$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa File: 801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa (raw, json) Hash identifier: nmcoh0EZdI8LzKZnoSu4/6HZYqaZQdJ260Q06rqMT5k= Subject key identifier: C5:4F:6E:7A:61:1F:09:F9:75:4A:A9:17:81:43:9A:90:48:70:76:8E Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 35FD2FE6B3AB5320BFC1DA388F648EA9341B57D0 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa Signing time: Fri 04 Apr 2025 00:20:55 +0000 ROA not before: Fri 04 Apr 2025 00:20:55 +0000 ROA not after: Fri 09 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 173.82.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:fd:2f:e6:b3:ab:53:20:bf:c1:da:38:8f:64:8e:a9:34:1b:57:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 4 00:20:55 2025 GMT Not After : May 9 23:59:59 2025 GMT Subject: serialNumber=2555ffa60e7517dc8f30d2c7a062808b6c87d772b79694d3e807523c44ee7ddf, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2a:4f:ae:ad:f9:46:ca:51:35:93:90:cc:ba: 4c:2a:c7:0e:a5:3d:fc:b6:ea:f4:15:be:fd:4f:85: c1:aa:94:36:02:e2:6f:48:6c:51:b7:09:1c:d1:7c: 12:29:0f:8c:a3:c6:4a:9f:20:31:0d:f9:69:19:fc: 2c:67:b5:b5:b3:50:23:05:d7:06:4d:72:9a:12:d5: c9:ae:3f:cd:9c:e3:ca:a8:cb:b4:25:59:9e:10:d0: f4:91:b5:e6:b6:c8:e2:6a:98:ce:96:ee:79:5a:a8: 05:58:8c:ac:d6:77:68:1c:de:a2:82:fa:96:48:ab: e3:ed:34:45:47:27:f3:30:5b:5f:7d:f9:6d:d6:7c: 59:33:df:99:32:dc:a4:c3:7a:c2:12:f2:cb:de:38: 12:2b:07:86:d2:0a:e0:db:19:8d:a7:c2:5b:a3:31: 16:db:54:c8:ef:71:8a:c5:fd:c3:9e:7c:43:37:21: da:37:b8:90:0a:5f:b9:aa:cb:69:82:9f:a3:a1:e3: 68:5c:37:d4:64:a6:e8:ce:8d:d9:54:18:b7:60:da: 89:d9:80:9e:1d:67:2b:a5:43:76:80:5c:81:43:30: f9:61:59:26:e9:fb:0f:40:eb:26:33:0e:b1:23:17: bd:94:6f:4f:da:35:04:66:52:98:68:c7:c7:0a:5c: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4F:6E:7A:61:1F:09:F9:75:4A:A9:17:81:43:9A:90:48:70:76:8E X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/801f51f8-c4c3-4c2d-98cc-4e685b871aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.255.0/24 Signature Algorithm: sha256WithRSAEncryption 42:7c:ae:02:f6:b4:0e:77:ec:87:ab:09:51:a0:a1:02:7a:35: 85:98:4d:6b:a9:e4:33:92:3e:22:83:2a:3c:a3:ed:ff:2b:00: bf:8c:fc:e3:5e:fc:56:3a:9e:64:3e:58:2b:e8:78:f9:a7:9a: 25:a0:b3:57:59:16:ae:de:59:0e:8c:8c:7d:fe:ff:7d:2b:91: 07:c0:98:c5:e1:41:38:81:3d:7a:ac:d7:29:59:f2:8f:44:da: 05:15:53:f3:ca:b4:25:f3:46:76:fd:c8:3f:63:a7:2d:1a:ed: 7b:3b:66:75:68:6b:f2:a2:7f:55:c5:eb:bb:41:7c:41:98:a3: 3a:37:31:bc:52:a6:9e:34:06:a5:8d:2c:93:c6:1a:58:80:91: 3c:94:59:61:f0:4c:76:a6:98:1b:8b:38:d9:e7:56:1a:10:fc: 07:19:b5:c7:87:16:c0:29:92:39:3a:66:be:15:46:03:9d:71: f0:81:b9:9f:93:9f:5b:62:df:4c:6c:34:15:57:47:e8:1c:03: 2c:4d:fe:5f:92:b7:72:07:ff:83:e0:f8:f9:2e:1c:ab:5d:34: 30:aa:96:4b:d9:c9:68:97:33:b6:44:64:44:ee:d9:5b:01:af: 0c:2e:71:21:09:2e:d5:cc:0d:d7:a2:62:f0:f5:84:a2:34:16: 52:91:4a:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNf0v5rOrUyC/wdo4j2SOqTQbV9AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDA0MDAyMDU1WhcNMjUwNTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTU1ZmZhNjBlNzUxN2RjOGYzMGQyYzdhMDYyODA4YjZj ODdkNzcyYjc5Njk0ZDNlODA3NTIzYzQ0ZWU3ZGRmMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXKk+urflGylE1k5DMukwqxw6lPfy26vQVvv1PhcGqlDYC 4m9IbFG3CRzRfBIpD4yjxkqfIDEN+WkZ/CxntbWzUCMF1wZNcpoS1cmuP82c48qo y7QlWZ4Q0PSRtea2yOJqmM6W7nlaqAVYjKzWd2gc3qKC+pZIq+PtNEVHJ/MwW199 +W3WfFkz35ky3KTDesIS8sveOBIrB4bSCuDbGY2nwlujMRbbVMjvcYrF/cOefEM3 Ido3uJAKX7mqy2mCn6Oh42hcN9RkpujOjdlUGLdg2onZgJ4dZyulQ3aAXIFDMPlh WSbp+w9A6yYzDrEjF72Ub0/aNQRmUphox8cKXHVTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxU9uemEfCfl1SqkXgUOakEhwdo4wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzgwMWY1MWY4LWM0YzMtNGMyZC05OGNjLTRlNjg1Yjg3MWFhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUv8wDQYJKoZIhvcNAQELBQADggEBAEJ8rgL2tA537IerCVGgoQJ6NYWY TWup5DOSPiKDKjyj7f8rAL+M/ONe/FY6nmQ+WCvoePmnmiWgs1dZFq7eWQ6MjH3+ /30rkQfAmMXhQTiBPXqs1ylZ8o9E2gUVU/PKtCXzRnb9yD9jpy0a7Xs7ZnVoa/Ki f1XF67tBfEGYozo3MbxSpp40BqWNLJPGGliAkTyUWWHwTHammBuLONnnVhoQ/AcZ tceHFsApkjk6Zr4VRgOdcfCBuZ+Tn1ti30xsNBVXR+gcAyxN/l+St3IH/4Pg+Pku HKtdNDCqlkvZyWiXM7ZEZETu2VsBrwwucSEJLtXMDdeiYvD1hKI0FlKRSlY= -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:06 2025 by rpki-client