$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa File: 7c541838-12b7-470a-b044-f31d3ab72ede.roa (raw, json) Hash identifier: H3qgqrv97Vy2+i3pXWbikjl/d9VwAsVhFShYBWDNYCc= Subject key identifier: F4:3A:21:B1:89:94:11:EB:8E:6F:74:0E:63:7C:35:C4:56:95:93:1C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 75DD8381FCCA6A1FE473021EC7A7AA6F6A384D49 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa Signing time: Mon 17 Mar 2025 15:00:24 +0000 ROA not before: Mon 17 Mar 2025 15:00:24 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:dd:83:81:fc:ca:6a:1f:e4:73:02:1e:c7:a7:aa:6f:6a:38:4d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Mar 17 15:00:24 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3e:6b:69:71:53:48:a7:4c:a1:57:68:95:90: bc:10:e9:6a:5e:6a:ed:0c:3d:1f:45:e5:42:ba:57: c1:93:70:e2:c1:c0:93:c1:12:3a:9b:4b:d7:48:52: f8:5d:3f:3b:39:39:26:f0:54:f2:00:36:df:d7:fd: 78:5e:14:5d:10:10:d7:33:d2:e2:82:4b:90:87:33: 1e:27:70:a3:08:ba:0d:ef:44:9b:4d:cc:7c:59:84: 0e:0d:83:1c:6b:14:2b:01:90:6c:95:a3:4e:ca:b5: 1a:81:43:3e:77:f9:00:60:26:a6:42:0e:94:09:7d: fe:89:ce:06:11:bc:d2:fa:52:3b:d4:5e:c1:c5:6d: 27:68:5f:ac:89:eb:c6:64:10:99:23:86:36:4d:96: 24:40:f3:48:5a:61:e3:41:bb:06:a3:f6:3e:0f:97: 3c:34:e7:c1:fd:37:bf:f1:aa:3d:7f:82:b7:62:ff: e1:f6:66:f3:51:70:9c:a8:d6:e0:96:d3:6a:62:1a: 10:e7:84:a7:ab:52:7c:d4:7f:c5:00:75:6b:61:d9: b8:19:4f:63:c4:4b:b8:cc:46:bb:b1:3b:eb:7d:86: 43:7b:15:98:1a:12:ed:26:55:e8:4a:6b:f6:0b:83: a7:ad:67:7a:3a:9f:75:40:d0:57:64:b2:8b:a2:3a: 5a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3A:21:B1:89:94:11:EB:8E:6F:74:0E:63:7C:35:C4:56:95:93:1C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.208.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:e6:56:89:a1:e5:2f:95:c1:09:54:eb:1a:70:b0:48:65:26: b8:8a:57:78:98:1a:72:c8:c8:b2:34:fc:fd:a6:2b:1b:ea:72: e6:c2:4c:55:bd:6b:2d:f1:02:d3:10:37:64:db:ef:d6:99:be: c9:93:af:58:51:dc:06:19:7a:70:e5:47:9d:13:8f:72:98:aa: 8a:97:4b:5c:bb:1c:dd:91:1e:88:ff:ac:78:54:1f:e3:f6:d5: 3f:a0:4a:ba:90:f7:e6:3d:58:b3:8c:8d:5d:be:9b:16:c6:9a: bd:3b:ea:89:9b:cc:7f:a8:d5:9d:2c:fb:7d:c9:ef:99:6f:a8: c9:dd:d1:00:80:86:a6:16:9d:0e:cf:f5:3e:e0:74:e6:a9:82: e0:e3:31:bc:bd:45:90:cb:05:67:70:a7:e8:f7:87:e9:23:13: c6:d9:76:62:b2:d3:85:23:49:9d:d5:be:ac:66:0d:f2:4d:a7: bb:6c:26:f2:48:29:8e:be:f1:5a:57:81:a0:13:c2:4a:6b:0f: f4:b0:76:7d:68:37:48:70:5e:9d:a9:5a:d9:55:44:17:b7:0c: a7:4e:bf:e4:e5:43:ca:f9:c7:d7:f5:06:08:ac:02:a0:ee:40: a1:0b:d5:64:40:5a:0a:3d:33:b3:0c:71:72:32:8a:19:0d:35: d7:2a:8a:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdd2DgfzKah/kcwIex6eqb2o4TUkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzE3MTUwMDI0WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOTA1ZTUwMzI4NGJiOGJkNmRkZjkwOGExNDYwYTE2NzVj MTZlYWRiMTEwMmU1NzhmZjAyYzVjYjU2Y2M0MWMzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTPmtpcVNIp0yhV2iVkLwQ6Wpeau0MPR9F5UK6V8GTcOLB wJPBEjqbS9dIUvhdPzs5OSbwVPIANt/X/XheFF0QENcz0uKCS5CHMx4ncKMIug3v RJtNzHxZhA4NgxxrFCsBkGyVo07KtRqBQz53+QBgJqZCDpQJff6JzgYRvNL6UjvU XsHFbSdoX6yJ68ZkEJkjhjZNliRA80haYeNBuwaj9j4Plzw058H9N7/xqj1/grdi /+H2ZvNRcJyo1uCW02piGhDnhKerUnzUf8UAdWth2bgZT2PES7jMRruxO+t9hkN7 FZgaEu0mVehKa/YLg6etZ3o6n3VA0FdksouiOlpnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9DohsYmUEeuOb3QOY3w1xFaVkxwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzdjNTQxODM4LTEyYjctNDcwYS1iMDQ0LWYzMWQzYWI3MmVkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dAwDQYJKoZIhvcNAQELBQADggEBAFvmVomh5S+VwQlU6xpwsEhlJriK V3iYGnLIyLI0/P2mKxvqcubCTFW9ay3xAtMQN2Tb79aZvsmTr1hR3AYZenDlR50T j3KYqoqXS1y7HN2RHoj/rHhUH+P21T+gSrqQ9+Y9WLOMjV2+mxbGmr076ombzH+o 1Z0s+33J75lvqMnd0QCAhqYWnQ7P9T7gdOapguDjMby9RZDLBWdwp+j3h+kjE8bZ dmKy04UjSZ3VvqxmDfJNp7tsJvJIKY6+8VpXgaATwkprD/Swdn1oN0hwXp2pWtlV RBe3DKdOv+TlQ8r5x9f1BgisAqDuQKEL1WRAWgo9M7MMcXIyihkNNdcqirc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:43 2025 by rpki-client