$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5569e911-3188-427d-83a0-0e8a45b335d3.roa File: 5569e911-3188-427d-83a0-0e8a45b335d3.roa (raw, json) Hash identifier: jLjAkM7qMrMSRZ6P8+1WoaGZ5i8FNjpTEPOfwb7PorI= Subject key identifier: 25:7A:F0:26:2C:DA:30:39:CD:C1:33:FB:F8:E5:E2:D5:FB:F9:73:AA Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 517594A63106E2517D8621694BB8162D09E3B4AE Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5569e911-3188-427d-83a0-0e8a45b335d3.roa Signing time: Mon 17 Mar 2025 15:10:19 +0000 ROA not before: Mon 17 Mar 2025 15:10:19 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:75:94:a6:31:06:e2:51:7d:86:21:69:4b:b8:16:2d:09:e3:b4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Mar 17 15:10:19 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:84:19:1d:e1:35:5c:70:30:97:e4:a3:d2: ba:8b:1a:e6:38:fb:2f:e3:e3:78:72:30:59:bf:6b: 3f:27:70:e3:e6:38:85:c0:da:11:e4:96:c4:cd:38: 6e:eb:49:a9:5a:11:7c:b1:fa:86:5e:3a:cc:b8:57: 1e:76:75:82:6c:4a:a5:ff:59:7f:e6:98:16:e2:76: 9f:61:86:c7:8d:6d:32:bd:e4:45:c9:d8:df:02:9e: 30:40:ff:2e:05:84:cd:05:1f:25:7a:06:93:0f:83: 65:05:f6:e5:8e:b4:16:fc:10:df:e7:0c:95:c1:9e: 86:4c:f1:d4:be:d4:e4:b8:4b:6b:be:c0:b1:be:e4: b2:0b:2b:d3:91:94:cd:10:cf:ac:7a:09:eb:40:1b: 18:8c:73:01:0a:38:00:da:20:b9:86:71:cb:26:48: a3:58:a3:6d:f0:09:89:ed:48:8e:a1:27:92:63:0c: 68:e0:92:e4:38:aa:af:4a:10:5c:3b:aa:1a:10:f2: 6f:57:0f:e6:9d:87:b6:ba:ab:5e:6e:71:c6:41:7e: d5:83:14:2b:c4:ef:3b:81:0f:9e:4d:d3:7d:9c:c5: 7a:5a:c5:ac:cf:79:59:07:72:de:e8:6b:41:a1:03: 2d:3b:ae:d3:b3:30:f5:55:05:a1:78:89:ba:b6:d1: 23:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7A:F0:26:2C:DA:30:39:CD:C1:33:FB:F8:E5:E2:D5:FB:F9:73:AA X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5569e911-3188-427d-83a0-0e8a45b335d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.183.0/24 Signature Algorithm: sha256WithRSAEncryption 23:17:32:7f:86:53:41:ac:c7:2c:43:58:37:45:a3:dd:d8:2e: 86:a1:99:ea:8d:a4:e7:26:88:e7:40:15:5a:b9:53:1c:b9:53: e3:4f:79:f1:36:d8:72:1f:5e:d2:15:57:23:3a:c3:57:30:27: 8a:59:ce:b2:de:f9:2c:46:f9:78:53:d3:af:62:97:f8:bc:1f: 59:1f:64:d1:02:43:4b:3d:6d:62:55:75:81:a7:bc:07:92:9a: 00:9b:01:b3:b4:d4:25:da:6b:c9:57:73:f3:e3:e8:41:ef:b4: c5:23:27:22:cd:90:f6:cf:b7:6a:16:41:e1:48:b0:8f:5f:0a: 6a:25:bb:45:75:81:30:1e:9e:3a:3a:bf:b5:d4:03:e9:8b:8e: d8:13:25:92:ea:e5:c1:98:67:d5:71:a3:70:7a:f3:50:ad:cc: b9:6a:e7:65:99:71:78:24:d0:df:72:b1:76:4d:17:50:e4:a7: 80:e4:86:5b:82:13:64:03:b9:8f:f2:53:85:e1:ec:f0:1c:5b: 9f:7c:62:12:e4:92:70:df:0c:35:76:01:bf:d9:15:1e:ca:b7: 3e:03:d9:b5:63:4c:0b:64:ac:7c:cc:40:ca:0d:98:b3:89:ba: ba:b8:0d:4e:55:88:67:64:9c:4c:83:ac:a3:b8:72:ba:6f:12: 86:5e:41:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUXWUpjEG4lF9hiFpS7gWLQnjtK4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzE3MTUxMDE5WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDBiMTc1Y2FmODVhNTlkMjhhZGM5MzM1OTExYmM1YzVl YzFiODEwMzNhYTE2MzY5NzE3ZTM0MjQ5NzFmOGNkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJUYQZHeE1XHAwl+Sj0rqLGuY4+y/j43hyMFm/az8ncOPm OIXA2hHklsTNOG7rSalaEXyx+oZeOsy4Vx52dYJsSqX/WX/mmBbidp9hhseNbTK9 5EXJ2N8CnjBA/y4FhM0FHyV6BpMPg2UF9uWOtBb8EN/nDJXBnoZM8dS+1OS4S2u+ wLG+5LILK9ORlM0Qz6x6CetAGxiMcwEKOADaILmGccsmSKNYo23wCYntSI6hJ5Jj DGjgkuQ4qq9KEFw7qhoQ8m9XD+adh7a6q15uccZBftWDFCvE7zuBD55N032cxXpa xazPeVkHct7oa0GhAy07rtOzMPVVBaF4ibq20SMtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJXrwJizaMDnNwTP7+OXi1fv5c6owHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzU1NjllOTExLTMxODgtNDI3ZC04M2EwLTBlOGE0NWIzMzVkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37cwDQYJKoZIhvcNAQELBQADggEBACMXMn+GU0GsxyxDWDdFo93YLoah meqNpOcmiOdAFVq5Uxy5U+NPefE22HIfXtIVVyM6w1cwJ4pZzrLe+SxG+XhT069i l/i8H1kfZNECQ0s9bWJVdYGnvAeSmgCbAbO01CXaa8lXc/Pj6EHvtMUjJyLNkPbP t2oWQeFIsI9fCmolu0V1gTAenjo6v7XUA+mLjtgTJZLq5cGYZ9Vxo3B681CtzLlq 52WZcXgk0N9ysXZNF1Dkp4DkhluCE2QDuY/yU4Xh7PAcW598YhLkknDfDDV2Ab/Z FR7Ktz4D2bVjTAtkrHzMQMoNmLOJurq4DU5ViGdknEyDrKO4crpvEoZeQbc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:50 2025 by rpki-client