$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa File: efff1c41-4813-4726-a794-2bd64d641531.roa (raw, json) Hash identifier: 4vYx23kGgkFFcqdGqSoT0yoo3CYz7whSY3UjN+z8fg4= Subject key identifier: 0E:D0:EA:A7:C8:8C:65:E6:F5:42:A3:35:C1:8C:3B:9A:B5:8D:FB:56 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 342031EAFFB96D33A16302F5051E76FC2E74DCD1 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa Signing time: Tue 06 May 2025 00:00:50 +0000 ROA not before: Tue 06 May 2025 00:00:50 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:20:31:ea:ff:b9:6d:33:a1:63:02:f5:05:1e:76:fc:2e:74:dc:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 6 00:00:50 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=6fe7181cea393c6833cdc02b6c9a7c1fbdf4c41e43cf99fd9f155e0cba5d8144, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:ba:19:3f:14:21:4f:c1:52:c0:f9:f2:45: ec:41:b4:5b:7b:96:0e:3b:34:ba:76:6c:f4:83:4b: d4:16:29:96:2d:44:9b:c7:75:5f:c2:f7:8b:8d:45: 76:1b:cf:fe:6f:91:29:82:f7:15:0a:21:90:b2:85: 52:a8:90:21:8a:70:7c:d2:04:f7:bf:10:94:f9:d6: 18:00:b9:9a:f5:c4:a4:c8:98:17:51:56:5e:7f:9c: 92:e2:c5:a0:fd:54:b4:67:ef:2a:78:25:96:af:f1: 28:2e:60:3c:19:2c:55:f9:c1:40:5d:7b:a6:e6:5b: 16:de:8a:70:2c:d0:ce:9d:ce:89:b0:62:38:29:03: 45:60:ee:36:a8:75:f1:64:a3:3f:e6:5c:05:59:91: 72:62:ff:65:8b:99:b0:27:ca:00:2d:29:1a:cf:5e: 20:86:e1:0b:68:72:21:21:4f:a4:31:fe:d7:c9:04: 0c:c7:a0:c5:7e:3d:2a:18:89:24:14:80:19:80:3e: e3:c3:e2:6d:89:da:d5:37:aa:c1:3d:7a:97:c3:51: 99:80:ea:25:da:34:04:43:86:80:4e:2b:28:7b:03: f0:b9:9c:05:18:8d:5d:8f:d7:52:ef:8e:b1:96:24: f2:eb:6b:c1:8b:3b:07:23:45:18:6e:b1:eb:be:89: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D0:EA:A7:C8:8C:65:E6:F5:42:A3:35:C1:8C:3B:9A:B5:8D:FB:56 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.235.0/24 Signature Algorithm: sha256WithRSAEncryption 80:5e:b6:f2:ec:f6:26:3d:07:35:66:ec:d2:12:ad:c4:1d:81: 46:0a:e2:63:c8:3f:7f:ad:96:37:ca:3d:96:50:78:ad:30:63: e5:59:3a:e8:11:88:e0:fe:4a:82:5e:af:71:6d:f4:4f:05:42: 54:21:92:0f:3d:f1:5c:95:56:a3:6c:f0:7a:e2:96:47:b7:28: 8d:72:c3:d6:72:a8:0b:dc:46:ce:96:c3:96:86:02:4c:64:47: 02:a1:e2:fe:43:62:f8:9f:2e:19:3e:68:97:4b:77:9b:5e:4c: f6:8c:6d:2d:5c:48:d7:dc:02:0f:ef:6e:29:c1:54:0b:5e:ee: c5:4e:ed:97:0f:d3:e9:f3:88:1e:51:f9:e6:8d:cb:06:ab:b5: 14:c8:75:b8:61:00:20:3a:36:af:9a:ff:ab:0b:5f:b5:f6:ce: be:b5:13:0b:e5:b6:b6:1b:02:f7:f8:9e:c9:32:47:43:e2:fb: 90:4f:f8:d4:56:38:f9:26:3c:5b:a7:92:32:f0:38:76:1c:10: cf:c0:10:eb:f0:99:83:21:99:36:72:f8:55:de:30:38:15:0f: 53:29:ba:77:c0:20:24:8e:19:82:e1:69:3a:0e:2e:f2:75:09: 56:03:9c:4a:50:69:1f:4d:9a:74:5d:14:ec:3c:97:dd:ba:db: 39:4f:f0:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNCAx6v+5bTOhYwL1BR52/C503NEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTA2MDAwMDUwWhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmU3MTgxY2VhMzkzYzY4MzNjZGMwMmI2YzlhN2MxZmJk ZjRjNDFlNDNjZjk5ZmQ5ZjE1NWUwY2JhNWQ4MTQ0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6P7oZPxQhT8FSwPnyRexBtFt7lg47NLp2bPSDS9QWKZYt RJvHdV/C94uNRXYbz/5vkSmC9xUKIZCyhVKokCGKcHzSBPe/EJT51hgAuZr1xKTI mBdRVl5/nJLixaD9VLRn7yp4JZav8SguYDwZLFX5wUBde6bmWxbeinAs0M6dzomw YjgpA0Vg7jaodfFkoz/mXAVZkXJi/2WLmbAnygAtKRrPXiCG4QtociEhT6Qx/tfJ BAzHoMV+PSoYiSQUgBmAPuPD4m2J2tU3qsE9epfDUZmA6iXaNARDhoBOKyh7A/C5 nAUYjV2P11LvjrGWJPLra8GLOwcjRRhuseu+iZ8TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDtDqp8iMZeb1QqM1wYw7mrWN+1YwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2VmZmYxYzQxLTQ4MTMtNDcyNi1hNzk0LTJiZDY0ZDY0MTUzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++swDQYJKoZIhvcNAQELBQADggEBAIBetvLs9iY9BzVm7NISrcQdgUYK 4mPIP3+tljfKPZZQeK0wY+VZOugRiOD+SoJer3Ft9E8FQlQhkg898VyVVqNs8Hri lke3KI1yw9ZyqAvcRs6Ww5aGAkxkRwKh4v5DYvifLhk+aJdLd5teTPaMbS1cSNfc Ag/vbinBVAte7sVO7ZcP0+nziB5R+eaNywartRTIdbhhACA6Nq+a/6sLX7X2zr61 EwvltrYbAvf4nskyR0Pi+5BP+NRWOPkmPFunkjLwOHYcEM/AEOvwmYMhmTZy+FXe MDgVD1MpunfAICSOGYLhaToOLvJ1CVYDnEpQaR9NmnRdFOw8l9262zlP8L0= -----END CERTIFICATE-----Generated at Sat May 10 00:15:40 2025 by rpki-client