$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa File: efff1c41-4813-4726-a794-2bd64d641531.roa (raw, json) Hash identifier: HjWHXVHnopaT0+uKC0GIyUqVoR2tg/mv3g4gfGnEPXo= Subject key identifier: F8:CA:8F:AF:E8:75:A2:32:EA:56:1D:67:1F:43:D2:08:EF:DF:6F:85 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 558215071F9BAD38A519924F618E8505385BA6A4 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa Signing time: Mon 17 Mar 2025 15:01:00 +0000 ROA not before: Mon 17 Mar 2025 15:01:00 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:82:15:07:1f:9b:ad:38:a5:19:92:4f:61:8e:85:05:38:5b:a6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Mar 17 15:01:00 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:77:7b:d5:76:2c:6d:92:1c:b2:6a:21:15: 9a:7b:c9:e1:a8:aa:d9:89:52:0c:be:ea:39:49:05: 72:74:78:09:5d:6f:dd:cc:8e:03:11:41:c7:93:48: 31:f1:19:b3:25:13:bf:aa:1e:e4:81:bb:e2:e9:78: 30:53:99:82:45:37:11:31:83:00:21:b2:94:ce:a1: d0:09:03:69:d5:dd:65:7f:bf:58:78:3b:e8:b4:1d: 3f:e4:76:c1:f2:6f:f8:76:cc:40:31:0c:7a:7f:f9: 92:56:c5:0f:64:07:2c:80:61:e5:50:67:0d:b6:d3: 07:69:fc:6c:c6:ef:f6:91:85:6e:20:00:91:f0:eb: 1d:7e:cd:7b:11:ec:9a:b7:3c:85:a1:d4:31:53:1f: 17:c0:67:a0:14:48:43:c1:16:0d:bf:6f:f9:08:73: 39:61:4a:25:3a:b5:6c:56:10:9a:11:55:11:26:ad: 44:9c:26:a3:e4:fd:fb:63:b3:87:bb:39:76:d0:50: 92:0a:1f:96:ba:92:1e:d8:95:ad:e4:ff:89:a0:c9: b2:af:ec:41:c5:97:11:cd:9e:85:fa:4d:23:d2:86: df:9a:aa:0c:c0:1b:ff:2f:ee:a2:b3:be:5e:d8:5c: dc:4e:be:cc:98:38:c0:33:42:55:65:46:25:d6:79: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CA:8F:AF:E8:75:A2:32:EA:56:1D:67:1F:43:D2:08:EF:DF:6F:85 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.235.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:23:37:34:93:90:cd:5e:69:e0:80:84:83:31:58:22:2c:4b: 46:b2:68:0a:f6:3c:ee:1a:7c:0b:c7:41:98:46:76:58:e2:eb: 61:c0:76:88:4d:26:39:8d:8d:11:32:41:ca:f4:fb:f1:a9:84: 91:4c:ff:38:f7:1c:9f:e2:89:16:3e:ba:2d:94:1d:15:49:bb: d1:a2:06:d2:08:b2:b7:08:c8:92:55:7d:9e:aa:e2:9e:10:c3: 9e:c6:45:33:c2:e4:b1:10:b1:d4:ba:0f:47:48:ce:eb:f5:31: 1b:6c:9e:f2:cd:c5:ab:c7:55:e4:49:63:ca:92:f6:73:45:63: 7e:aa:27:e0:b0:97:8f:8e:1e:15:d7:a2:84:18:47:3b:8b:f7: db:f1:ea:74:bb:44:a3:ca:47:bc:3f:d8:c4:18:87:a4:cc:e3: ca:9f:1f:a5:95:72:53:1e:e3:a0:2a:c6:52:9d:d5:03:73:f5: 02:69:29:92:10:24:d3:4e:63:8e:3d:c6:59:d2:0b:13:4a:31: fa:92:f8:8b:49:d6:28:11:be:a6:3c:a5:a9:0c:bf:0d:09:47: 1e:c9:39:6c:d7:5e:41:d2:e9:23:21:10:d1:45:f9:63:3d:08: 8c:a4:bc:28:87:19:4b:fd:7a:76:dc:b5:3e:b3:49:22:ac:e2: cb:94:e7:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVYIVBx+brTilGZJPYY6FBThbpqQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzE3MTUwMTAwWhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmVjZTc1MDg5MTY4Y2FkYWRiYjkwN2YzYTM3YmMzYzc5 NDljZjAzOGI5ZmY0MzFmOThlMmQ4NmMwYzRkMTg1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxiXd71XYsbZIcsmohFZp7yeGoqtmJUgy+6jlJBXJ0eAld b93MjgMRQceTSDHxGbMlE7+qHuSBu+LpeDBTmYJFNxExgwAhspTOodAJA2nV3WV/ v1h4O+i0HT/kdsHyb/h2zEAxDHp/+ZJWxQ9kByyAYeVQZw220wdp/GzG7/aRhW4g AJHw6x1+zXsR7Jq3PIWh1DFTHxfAZ6AUSEPBFg2/b/kIczlhSiU6tWxWEJoRVREm rUScJqPk/ftjs4e7OXbQUJIKH5a6kh7Yla3k/4mgybKv7EHFlxHNnoX6TSPSht+a qgzAG/8v7qKzvl7YXNxOvsyYOMAzQlVlRiXWeX6vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+MqPr+h1ojLqVh1nH0PSCO/fb4UwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2VmZmYxYzQxLTQ4MTMtNDcyNi1hNzk0LTJiZDY0ZDY0MTUzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++swDQYJKoZIhvcNAQELBQADggEBAGojNzSTkM1eaeCAhIMxWCIsS0ay aAr2PO4afAvHQZhGdlji62HAdohNJjmNjREyQcr0+/GphJFM/zj3HJ/iiRY+ui2U HRVJu9GiBtIIsrcIyJJVfZ6q4p4Qw57GRTPC5LEQsdS6D0dIzuv1MRtsnvLNxavH VeRJY8qS9nNFY36qJ+Cwl4+OHhXXooQYRzuL99vx6nS7RKPKR7w/2MQYh6TM48qf H6WVclMe46AqxlKd1QNz9QJpKZIQJNNOY449xlnSCxNKMfqS+ItJ1igRvqY8pakM vw0JRx7JOWzXXkHS6SMhENFF+WM9CIykvCiHGUv9enbctT6zSSKs4suU530= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:47 2025 by rpki-client