$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa File: 946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa (raw, json) Hash identifier: vr/myNjYP7N/w6GbtSW+CyaxE/elZY2HZHKcwdJ8BRo= Subject key identifier: 7E:80:F1:1D:0C:2D:7C:0C:5E:40:DB:5C:1B:0E:81:AA:4A:5C:FB:0C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 41919DFEBF15562CB25F9FA3E6CA2EFB5A16BD5B Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa Signing time: Mon 17 Mar 2025 15:01:02 +0000 ROA not before: Mon 17 Mar 2025 15:01:02 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:91:9d:fe:bf:15:56:2c:b2:5f:9f:a3:e6:ca:2e:fb:5a:16:bd:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Mar 17 15:01:02 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:bc:64:3c:d4:9d:d5:65:fa:d5:d8:4e:6e: 10:ad:58:7a:df:1c:2d:2a:d6:2c:e1:97:58:e6:88: b1:2f:01:39:f3:58:51:b6:31:0d:db:b3:c6:2d:63: 7f:0e:1e:0d:13:b9:ab:a4:f3:bd:6e:35:29:db:83: f3:bf:2a:33:6d:a2:2c:1e:df:67:7d:01:e6:69:26: 43:8e:fe:d9:06:d1:f1:f8:f2:16:1e:12:14:e0:5f: 7c:72:5e:97:fa:4f:d9:06:6b:4f:72:68:39:d9:4e: f8:5b:ba:2d:95:dc:81:8e:1f:3a:5d:08:74:59:9e: a0:8b:d9:c2:75:22:d5:5b:a2:6e:fe:70:1e:fc:79: 17:1d:e3:90:62:22:68:6a:d2:99:e7:2b:1b:c0:e1: 50:b2:5b:c6:54:ba:25:16:cd:86:07:26:81:34:de: fc:bf:c9:51:ae:5e:bd:10:95:39:02:db:8d:25:70: 00:5b:1a:d8:da:8d:08:c9:22:1f:62:05:e8:80:2c: 58:1b:7e:46:3c:54:94:94:34:1b:38:a3:5b:66:b8: c4:6a:5c:9c:e8:59:2b:d5:ee:da:a4:c7:5e:3f:69: 44:08:c8:56:55:16:08:d2:4b:84:14:cb:64:55:0b: 3a:f5:83:25:80:e8:b7:24:80:df:5f:ac:f4:df:5a: c1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:80:F1:1D:0C:2D:7C:0C:5E:40:DB:5C:1B:0E:81:AA:4A:5C:FB:0C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.225.0/24 Signature Algorithm: sha256WithRSAEncryption 40:dc:15:3b:51:17:b7:23:2a:f5:e4:70:12:79:af:32:ab:6d: 04:ad:d8:08:b2:b6:7b:dc:ea:a4:56:6e:8a:73:4a:ed:3a:9e: a1:78:64:97:a4:95:1b:fc:e7:3f:4b:e7:33:75:cf:4e:7c:fd: 4b:1a:73:6d:d8:55:dc:85:69:0b:fc:51:a0:d6:ed:4d:ab:27: 53:7b:cb:a3:0c:2b:b8:fb:c3:2e:27:e9:78:3f:85:d5:95:85: 95:bb:41:9b:9f:57:ae:c0:a5:16:80:c6:16:0d:5b:d4:15:7c: 49:84:d4:a3:3f:91:a3:4b:ea:87:61:2b:1f:c9:63:22:0e:54: 88:43:09:51:ba:00:bc:96:9d:d6:cc:0e:c2:ca:1c:2e:99:c9: e9:29:03:2d:0e:4c:ed:b4:40:68:26:ac:e2:dc:6d:a2:38:40: 18:3b:40:11:5e:ac:f2:5c:5c:08:4e:27:9f:9b:8a:54:54:eb: 36:89:8f:6b:9a:06:c6:df:43:7a:ff:87:a7:e6:43:a3:ef:f8: 09:6f:2f:c8:33:98:eb:c3:94:99:bf:69:a8:e0:48:88:b3:ff: a1:1e:66:1c:ce:2e:33:b7:b7:36:b3:60:fd:3f:30:15:33:07: 35:c8:d2:bb:54:e6:ee:de:3f:67:72:60:5e:24:c2:43:56:5e: 8a:be:48:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQZGd/r8VViyyX5+j5sou+1oWvVswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzE3MTUwMTAyWhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2QzOTAxNTgwYWZiMGM4MWVkMzAwMTU3YzE0NmFlM2Ix NGJiNGU1OGU2NzlmM2U2ODc2MGJkN2I5Njk5YjM5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7cLxkPNSd1WX61dhObhCtWHrfHC0q1izhl1jmiLEvATnz WFG2MQ3bs8YtY38OHg0Tuauk871uNSnbg/O/KjNtoiwe32d9AeZpJkOO/tkG0fH4 8hYeEhTgX3xyXpf6T9kGa09yaDnZTvhbui2V3IGOHzpdCHRZnqCL2cJ1ItVbom7+ cB78eRcd45BiImhq0pnnKxvA4VCyW8ZUuiUWzYYHJoE03vy/yVGuXr0QlTkC240l cABbGtjajQjJIh9iBeiALFgbfkY8VJSUNBs4o1tmuMRqXJzoWSvV7tqkx14/aUQI yFZVFgjSS4QUy2RVCzr1gyWA6LckgN9frPTfWsEjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfoDxHQwtfAxeQNtcGw6Bqkpc+wwwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzk0NmFlYzBhLWRkZGYtNDlhYi1iNWJmLWVjNzI4MWViMWU3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++EwDQYJKoZIhvcNAQELBQADggEBAEDcFTtRF7cjKvXkcBJ5rzKrbQSt 2Aiytnvc6qRWbopzSu06nqF4ZJeklRv85z9L5zN1z058/Usac23YVdyFaQv8UaDW 7U2rJ1N7y6MMK7j7wy4n6Xg/hdWVhZW7QZufV67ApRaAxhYNW9QVfEmE1KM/kaNL 6odhKx/JYyIOVIhDCVG6ALyWndbMDsLKHC6ZyekpAy0OTO20QGgmrOLcbaI4QBg7 QBFerPJcXAhOJ5+bilRU6zaJj2uaBsbfQ3r/h6fmQ6Pv+AlvL8gzmOvDlJm/aajg SIiz/6EeZhzOLjO3tzazYP0/MBUzBzXI0rtU5u7eP2dyYF4kwkNWXoq+SDU= -----END CERTIFICATE-----Generated at Sat Apr 5 12:32:11 2025 by rpki-client