$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa File: 8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa (raw, json) Hash identifier: /tXnne9XGzli63EDJGVSx7NBPYDxq5tMghDmtLa1dNs= Subject key identifier: F9:BD:26:F0:64:44:DE:3F:C4:51:98:4D:83:13:65:8C:6C:48:9A:90 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 533805534F940026636055E87648C3934D797179 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa Signing time: Wed 23 Apr 2025 00:10:24 +0000 ROA not before: Wed 23 Apr 2025 00:10:24 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:38:05:53:4f:94:00:26:63:60:55:e8:76:48:c3:93:4d:79:71:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 23 00:10:24 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=b5f86933339856852a9f280d215afda43011853c6b3da9f3b438ca5f28cdbbea, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:d2:f8:26:be:49:c4:1c:17:38:25:c6:6a: 41:f9:d5:5c:23:37:72:08:fe:95:05:85:e4:62:1b: 6c:93:e8:05:d6:22:af:59:03:de:31:2e:d2:b5:c3: ec:9c:50:e8:51:c5:0b:aa:09:a1:03:d9:fd:12:5e: af:9a:7f:fc:81:c6:a7:2f:22:ba:e0:6c:ad:5a:18: 65:79:72:c5:4e:f8:32:fd:05:a2:91:5a:8a:ab:83: b2:5e:9e:86:86:8d:39:92:67:ac:cf:66:c1:24:d7: 86:25:1a:7a:2a:03:b5:ec:59:e6:8d:f1:b9:89:e1: a5:e4:a7:5d:eb:34:f4:09:27:4c:b1:0c:91:f6:46: 2c:6d:44:fd:f7:0f:44:b8:95:c9:cb:71:03:18:f7: eb:03:23:7b:e5:cb:2d:29:d3:b0:06:f9:85:f2:ef: 0f:89:f2:d8:c5:27:8b:32:0f:79:f3:e5:28:25:54: b8:d3:3f:d2:ca:e5:02:b1:92:16:b6:a8:07:4e:89: 31:4b:f5:7a:b5:9a:df:b6:90:bd:4d:e8:23:1c:32: c9:7e:f5:ec:b5:b7:c3:f7:b4:a8:4e:ce:ef:21:fe: da:37:3e:a1:5a:52:73:fa:25:9e:d0:da:f6:8a:d7: 48:d3:58:f8:ab:a3:0f:9f:8d:7c:b2:23:99:bd:d0: 40:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BD:26:F0:64:44:DE:3F:C4:51:98:4D:83:13:65:8C:6C:48:9A:90 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.246.0/23 Signature Algorithm: sha256WithRSAEncryption 40:d1:2a:f5:4f:78:cb:75:7d:24:e1:af:b7:57:0e:7f:4f:4f: de:31:48:0d:a2:0f:4c:aa:82:12:2b:6e:40:f0:b3:ef:db:f9: 9b:3a:bb:71:1f:a3:fa:90:87:06:73:47:07:53:02:71:70:13: 2b:a1:fc:b4:27:03:cc:b6:ee:30:21:ba:1f:d2:29:d1:84:45: 60:c8:43:7b:6c:82:c9:81:0a:de:2c:fe:e7:b6:b5:39:3f:f4: e6:a0:c4:2c:d1:af:f0:a6:b9:1f:e2:25:5a:06:9b:ef:2a:9d: 1d:53:fa:11:07:09:56:27:e9:91:c4:34:6a:18:35:85:26:70: a7:88:a1:2e:69:17:8c:9a:49:ea:f2:e0:99:c2:27:f9:6e:50: 0f:05:dc:05:77:d6:df:58:47:4f:75:ad:8b:da:7a:f3:f6:e4: 74:eb:22:29:1a:b0:bd:17:5f:46:cf:47:7f:79:8d:5e:77:2c: 5b:c0:ad:2c:e8:c4:a9:4a:e9:9c:c6:41:06:f6:6b:4e:f3:08: df:7c:4a:ab:fa:17:4b:cd:41:ab:f8:3c:0c:d8:f3:19:92:27: 97:eb:34:a3:eb:55:0c:4a:c1:a2:b9:1c:02:e9:7e:b8:44:35: d3:35:29:69:a2:0a:76:11:69:ed:55:a0:89:14:94:02:78:56: 1f:a5:dc:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUzgFU0+UACZjYFXodkjDk015cXkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDIzMDAxMDI0WhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNWY4NjkzMzMzOTg1Njg1MmE5ZjI4MGQyMTVhZmRhNDMw MTE4NTNjNmIzZGE5ZjNiNDM4Y2E1ZjI4Y2RiYmVhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJjNL4Jr5JxBwXOCXGakH51VwjN3II/pUFheRiG2yT6AXW Iq9ZA94xLtK1w+ycUOhRxQuqCaED2f0SXq+af/yBxqcvIrrgbK1aGGV5csVO+DL9 BaKRWoqrg7JenoaGjTmSZ6zPZsEk14YlGnoqA7XsWeaN8bmJ4aXkp13rNPQJJ0yx DJH2RixtRP33D0S4lcnLcQMY9+sDI3vlyy0p07AG+YXy7w+J8tjFJ4syD3nz5Sgl VLjTP9LK5QKxkha2qAdOiTFL9Xq1mt+2kL1N6CMcMsl+9ey1t8P3tKhOzu8h/to3 PqFaUnP6JZ7Q2vaK10jTWPirow+fjXyyI5m90EBVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+b0m8GRE3j/EUZhNgxNljGxImpAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzhiNTJmNjQwLTQyZDYtNDdiNy1hMDhlLWQyZjg5MzFkNWNmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/YwDQYJKoZIhvcNAQELBQADggEBAEDRKvVPeMt1fSThr7dXDn9PT94x SA2iD0yqghIrbkDws+/b+Zs6u3Efo/qQhwZzRwdTAnFwEyuh/LQnA8y27jAhuh/S KdGERWDIQ3tsgsmBCt4s/ue2tTk/9OagxCzRr/CmuR/iJVoGm+8qnR1T+hEHCVYn 6ZHENGoYNYUmcKeIoS5pF4yaSery4JnCJ/luUA8F3AV31t9YR091rYvaevP25HTr IikasL0XX0bPR395jV53LFvArSzoxKlK6ZzGQQb2a07zCN98Sqv6F0vNQav4PAzY 8xmSJ5frNKPrVQxKwaK5HALpfrhENdM1KWmiCnYRae1VoIkUlAJ4Vh+l3Jw= -----END CERTIFICATE-----Generated at Mon May 5 11:58:44 2025 by rpki-client