$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa File: 801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa (raw, json) Hash identifier: kvC0gVnEzMPC2PWdCNPGmagWjs+8xYBvrcIyZ+m5iQk= Subject key identifier: B2:CE:18:33:B4:A1:78:7B:8C:6B:3E:5F:6B:CF:AA:E3:FC:38:42:AB Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 45F993AEF77A40E48B6CEF206CA494D21987D3BA Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa Signing time: Tue 29 Apr 2025 00:30:06 +0000 ROA not before: Tue 29 Apr 2025 00:30:06 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 173.82.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f9:93:ae:f7:7a:40:e4:8b:6c:ef:20:6c:a4:94:d2:19:87:d3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 29 00:30:06 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=07f2a40c40b69b5f8158f8c2f15caeeb1b9513a4e7666a19050a61fa31ed4d4a, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:62:9e:15:c6:4e:ea:2e:7e:09:07:39:90: 2e:ed:7f:ef:a4:b5:69:88:85:cd:5d:09:13:b3:ad: 07:df:a5:70:30:28:c7:8f:ae:4d:19:b6:30:e3:42: a4:f9:95:3c:11:9f:2f:8c:55:9f:62:9a:a7:63:8b: 4f:45:08:f8:6e:c9:45:67:3e:4d:6b:a9:d2:10:fb: e5:22:82:25:b5:48:ce:b1:43:b9:53:28:e4:70:c5: 3e:ac:58:76:81:fd:c2:5b:fb:72:a1:ae:d2:a9:fe: 4f:f7:76:58:95:94:15:00:fc:68:f8:8a:13:a0:d1: 7b:ff:22:e1:fd:99:3d:9f:16:a8:57:84:5b:18:ea: f3:78:f8:60:3e:f2:46:73:09:0b:c1:bd:55:07:2e: 7b:2a:74:d2:fa:44:b4:70:57:23:0b:65:aa:3c:c1: fc:3e:5a:b8:fe:4b:b5:f5:c8:e9:e6:9b:c1:92:03: 08:dd:7d:48:ba:19:4f:c7:cd:38:e3:26:19:1a:82: 09:f5:cc:38:af:35:50:1b:58:e5:c0:c9:5c:cf:d8: 04:75:ed:b4:c6:42:fc:28:d4:9a:4c:b5:93:ab:50: ef:b7:c6:b0:1c:12:4f:a1:69:8d:fe:ec:10:da:05: 70:b6:6f:66:3c:cd:6f:65:48:58:93:a5:4c:5f:d2: 2b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CE:18:33:B4:A1:78:7B:8C:6B:3E:5F:6B:CF:AA:E3:FC:38:42:AB X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.255.0/24 Signature Algorithm: sha256WithRSAEncryption a6:c4:d4:95:d2:2a:2a:27:19:e9:78:d3:3d:dd:91:99:32:85: 07:e3:69:c0:ab:96:ac:f0:80:56:65:9d:b1:6a:bc:fe:23:e1: 52:77:05:0f:89:7f:b7:c2:a2:20:7d:65:4c:be:0a:ae:19:5e: 1d:19:eb:1a:cd:6a:48:dc:a6:36:38:2a:0d:32:38:f2:15:b6: cd:0d:b9:0d:5f:f5:d9:25:08:ad:9c:9a:0f:8c:89:bd:a8:ad: aa:ff:fa:ba:3c:c4:ad:eb:36:cb:17:b4:81:03:a7:fe:7c:14: 25:52:4e:cb:06:30:03:75:83:cf:25:6f:f9:a4:1a:08:bc:bc: 55:7b:07:99:96:21:be:04:53:0c:bd:fe:c6:9f:87:2f:fc:dd: 5d:f8:b9:c5:99:93:d3:a0:e2:f7:26:d5:a1:ae:82:94:98:ce: bb:93:a7:46:d5:90:84:93:d0:0b:9d:7a:f5:a2:ae:7c:fd:1f: c8:db:15:19:9f:cf:76:50:1b:32:ac:c1:e5:3c:1b:10:c9:d3: 22:c5:d5:90:18:c6:48:16:78:bb:51:bb:6d:6a:ea:4d:04:da: 77:88:61:05:94:52:f7:e7:d5:35:57:66:8b:16:93:f8:32:9b: 3a:7d:8e:1d:de:ce:30:f2:3f:8d:1a:cd:0e:af:bb:70:c1:4a: aa:c7:f1:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURfmTrvd6QOSLbO8gbKSU0hmH07owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI5MDAzMDA2WhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwN2YyYTQwYzQwYjY5YjVmODE1OGY4YzJmMTVjYWVlYjFi OTUxM2E0ZTc2NjZhMTkwNTBhNjFmYTMxZWQ0ZDRhMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/omKeFcZO6i5+CQc5kC7tf++ktWmIhc1dCROzrQffpXAw KMePrk0ZtjDjQqT5lTwRny+MVZ9imqdji09FCPhuyUVnPk1rqdIQ++UigiW1SM6x Q7lTKORwxT6sWHaB/cJb+3KhrtKp/k/3dliVlBUA/Gj4ihOg0Xv/IuH9mT2fFqhX hFsY6vN4+GA+8kZzCQvBvVUHLnsqdNL6RLRwVyMLZao8wfw+Wrj+S7X1yOnmm8GS AwjdfUi6GU/HzTjjJhkaggn1zDivNVAbWOXAyVzP2AR17bTGQvwo1JpMtZOrUO+3 xrAcEk+haY3+7BDaBXC2b2Y8zW9lSFiTpUxf0itNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUss4YM7SheHuMaz5fa8+q4/w4QqswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzgwMWY1MWY4LWM0YzMtNGMyZC05OGNjLTRlNjg1Yjg3MWFhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUv8wDQYJKoZIhvcNAQELBQADggEBAKbE1JXSKionGel40z3dkZkyhQfj acCrlqzwgFZlnbFqvP4j4VJ3BQ+Jf7fCoiB9ZUy+Cq4ZXh0Z6xrNakjcpjY4Kg0y OPIVts0NuQ1f9dklCK2cmg+Mib2orar/+ro8xK3rNssXtIEDp/58FCVSTssGMAN1 g88lb/mkGgi8vFV7B5mWIb4EUwy9/safhy/83V34ucWZk9Og4vcm1aGugpSYzruT p0bVkIST0AudevWirnz9H8jbFRmfz3ZQGzKsweU8GxDJ0yLF1ZAYxkgWeLtRu21q 6k0E2neIYQWUUvfn1TVXZosWk/gymzp9jh3ezjDyP40azQ6vu3DBSqrH8X8= -----END CERTIFICATE-----Generated at Mon May 5 17:40:09 2025 by rpki-client