$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a1532cad-101c-42fe-83e3-e4a74867afd7.roa File: a1532cad-101c-42fe-83e3-e4a74867afd7.roa (raw, json) Hash identifier: mWT9py3mjZ7lGeQnZvsNwx09e5g5EkgbkqXQ/SsOFmE= Subject key identifier: 2F:00:77:B3:6D:64:50:29:C5:9F:40:A0:23:81:7B:CC:1A:9D:1B:8C Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 74FD13915A07711EF6103CD1AA1C3FD6C782B600 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a1532cad-101c-42fe-83e3-e4a74867afd7.roa Signing time: Sat 29 Mar 2025 00:10:18 +0000 ROA not before: Sat 29 Mar 2025 00:10:18 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:fd:13:91:5a:07:71:1e:f6:10:3c:d1:aa:1c:3f:d6:c7:82:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Mar 29 00:10:18 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:65:06:16:ee:21:b4:75:6b:e3:6a:62:42: 82:d5:4a:e1:9f:a8:35:3e:c2:5a:6e:83:a9:e0:38: 2f:b9:92:76:77:da:f5:99:b7:ef:20:8c:76:67:62: 8c:67:c8:a9:be:b8:6b:4f:cc:87:5a:f5:21:fa:f3: a7:50:c1:ee:33:61:6e:8d:d3:37:4d:5a:0d:7c:7a: ad:32:db:59:05:55:17:7f:4a:11:75:79:71:c2:bf: 4c:4b:5b:70:a9:88:ec:94:b3:20:8a:46:a8:b6:1e: b1:e4:ff:5f:bb:0d:46:f8:5b:0b:a3:d0:07:52:d4: 58:cf:50:67:9f:27:8c:26:2d:cd:8a:c2:11:ee:3b: ec:64:2c:13:f8:b2:d3:ab:e8:6e:58:83:c8:ca:c8: 24:b5:4d:96:07:69:fb:c1:21:7e:61:55:fd:cf:d3: d2:0c:43:6b:f6:f7:90:df:9f:84:a3:25:6b:8d:01: 57:85:54:bf:c2:0d:46:9f:1a:d4:a2:ab:9a:a3:9e: 20:df:54:28:2d:72:90:6b:dc:8e:27:ca:c2:1c:58: ae:ec:30:61:94:0c:83:7c:cc:86:b4:23:c9:af:11: 90:0b:e5:67:af:f0:4a:34:0c:d9:84:3e:c5:0a:ad: e1:ee:1d:56:ea:9c:3d:37:77:16:00:22:e0:68:3a: ff:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:00:77:B3:6D:64:50:29:C5:9F:40:A0:23:81:7B:CC:1A:9D:1B:8C X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a1532cad-101c-42fe-83e3-e4a74867afd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.224.0/19 Signature Algorithm: sha256WithRSAEncryption 40:6a:de:e6:21:5d:56:5c:bf:7f:c1:30:48:c2:f8:b7:c1:86: 7f:0f:17:bd:7a:18:11:25:7e:ab:39:59:8e:7a:d8:9e:f5:19: f6:d4:82:cd:41:b6:18:ef:a2:f8:b8:e6:a7:dc:86:08:f6:58: c4:ea:4a:22:fb:7f:59:e5:d3:cf:6a:db:6a:a4:19:d7:54:5c: 19:81:d7:58:39:ac:51:63:e9:5f:b1:77:ba:da:5c:27:91:dc: 00:85:7f:33:12:1d:2f:64:ea:d2:c4:eb:a5:e5:79:63:2e:9f: 44:af:9d:ce:b4:43:cc:39:09:97:d9:fb:a1:82:ae:dc:69:ec: 66:88:96:24:38:f6:93:00:c4:52:30:ff:bc:e6:e6:fc:83:3a: 61:9b:4b:e0:cf:85:4e:30:b5:0c:6d:21:fe:8c:28:d2:07:26: d9:c9:85:49:16:49:ee:7c:96:66:d0:e8:53:a7:7d:0f:eb:ae: b4:ee:1b:b2:75:df:a5:8e:51:82:4e:80:20:67:3c:68:84:b5: 6e:e0:ec:b5:4a:6c:8c:fd:d7:92:58:08:bb:05:c8:a3:38:d0: 9c:bf:50:0b:71:84:67:5c:0e:44:e4:8e:8c:53:e7:d5:f1:00: 55:f6:af:65:a8:ec:00:13:d4:a9:48:6e:37:d6:f5:44:73:aa: e9:b6:0f:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdP0TkVoHcR72EDzRqhw/1seCtgAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzI5MDAxMDE4WhcNMjUwNTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzExNjZjYTNlNDAyYTIyMmJiNmIwMjc3ZDZkOTQ0YWE1 NWMxNjRmYjRmMTIzNWQzZTAzZmQ5NzM4YzNlODk1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxB2UGFu4htHVr42piQoLVSuGfqDU+wlpug6ngOC+5knZ3 2vWZt+8gjHZnYoxnyKm+uGtPzIda9SH686dQwe4zYW6N0zdNWg18eq0y21kFVRd/ ShF1eXHCv0xLW3CpiOyUsyCKRqi2HrHk/1+7DUb4Wwuj0AdS1FjPUGefJ4wmLc2K whHuO+xkLBP4stOr6G5Yg8jKyCS1TZYHafvBIX5hVf3P09IMQ2v295Dfn4SjJWuN AVeFVL/CDUafGtSiq5qjniDfVCgtcpBr3I4nysIcWK7sMGGUDIN8zIa0I8mvEZAL 5Wev8Eo0DNmEPsUKreHuHVbqnD03dxYAIuBoOv/HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULwB3s21kUCnFn0CgI4F7zBqdG4wwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2ExNTMyY2FkLTEwMWMtNDJmZS04M2UzLWU0YTc0ODY3YWZkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUX++AwDQYJKoZIhvcNAQELBQADggEBAEBq3uYhXVZcv3/BMEjC+LfBhn8P F716GBElfqs5WY562J71GfbUgs1Bthjvovi45qfchgj2WMTqSiL7f1nl089q22qk GddUXBmB11g5rFFj6V+xd7raXCeR3ACFfzMSHS9k6tLE66XleWMun0Svnc60Q8w5 CZfZ+6GCrtxp7GaIliQ49pMAxFIw/7zm5vyDOmGbS+DPhU4wtQxtIf6MKNIHJtnJ hUkWSe58lmbQ6FOnfQ/rrrTuG7J136WOUYJOgCBnPGiEtW7g7LVKbIz915JYCLsF yKM40Jy/UAtxhGdcDkTkjoxT59XxAFX2r2Wo7AAT1KlIbjfW9URzqum2DyQ= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:44 2025 by rpki-client