$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa File: b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa (raw, json) Hash identifier: XhsiOOT4H3yvz8YX+OraS95TaK70dK2SIhcX7d0JnWA= Subject key identifier: 8E:B0:12:2C:DD:47:90:B7:8C:98:5B:72:1A:3B:58:57:D6:5F:CD:ED Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5C7FF9F9DEC41BEF7403E650B6722FBD8A0187F0 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa Signing time: Tue 06 May 2025 00:00:54 +0000 ROA not before: Tue 06 May 2025 00:00:54 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:7f:f9:f9:de:c4:1b:ef:74:03:e6:50:b6:72:2f:bd:8a:01:87:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 6 00:00:54 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=a4af9b095b190c70190623e5d2d95e7095b91a6f375a6ed5ba56046172c695ac, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:75:ba:7a:3f:c5:b8:41:cc:fc:5b:e7:4c:83: 92:0f:12:60:b6:be:de:e2:7a:e0:fc:de:fb:05:6e: b3:7d:8c:95:e8:a4:ce:35:2a:9e:16:29:21:d7:49: 4d:e6:1e:a8:4b:48:6f:50:a3:34:7c:12:65:ee:f8: 86:16:5e:a9:93:b7:84:06:96:ac:82:59:87:eb:46: 43:a3:81:22:5b:40:94:ee:82:e3:a8:3e:eb:b9:ad: 28:01:cf:65:49:b5:cd:56:63:af:16:b0:ba:2b:ed: dc:a6:8e:b2:8f:66:2e:46:87:a4:ea:2d:46:89:69: 5f:56:8e:10:12:52:b2:37:82:f0:18:36:9d:f1:21: 96:99:b9:60:e8:54:90:12:b3:23:d7:16:eb:f9:52: d5:99:e9:24:40:c6:db:36:50:9c:b5:f2:3e:ec:cb: 1b:e3:73:97:f2:64:bd:49:d2:0a:d0:66:9d:c0:40: 85:18:2c:f0:e0:d8:f4:7a:d7:63:2d:70:04:ce:7b: e6:5b:65:47:08:70:97:e0:ce:ec:1a:cb:4f:79:f0: 51:d5:a4:d5:7e:7a:c8:76:b1:a8:f5:1b:23:8d:2c: 7d:86:9b:7a:3d:b8:e4:7d:ae:ca:74:4f:8f:ea:a9: 04:ab:7e:7d:34:68:14:f9:62:54:59:bf:df:77:b4: 84:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B0:12:2C:DD:47:90:B7:8C:98:5B:72:1A:3B:58:57:D6:5F:CD:ED X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.236.0/23 Signature Algorithm: sha256WithRSAEncryption 17:ea:7e:8a:2d:6d:a2:58:c3:61:53:b0:15:54:bf:43:26:ea: 50:3a:fd:6d:5d:94:cd:c6:5f:ee:d8:83:65:e7:64:88:0f:aa: 49:c2:39:3f:21:e2:be:d7:fc:a9:b2:68:83:a3:61:29:bc:09: 18:c9:f3:a0:2a:a8:ec:87:58:a6:8b:ee:01:3b:d7:d7:32:e1: 33:a3:ca:d5:c7:aa:f9:f3:83:4d:0b:e3:e7:ee:c8:30:c2:f3: c8:bf:df:59:ef:5d:f2:9e:ab:bc:fd:82:ae:30:bf:86:54:ed: ca:19:39:33:ab:36:c5:d7:7d:81:57:6e:81:4d:28:b5:63:9f: f8:ed:1d:fe:38:79:b2:1d:9e:37:20:fc:8b:50:47:ea:81:04: 37:1f:51:1e:a3:5e:b2:60:ca:6a:39:ca:4d:0f:58:e8:11:1a: 32:b5:0d:fd:15:22:0c:67:cd:df:9a:b9:74:4b:87:1b:87:04: 84:eb:06:ef:ed:90:93:ea:bb:b5:f6:d3:93:0c:e9:fd:d4:5e: 13:26:cb:25:8e:94:6e:ac:4c:5a:6a:b3:32:ff:f9:22:46:78: c9:c3:c4:e6:87:d3:ea:70:c6:76:74:b6:2d:b3:ef:ba:09:56: 8e:f9:8e:bc:9b:37:c9:6c:38:d7:53:3d:ab:0d:5a:60:0a:01: 21:87:67:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXH/5+d7EG+90A+ZQtnIvvYoBh/AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTA2MDAwMDU0WhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNGFmOWIwOTViMTkwYzcwMTkwNjIzZTVkMmQ5NWU3MDk1 YjkxYTZmMzc1YTZlZDViYTU2MDQ2MTcyYzY5NWFjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXdbp6P8W4Qcz8W+dMg5IPEmC2vt7ieuD83vsFbrN9jJXo pM41Kp4WKSHXSU3mHqhLSG9QozR8EmXu+IYWXqmTt4QGlqyCWYfrRkOjgSJbQJTu guOoPuu5rSgBz2VJtc1WY68WsLor7dymjrKPZi5Gh6TqLUaJaV9WjhASUrI3gvAY Np3xIZaZuWDoVJASsyPXFuv5UtWZ6SRAxts2UJy18j7syxvjc5fyZL1J0grQZp3A QIUYLPDg2PR612MtcATOe+ZbZUcIcJfgzuway0958FHVpNV+esh2saj1GyONLH2G m3o9uOR9rsp0T4/qqQSrfn00aBT5YlRZv993tIT1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjrASLN1HkLeMmFtyGjtYV9Zfze0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I0YmI5ODUxLWI1YWEtNDM3MC1iZmZlLTRmYzFmZDQxNDg1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX++wwDQYJKoZIhvcNAQELBQADggEBABfqfootbaJYw2FTsBVUv0Mm6lA6 /W1dlM3GX+7Yg2XnZIgPqknCOT8h4r7X/KmyaIOjYSm8CRjJ86AqqOyHWKaL7gE7 19cy4TOjytXHqvnzg00L4+fuyDDC88i/31nvXfKeq7z9gq4wv4ZU7coZOTOrNsXX fYFXboFNKLVjn/jtHf44ebIdnjcg/ItQR+qBBDcfUR6jXrJgymo5yk0PWOgRGjK1 Df0VIgxnzd+auXRLhxuHBITrBu/tkJPqu7X205MM6f3UXhMmyyWOlG6sTFpqszL/ +SJGeMnDxOaH0+pwxnZ0ti2z77oJVo75jrybN8lsONdTPasNWmAKASGHZ3E= -----END CERTIFICATE-----Generated at Sun May 11 21:50:40 2025 by rpki-client