$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/feb848d0-befe-434e-8b06-9622757cd5f5.roa File: feb848d0-befe-434e-8b06-9622757cd5f5.roa (raw, json) Hash identifier: H6kMLYtkSbnWKZKN8Qpxcm3eaDgZnjEKZb+rwfKZy7I= Subject key identifier: 81:4B:75:80:33:9C:AD:A6:57:90:DE:DB:37:1A:35:F3:7B:35:67:43 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4CD91D1419FAF5A1CA35CC2F896A7402B6BAA15C Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/feb848d0-befe-434e-8b06-9622757cd5f5.roa Signing time: Sat 29 Mar 2025 00:10:32 +0000 ROA not before: Sat 29 Mar 2025 00:10:32 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d9:1d:14:19:fa:f5:a1:ca:35:cc:2f:89:6a:74:02:b6:ba:a1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Mar 29 00:10:32 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:ce:3b:62:71:4c:1c:e7:4c:75:56:b7:2d: f6:bf:e1:f5:29:1c:97:de:93:85:06:dd:0d:f7:6f: b8:f2:15:43:6a:bc:2d:3d:29:bf:f7:94:01:e6:fc: 46:5d:3c:08:87:b1:fd:32:b7:1b:38:01:f1:63:5c: 7d:b6:c6:df:5b:45:ce:7e:74:98:4d:6f:cd:aa:e1: ac:f7:1c:90:c0:80:d0:b1:22:05:8d:9a:5d:1a:41: 8d:6d:ba:5d:97:bf:37:76:58:88:83:63:99:1f:3a: 05:d5:17:a2:2d:e5:bf:d6:28:7d:01:a4:f1:2c:50: 47:a0:bf:d1:bd:76:57:ca:41:a3:97:98:e5:38:94: b8:21:66:97:76:34:7f:db:15:aa:8f:b2:f2:af:ee: 43:a6:d9:4a:8d:4e:96:ba:d6:ad:34:6d:bf:07:15: a2:25:64:64:75:8b:68:33:f2:32:9a:d9:87:73:1b: d8:95:fb:53:90:7b:8e:84:ab:15:6f:6b:32:03:27: cc:60:5e:db:d0:70:93:56:f0:fa:f6:4d:1d:bd:3e: 47:d7:c5:78:d6:74:a0:76:11:64:0d:ec:d2:51:5a: f0:33:44:17:71:4e:dc:94:3f:23:9c:8c:0a:9d:21: 24:4b:3b:cc:98:e7:0d:be:ae:b5:e1:96:90:ce:06: 91:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4B:75:80:33:9C:AD:A6:57:90:DE:DB:37:1A:35:F3:7B:35:67:43 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/feb848d0-befe-434e-8b06-9622757cd5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.180.0/23 Signature Algorithm: sha256WithRSAEncryption 93:f7:18:7a:df:59:f2:c8:56:ad:79:5c:de:af:4a:7d:7c:a1: f5:16:b5:63:4d:f7:fa:f7:0f:7e:9e:ae:99:28:1f:1f:26:d8: f8:c7:4a:1a:00:40:6d:14:df:6d:c9:7f:af:d7:3a:8f:2f:6f: 5f:3f:1e:d1:94:6c:ab:2c:6f:3f:a8:fe:00:d3:44:9f:ae:9c: 57:b0:63:cd:1e:25:12:ad:2b:9a:f6:58:64:79:a9:b1:8e:4d: b7:ca:4f:fd:14:7c:ef:37:c3:ea:f4:1c:55:e0:17:04:0d:06: 73:18:05:b5:c3:3e:83:cf:84:59:47:b8:37:7c:76:89:a8:87: b6:45:e4:80:d7:cc:52:69:64:c5:86:1f:71:cf:e9:1f:ed:fc: f1:28:23:d1:21:96:77:bb:da:cd:ef:11:1d:21:2f:a1:1a:4a: 88:ef:d7:9e:83:09:0d:48:a9:14:dc:ff:1b:0b:0c:51:ec:7c: 04:c5:bb:67:6c:75:8e:8a:bf:74:f0:ab:c9:25:f7:6d:1e:9f: f7:b2:fa:cd:8a:5b:5f:61:80:be:46:06:be:da:9c:96:b6:33: 3c:e1:66:1b:f5:28:1c:f6:eb:29:3d:07:60:6c:ed:14:17:06: 7e:77:e5:c9:71:20:fb:89:d3:42:5c:33:3a:44:88:5c:4f:b8: 9e:b2:6d:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTNkdFBn69aHKNcwviWp0Ara6oVwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzI5MDAxMDMyWhcNMjUwNTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTViNDAzZjM1MmM1MjExNzQzZjA0NjU1Yjc2OGRiMDgx Y2NlNjdiMTc0MGU2OTczZTM1YjUzMzVkZTFhMTNmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+Pc47YnFMHOdMdVa3Lfa/4fUpHJfek4UG3Q33b7jyFUNq vC09Kb/3lAHm/EZdPAiHsf0ytxs4AfFjXH22xt9bRc5+dJhNb82q4az3HJDAgNCx IgWNml0aQY1tul2Xvzd2WIiDY5kfOgXVF6It5b/WKH0BpPEsUEegv9G9dlfKQaOX mOU4lLghZpd2NH/bFaqPsvKv7kOm2UqNTpa61q00bb8HFaIlZGR1i2gz8jKa2Ydz G9iV+1OQe46EqxVvazIDJ8xgXtvQcJNW8Pr2TR29PkfXxXjWdKB2EWQN7NJRWvAz RBdxTtyUPyOcjAqdISRLO8yY5w2+rrXhlpDOBpF3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgUt1gDOcraZXkN7bNxo183s1Z0MwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2ZlYjg0OGQwLWJlZmUtNDM0ZS04YjA2LTk2MjI3NTdjZDVmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFM37QwDQYJKoZIhvcNAQELBQADggEBAJP3GHrfWfLIVq15XN6vSn18ofUW tWNN9/r3D36erpkoHx8m2PjHShoAQG0U323Jf6/XOo8vb18/HtGUbKssbz+o/gDT RJ+unFewY80eJRKtK5r2WGR5qbGOTbfKT/0UfO83w+r0HFXgFwQNBnMYBbXDPoPP hFlHuDd8domoh7ZF5IDXzFJpZMWGH3HP6R/t/PEoI9Ehlne72s3vER0hL6EaSojv 156DCQ1IqRTc/xsLDFHsfATFu2dsdY6Kv3Twq8kl920en/ey+s2KW19hgL5GBr7a nJa2MzzhZhv1KBz26yk9B2Bs7RQXBn535clxIPuJ00JcMzpEiFxPuJ6ybY4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:24 2025 by rpki-client