$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa File: d61aefde-15db-4326-8486-f4cd98992cbc.roa (raw, json) Hash identifier: CysM/1sXJK9we+BWWpzYwU2h02dl7RMad+GGBxL6Jnk= Subject key identifier: 6C:C9:85:86:4D:32:29:66:CF:9F:55:C7:09:65:0C:18:5C:78:36:3D Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 239E46892B813566EE4C24C3BF01AC2ACA72EE20 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa Signing time: Wed 25 Jun 2025 00:00:14 +0000 ROA not before: Wed 25 Jun 2025 00:00:14 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9e:46:89:2b:81:35:66:ee:4c:24:c3:bf:01:ac:2a:ca:72:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 25 00:00:14 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=8982881cf0dc754b5f3da636b7922bfca74b972d8f921f929ce20eb462a8bb4d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:fb:f7:03:92:d7:82:1c:02:32:a7:b6:70: 46:d0:f0:17:2a:d6:d7:21:9b:80:fd:95:d2:be:e6: 83:50:b3:91:8e:b0:8c:04:d5:8d:38:4d:b3:fc:88: 22:e2:32:03:a5:53:84:9c:93:2f:fc:69:af:33:61: 7a:b9:41:1f:c2:3a:cf:9d:b9:44:62:c1:a2:c0:c4: 8e:32:d9:18:3c:74:a7:b3:5d:1c:18:b1:bc:c1:e2: 0b:2c:56:a7:ab:3e:ef:89:76:d1:e0:41:b9:ed:36: 66:86:a2:56:6a:fb:aa:c5:40:06:35:76:84:14:dc: ef:6d:4d:22:28:3c:79:4b:e3:66:82:e7:1b:7f:69: 14:5b:08:b0:63:b8:0f:40:1f:e9:79:e1:3b:31:d3: 2c:a9:05:a1:7c:c8:69:6c:92:1f:1d:7f:58:b8:a1: 36:de:e5:aa:9d:ae:07:53:cb:67:47:0a:07:d2:05: 54:33:93:50:4e:8f:6c:2a:69:a5:a1:98:e6:eb:f0: c4:05:bd:5e:c5:95:d1:25:05:1a:4e:88:8e:73:02: 5f:ae:d4:f0:93:ca:96:74:0c:fc:40:bf:6c:8e:66: b1:30:c6:58:85:17:71:01:09:7d:6e:1d:f2:8e:21: bb:30:4e:7c:be:02:9b:ff:e0:15:b9:c2:73:36:26: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C9:85:86:4D:32:29:66:CF:9F:55:C7:09:65:0C:18:5C:78:36:3D X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/d61aefde-15db-4326-8486-f4cd98992cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.223.0/24 Signature Algorithm: sha256WithRSAEncryption 32:0b:17:15:60:f2:74:44:92:2e:d9:87:41:15:1b:55:d5:32: be:79:1f:25:fe:a9:d8:3f:e1:7b:0e:04:34:73:2b:98:b5:6d: e1:c3:fb:b1:59:e2:ed:81:f6:d9:2b:37:c4:a7:ec:9e:63:ac: 5d:bc:05:50:52:ff:73:47:01:11:e1:1a:b3:e6:74:cc:12:e1: d6:0d:cd:65:36:8d:6e:d5:10:20:78:d3:d9:80:6c:a5:d5:2a: 7f:16:31:51:23:32:cc:ef:d2:36:20:d4:90:c3:5d:5e:c9:c6: 64:8b:97:3b:51:db:29:23:2b:ff:e9:59:17:7b:80:ef:dd:5e: 99:79:93:b1:ae:72:bb:3b:85:42:e2:b5:11:a8:33:38:86:15: 12:f1:29:5c:d6:95:42:1b:66:13:37:b7:21:3b:12:59:49:6f: 80:b3:38:8d:08:c5:b7:9f:23:49:cf:b3:8c:06:3e:5d:ae:47: af:4b:0e:e6:af:67:94:70:67:96:2d:df:89:68:34:73:69:9e: 35:17:05:97:ba:92:d3:a8:a4:ab:12:68:5b:fc:3f:8d:a6:9d: 8c:4d:a4:6a:dc:6a:1f:26:21:76:3f:a8:54:99:73:56:d7:b9: 4d:b4:1b:65:e0:80:f4:2d:cd:79:76:39:60:30:f4:a4:32:45: ef:fe:c7:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI55GiSuBNWbuTCTDvwGsKspy7iAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAwMDE0WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OTgyODgxY2YwZGM3NTRiNWYzZGE2MzZiNzkyMmJmY2E3 NGI5NzJkOGY5MjFmOTI5Y2UyMGViNDYyYThiYjRkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCakfv3A5LXghwCMqe2cEbQ8Bcq1tchm4D9ldK+5oNQs5GO sIwE1Y04TbP8iCLiMgOlU4Scky/8aa8zYXq5QR/COs+duURiwaLAxI4y2Rg8dKez XRwYsbzB4gssVqerPu+JdtHgQbntNmaGolZq+6rFQAY1doQU3O9tTSIoPHlL42aC 5xt/aRRbCLBjuA9AH+l54Tsx0yypBaF8yGlskh8df1i4oTbe5aqdrgdTy2dHCgfS BVQzk1BOj2wqaaWhmObr8MQFvV7FldElBRpOiI5zAl+u1PCTypZ0DPxAv2yOZrEw xliFF3EBCX1uHfKOIbswTny+Apv/4BW5wnM2JsoRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbMmFhk0yKWbPn1XHCWUMGFx4Nj0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Q2MWFlZmRlLTE1ZGItNDMyNi04NDg2LWY0Y2Q5ODk5MmNiYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d8wDQYJKoZIhvcNAQELBQADggEBADILFxVg8nREki7Zh0EVG1XVMr55 HyX+qdg/4XsOBDRzK5i1beHD+7FZ4u2B9tkrN8Sn7J5jrF28BVBS/3NHARHhGrPm dMwS4dYNzWU2jW7VECB409mAbKXVKn8WMVEjMszv0jYg1JDDXV7JxmSLlztR2ykj K//pWRd7gO/dXpl5k7Gucrs7hULitRGoMziGFRLxKVzWlUIbZhM3tyE7EllJb4Cz OI0IxbefI0nPs4wGPl2uR69LDuavZ5RwZ5Yt34loNHNpnjUXBZe6ktOopKsSaFv8 P42mnYxNpGrcah8mIXY/qFSZc1bXuU20G2XggPQtzXl2OWAw9KQyRe/+x0w= -----END CERTIFICATE-----Generated at Sun Jun 29 04:19:39 2025 by rpki-client