$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa File: 5e3c0e08-edb8-4079-81e3-f4c857efb338.roa (raw, json) Hash identifier: N+gil4JPT1oLP3xWCmmj5jpXsaSiryMX0DsJ2o9x3zU= Subject key identifier: 13:8F:BA:37:0C:F5:20:93:2C:AF:28:6B:3D:DC:DB:E3:7D:EC:37:22 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 373E95E36392C0F676D87044D102B0315AFBA769 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa Signing time: Mon 17 Mar 2025 15:00:06 +0000 ROA not before: Mon 17 Mar 2025 15:00:06 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3e:95:e3:63:92:c0:f6:76:d8:70:44:d1:02:b0:31:5a:fb:a7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Mar 17 15:00:06 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:f2:92:35:72:2d:2e:a8:fd:96:a8:da:2e: 70:22:3b:1c:6f:f1:19:25:73:a7:ee:54:88:fc:da: e3:b0:59:5b:69:aa:ad:23:5d:4e:0f:03:06:cd:78: eb:7d:ab:9a:a0:59:f9:5b:8f:96:16:33:62:08:8c: 40:d7:e8:cf:88:f5:51:cc:9d:a6:63:74:11:24:48: 37:a0:da:18:89:8e:4a:51:82:b4:02:ab:37:c2:87: d1:90:21:36:15:b8:0e:94:50:22:f9:f2:ca:96:5a: d9:cd:cd:09:7d:e3:f9:08:8c:0d:57:ab:a2:b8:17: 68:67:c4:31:fe:e8:1c:b3:62:59:94:54:0a:e4:71: 8b:e5:7f:32:f1:df:e0:f4:32:54:2a:46:d3:07:ad: 2e:7c:b8:43:d0:ee:15:92:78:55:6b:f9:ea:f4:60: 9b:88:3b:83:97:89:a9:2a:73:7f:44:d9:ee:ac:fb: 6f:4e:07:af:75:76:76:57:42:bf:64:6e:e1:36:7f: 01:3b:8f:8e:ee:39:ba:eb:cc:bc:f4:24:f9:17:33: 5c:60:4f:9b:9d:72:a0:e4:f6:6e:ab:c4:13:6c:4d: 1f:e4:f3:e7:32:ff:eb:dd:4f:ec:d3:9b:53:63:14: 3a:94:5c:86:d9:64:e8:79:1b:4b:9f:f1:07:fa:cd: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8F:BA:37:0C:F5:20:93:2C:AF:28:6B:3D:DC:DB:E3:7D:EC:37:22 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:50:c1:84:1a:e7:0c:6c:32:10:f4:be:da:5c:4b:eb:8a:ce: b5:84:95:9f:57:d8:b1:d4:e0:fd:19:01:86:14:25:a1:88:bb: 0f:18:b8:8d:a4:f8:16:4e:54:8d:b5:99:c9:93:97:70:4e:78: 3e:e6:e0:50:2e:4a:e1:32:c6:a2:47:35:61:ff:6d:2c:7e:04: f9:f1:9e:11:b7:d2:88:b8:84:d5:dc:be:32:49:72:6d:fa:52: f9:c4:94:b0:b2:ec:b3:63:c6:31:48:68:b7:0b:8b:a4:19:d8: c9:66:a8:c8:d1:7d:12:be:98:5e:b2:db:9b:3a:2b:23:2c:92: 5d:16:47:05:57:13:0c:05:86:38:07:f2:b9:bb:ab:9f:e8:35: 3c:81:5f:bb:37:c0:9b:bf:51:db:4c:7d:dc:00:31:37:fc:b9: ba:d6:ac:e9:a7:dd:86:85:68:74:9a:dc:28:f1:e6:2c:33:4b: e0:04:34:73:56:d9:6e:af:c9:35:94:75:7f:c8:f7:a7:43:3a: f8:c9:42:1b:ac:53:48:4b:9c:14:13:4e:52:38:05:57:9a:56: 0d:0b:27:6c:13:82:1b:02:2a:36:7b:42:24:76:c8:cb:4e:6d: 8d:71:28:05:f1:b4:9b:82:b0:52:e3:5e:37:ce:5b:e9:7b:6a: f0:ae:f7:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNz6V42OSwPZ22HBE0QKwMVr7p2kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzE3MTUwMDA2WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNGYzYmJjODE5ZmQwZjg4ZTQzZGI3MzA0MjUwZGZmODUz MjFjMGYxNTFhNWUyM2Y5ODVlOGM0NjNkOTM4N2ZkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkmfKSNXItLqj9lqjaLnAiOxxv8Rklc6fuVIj82uOwWVtp qq0jXU4PAwbNeOt9q5qgWflbj5YWM2IIjEDX6M+I9VHMnaZjdBEkSDeg2hiJjkpR grQCqzfCh9GQITYVuA6UUCL58sqWWtnNzQl94/kIjA1Xq6K4F2hnxDH+6ByzYlmU VArkcYvlfzLx3+D0MlQqRtMHrS58uEPQ7hWSeFVr+er0YJuIO4OXiakqc39E2e6s +29OB691dnZXQr9kbuE2fwE7j47uObrrzLz0JPkXM1xgT5udcqDk9m6rxBNsTR/k 8+cy/+vdT+zTm1NjFDqUXIbZZOh5G0uf8Qf6zYTXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE4+6Nwz1IJMsryhrPdzb433sNyIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVlM2MwZTA4LWVkYjgtNDA3OS04MWUzLWY0Yzg1N2VmYjMzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBAH9QwYQa5wxsMhD0vtpcS+uKzrWE lZ9X2LHU4P0ZAYYUJaGIuw8YuI2k+BZOVI21mcmTl3BOeD7m4FAuSuEyxqJHNWH/ bSx+BPnxnhG30oi4hNXcvjJJcm36UvnElLCy7LNjxjFIaLcLi6QZ2MlmqMjRfRK+ mF6y25s6KyMskl0WRwVXEwwFhjgH8rm7q5/oNTyBX7s3wJu/UdtMfdwAMTf8ubrW rOmn3YaFaHSa3Cjx5iwzS+AENHNW2W6vyTWUdX/I96dDOvjJQhusU0hLnBQTTlI4 BVeaVg0LJ2wTghsCKjZ7QiR2yMtObY1xKAXxtJuCsFLjXjfOW+l7avCu9+A= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:01 2025 by rpki-client