$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1113ca73-e955-4f0f-9b4a-a56e5ba765b0.roa File: 1113ca73-e955-4f0f-9b4a-a56e5ba765b0.roa (raw, json) Hash identifier: SnWGaLLrLFwoKwP/08SI7uU9ADi6F+YVp4baVsH21Y0= Subject key identifier: D4:27:6A:21:0B:DF:9A:27:10:AF:6D:93:CE:32:12:01:0B:9E:AC:C3 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 22C04DBF7A9EB7CF902916B2EFD0FC95A6E3ED66 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1113ca73-e955-4f0f-9b4a-a56e5ba765b0.roa Signing time: Sat 26 Apr 2025 00:51:20 +0000 ROA not before: Sat 26 Apr 2025 00:51:20 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c0:4d:bf:7a:9e:b7:cf:90:29:16:b2:ef:d0:fc:95:a6:e3:ed:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:51:20 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=900cad535f8b2d41d46fee1d3d331d77f509713606f6d8b7d9e11849485eb08f, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:e4:73:9f:ee:1e:11:1c:b9:f0:7f:1f:19: a0:d5:f3:a5:f7:72:09:ea:f1:16:e4:eb:8d:4d:51: 15:50:0a:c4:73:dc:2f:0f:17:6b:91:a1:75:76:2b: b8:11:20:34:92:10:af:2f:99:7b:c1:41:0b:68:38: 49:e7:06:ee:45:b4:94:44:3a:36:1c:48:4f:3e:a0: 4e:5c:e0:40:55:9f:72:dd:5a:f4:dd:12:06:fe:b6: 00:33:2c:60:e1:8e:d2:0f:10:ed:2c:13:48:0e:21: 79:52:04:92:fb:e3:1a:af:4a:46:a6:38:f7:de:58: db:cb:9d:a1:55:8e:7c:71:cf:00:1c:65:0b:02:0e: ac:d3:47:4c:af:e7:f8:c2:9e:0b:85:16:75:1a:b9: 96:c7:62:24:e6:dc:12:26:9e:43:10:38:88:ad:6f: ea:27:aa:35:91:44:0b:c0:16:a4:3c:29:94:3c:13: 75:eb:e0:99:69:cd:de:26:f1:82:f7:0d:a4:98:40: d4:a5:16:1c:98:6c:ce:f6:3c:74:b3:ae:a2:95:ec: 29:f2:21:2e:b3:5a:6d:87:e6:2b:fa:79:2e:89:aa: 2a:bf:98:9a:b8:ec:68:31:bc:df:59:95:ba:48:bc: 8e:3b:13:44:33:50:41:2c:f8:4a:9e:87:2e:1b:14: c0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:27:6A:21:0B:DF:9A:27:10:AF:6D:93:CE:32:12:01:0B:9E:AC:C3 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1113ca73-e955-4f0f-9b4a-a56e5ba765b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.71.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:b7:55:67:b2:1c:8d:a7:22:dc:3b:c3:bd:0c:a0:a2:a1:b7: ae:ee:56:e0:dc:12:99:37:77:2e:93:d8:cd:f2:fe:a6:63:11: be:f5:23:29:f0:e3:7c:48:f1:3e:3b:f5:69:73:ec:f4:0b:01: b3:89:2d:72:e9:a3:84:ad:5c:38:09:c7:0a:a4:f6:ae:b7:2b: 96:41:5a:e7:cd:8b:e7:a7:18:9c:ff:fb:83:a3:c7:33:d7:2b: a5:08:47:34:93:94:f5:1c:64:b5:c4:ee:90:34:c2:dd:cd:0f: 74:24:17:39:b0:69:a6:45:21:d3:a1:63:00:0c:70:0f:71:b2: b6:13:b4:e8:e9:c8:ed:aa:9c:09:55:06:19:e1:37:33:26:91: 4e:16:30:d6:cd:6b:6f:27:3a:48:b4:09:eb:2b:2b:fd:7e:1a: c9:e0:9a:81:76:50:d1:3c:8e:0d:3c:ff:65:77:9a:25:83:42: 94:90:4c:7c:de:49:e8:c4:4b:3d:23:c2:8a:69:2b:5c:94:d4: c0:0f:d6:66:52:4d:56:71:c6:a5:49:00:ff:47:62:01:69:c9: 10:18:77:ce:51:15:ba:db:c6:55:30:e8:34:7b:7d:4e:18:4a: 3f:1b:5d:15:73:f2:0e:87:d5:73:33:76:c2:5f:c7:71:95:b0: 03:94:3e:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIsBNv3qet8+QKRay79D8labj7WYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MTIwWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDBjYWQ1MzVmOGIyZDQxZDQ2ZmVlMWQzZDMzMWQ3N2Y1 MDk3MTM2MDZmNmQ4YjdkOWUxMTg0OTQ4NWViMDhmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0mORzn+4eERy58H8fGaDV86X3cgnq8Rbk641NURVQCsRz 3C8PF2uRoXV2K7gRIDSSEK8vmXvBQQtoOEnnBu5FtJREOjYcSE8+oE5c4EBVn3Ld WvTdEgb+tgAzLGDhjtIPEO0sE0gOIXlSBJL74xqvSkamOPfeWNvLnaFVjnxxzwAc ZQsCDqzTR0yv5/jCnguFFnUauZbHYiTm3BImnkMQOIitb+onqjWRRAvAFqQ8KZQ8 E3Xr4Jlpzd4m8YL3DaSYQNSlFhyYbM72PHSzrqKV7CnyIS6zWm2H5iv6eS6Jqiq/ mJq47GgxvN9ZlbpIvI47E0QzUEEs+Eqehy4bFMBjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1CdqIQvfmicQr22TzjISAQuerMMwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzExMTNjYTczLWU5NTUtNGYwZi05YjRhLWE1NmU1YmE3NjViMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUkcwDQYJKoZIhvcNAQELBQADggEBAEu3VWeyHI2nItw7w70MoKKht67u VuDcEpk3dy6T2M3y/qZjEb71Iynw43xI8T479Wlz7PQLAbOJLXLpo4StXDgJxwqk 9q63K5ZBWufNi+enGJz/+4OjxzPXK6UIRzSTlPUcZLXE7pA0wt3ND3QkFzmwaaZF IdOhYwAMcA9xsrYTtOjpyO2qnAlVBhnhNzMmkU4WMNbNa28nOki0CesrK/1+Gsng moF2UNE8jg08/2V3miWDQpSQTHzeSejESz0jwoppK1yU1MAP1mZSTVZxxqVJAP9H YgFpyRAYd85RFbrbxlUw6DR7fU4YSj8bXRVz8g6H1XMzdsJfx3GVsAOUPgw= -----END CERTIFICATE-----Generated at Sat Apr 26 18:30:38 2025 by rpki-client