$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa File: 3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa (raw, json) Hash identifier: vkDmqngOhvoKbew+hXqkITgBMa3Z2GS70PsCVmfkP7A= Subject key identifier: C6:15:FD:1B:83:B4:D6:C5:5B:9E:5B:74:2D:4D:08:86:59:42:91:08 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2B4FE884A1DA7E0FE67EDD542CE9A84F595900B3 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa Signing time: Mon 17 Mar 2025 15:00:59 +0000 ROA not before: Mon 17 Mar 2025 15:00:59 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4f:e8:84:a1:da:7e:0f:e6:7e:dd:54:2c:e9:a8:4f:59:59:00:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Mar 17 15:00:59 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:1e:34:59:15:29:bf:d8:d1:fa:d5:0a:ed: 7d:68:93:4b:be:9e:a4:bd:aa:ce:67:b4:13:09:5f: ef:71:aa:cb:c0:70:2a:9d:55:a0:cb:b0:2c:c9:9d: 0d:49:20:2d:98:43:2c:82:08:dd:3e:15:7f:43:e8: 76:d1:39:d3:ca:7f:80:63:90:54:57:a9:23:15:3b: 5d:ef:89:2e:fb:7e:c8:de:0c:1a:fc:82:d0:16:cc: 39:fe:71:1c:12:2f:f1:da:59:80:d4:d5:3b:a0:58: 75:96:ee:73:16:aa:1a:b4:28:16:bf:f6:cc:0a:ae: 4c:a6:6c:f3:68:3f:34:90:3c:63:29:8d:de:e2:c8: 99:18:f4:07:07:be:98:0e:11:1c:82:2f:35:90:a3: 8c:69:37:52:d4:e3:50:ed:a4:86:38:65:95:fc:24: 30:9f:d5:ed:88:11:88:1b:6a:ab:e7:6b:95:d2:5b: 1d:e8:cb:a4:4a:ee:6d:e4:36:09:d0:47:be:4d:68: d4:b1:fa:de:34:05:e8:23:af:d5:ce:43:ca:32:af: ed:d2:23:b8:05:ea:7c:57:7a:8e:33:44:93:ab:99: d6:0d:37:d3:4c:fa:50:0d:b7:3f:60:fe:08:d6:ea: 9d:b5:06:e3:7a:80:4d:54:d7:3f:3f:59:7f:1c:92: a0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:15:FD:1B:83:B4:D6:C5:5B:9E:5B:74:2D:4D:08:86:59:42:91:08 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.224.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:14:b7:f1:82:59:51:c5:90:d4:4c:e5:78:16:d7:57:7b:db: e8:33:17:2a:04:17:b3:fa:40:21:cd:da:ed:7e:4a:a9:24:d0: a5:ec:81:37:29:f3:55:cf:df:6b:e3:d8:ae:52:3a:91:18:cf: 9b:85:ef:f7:0b:33:6f:fa:01:ac:25:bd:10:fa:53:4b:c6:8e: 4e:98:27:4a:f2:35:00:55:67:42:86:d8:03:9a:8d:f8:96:83: a3:8c:0d:82:19:d5:96:79:0d:f2:35:86:52:31:57:56:48:3b: 99:fd:8f:38:da:de:b7:df:37:e3:c5:99:09:db:40:52:9e:15: 41:d0:f4:0b:e4:e6:35:ae:1b:dd:78:47:62:9c:f1:00:78:2c: 55:d0:70:1b:7c:29:68:e7:8b:96:ff:2d:fd:56:00:b8:cd:80: 75:38:1f:ba:f5:6a:76:13:ba:f3:91:1d:7b:71:a1:af:60:59: 83:70:b2:3c:72:60:b6:07:38:18:c5:9a:d9:98:ec:15:90:59: 76:4e:c9:8a:ee:6a:f4:1a:2d:cd:7e:63:cc:a6:fd:04:a3:4b: a0:06:0d:01:2b:9f:b1:e1:5b:0e:8f:78:3f:90:94:3b:dc:ff: 85:01:2e:32:3b:10:7a:50:c3:25:df:8d:bf:2d:45:a7:d3:df: 40:04:f9:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK0/ohKHafg/mft1ULOmoT1lZALMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzE3MTUwMDU5WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTM0MjE4ZGZiMTJlMzY2Mzg2MzFmMDI4ZDU3NzlkYTI0 NGIwZmQ4ZTljMTMzNmQyNTliOGM3NDk3NWFiZmI3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE3B40WRUpv9jR+tUK7X1ok0u+nqS9qs5ntBMJX+9xqsvA cCqdVaDLsCzJnQ1JIC2YQyyCCN0+FX9D6HbROdPKf4BjkFRXqSMVO13viS77fsje DBr8gtAWzDn+cRwSL/HaWYDU1TugWHWW7nMWqhq0KBa/9swKrkymbPNoPzSQPGMp jd7iyJkY9AcHvpgOERyCLzWQo4xpN1LU41DtpIY4ZZX8JDCf1e2IEYgbaqvna5XS Wx3oy6RK7m3kNgnQR75NaNSx+t40Begjr9XOQ8oyr+3SI7gF6nxXeo4zRJOrmdYN N9NM+lANtz9g/gjW6p21BuN6gE1U1z8/WX8ckqAZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxhX9G4O01sVbnlt0LU0IhllCkQgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNhZDJhZTljLWQ1MDUtNGI1My04YTAzLWMwMDM0NjAyZDQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++AwDQYJKoZIhvcNAQELBQADggEBAFwUt/GCWVHFkNRM5XgW11d72+gz FyoEF7P6QCHN2u1+Sqkk0KXsgTcp81XP32vj2K5SOpEYz5uF7/cLM2/6AawlvRD6 U0vGjk6YJ0ryNQBVZ0KG2AOajfiWg6OMDYIZ1ZZ5DfI1hlIxV1ZIO5n9jzja3rff N+PFmQnbQFKeFUHQ9Avk5jWuG914R2Kc8QB4LFXQcBt8KWjni5b/Lf1WALjNgHU4 H7r1anYTuvORHXtxoa9gWYNwsjxyYLYHOBjFmtmY7BWQWXZOyYruavQaLc1+Y8ym /QSjS6AGDQErn7HhWw6PeD+QlDvc/4UBLjI7EHpQwyXfjb8tRafT30AE+Zs= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:30 2025 by rpki-client