$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa File: 2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa (raw, json) Hash identifier: +H8aJWDWR3eeHETbhPHFERcI+xRFwSMVEo+IqxmdE44= Subject key identifier: 53:5E:EC:3D:83:7A:F2:54:4C:98:58:21:12:3B:6F:0D:E9:84:D8:DA Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5DDCE0A5B435824AB28A844B583BE278D8443AA1 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa Signing time: Tue 06 May 2025 00:10:00 +0000 ROA not before: Tue 06 May 2025 00:10:00 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:dc:e0:a5:b4:35:82:4a:b2:8a:84:4b:58:3b:e2:78:d8:44:3a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 6 00:10:00 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=dfaeb638b193a1dacb1dedc689e9c5bc42d205621af7935a102b21ee2d303e09, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:5e:8b:ee:c9:52:60:35:5d:c6:86:3a:10: 8c:f3:fe:3d:6e:ce:67:b8:1f:c9:9b:40:d8:af:a4: 8d:2d:6e:e2:a0:83:60:3b:c5:7f:a5:9b:05:22:4f: fd:24:10:d3:c9:aa:0a:42:88:4a:fb:db:ba:38:2f: d2:5f:07:62:e0:0e:4b:12:de:42:d2:3a:bc:92:85: 8f:8b:99:29:0d:bd:4b:1a:ae:c8:70:e3:0f:09:9e: e6:cf:00:e6:23:b9:a6:2b:74:62:bf:9a:2f:59:09: 37:1d:e7:ce:b6:7b:3f:e5:8c:66:28:79:3d:81:bb: a6:63:e0:b3:e8:8f:e8:63:05:b6:e4:94:9d:bf:8b: 49:60:62:8b:12:9e:b8:4b:63:d2:43:78:41:30:53: 9c:a0:e7:f1:2b:61:3a:31:d5:9f:e5:00:5c:61:6f: 58:12:d9:df:25:7c:eb:c8:6a:68:b2:7b:d4:ef:40: 9a:5c:56:d7:72:c0:24:b6:28:56:bb:52:cc:a3:11: b3:6e:86:69:56:5e:59:55:d9:e8:79:74:92:c0:96: 9a:89:a1:00:c3:9a:f0:46:33:7a:3e:09:1b:73:fc: 51:8f:49:e0:b2:67:e9:1e:b4:f5:2f:54:a7:a1:04: f0:0a:84:26:c9:8b:f3:b2:a2:91:75:55:36:dd:76: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5E:EC:3D:83:7A:F2:54:4C:98:58:21:12:3B:6F:0D:E9:84:D8:DA X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.229.0/24 Signature Algorithm: sha256WithRSAEncryption 15:8f:ba:66:2d:81:66:e4:81:46:44:75:e8:ae:e4:2f:3f:87: 19:55:23:a7:80:ca:88:d0:26:19:f8:5b:4e:5b:28:f2:5d:00: fb:04:39:6b:49:d5:01:4a:8b:53:65:e9:1f:8a:69:1e:0b:1f: 83:b4:a6:16:1e:d5:b4:c6:f1:06:ca:bf:33:83:5f:d3:d7:2d: da:d9:4b:a9:51:28:f3:96:bb:e6:77:9b:5d:e5:a4:7f:e4:53: ed:fc:5f:5b:00:4a:af:1a:a3:e7:e8:8c:08:01:18:22:89:a4: 1a:a5:fb:53:2b:2b:da:85:71:f9:d2:48:d1:58:2c:c4:f0:8c: 6f:0e:ad:05:8b:da:95:a3:9a:eb:5d:d0:77:b2:b1:85:24:75: 62:d0:94:4c:ee:4d:18:ea:e5:b0:94:e6:a9:a4:8a:35:a4:43: 3f:41:c3:df:ca:7c:2b:f6:ae:d1:d0:89:d3:5f:c0:ab:6b:c3: 2f:ef:5d:74:c8:2a:78:c7:c6:24:1c:b5:08:52:36:13:c0:0f: dd:01:cd:00:39:2d:cf:d5:bf:b5:8c:76:5d:91:55:6d:26:07: 28:4c:a7:79:2e:86:6c:66:29:cb:6c:4b:4d:e4:22:11:78:49: 31:36:2a:78:19:d9:df:8d:13:7d:f1:3f:f1:12:49:e3:a4:da: 88:19:2b:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXdzgpbQ1gkqyioRLWDvieNhEOqEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTA2MDAxMDAwWhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmFlYjYzOGIxOTNhMWRhY2IxZGVkYzY4OWU5YzViYzQy ZDIwNTYyMWFmNzkzNWExMDJiMjFlZTJkMzAzZTA5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkYl6L7slSYDVdxoY6EIzz/j1uzme4H8mbQNivpI0tbuKg g2A7xX+lmwUiT/0kENPJqgpCiEr727o4L9JfB2LgDksS3kLSOryShY+LmSkNvUsa rshw4w8JnubPAOYjuaYrdGK/mi9ZCTcd5862ez/ljGYoeT2Bu6Zj4LPoj+hjBbbk lJ2/i0lgYosSnrhLY9JDeEEwU5yg5/ErYTox1Z/lAFxhb1gS2d8lfOvIamiye9Tv QJpcVtdywCS2KFa7UsyjEbNuhmlWXllV2eh5dJLAlpqJoQDDmvBGM3o+CRtz/FGP SeCyZ+ketPUvVKehBPAKhCbJi/OyopF1VTbddhylAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUU17sPYN68lRMmFghEjtvDemE2NowHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzJjZTBkYTEzLTBlODgtNGJmMi1iZDlkLTM1MTY4YmNlZmRjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFqeUwDQYJKoZIhvcNAQELBQADggEBABWPumYtgWbkgUZEdeiu5C8/hxlV I6eAyojQJhn4W05bKPJdAPsEOWtJ1QFKi1Nl6R+KaR4LH4O0phYe1bTG8QbKvzOD X9PXLdrZS6lRKPOWu+Z3m13lpH/kU+38X1sASq8ao+fojAgBGCKJpBql+1MrK9qF cfnSSNFYLMTwjG8OrQWL2pWjmutd0HeysYUkdWLQlEzuTRjq5bCU5qmkijWkQz9B w9/KfCv2rtHQidNfwKtrwy/vXXTIKnjHxiQctQhSNhPAD90BzQA5Lc/Vv7WMdl2R VW0mByhMp3kuhmxmKctsS03kIhF4STE2KngZ2d+NE33xP/ESSeOk2ogZKxA= -----END CERTIFICATE-----Generated at Sat May 10 19:40:56 2025 by rpki-client