$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa File: 271f0380-5b52-472a-bc37-cdbbdcd650e9.roa (raw, json) Hash identifier: Jn5xqKXFomyJ0uyPWrddJ2pGrmK8TNAewHBYb0ACm2E= Subject key identifier: 8F:DF:22:0D:26:F8:BC:CC:83:BD:B5:21:9D:5D:54:99:BF:F5:44:2D Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 02E66E85D2C52588F21095B4E9CFAD2BE8953F6D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa Signing time: Sat 31 May 2025 00:01:02 +0000 ROA not before: Sat 31 May 2025 00:01:02 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e6:6e:85:d2:c5:25:88:f2:10:95:b4:e9:cf:ad:2b:e8:95:3f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:01:02 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=48e1cb045a1304187a31c30839610325a47e963d5cff12f6808496762ca8230a, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:bf:ea:2c:11:86:cf:4d:23:e6:7c:aa:c6:c3: f5:d3:5b:19:bf:b1:bb:32:43:6d:f3:3a:37:8d:5d: 70:3f:fc:85:09:85:29:d1:09:cd:99:f9:92:90:a5: e0:17:96:54:0d:a9:39:42:5e:63:c3:b6:f2:f7:8e: 05:d0:6a:dc:45:24:16:57:e3:1d:d4:c1:dd:3c:9d: 45:ea:19:88:c6:b7:32:e7:17:2d:47:4e:67:a3:7a: 20:27:f4:df:65:9b:48:8f:87:d1:9f:77:05:7c:27: 7b:2f:34:b5:d6:af:ac:90:59:3e:50:0a:d3:d8:fe: 21:88:7a:8e:8b:99:f7:63:dd:80:3f:c1:a6:6b:0d: bf:aa:70:13:a2:4d:9e:47:68:f5:5e:19:13:2a:06: c4:40:2c:f5:f3:d6:4f:43:5f:ca:78:05:28:cc:61: 96:e5:58:69:55:5e:58:e7:ef:5a:8a:ad:06:8f:c1: f6:fe:ac:ed:47:5b:d3:91:1e:59:b8:dd:6a:b2:8d: 4a:a1:27:6f:02:e6:20:fd:53:83:48:7d:31:c6:b3: 8d:a1:25:4e:24:f7:96:ec:0b:1d:85:64:82:8e:0d: 55:a4:58:95:9c:03:1a:7a:7c:31:cd:cc:84:68:56: e4:91:7d:fb:20:48:ba:04:11:d6:9c:97:88:30:f8: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DF:22:0D:26:F8:BC:CC:83:BD:B5:21:9D:5D:54:99:BF:F5:44:2D X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.217.0/24 Signature Algorithm: sha256WithRSAEncryption 32:ed:4b:c4:91:4c:26:41:d0:9d:72:69:ae:33:9c:80:ec:ae: c8:47:c2:a8:99:36:45:42:8e:f5:ee:8e:f6:e8:7a:ac:3e:b9: c2:41:92:60:7f:dd:34:0d:f9:61:d8:1c:83:67:f9:a6:1a:7a: dd:ee:29:f1:64:ab:97:a7:a3:c5:35:8c:af:c8:87:0c:2e:c5: c5:ba:74:b1:15:88:6e:e7:a5:b8:53:5c:8e:58:19:fb:53:c9: b0:97:6b:4e:3a:6c:1a:7d:fe:6f:1a:8f:7b:f9:71:69:75:7a: b7:4c:0d:be:f5:9d:e1:e7:e0:96:38:30:ac:d7:a8:84:09:d4: 6e:88:f8:dd:ec:85:23:47:1e:8d:ff:93:c5:53:0d:89:71:e0: d9:81:17:69:2a:fa:e0:95:cb:43:85:4c:cc:dd:a6:ce:85:ce: 47:32:e4:6f:dd:a6:16:0d:b6:5f:dd:13:01:a1:2e:e7:ea:46: 9f:ce:24:15:f3:c0:47:82:5a:03:3e:e0:93:cc:31:1d:b7:f5: 2c:df:77:4b:43:b8:75:95:77:b8:2c:58:6f:bf:97:44:ee:2c: 61:6d:20:54:90:3c:65:5e:01:c5:58:11:3d:36:4b:9f:2b:9a: a7:cb:57:de:3f:55:c0:42:c5:a0:be:eb:dc:48:5d:af:d7:f6: 16:f7:5a:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAuZuhdLFJYjyEJW06c+tK+iVP20wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAwMTAyWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OGUxY2IwNDVhMTMwNDE4N2EzMWMzMDgzOTYxMDMyNWE0 N2U5NjNkNWNmZjEyZjY4MDg0OTY3NjJjYTgyMzBhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0v+osEYbPTSPmfKrGw/XTWxm/sbsyQ23zOjeNXXA//IUJ hSnRCc2Z+ZKQpeAXllQNqTlCXmPDtvL3jgXQatxFJBZX4x3Uwd08nUXqGYjGtzLn Fy1HTmejeiAn9N9lm0iPh9GfdwV8J3svNLXWr6yQWT5QCtPY/iGIeo6Lmfdj3YA/ waZrDb+qcBOiTZ5HaPVeGRMqBsRALPXz1k9DX8p4BSjMYZblWGlVXljn71qKrQaP wfb+rO1HW9ORHlm43WqyjUqhJ28C5iD9U4NIfTHGs42hJU4k95bsCx2FZIKODVWk WJWcAxp6fDHNzIRoVuSRffsgSLoEEdacl4gw+M5XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUj98iDSb4vMyDvbUhnV1Umb/1RC0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzI3MWYwMzgwLTViNTItNDcyYS1iYzM3LWNkYmJkY2Q2NTBlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dkwDQYJKoZIhvcNAQELBQADggEBADLtS8SRTCZB0J1yaa4znIDsrshH wqiZNkVCjvXujvboeqw+ucJBkmB/3TQN+WHYHINn+aYaet3uKfFkq5eno8U1jK/I hwwuxcW6dLEViG7npbhTXI5YGftTybCXa046bBp9/m8aj3v5cWl1erdMDb71neHn 4JY4MKzXqIQJ1G6I+N3shSNHHo3/k8VTDYlx4NmBF2kq+uCVy0OFTMzdps6Fzkcy 5G/dphYNtl/dEwGhLufqRp/OJBXzwEeCWgM+4JPMMR239Szfd0tDuHWVd7gsWG+/ l0TuLGFtIFSQPGVeAcVYET02S58rmqfLV94/VcBCxaC+69xIXa/X9hb3Wi4= -----END CERTIFICATE-----Generated at Fri Jun 6 19:44:41 2025 by rpki-client