$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa File: 32fde2e1-3674-4a8c-9968-42521c781b0a.roa (raw, json) Hash identifier: Oi6PPPrBiFPhHdaAylHRkQtxADIwGTdXpcV9rGiwqW4= Subject key identifier: 29:3D:96:9F:DB:8F:3B:E5:00:5E:60:72:76:E6:21:49:D4:97:DD:F5 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 72BE6A44DE5704A25C3EEB311A7E098EE43A49D8 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa Signing time: Sat 25 Jan 2025 00:00:00 +0000 ROA not before: Sat 25 Jan 2025 00:00:00 +0000 ROA not after: Sat 01 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:be:6a:44:de:57:04:a2:5c:3e:eb:31:1a:7e:09:8e:e4:3a:49:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jan 25 00:00:00 2025 GMT Not After : Mar 1 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:45:8a:99:b4:50:0d:45:83:fa:aa:47:8b:54: 8a:7e:6f:ab:e3:fb:82:30:0e:9a:59:26:74:07:6f: 96:25:b9:ab:8c:09:cf:37:e5:01:59:3f:1a:b7:62: 1f:5a:83:1f:6f:e3:99:62:ce:83:22:20:e9:72:30: ff:df:de:62:e8:39:56:6a:1e:cb:c2:cf:9f:18:98: ad:e4:d5:3e:35:76:dd:0a:14:f7:4a:ee:c2:cc:75: 71:08:5a:ba:31:cc:ec:5e:88:a3:38:2d:7d:18:05: 35:f9:c2:be:d4:a4:89:22:29:b4:1e:2a:ab:99:f1: 6c:15:1c:2b:cc:65:c6:6f:e7:87:5d:ea:7d:6f:97: 1d:9d:51:e7:93:c7:1c:df:20:5a:fe:49:e7:fb:48: 23:0a:f2:8b:59:b2:46:b8:7a:ea:82:6b:71:a4:1f: aa:8a:bd:e6:76:02:b5:b2:fd:06:46:70:6d:44:3d: b2:5c:b9:5a:13:45:05:2b:d7:c3:ba:0b:94:02:a0: aa:88:82:9e:a3:7e:42:7b:c0:d2:14:71:6d:64:b4: 49:71:19:43:4e:77:01:fd:9f:b7:de:24:86:e6:50: 98:42:48:0b:e5:97:76:c0:09:26:07:7e:26:d4:2c: a9:95:03:85:f2:4b:b2:2a:4c:b4:50:76:54:e7:71: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3D:96:9F:DB:8F:3B:E5:00:5E:60:72:76:E6:21:49:D4:97:DD:F5 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32fde2e1-3674-4a8c-9968-42521c781b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.238.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:8b:43:47:26:b4:a8:cb:25:a0:ae:a1:18:fc:8b:14:0c:bd: 55:55:01:24:89:b7:c6:2e:80:f6:c4:54:ec:0e:de:2e:bc:43: ac:db:90:43:e1:a7:82:96:c6:f9:82:6f:b0:78:c4:cd:9b:80: 91:77:df:04:00:7c:36:64:f3:ba:73:e1:76:40:ca:f1:0b:04: 10:b6:26:ef:66:2f:c0:19:44:c2:f8:15:2e:c0:23:08:0f:16: b8:30:35:6a:ca:c3:d3:e1:d1:16:1a:c5:4d:6e:08:33:2e:14: fb:5c:d0:12:05:2d:ad:e2:6c:22:54:2f:00:35:4a:ab:98:3c: 94:19:7d:0e:90:73:44:ea:87:7a:9e:6e:61:8b:d9:5c:18:4b: 23:10:8f:d1:4d:b3:42:04:70:b2:09:d2:95:32:24:1c:70:03: 47:39:3d:75:cf:33:2e:48:f7:05:47:c9:99:fc:d5:d7:e7:7e: fb:08:7a:0c:d3:d6:a6:4e:17:f5:0e:bf:c5:68:9a:c6:2d:ff: 0d:a8:e3:7a:a3:46:d2:27:e5:fa:e0:ce:ae:84:49:62:83:a1: ce:11:3e:3f:13:d4:3a:fc:60:52:01:01:06:6b:e8:5a:27:14: 89:38:fd:6a:83:26:15:ef:41:91:58:59:b6:c5:c6:05:1c:6f: cd:a2:39:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcr5qRN5XBKJcPusxGn4JjuQ6SdgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTI1MDAwMDAwWhcNMjUwMzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmU2MTQ5MDU1MTY5NDlmMjEzN2NlZjEyYWVkYzZmYThl MmE4MWZiYjBmZDQ5OTMzZjFjMDNiY2NmNzRiZjIxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdRYqZtFANRYP6qkeLVIp+b6vj+4IwDppZJnQHb5YluauM Cc835QFZPxq3Yh9agx9v45lizoMiIOlyMP/f3mLoOVZqHsvCz58YmK3k1T41dt0K FPdK7sLMdXEIWroxzOxeiKM4LX0YBTX5wr7UpIkiKbQeKquZ8WwVHCvMZcZv54dd 6n1vlx2dUeeTxxzfIFr+Sef7SCMK8otZska4euqCa3GkH6qKveZ2ArWy/QZGcG1E PbJcuVoTRQUr18O6C5QCoKqIgp6jfkJ7wNIUcW1ktElxGUNOdwH9n7feJIbmUJhC SAvll3bACSYHfibULKmVA4XyS7IqTLRQdlTncVWPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKT2Wn9uPO+UAXmByduYhSdSX3fUwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyZmRlMmUxLTM2NzQtNGE4Yy05OTY4LTQyNTIxYzc4MWIwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX++4wDQYJKoZIhvcNAQELBQADggEBAD2LQ0cmtKjLJaCuoRj8ixQMvVVV ASSJt8YugPbEVOwO3i68Q6zbkEPhp4KWxvmCb7B4xM2bgJF33wQAfDZk87pz4XZA yvELBBC2Ju9mL8AZRML4FS7AIwgPFrgwNWrKw9Ph0RYaxU1uCDMuFPtc0BIFLa3i bCJULwA1SquYPJQZfQ6Qc0Tqh3qebmGL2VwYSyMQj9FNs0IEcLIJ0pUyJBxwA0c5 PXXPMy5I9wVHyZn81dfnfvsIegzT1qZOF/UOv8VomsYt/w2o43qjRtIn5frgzq6E SWKDoc4RPj8T1Dr8YFIBAQZr6FonFIk4/WqDJhXvQZFYWbbFxgUcb82iOZ8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:26 2025 by rpki-client