86:38:16:4e:bf:ef:dd:c4:f2:d9:2a:62:34:14:a6:73:34:f4: f8:aa:71:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFqzF4gD2mMBJCVK3Cs+f737+6mQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI1MTczMDQzWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTIxZGY0MDIwNDU2ODA1M2Y1YTkwNjNmZTg2NWU1YjUx ZmRlMzg5MWE4YjJjOTc0NGNhMmE3NDAzMWJmYmMzMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDg2VKZcjBCccyMYQzu6jqKN9jFYkYBPiVOMfaJzYuCWo2I jIOI1m7rYF/QtkOYUA6qINJyQD7/WHIG/rgKPZfBw10anG2GYcYaWpDuYIrPIpUA 22KvPV1E7SOzDh3kGEHIbSUlMU2P+xXBReruJMN8b/RtbB2elcBFbala4YBeepkX K96B0AGYOv0gAL8zRKR9Qte4xnNzcuuQphIngMiqM4fsktPiSO1pRVSZdbM2CUH8 Ip5l95jCxXt6TCOL223OU1TBH1jSrxKpjRvUaSrblAfNRvG/oIfUSykZiGBkGTIq yXi99zAvvRsntXBD1agSfCQW3jOcCcjgP05KgiHDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhznNsnut5DnEJVUoq2OjRC/XfcQwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFiNzhkYzZhLTVlZjctNDJlMi1hZGMwLTFjZmU3ZmU5Zjk3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUl8wDQYJKoZIhvcNAQELBQADggEBAIstNLfQVxKe5ZUNX6s8Td5tIWvP WHAsuPWMydA5K9FNAbwjEySbhOiJzYV1wfvu2sudRkiv0tEISvqfnKitUDeFtyJh T6xHB5xpvHLiHqAUd2uXlOwIpzZu06OE7NCmoGrn3RTyasYHgjA/2ZAeLf41o7gz 9W7bb4qDeIexoApjmHOMidKuTJAoMIoqes3ZW4TBIevyGa+RjL0bPyXrcQc8Y9Hr CnCdy6K7G6+kPg3BR1mEzOa3ocmE/qk00XBFDjMHmckiskE5mfFEPPliZ1REuKmP jceWoVj5pWouqWtT9pTWz+6tY9/tqIY4Fk6/793E8tkqYjQUpnM09PiqcXk= -----END CERTIFICATE-----Generated at Mon May 5 03:40:31 2025 by rpki-client