$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa File: 5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa (raw, json) Hash identifier: P22GpTNf0emErvsm1S/2Dv5sPXfXF9v4Xz0A+KOjuhk= Subject key identifier: A3:2F:4D:5E:48:CE:F0:75:37:47:61:B4:C3:A6:F3:DE:6C:B1:9D:12 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 7F3CA892A9EE5FB129E9BA0982055D6F252BDAF0 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa Signing time: Mon 17 Mar 2025 15:00:23 +0000 ROA not before: Mon 17 Mar 2025 15:00:23 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 8987 IP address blocks: 23.249.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3c:a8:92:a9:ee:5f:b1:29:e9:ba:09:82:05:5d:6f:25:2b:da:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Mar 17 15:00:23 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e9:b4:7b:83:cb:87:93:af:5f:d2:5c:89:39: b7:d1:96:9a:57:9a:02:33:74:8f:ea:24:23:d5:7f: 36:a9:f0:f3:03:2c:1f:78:5e:7c:40:09:eb:3c:ee: 04:63:6f:8b:13:0b:81:83:6b:c2:33:9b:ec:9e:d8: 35:09:33:00:78:43:ac:b0:15:98:64:14:d6:70:f1: 6c:41:d4:56:c8:73:78:fc:7d:f9:2a:e7:df:be:3e: 6d:48:b3:d0:ab:2a:48:42:b8:38:d5:d5:e3:c1:a7: 45:a2:45:ef:b1:bd:b9:31:74:61:fb:36:64:53:ed: d8:7d:a7:3a:60:a7:5d:1a:59:40:44:59:3b:47:c9: 12:2d:3f:42:09:4e:0a:9e:2b:f6:f2:51:1a:cb:cc: 26:54:03:52:2e:4e:6d:51:cc:41:84:11:d0:77:51: ba:12:3b:84:9c:58:b9:18:33:27:d2:15:19:91:fc: aa:3c:ac:85:02:ff:48:f1:84:8c:3f:4f:c4:4a:bc: bf:54:17:89:74:f1:61:a5:de:ed:1d:9f:8f:16:f9: 39:bb:a9:5b:7a:79:c4:b1:38:01:fd:f6:cb:c9:0d: 52:7f:3c:39:04:86:74:31:09:18:54:94:0e:3e:25: e0:a7:31:d8:67:9d:0a:4f:32:3c:43:33:ad:f2:7b: 82:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2F:4D:5E:48:CE:F0:75:37:47:61:B4:C3:A6:F3:DE:6C:B1:9D:12 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5ff4b44a-41c9-4bc0-b77e-520fd1d7927e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.214.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:63:2e:fe:e2:9f:15:8b:c3:80:fe:3b:b2:fb:a2:42:d5:ea: 83:00:4f:5e:98:ca:f6:7c:a6:cb:1e:69:71:53:b3:db:b8:79: 59:64:f0:71:fb:c9:21:83:c8:bb:79:ed:02:d9:fe:5a:4c:c9: b8:36:e0:73:ce:9e:25:7e:d9:1f:31:d7:29:84:23:b5:03:54: d8:b2:50:ad:d2:c3:8c:e1:06:b0:5c:df:55:38:b0:11:e4:bb: 74:50:50:37:56:a8:f8:e0:58:1e:b3:43:f3:84:f8:22:dd:67: ee:d4:81:3e:fd:bc:85:ca:36:b5:75:a2:44:37:51:26:70:52: 74:84:db:5b:9f:94:e8:35:93:95:f2:cd:8a:1b:fc:0b:83:91: 43:4a:8d:dd:0f:3c:c2:ee:01:73:39:34:5f:88:b6:f9:da:1f: b5:6a:dc:5a:7c:ae:60:dd:e6:50:29:47:fe:21:cb:ee:18:36: 92:a0:36:c0:5c:84:55:e7:06:4f:d4:76:86:06:a9:86:b9:56: 06:da:e0:76:c5:44:a5:f2:e9:c8:ac:98:23:6d:fe:05:c2:9a: 3a:b3:01:85:c4:f9:94:9e:e6:4f:97:5b:b7:84:55:a6:ab:64: 06:b2:5b:46:7f:5c:55:25:18:16:4a:e6:25:f8:ee:28:34:8c: 38:45:55:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfzyokqnuX7Ep6boJggVdbyUr2vAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzE3MTUwMDIzWhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjMwYWRlZmJjMjdiOGExYjEyZjQ0Mjc0Zjk4MjUxOWZl YmZjMDZkNTdmZGZkMTEzNmY0MDM1NDFjM2Q4NDAxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq6bR7g8uHk69f0lyJObfRlppXmgIzdI/qJCPVfzap8PMD LB94XnxACes87gRjb4sTC4GDa8Izm+ye2DUJMwB4Q6ywFZhkFNZw8WxB1FbIc3j8 ffkq59++Pm1Is9CrKkhCuDjV1ePBp0WiRe+xvbkxdGH7NmRT7dh9pzpgp10aWUBE WTtHyRItP0IJTgqeK/byURrLzCZUA1IuTm1RzEGEEdB3UboSO4ScWLkYMyfSFRmR /Ko8rIUC/0jxhIw/T8RKvL9UF4l08WGl3u0dn48W+Tm7qVt6ecSxOAH99svJDVJ/ PDkEhnQxCRhUlA4+JeCnMdhnnQpPMjxDM63ye4JJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoy9NXkjO8HU3R2G0w6bz3myxnRIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVmZjRiNDRhLTQxYzktNGJjMC1iNzdlLTUyMGZkMWQ3OTI3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dYwDQYJKoZIhvcNAQELBQADggEBAF9jLv7inxWLw4D+O7L7okLV6oMA T16YyvZ8psseaXFTs9u4eVlk8HH7ySGDyLt57QLZ/lpMybg24HPOniV+2R8x1ymE I7UDVNiyUK3Sw4zhBrBc31U4sBHku3RQUDdWqPjgWB6zQ/OE+CLdZ+7UgT79vIXK NrV1okQ3USZwUnSE21uflOg1k5XyzYob/AuDkUNKjd0PPMLuAXM5NF+ItvnaH7Vq 3Fp8rmDd5lApR/4hy+4YNpKgNsBchFXnBk/UdoYGqYa5Vgba4HbFRKXy6cismCNt /gXCmjqzAYXE+ZSe5k+XW7eEVaarZAayW0Z/XFUlGBZK5iX47ig0jDhFVcQ= -----END CERTIFICATE-----Generated at Sat Apr 5 07:31:24 2025 by rpki-client