$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa File: f558359a-2a02-4c8e-9a72-7159b2569d66.roa (raw, json) Hash identifier: 3kXlkNKujN7cJdv1PzfVdn9TddhUOToxNjNGxwuolQQ= Subject key identifier: EA:D5:F7:54:EF:FB:04:2E:45:5A:37:C5:C6:9A:35:1C:72:7B:A0:99 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 74A4264C1667783F1524AE95B6ADD961C40B7465 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa Signing time: Wed 23 Apr 2025 00:10:20 +0000 ROA not before: Wed 23 Apr 2025 00:10:20 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a4:26:4c:16:67:78:3f:15:24:ae:95:b6:ad:d9:61:c4:0b:74:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 23 00:10:20 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=e24bc6ad76350a4f8e7075ae7a92d2c0459af288a75ecf1b932c946a52a67dab, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e1:ab:b4:eb:d7:1f:d1:11:88:86:5a:88:87: 98:9f:a2:c4:62:4c:dd:41:2f:84:dd:50:de:42:22: 5c:86:b7:19:fe:57:40:5f:ad:a4:37:c5:94:53:58: af:98:1d:82:08:c2:b5:e8:03:88:d8:49:4a:38:dc: 4f:a5:a6:7d:f7:20:e9:db:71:9d:4d:2b:d1:31:82: e5:6a:6d:a9:d3:74:6c:87:67:9e:db:17:e4:c5:60: 57:1a:65:ee:db:e7:61:0a:62:d2:60:47:be:90:5d: 85:14:95:5a:2e:e5:d1:e0:ce:79:c8:1c:19:63:1e: fe:e6:86:c3:8f:ee:51:a0:a9:9f:44:9d:c7:2c:e5: 3f:22:f3:1e:63:9c:23:cb:05:97:c2:75:f4:60:c2: bf:02:28:3e:29:2d:d8:66:05:96:78:8b:b1:b9:51: 29:eb:51:88:33:1f:d6:e8:99:97:10:b9:22:79:15: ca:42:c4:5a:ed:97:27:e4:13:01:df:7b:c7:58:99: d7:2e:2b:4a:0d:19:59:4c:3e:c4:8e:57:df:73:98: ff:08:eb:bd:8e:d4:95:5e:ff:36:59:03:35:2e:6e: 36:27:58:11:02:55:a4:a4:ae:9f:21:55:2d:45:c0: 49:96:99:67:43:16:12:f4:cf:ff:56:5e:b1:e5:85: a6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D5:F7:54:EF:FB:04:2E:45:5A:37:C5:C6:9A:35:1C:72:7B:A0:99 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f558359a-2a02-4c8e-9a72-7159b2569d66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.210.0/23 Signature Algorithm: sha256WithRSAEncryption 48:06:37:a3:e4:0c:f0:03:60:15:84:a8:46:5a:c0:97:51:15: d6:aa:33:87:6f:99:92:21:10:39:aa:cc:9a:85:33:3b:5b:4d: e2:c5:d7:7e:cd:52:17:41:16:ba:b9:01:59:95:01:65:b1:57: 5b:59:a6:3a:48:9e:f5:a0:ee:16:ed:54:01:99:75:48:dc:87: 06:90:72:45:70:e6:4e:66:40:d1:55:7f:d5:41:5f:c8:d2:e6: 5a:f2:49:45:f6:01:2c:dd:7a:52:79:f7:2b:c2:bb:09:25:77: 5d:3f:35:0b:8e:d1:02:fd:c2:b3:25:00:28:45:b5:6f:a3:b2: 12:23:7d:14:32:8e:8e:0d:06:8f:72:e6:75:e1:f5:89:8a:ed: af:a3:1d:4a:2c:1c:05:35:e9:75:cf:d0:7d:36:4d:74:42:66: 2f:8b:06:e3:9c:d1:b8:2a:e8:09:4c:f9:ba:5a:a6:d2:58:97: 59:40:6c:74:95:ab:de:f2:6f:7b:b7:1f:45:b1:fe:1d:d8:0f: 9d:a2:3a:f9:bc:32:bb:09:49:5a:63:97:e5:0e:e3:20:a5:78: c0:0f:8e:e9:0f:f5:69:b1:16:3b:41:1e:eb:e8:94:15:ae:76: 00:e4:88:ea:d7:7e:99:91:6c:0c:5d:af:35:a7:41:89:e7:83: 70:18:0b:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdKQmTBZneD8VJK6Vtq3ZYcQLdGUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDIzMDAxMDIwWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjRiYzZhZDc2MzUwYTRmOGU3MDc1YWU3YTkyZDJjMDQ1 OWFmMjg4YTc1ZWNmMWI5MzJjOTQ2YTUyYTY3ZGFiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR4au069cf0RGIhlqIh5ifosRiTN1BL4TdUN5CIlyGtxn+ V0BfraQ3xZRTWK+YHYIIwrXoA4jYSUo43E+lpn33IOnbcZ1NK9ExguVqbanTdGyH Z57bF+TFYFcaZe7b52EKYtJgR76QXYUUlVou5dHgznnIHBljHv7mhsOP7lGgqZ9E nccs5T8i8x5jnCPLBZfCdfRgwr8CKD4pLdhmBZZ4i7G5USnrUYgzH9bomZcQuSJ5 FcpCxFrtlyfkEwHfe8dYmdcuK0oNGVlMPsSOV99zmP8I672O1JVe/zZZAzUubjYn WBECVaSkrp8hVS1FwEmWmWdDFhL0z/9WXrHlhab/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6tX3VO/7BC5FWjfFxpo1HHJ7oJkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Y1NTgzNTlhLTJhMDItNGM4ZS05YTcyLTcxNTliMjU2OWQ2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dIwDQYJKoZIhvcNAQELBQADggEBAEgGN6PkDPADYBWEqEZawJdRFdaq M4dvmZIhEDmqzJqFMztbTeLF137NUhdBFrq5AVmVAWWxV1tZpjpInvWg7hbtVAGZ dUjchwaQckVw5k5mQNFVf9VBX8jS5lrySUX2ASzdelJ59yvCuwkld10/NQuO0QL9 wrMlAChFtW+jshIjfRQyjo4NBo9y5nXh9YmK7a+jHUosHAU16XXP0H02TXRCZi+L BuOc0bgq6AlM+bpaptJYl1lAbHSVq97yb3u3H0Wx/h3YD52iOvm8MrsJSVpjl+UO 4yCleMAPjukP9WmxFjtBHuvolBWudgDkiOrXfpmRbAxdrzWnQYnng3AYC7g= -----END CERTIFICATE-----Generated at Wed May 7 06:24:01 2025 by rpki-client