$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa File: 271f0380-5b52-472a-bc37-cdbbdcd650e9.roa (raw, json) Hash identifier: bPb/S+lCUSzGEUzTHfGKRwKwQ4YlP4wg3Lf9mVVBFUU= Subject key identifier: B0:3C:EC:6F:EC:DB:01:DA:F5:6A:9E:F4:32:56:9E:04:61:D8:54:64 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5C0830CEEEE31CF01A34FAA1A2218EB6E0D854DE Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa Signing time: Mon 17 Mar 2025 15:00:14 +0000 ROA not before: Mon 17 Mar 2025 15:00:14 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:08:30:ce:ee:e3:1c:f0:1a:34:fa:a1:a2:21:8e:b6:e0:d8:54:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Mar 17 15:00:14 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c8:9b:e6:13:d1:f0:a7:55:35:51:ed:11:6b: 5d:73:6e:15:e8:28:fd:e3:8f:ba:46:89:53:e2:42: 13:dd:c1:ab:13:93:40:ee:69:ff:e0:35:86:4e:14: dc:12:05:f1:5c:2a:98:5e:fd:d6:cb:ca:4c:02:29: 20:34:a4:7f:8c:f6:7a:86:95:fa:c4:c3:95:a0:24: 9f:7a:7c:a9:d4:d8:d0:1e:a4:e7:ab:cf:0e:6f:7d: ed:94:01:23:24:a0:cc:b0:68:e7:03:c4:84:be:c8: 2b:17:e8:e8:21:c5:a9:7b:8a:22:21:ee:93:94:19: 23:34:3f:7d:82:a1:1b:9f:9c:03:df:c0:ff:07:fd: 76:89:6d:b9:1c:53:0c:85:27:91:02:1c:d7:fc:fd: 0d:bd:c7:d5:3e:10:2d:c8:fe:ce:ef:2c:e2:de:71: 5a:28:cb:c2:fc:4d:83:a9:ac:81:e7:a9:f4:d5:d4: 4c:5c:bb:d7:38:45:ff:e0:32:bb:41:34:0f:a8:6a: 9d:37:d8:d2:25:54:3f:b5:5f:29:db:70:b9:04:b3: 96:f9:fd:20:d8:63:04:84:9b:a4:38:54:f0:86:49: f2:8e:3a:af:61:51:86:ed:5f:9b:77:df:ef:ae:42: 69:85:5a:7a:4d:f8:db:06:93:fc:1a:89:b4:2e:8b: 92:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3C:EC:6F:EC:DB:01:DA:F5:6A:9E:F4:32:56:9E:04:61:D8:54:64 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.217.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:3b:c1:fb:fe:14:bf:da:e7:d1:e0:ba:41:fe:02:e5:21:ec: 4b:b1:b3:b1:b7:f4:fb:e7:f2:0a:05:6f:1a:bf:1f:25:05:f1: 44:c7:4c:8b:d2:84:64:09:09:ed:24:ad:9e:06:b8:47:25:18: 53:ff:4d:84:5b:98:2c:1f:3b:62:72:81:0e:c0:f8:f3:fb:86: e9:aa:b4:ad:5b:9d:33:38:71:5e:c6:24:11:61:df:01:32:08: a9:09:aa:5e:ee:0d:ef:a4:e8:6c:9d:96:9e:20:45:6b:8d:39: fd:19:67:32:89:91:be:d5:49:66:ed:0e:a6:0e:83:11:7d:5a: 67:32:cc:7b:53:00:cc:3b:03:05:52:9f:8e:c8:7b:28:af:ad: 15:f5:76:cf:36:89:13:57:c8:51:b6:63:3c:2e:27:78:4b:4c: c6:29:9d:34:4a:12:02:e7:b2:55:ba:03:9a:a7:78:b5:51:66: a2:31:b6:f3:a8:1f:18:44:57:e6:c4:9f:51:e8:d0:b0:59:45: 15:cc:bf:75:ce:28:ea:69:d1:10:68:b5:91:1d:b2:a4:79:31: 98:85:2f:9d:72:97:23:ed:1e:bb:fd:96:bd:6c:f0:bb:ff:58: 50:16:b7:88:4b:e7:f5:66:ae:24:25:68:db:1a:d6:1f:80:0e: be:cb:c6:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXAgwzu7jHPAaNPqhoiGOtuDYVN4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzE3MTUwMDE0WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGQwNzExY2E3MDA4ZTRiNDMzNDY1ZGI2YjA1MTE3MGRj YjBlM2M3NjU4NTQ0Y2IyYjY4OWI1NTYyNWYyMmFiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCEyJvmE9Hwp1U1Ue0Ra11zbhXoKP3jj7pGiVPiQhPdwasT k0Duaf/gNYZOFNwSBfFcKphe/dbLykwCKSA0pH+M9nqGlfrEw5WgJJ96fKnU2NAe pOerzw5vfe2UASMkoMywaOcDxIS+yCsX6Oghxal7iiIh7pOUGSM0P32CoRufnAPf wP8H/XaJbbkcUwyFJ5ECHNf8/Q29x9U+EC3I/s7vLOLecVooy8L8TYOprIHnqfTV 1Excu9c4Rf/gMrtBNA+oap032NIlVD+1XynbcLkEs5b5/SDYYwSEm6Q4VPCGSfKO Oq9hUYbtX5t33++uQmmFWnpN+NsGk/waibQui5IPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsDzsb+zbAdr1ap70MlaeBGHYVGQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzI3MWYwMzgwLTViNTItNDcyYS1iYzM3LWNkYmJkY2Q2NTBlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dkwDQYJKoZIhvcNAQELBQADggEBAD07wfv+FL/a59HgukH+AuUh7Eux s7G39Pvn8goFbxq/HyUF8UTHTIvShGQJCe0krZ4GuEclGFP/TYRbmCwfO2JygQ7A +PP7humqtK1bnTM4cV7GJBFh3wEyCKkJql7uDe+k6Gydlp4gRWuNOf0ZZzKJkb7V SWbtDqYOgxF9WmcyzHtTAMw7AwVSn47IeyivrRX1ds82iRNXyFG2YzwuJ3hLTMYp nTRKEgLnslW6A5qneLVRZqIxtvOoHxhEV+bEn1Ho0LBZRRXMv3XOKOpp0RBotZEd sqR5MZiFL51ylyPtHrv9lr1s8Lv/WFAWt4hL5/VmriQlaNsa1h+ADr7Lxk0= -----END CERTIFICATE-----Generated at Sat Apr 5 13:25:15 2025 by rpki-client