$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa File: 3754532b-2417-490e-8cb4-26b8fc034925.roa (raw, json) Hash identifier: oXR1fEtvTzG3fs7RcoFqnVy3mFUS/MhhoezizZnphU8= Subject key identifier: A3:73:AD:89:D4:FB:32:B4:5E:E3:E3:1C:68:DB:FC:AB:F5:0D:15:8C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2EB7F3547976E205A45BB79D6A744FB472684D73 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa Signing time: Tue 06 May 2025 00:00:05 +0000 ROA not before: Tue 06 May 2025 00:00:05 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b7:f3:54:79:76:e2:05:a4:5b:b7:9d:6a:74:4f:b4:72:68:4d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 6 00:00:05 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=395dd63e882e8b638f7a32c60b47aff18617d3c5988f5e4e5c7f1a743ed876f2, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:18:ad:b5:26:77:9b:27:06:0d:a3:9e:20: 98:fc:b6:0d:7a:6d:48:a5:16:1b:fa:ab:ac:37:42: e5:4b:1c:36:51:04:1f:e2:ac:08:98:1d:93:fe:18: 11:1e:98:c3:72:e1:35:70:89:1d:5d:d4:22:37:bc: 14:dc:f7:63:27:c8:c0:05:b0:1e:e7:c6:b2:8b:19: ac:36:0d:c7:ee:13:1f:b2:b2:d5:9d:ba:b1:d4:f1: a6:f6:a4:ae:0c:33:d1:77:c9:53:62:13:97:ba:ed: 7c:76:88:1b:e0:42:59:e3:66:6a:d8:d6:b2:d5:e3: 31:97:4a:8e:67:11:58:86:75:c4:32:d9:ef:a6:c8: 0c:1d:1d:e0:5d:5f:40:c8:92:50:df:c8:67:49:31: 01:fc:d9:79:19:3c:b3:71:5c:7a:6b:74:9a:4d:53: 04:ac:6d:4d:72:4e:a8:9f:e4:ee:9a:6c:76:7f:04: b3:c8:64:3a:f5:c0:59:22:ab:fd:a4:79:1a:7e:de: 02:d2:77:20:5e:00:94:7c:ec:20:1a:79:96:07:76: b3:18:7f:29:6f:69:4e:2d:14:4d:13:e4:82:16:07: bd:94:16:e4:c5:6b:ba:0d:67:51:7c:5c:4d:a0:55: fa:70:7b:e4:7a:83:2c:e8:96:0a:a9:c3:a1:f1:e8: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:73:AD:89:D4:FB:32:B4:5E:E3:E3:1C:68:DB:FC:AB:F5:0D:15:8C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3754532b-2417-490e-8cb4-26b8fc034925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.212.0/24 Signature Algorithm: sha256WithRSAEncryption 75:f3:c7:db:81:77:56:6c:69:b3:ed:2b:fa:7a:14:2a:51:d0: 86:5c:0e:de:a7:2d:7d:a7:3e:1a:26:d8:92:fa:08:91:cf:ec: 1e:f9:b0:f3:d0:54:2d:19:3e:5f:e9:22:6e:35:fc:ee:db:95: b7:85:66:2d:74:10:59:53:a3:0c:ff:a9:b6:80:1d:13:69:cc: c8:1a:03:42:13:c0:07:d0:b1:4e:7b:67:a0:ed:12:18:a7:14: c5:f5:97:5e:ac:23:ae:1b:ad:68:a7:c2:ee:e0:6a:5c:24:62: e8:9a:b3:5d:65:d1:94:61:1c:87:d4:9f:85:2f:d5:47:49:92: 72:1a:e9:fe:88:f7:6f:63:f4:3a:4f:63:00:12:1e:18:48:93: a1:cc:27:e5:22:b4:2a:92:a1:6d:9f:9b:0d:ad:c5:64:ba:4c: 4e:86:eb:2f:d8:3c:9d:4b:73:95:65:cf:8d:1a:eb:af:c7:a4: bd:2e:05:42:b1:b6:e1:a9:40:92:50:b4:4f:c9:67:24:2a:6e: 66:95:31:0a:fa:4b:f5:15:d1:9a:04:c8:91:75:d2:a1:27:83: 11:dd:82:6f:cc:eb:73:31:32:1c:a6:88:20:c6:b6:b5:f3:41: 4c:9f:18:95:f2:6a:40:98:f3:f7:12:d6:83:aa:79:84:49:df: e5:fb:f7:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULrfzVHl24gWkW7edanRPtHJoTXMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTA2MDAwMDA1WhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTVkZDYzZTg4MmU4YjYzOGY3YTMyYzYwYjQ3YWZmMTg2 MTdkM2M1OTg4ZjVlNGU1YzdmMWE3NDNlZDg3NmYyMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfNRittSZ3mycGDaOeIJj8tg16bUilFhv6q6w3QuVLHDZR BB/irAiYHZP+GBEemMNy4TVwiR1d1CI3vBTc92MnyMAFsB7nxrKLGaw2DcfuEx+y stWdurHU8ab2pK4MM9F3yVNiE5e67Xx2iBvgQlnjZmrY1rLV4zGXSo5nEViGdcQy 2e+myAwdHeBdX0DIklDfyGdJMQH82XkZPLNxXHprdJpNUwSsbU1yTqif5O6abHZ/ BLPIZDr1wFkiq/2keRp+3gLSdyBeAJR87CAaeZYHdrMYfylvaU4tFE0T5IIWB72U FuTFa7oNZ1F8XE2gVfpwe+R6gyzolgqpw6Hx6G2FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo3OtidT7MrRe4+McaNv8q/UNFYwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzM3NTQ1MzJiLTI0MTctNDkwZS04Y2I0LTI2YjhmYzAzNDkyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dQwDQYJKoZIhvcNAQELBQADggEBAHXzx9uBd1ZsabPtK/p6FCpR0IZc Dt6nLX2nPhom2JL6CJHP7B75sPPQVC0ZPl/pIm41/O7blbeFZi10EFlTowz/qbaA HRNpzMgaA0ITwAfQsU57Z6DtEhinFMX1l16sI64brWinwu7galwkYuias11l0ZRh HIfUn4Uv1UdJknIa6f6I929j9DpPYwASHhhIk6HMJ+UitCqSoW2fmw2txWS6TE6G 6y/YPJ1Lc5Vlz40a66/HpL0uBUKxtuGpQJJQtE/JZyQqbmaVMQr6S/UV0ZoEyJF1 0qEngxHdgm/M63MxMhymiCDGtrXzQUyfGJXyakCY8/cS1oOqeYRJ3+X795E= -----END CERTIFICATE-----Generated at Sun May 11 01:08:39 2025 by rpki-client