$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e1133321-dc3d-4778-889e-c80f1cc829c7.roa File: e1133321-dc3d-4778-889e-c80f1cc829c7.roa (raw, json) Hash identifier: MigvhxxG0FYpJhnfbFWmglmB2hGHr7kzyp91wkRpOak= Subject key identifier: 8F:25:F7:CD:28:BB:DB:57:08:7C:E5:F1:D9:57:A8:C5:CD:A9:52:1D Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 05A83EFBCFB43068AF4A7E5D5E27552D13A92052 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e1133321-dc3d-4778-889e-c80f1cc829c7.roa Signing time: Tue 15 Apr 2025 00:50:10 +0000 ROA not before: Tue 15 Apr 2025 00:50:10 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 173.82.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a8:3e:fb:cf:b4:30:68:af:4a:7e:5d:5e:27:55:2d:13:a9:20:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 15 00:50:10 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=89a227423fcb16ca42ba5e4b04bbd711bea366e8024f130c52059186d9f78f73, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:2d:40:a2:4e:c5:9a:ff:9e:f2:90:df:5d: 02:65:a3:3f:89:8b:3f:65:a6:6b:91:78:d7:2e:2f: a0:53:a6:16:c8:ee:99:32:90:91:3a:8f:76:b9:31: de:dd:4d:03:04:e5:08:b1:4d:b8:f9:00:35:55:9c: 11:1b:c0:7f:6c:4b:b4:eb:74:1f:7e:c3:ab:43:6b: 93:6b:83:9a:91:4e:db:a7:ff:82:b7:75:4b:c9:7e: fb:5f:b2:25:f9:c0:af:de:53:f8:77:6f:9f:3f:1e: 6a:63:22:65:b5:ed:d1:f0:ce:95:9d:06:1d:d1:9f: 9a:4c:f9:9c:84:dd:2e:aa:b1:24:91:29:6b:0c:a6: 44:76:fe:4f:3b:bb:07:63:bd:b1:4a:9e:42:ac:d3: bf:68:89:d5:f9:8b:3e:6d:ba:9d:df:15:f7:a3:35: 44:a2:85:32:97:d9:08:62:6f:e1:50:40:c9:64:28: ff:a2:96:6b:15:a0:c1:fd:63:6a:b1:f5:1a:10:a3: 0d:08:01:1b:56:fe:43:e9:c0:9c:e0:e3:70:98:91: e1:f4:74:01:e9:30:a3:c2:2e:64:8a:71:0f:0f:94: 68:2e:a2:35:95:58:3a:f4:6b:9e:71:b4:18:c2:4a: 0c:c1:96:20:fa:3d:09:60:15:23:6a:a8:e8:d0:47: ed:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:25:F7:CD:28:BB:DB:57:08:7C:E5:F1:D9:57:A8:C5:CD:A9:52:1D X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e1133321-dc3d-4778-889e-c80f1cc829c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.76.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:70:10:ac:71:27:81:06:d3:52:fa:dd:cf:1a:f4:c3:4e:4e: 1e:84:34:59:34:4e:10:78:35:d8:8e:b6:8a:6c:ba:f5:13:93: fa:ba:b9:4f:da:c5:53:b3:77:43:9e:50:b9:0f:84:4a:f5:1f: b0:16:97:1b:8e:9c:f3:f2:84:d5:9c:76:6d:99:7c:ff:67:a6: 52:26:de:62:cc:50:65:bd:fb:cd:a6:e4:01:c4:b1:6a:3f:85: 1c:fb:7d:dc:ac:c4:9e:bd:a1:ed:28:e5:ec:4d:a0:6d:c4:4e: 90:8b:4a:a6:3c:f4:c2:8d:4c:54:0d:0a:66:34:59:c9:f1:ed: c5:a5:60:11:81:b8:9c:28:b8:b2:e9:5b:9b:85:2e:db:85:b8: b9:82:64:be:5a:47:4e:d6:a8:4d:b3:8e:3d:9f:50:ca:a8:a3: e5:44:81:81:74:7b:35:43:ea:90:a4:7e:be:04:02:0c:e6:69: be:7a:87:b2:2b:1f:2f:24:bd:ec:71:cc:4d:74:91:f9:ef:a1: 02:16:92:bf:fd:0d:6f:e0:33:f0:0e:1e:a1:cb:cd:93:e9:db: a7:70:6d:34:b4:65:82:82:c1:7f:7d:2f:10:4f:d0:2e:14:2d: 8e:68:51:e5:ee:56:f2:e3:87:cb:42:0c:e9:da:3b:e8:6e:76: c2:97:fe:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBag++8+0MGivSn5dXidVLROpIFIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDE1MDA1MDEwWhcNMjUwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OWEyMjc0MjNmY2IxNmNhNDJiYTVlNGIwNGJiZDcxMWJl YTM2NmU4MDI0ZjEzMGM1MjA1OTE4NmQ5Zjc4ZjczMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAJy1Aok7Fmv+e8pDfXQJloz+Jiz9lpmuReNcuL6BTphbI 7pkykJE6j3a5Md7dTQME5QixTbj5ADVVnBEbwH9sS7TrdB9+w6tDa5Nrg5qRTtun /4K3dUvJfvtfsiX5wK/eU/h3b58/HmpjImW17dHwzpWdBh3Rn5pM+ZyE3S6qsSSR KWsMpkR2/k87uwdjvbFKnkKs079oidX5iz5tup3fFfejNUSihTKX2Qhib+FQQMlk KP+ilmsVoMH9Y2qx9RoQow0IARtW/kPpwJzg43CYkeH0dAHpMKPCLmSKcQ8PlGgu ojWVWDr0a55xtBjCSgzBliD6PQlgFSNqqOjQR+1NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjyX3zSi721cIfOXx2Veoxc2pUh0wHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2UxMTMzMzIxLWRjM2QtNDc3OC04ODllLWM4MGYxY2M4MjljNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACtUkwwDQYJKoZIhvcNAQELBQADggEBAJ9wEKxxJ4EG01L63c8a9MNOTh6E NFk0ThB4NdiOtopsuvUTk/q6uU/axVOzd0OeULkPhEr1H7AWlxuOnPPyhNWcdm2Z fP9nplIm3mLMUGW9+82m5AHEsWo/hRz7fdysxJ69oe0o5exNoG3ETpCLSqY89MKN TFQNCmY0Wcnx7cWlYBGBuJwouLLpW5uFLtuFuLmCZL5aR07WqE2zjj2fUMqoo+VE gYF0ezVD6pCkfr4EAgzmab56h7IrHy8kvexxzE10kfnvoQIWkr/9DW/gM/AOHqHL zZPp26dwbTS0ZYKCwX99LxBP0C4ULY5oUeXuVvLjh8tCDOnaO+hudsKX/gY= -----END CERTIFICATE-----Generated at Sat Apr 26 18:35:45 2025 by rpki-client