$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa File: 3f672c72-4d5f-408a-8326-7e62adbed891.roa (raw, json) Hash identifier: YeQd58IMKisegXWu/SqbRVJuAvSIpmOieSU0XOcuV30= Subject key identifier: 98:C8:7D:95:BE:06:E0:98:38:01:60:AC:C6:50:39:C7:A1:EC:D8:FD Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 01902C29D37FB20607F14A6A1CEDFCFC89BBDE0C Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa Signing time: Wed 19 Feb 2025 00:10:19 +0000 ROA not before: Wed 19 Feb 2025 00:10:19 +0000 ROA not after: Wed 26 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:2c:29:d3:7f:b2:06:07:f1:4a:6a:1c:ed:fc:fc:89:bb:de:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 19 00:10:19 2025 GMT Not After : Mar 26 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:8c:05:7b:18:55:46:a5:ae:6b:9d:43:8a: cd:b7:72:80:0a:41:d9:c0:22:f6:4e:62:10:b9:d9: 24:b8:f3:22:ce:4c:80:91:0e:79:74:8a:b3:ee:8e: ac:35:f4:9a:43:77:91:f8:5f:b2:a1:23:2b:36:b1: b8:45:e8:51:57:e9:3d:de:2b:28:7c:d2:03:83:bb: 92:fb:66:7e:0d:13:f5:9c:8b:64:e9:b9:d0:c9:50: 2c:6a:1e:23:22:f0:76:1b:10:3e:e1:b2:90:14:c7: c3:85:88:02:cd:bb:5b:5d:73:50:0c:55:e1:e1:bc: 2e:fd:0c:5d:a9:bb:76:a0:e8:c9:a0:ce:a2:54:e6: 93:5d:39:34:6b:76:2e:c7:2a:41:8d:d4:ac:88:d2: 42:4b:d2:9f:eb:62:e5:53:9b:14:b0:2d:82:5d:ed: 47:36:ba:76:8c:ab:2e:80:ac:5b:ae:19:7a:53:3a: e4:11:62:90:83:c1:01:f7:14:90:05:55:81:73:e1: 16:84:ea:df:9f:57:6a:b8:81:be:cf:60:f7:03:ab: 27:d1:5b:3b:14:c6:00:d4:ba:f9:0c:5f:da:cb:c3: cd:f6:69:92:8d:35:4a:fc:32:ab:2d:55:76:cb:03: de:c8:66:b6:e7:e6:85:26:1b:c7:59:25:72:df:30: 34:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C8:7D:95:BE:06:E0:98:38:01:60:AC:C6:50:39:C7:A1:EC:D8:FD X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:5c:65:08:bf:24:82:5c:e9:4e:37:95:e8:f2:e5:54:fd:2b: 5c:f3:0c:e0:f1:48:c3:bb:10:9f:99:79:f7:2a:09:87:1c:10: d8:20:4e:96:2b:a9:a7:39:ce:ba:48:6c:8d:de:dc:eb:d2:ea: 42:ab:97:14:ed:4a:da:60:c7:05:49:de:ee:b6:18:29:ed:30: 64:65:e2:f2:ae:b8:0a:07:a0:25:34:24:cb:6b:f3:e7:3c:52: 2c:ec:0b:36:7c:39:7f:31:e9:68:b9:bf:79:ea:af:2b:e5:09: c2:59:f2:bd:d0:0a:14:a4:bc:46:ca:40:a6:22:07:20:2b:7e: 9b:79:6d:3b:76:7c:f0:98:92:95:13:dc:9b:fa:ce:34:64:af: 17:60:78:73:11:27:8d:83:a7:87:47:6e:9e:df:01:ab:c5:a7: b9:9a:06:47:64:08:9e:39:a0:21:3f:eb:10:d0:4d:6f:88:8c: 26:6e:b9:d0:a1:20:03:87:53:59:dd:e7:76:ba:72:c7:67:ed: b3:41:79:b8:d9:67:62:2e:86:92:6d:fe:b4:f5:28:78:61:42: d7:67:52:fa:14:00:ef:46:d9:4f:f3:f6:58:29:0e:25:e6:9c: a4:ba:21:f6:b5:2c:9e:5d:ee:c6:30:11:eb:fd:ea:f5:dd:82: 79:69:09:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAZAsKdN/sgYH8UpqHO38/Im73gwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMjE5MDAxMDE5WhcNMjUwMzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTU4NWI5ODE2ODE5ZTdjMWVjMzk2NDk4MmZkYWJjMjgy ZDJhZDVmMzNmM2FiZGZiODZkMmM3Yjg0Njg4NzAzMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjB4wFexhVRqWua51Dis23coAKQdnAIvZOYhC52SS48yLO TICRDnl0irPujqw19JpDd5H4X7KhIys2sbhF6FFX6T3eKyh80gODu5L7Zn4NE/Wc i2TpudDJUCxqHiMi8HYbED7hspAUx8OFiALNu1tdc1AMVeHhvC79DF2pu3ag6Mmg zqJU5pNdOTRrdi7HKkGN1KyI0kJL0p/rYuVTmxSwLYJd7Uc2unaMqy6ArFuuGXpT OuQRYpCDwQH3FJAFVYFz4RaE6t+fV2q4gb7PYPcDqyfRWzsUxgDUuvkMX9rLw832 aZKNNUr8MqstVXbLA97IZrbn5oUmG8dZJXLfMDRxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmMh9lb4G4Jg4AWCsxlA5x6Hs2P0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNmNjcyYzcyLTRkNWYtNDA4YS04MzI2LTdlNjJhZGJlZDg5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBAEtcZQi/JIJc6U43lejy5VT9K1zz DODxSMO7EJ+ZefcqCYccENggTpYrqac5zrpIbI3e3OvS6kKrlxTtStpgxwVJ3u62 GCntMGRl4vKuuAoHoCU0JMtr8+c8UizsCzZ8OX8x6Wi5v3nqryvlCcJZ8r3QChSk vEbKQKYiByArfpt5bTt2fPCYkpUT3Jv6zjRkrxdgeHMRJ42Dp4dHbp7fAavFp7ma BkdkCJ45oCE/6xDQTW+IjCZuudChIAOHU1nd53a6csdn7bNBebjZZ2IuhpJt/rT1 KHhhQtdnUvoUAO9G2U/z9lgpDiXmnKS6Ifa1LJ5d7sYwEev96vXdgnlpCZM= -----END CERTIFICATE-----Generated at Thu Mar 13 23:39:42 2025 by rpki-client