$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa File: dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa (raw, json) Hash identifier: sMGid9kmg5AlCN2fthMuOmL98XkW6rEhvWHltgms2J4= Subject key identifier: 19:2C:9D:A6:C4:A9:9B:71:4D:65:C2:B8:7E:86:34:00:E6:AB:78:DE Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 44F572AE749D0E1E475900B14F9C65EAEAC64244 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa Signing time: Tue 06 May 2025 00:10:06 +0000 ROA not before: Tue 06 May 2025 00:10:06 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f5:72:ae:74:9d:0e:1e:47:59:00:b1:4f:9c:65:ea:ea:c6:42:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 6 00:10:06 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=026f8ecc743c69afaea8e89c8c7e2530da65249303cafd004552d76ad968c781, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:53:2d:31:aa:2e:27:9b:1c:34:e7:95:4d:05: 1e:92:84:93:57:d9:ad:35:ae:df:4c:a8:ca:ba:71: be:52:13:53:df:5c:b2:d8:06:00:b7:30:da:79:f6: 1c:9a:96:47:47:99:89:2d:bc:4b:61:d8:fa:88:30: 6f:f2:6a:12:d9:9f:e5:1b:5f:eb:60:05:0d:bb:82: 5d:c4:63:cc:80:03:39:10:fd:06:71:bb:66:87:eb: bb:b0:78:9c:7a:92:58:7d:58:23:58:1f:fc:a1:da: 84:96:53:a4:7a:69:e2:33:f0:5e:13:97:5f:17:5b: 80:8a:88:61:5b:59:b8:f9:74:74:62:e4:53:77:5f: 52:84:ce:49:12:82:fb:e0:79:e9:ec:7e:7b:1c:fe: a8:46:cd:34:5c:d9:72:7b:a0:4f:b4:09:a4:bb:5f: bd:3b:45:1c:db:ef:4a:58:2c:0c:4b:7c:7e:29:2c: 5e:c7:b3:ba:84:1a:67:ed:3f:da:ed:b8:d8:b9:e8: 91:36:c5:88:55:db:2a:eb:27:a4:c9:23:fe:9e:5b: b2:5e:ab:92:54:d8:2f:d9:cc:0a:fa:ce:d2:f4:95: e1:44:d5:17:fa:aa:7f:0f:2d:92:76:1f:a3:a2:71: 18:68:f2:6e:48:60:43:e0:16:05:76:07:5e:e1:6b: 63:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2C:9D:A6:C4:A9:9B:71:4D:65:C2:B8:7E:86:34:00:E6:AB:78:DE X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.189.0/24 Signature Algorithm: sha256WithRSAEncryption 01:8f:da:de:3e:50:3f:5a:02:d9:67:48:a0:08:33:36:ea:7d: 99:43:57:11:60:b6:22:7b:2c:97:2e:8f:33:ab:e4:a0:d9:35: f3:47:66:72:77:9f:16:93:04:7b:af:41:ff:bf:12:82:08:f1: 36:20:19:30:13:c4:30:d7:35:a7:12:e8:05:31:fd:47:f1:96: 77:dc:89:cd:10:68:21:04:41:ce:be:db:5f:72:b2:96:c0:79: 7c:6e:d7:6b:d8:fd:1d:43:83:4e:ae:85:5d:42:65:eb:6e:be: bc:2b:3c:13:24:5d:f2:2b:9c:0a:cb:56:dc:38:e1:78:4c:b9: 77:c9:c2:33:d5:12:fa:66:7e:d8:b1:73:6a:8b:b6:e2:2b:6b: 45:5a:06:a7:54:07:d4:cb:1a:b5:39:b7:84:74:29:62:52:5a: 87:89:33:27:ba:33:d1:78:df:89:57:45:e3:af:27:a0:12:be: 6b:f0:d6:f5:6f:84:49:3e:a2:62:28:16:c5:25:c6:e7:da:52: 1f:cf:e7:87:af:82:82:a4:cf:24:9d:97:6f:e7:cb:9c:00:91: 44:54:35:58:7b:86:a6:a9:e4:44:1f:98:ae:b7:0c:81:95:65: cc:5c:e4:b5:97:49:09:fe:66:40:d3:ce:a0:c6:fd:b5:ad:e9: 08:98:74:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURPVyrnSdDh5HWQCxT5xl6urGQkQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTA2MDAxMDA2WhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjZmOGVjYzc0M2M2OWFmYWVhOGU4OWM4YzdlMjUzMGRh NjUyNDkzMDNjYWZkMDA0NTUyZDc2YWQ5NjhjNzgxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdUy0xqi4nmxw055VNBR6ShJNX2a01rt9MqMq6cb5SE1Pf XLLYBgC3MNp59hyalkdHmYktvEth2PqIMG/yahLZn+UbX+tgBQ27gl3EY8yAAzkQ /QZxu2aH67uweJx6klh9WCNYH/yh2oSWU6R6aeIz8F4Tl18XW4CKiGFbWbj5dHRi 5FN3X1KEzkkSgvvgeensfnsc/qhGzTRc2XJ7oE+0CaS7X707RRzb70pYLAxLfH4p LF7Hs7qEGmftP9rtuNi56JE2xYhV2yrrJ6TJI/6eW7Jeq5JU2C/ZzAr6ztL0leFE 1Rf6qn8PLZJ2H6OicRho8m5IYEPgFgV2B17ha2O9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGSydpsSpm3FNZcK4foY0AOareN4wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RjZTJkYjkzLThmYjctNDJiOS1iZTU2LTIzZjQ2YjViZjRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM370wDQYJKoZIhvcNAQELBQADggEBAAGP2t4+UD9aAtlnSKAIMzbqfZlD VxFgtiJ7LJcujzOr5KDZNfNHZnJ3nxaTBHuvQf+/EoII8TYgGTATxDDXNacS6AUx /Ufxlnfcic0QaCEEQc6+219yspbAeXxu12vY/R1Dg06uhV1CZetuvrwrPBMkXfIr nArLVtw44XhMuXfJwjPVEvpmftixc2qLtuIra0VaBqdUB9TLGrU5t4R0KWJSWoeJ Mye6M9F434lXReOvJ6ASvmvw1vVvhEk+omIoFsUlxufaUh/P54evgoKkzySdl2/n y5wAkURUNVh7hqap5EQfmK63DIGVZcxc5LWXSQn+ZkDTzqDG/bWt6QiYdNk= -----END CERTIFICATE-----Generated at Tue May 6 22:38:40 2025 by rpki-client