$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/38b1d6a5-8a6e-4ed3-a057-939fd4f17f57.roa File: 38b1d6a5-8a6e-4ed3-a057-939fd4f17f57.roa (raw, json) Hash identifier: mihF+eULAbG1+xUBOJNFvuhBjSfIAbAURJJHoDOk1gc= Subject key identifier: 35:41:50:D2:EE:3F:A8:15:0B:5A:B6:51:04:8C:E7:58:D3:1B:EA:F9 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 64BA6BACC3B674EB999C5EFFF65AD1A87136B23A Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/38b1d6a5-8a6e-4ed3-a057-939fd4f17f57.roa Signing time: Mon 19 May 2025 15:10:25 +0000 ROA not before: Mon 19 May 2025 15:10:25 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ba:6b:ac:c3:b6:74:eb:99:9c:5e:ff:f6:5a:d1:a8:71:36:b2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 19 15:10:25 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=cd3b751407f23bd162540f4e06e14a3baaf8684fc8d5eab3f4b7511670d4405c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:5c:7b:71:44:ed:d7:8a:d1:19:39:f0:c9: c2:b4:63:51:9a:ed:cb:43:5f:dc:79:4a:02:4f:80: c0:91:35:35:72:01:ac:4e:5f:52:ff:f9:63:6c:b3: d0:52:3f:e4:1a:21:6a:95:5b:e6:41:1a:9a:ee:62: 3d:74:d7:9c:0d:bd:2c:21:27:4d:06:c7:aa:73:77: c1:87:e7:81:2d:67:d7:c8:a6:9b:a7:9e:6b:b4:9c: 41:2e:51:fa:d6:68:49:ca:3f:de:df:9b:e3:22:8b: fb:a7:e2:c5:c1:68:f5:6e:f6:66:51:e3:c4:5f:11: 09:3e:3d:e4:f5:0c:e9:bb:72:40:23:f9:a5:18:1e: 12:4f:ca:3d:d2:7f:e3:95:37:87:16:e9:2c:9e:c8: 32:f1:cb:98:ce:f5:e0:bf:c0:4d:76:eb:4e:dd:e6: 69:fb:fd:f1:94:ba:1e:6f:d0:3e:f0:44:c7:68:79: e5:f5:49:fa:d4:f1:ab:c2:95:a1:76:7b:92:13:35: db:7c:d6:17:ca:d9:95:7a:cf:bf:44:1f:49:00:94: 85:6b:86:ed:89:ef:49:02:8c:95:d7:1c:5f:1e:b9: b2:ea:a9:67:d9:60:bd:2d:9d:6e:c5:b9:f1:51:a4: 79:78:ec:26:7b:fd:6e:2e:d8:11:15:13:d1:51:f9: e2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:41:50:D2:EE:3F:A8:15:0B:5A:B6:51:04:8C:E7:58:D3:1B:EA:F9 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/38b1d6a5-8a6e-4ed3-a057-939fd4f17f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.240.0/23 Signature Algorithm: sha256WithRSAEncryption 90:1a:e9:df:97:f7:13:5c:bb:85:85:9c:ec:c4:5a:e0:2a:61: 17:73:bd:c5:d9:cd:85:7a:15:7d:cf:96:b4:f1:1a:b1:19:cc: f1:cd:43:64:42:b9:a0:13:9b:96:03:d1:5c:84:da:8c:2f:24: 9f:95:c7:2a:56:db:9f:85:51:2c:7d:fb:83:8c:ab:65:86:c7: 14:2a:4f:17:60:35:bb:88:eb:a7:26:08:4c:a3:cf:00:b1:61: 88:2e:1c:08:35:5c:cc:ab:84:37:3f:62:02:28:d6:cc:15:a2: 84:aa:10:a9:fc:9d:ec:fe:87:18:5f:84:c1:3b:f1:0f:c3:b5: 4e:03:27:6a:61:61:fe:33:5d:c0:af:9f:2a:88:3d:e1:8c:a8: 0e:7a:d3:a1:07:3d:70:42:d8:e1:be:32:03:4b:33:81:c5:93: 3c:f8:b3:4c:69:8e:8b:26:53:8d:a1:26:eb:e5:c0:6a:43:e3: d0:ad:9d:ef:c4:0c:53:0c:24:98:e4:5e:1d:09:b8:df:ee:26: 23:35:af:68:80:88:2e:79:87:5c:11:37:ff:44:d4:3d:da:4f: b6:2e:6f:90:f3:75:7d:ff:6c:dd:a9:e0:08:0b:7d:c5:f2:8c: 8e:b2:6e:20:c0:c1:5c:ae:4a:55:ba:cb:b0:f3:57:37:d3:8d: e5:19:16:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZLprrMO2dOuZnF7/9lrRqHE2sjowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTE5MTUxMDI1WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDNiNzUxNDA3ZjIzYmQxNjI1NDBmNGUwNmUxNGEzYmFh Zjg2ODRmYzhkNWVhYjNmNGI3NTExNjcwZDQ0MDVjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk+Fx7cUTt14rRGTnwycK0Y1Ga7ctDX9x5SgJPgMCRNTVy AaxOX1L/+WNss9BSP+QaIWqVW+ZBGpruYj1015wNvSwhJ00Gx6pzd8GH54EtZ9fI ppunnmu0nEEuUfrWaEnKP97fm+Mii/un4sXBaPVu9mZR48RfEQk+PeT1DOm7ckAj +aUYHhJPyj3Sf+OVN4cW6SyeyDLxy5jO9eC/wE12607d5mn7/fGUuh5v0D7wRMdo eeX1SfrU8avClaF2e5ITNdt81hfK2ZV6z79EH0kAlIVrhu2J70kCjJXXHF8eubLq qWfZYL0tnW7FufFRpHl47CZ7/W4u2BEVE9FR+eJfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNUFQ0u4/qBULWrZRBIznWNMb6vkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzM4YjFkNmE1LThhNmUtNGVkMy1hMDU3LTkzOWZkNGYxN2Y1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/AwDQYJKoZIhvcNAQELBQADggEBAJAa6d+X9xNcu4WFnOzEWuAqYRdz vcXZzYV6FX3PlrTxGrEZzPHNQ2RCuaATm5YD0VyE2owvJJ+VxypW25+FUSx9+4OM q2WGxxQqTxdgNbuI66cmCEyjzwCxYYguHAg1XMyrhDc/YgIo1swVooSqEKn8nez+ hxhfhME78Q/DtU4DJ2phYf4zXcCvnyqIPeGMqA5606EHPXBC2OG+MgNLM4HFkzz4 s0xpjosmU42hJuvlwGpD49Ctne/EDFMMJJjkXh0JuN/uJiM1r2iAiC55h1wRN/9E 1D3aT7Yub5DzdX3/bN2p4AgLfcXyjI6ybiDAwVyuSlW6y7DzVzfTjeUZFhI= -----END CERTIFICATE-----Generated at Sat Jun 7 04:18:27 2025 by rpki-client