$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/154534d5-da69-43fe-9f0c-aad88b97483b.roa File: 154534d5-da69-43fe-9f0c-aad88b97483b.roa (raw, json) Hash identifier: wGmhFOp55SKpFDnKVVIzpvZHXulezpBjJeGQnJjvN30= Subject key identifier: 6B:DC:05:33:2D:B7:86:3B:C1:12:3E:5B:DE:11:1D:84:1C:29:7A:E5 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6D85960A224B7F6DEBCD3A739605EE5008FD1EC3 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/154534d5-da69-43fe-9f0c-aad88b97483b.roa Signing time: Mon 19 May 2025 15:10:26 +0000 ROA not before: Mon 19 May 2025 15:10:26 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:85:96:0a:22:4b:7f:6d:eb:cd:3a:73:96:05:ee:50:08:fd:1e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 19 15:10:26 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=71fd63596213b7bdcaacb5d90790cf8744215cd93b4453e7ac1486d1e6f39eff, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:40:5c:94:ff:4e:d9:0a:a0:46:78:f8:87: 88:b4:fd:99:71:71:6e:ef:f0:79:d6:50:3b:6f:15: fb:27:f4:95:2b:f5:99:8e:d5:08:b3:f6:f8:ef:dd: 1c:a0:d0:26:f8:63:ca:bd:32:7e:86:32:49:24:9d: 3a:20:b6:34:b3:20:50:0a:80:22:57:61:21:66:48: ae:c6:9e:ee:05:95:5a:59:9a:95:a1:cb:83:4d:95: ff:54:38:f6:fd:bd:50:b2:2b:26:2a:79:8e:3f:f0: ed:7c:f8:72:09:ae:a3:bd:51:d5:9d:43:9f:d8:eb: 49:f0:27:76:4c:00:f0:f5:5a:a7:9f:06:bc:7f:17: 3d:75:b1:e5:5d:bb:b1:b6:ff:80:cf:2e:49:7d:08: b7:c5:9f:c3:dd:23:9f:e4:b5:c6:95:00:86:d9:88: bf:e2:d4:6b:6a:1c:74:fb:7d:ea:74:ce:47:4e:68: f0:07:39:c9:96:53:7d:83:f6:4d:ba:be:fd:76:ee: 3b:aa:49:52:d8:8e:f0:10:e4:62:22:0b:22:63:19: 02:35:bf:e3:59:47:da:fc:e5:97:4c:0b:80:34:c1: a5:92:2f:91:73:8f:e6:f3:21:b6:0d:53:d1:a2:d7: 8a:9c:ae:16:de:00:80:f7:a6:05:86:f0:fd:a0:85: 39:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DC:05:33:2D:B7:86:3B:C1:12:3E:5B:DE:11:1D:84:1C:29:7A:E5 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/154534d5-da69-43fe-9f0c-aad88b97483b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.250.0/23 Signature Algorithm: sha256WithRSAEncryption 96:a3:8c:a7:be:74:91:74:21:83:b0:e4:61:d2:d2:78:69:6c: 7d:80:fb:a9:1c:d6:00:b6:b4:d4:b8:95:b0:13:ff:9b:67:1c: 4a:d2:8e:ee:4f:98:b9:f2:21:72:c9:d7:13:71:79:53:ec:49: 71:1c:b6:8c:9f:ec:7f:14:10:f5:11:10:55:cd:7b:e3:1f:0a: 19:46:15:c0:d4:be:48:90:6c:1e:3f:7c:75:d2:bb:66:19:57: c2:b4:73:83:68:bf:38:4d:8d:b6:00:2f:70:73:fd:ca:ac:eb: 0c:aa:c0:c0:55:76:fd:c8:1a:6a:25:6e:9b:c6:54:a8:8c:8b: ca:38:ee:7e:82:ba:9d:4f:77:1a:98:7d:f2:3a:66:ea:5e:5b: 52:97:f2:b3:f7:d3:46:30:f2:5d:52:af:32:df:b5:fc:b4:b9: 78:5d:d3:5d:39:bb:f8:e4:9a:28:b5:f3:e7:5c:1a:22:6c:6f: b2:35:57:2b:2c:a1:df:6f:2c:a8:b2:9f:3e:2c:2a:60:bd:8a: e2:50:71:5a:02:30:3b:40:ad:6b:03:8d:ea:c2:08:1a:d3:00: f5:f6:8b:9e:44:2a:97:b4:aa:9d:ee:29:df:57:dd:96:e9:5c: dd:fb:c8:ff:5d:70:78:a8:c1:83:73:cb:99:29:81:d9:ca:f2: 40:e4:78:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbYWWCiJLf23rzTpzlgXuUAj9HsMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTE5MTUxMDI2WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MWZkNjM1OTYyMTNiN2JkY2FhY2I1ZDkwNzkwY2Y4NzQ0 MjE1Y2Q5M2I0NDUzZTdhYzE0ODZkMWU2ZjM5ZWZmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtcUBclP9O2QqgRnj4h4i0/ZlxcW7v8HnWUDtvFfsn9JUr 9ZmO1Qiz9vjv3Ryg0Cb4Y8q9Mn6GMkkknTogtjSzIFAKgCJXYSFmSK7Gnu4FlVpZ mpWhy4NNlf9UOPb9vVCyKyYqeY4/8O18+HIJrqO9UdWdQ5/Y60nwJ3ZMAPD1Wqef Brx/Fz11seVdu7G2/4DPLkl9CLfFn8PdI5/ktcaVAIbZiL/i1GtqHHT7fep0zkdO aPAHOcmWU32D9k26vv127juqSVLYjvAQ5GIiCyJjGQI1v+NZR9r85ZdMC4A0waWS L5Fzj+bzIbYNU9Gi14qcrhbeAID3pgWG8P2ghTkTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa9wFMy23hjvBEj5b3hEdhBwpeuUwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzE1NDUzNGQ1LWRhNjktNDNmZS05ZjBjLWFhZDg4Yjk3NDgzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/owDQYJKoZIhvcNAQELBQADggEBAJajjKe+dJF0IYOw5GHS0nhpbH2A +6kc1gC2tNS4lbAT/5tnHErSju5PmLnyIXLJ1xNxeVPsSXEctoyf7H8UEPUREFXN e+MfChlGFcDUvkiQbB4/fHXSu2YZV8K0c4NovzhNjbYAL3Bz/cqs6wyqwMBVdv3I GmolbpvGVKiMi8o47n6Cup1PdxqYffI6ZupeW1KX8rP300Yw8l1SrzLftfy0uXhd 0105u/jkmii18+dcGiJsb7I1Vyssod9vLKiynz4sKmC9iuJQcVoCMDtArWsDjerC CBrTAPX2i55EKpe0qp3uKd9X3ZbpXN37yP9dcHiowYNzy5kpgdnK8kDkeB4= -----END CERTIFICATE-----Generated at Mon Jun 2 16:32:00 2025 by rpki-client