$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa File: 3f672c72-4d5f-408a-8326-7e62adbed891.roa (raw, json) Hash identifier: GdER47CrYx2LGtpmLU3lpaZzJbB2jSH85SYFn0TOX0E= Subject key identifier: 3C:7F:23:65:FE:57:D2:8F:C7:05:1B:7D:0E:32:51:26:FE:93:B5:4F Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 17E49C4039B3A153806C214497CE9A69E5726281 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa Signing time: Sat 25 Jan 2025 00:00:00 +0000 ROA not before: Sat 25 Jan 2025 00:00:00 +0000 ROA not after: Sat 01 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e4:9c:40:39:b3:a1:53:80:6c:21:44:97:ce:9a:69:e5:72:62:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jan 25 00:00:00 2025 GMT Not After : Mar 1 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:10:84:80:d7:cc:de:b6:0e:62:be:2a:af: 53:f6:9b:4a:c5:9e:0e:ba:94:90:06:2e:b8:04:62: 16:fe:7d:08:5b:0e:8f:75:e2:ee:f3:86:e1:7d:3a: f9:ac:f8:41:23:64:41:10:6b:25:8a:08:63:e1:e8: 8d:b4:35:b1:a8:28:d9:bd:b3:53:84:97:a5:ea:0f: ea:8d:1b:51:86:48:64:b8:1b:7d:45:eb:36:69:d3: e3:5f:bc:4c:d5:1f:69:a5:7c:26:59:70:c3:0f:4b: db:35:65:e6:a6:06:72:45:50:79:f1:b9:e6:bf:c6: 58:03:b1:b0:79:66:85:c5:f8:60:ba:96:b5:27:5a: d8:8f:0f:d2:f7:b2:9b:74:2a:d1:3e:0d:1b:a7:f7: ee:5a:9c:e5:4b:e9:c9:cc:98:e0:a2:4e:0c:6d:25: a9:97:29:c7:de:d1:51:65:63:be:ca:d7:c2:c0:54: 7c:7a:34:1c:02:6f:b9:54:c7:59:65:86:49:ba:c1: 33:27:e8:5c:8a:13:96:1a:70:5c:12:23:90:43:39: 77:a1:93:d4:79:df:1a:12:73:20:77:36:27:8e:4a: 91:0c:ed:72:45:3c:3a:a1:34:b8:e6:f6:bc:a8:a5: 3d:c4:30:13:b9:45:cb:ee:b1:20:7f:ff:dc:7b:97: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7F:23:65:FE:57:D2:8F:C7:05:1B:7D:0E:32:51:26:FE:93:B5:4F X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3f672c72-4d5f-408a-8326-7e62adbed891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:52:53:fc:f3:1f:b4:51:e6:c9:43:dd:02:81:b7:3d:f9:99: c6:0f:87:ad:41:52:be:1e:d4:64:c6:f3:62:37:52:80:db:77: 50:8d:4e:dc:15:bb:c6:b6:d4:3d:42:95:a7:f1:de:05:84:2c: 8d:50:81:85:a0:83:f1:ad:55:90:38:de:69:1c:cf:ec:96:db: 65:df:70:42:66:9d:dd:51:dd:1b:e2:32:2b:da:0d:5c:4e:88: 3d:21:49:c3:b8:f0:78:8b:c1:a6:4d:11:9a:cb:17:73:ca:ef: 62:fe:dd:de:29:44:3e:06:d6:ab:bc:98:41:4d:a8:32:63:74: d6:24:05:d4:e6:f5:a8:83:34:96:a0:0b:9f:87:af:9d:29:de: c0:3e:fe:33:dd:dc:11:1b:b8:09:78:6c:59:f8:87:3b:97:6b: fa:94:04:27:2c:ef:01:98:fb:b6:21:21:32:4c:a0:56:fa:53: ae:bb:4b:29:e1:7e:e8:52:65:67:12:80:38:67:ac:b2:71:bf: be:32:08:c2:a4:0c:ed:be:f1:b6:ac:ba:48:d8:a7:ca:ac:89: da:82:72:fb:bf:ea:4e:05:30:16:79:87:2c:af:2c:88:31:0b: fb:76:7b:6c:29:4c:4d:77:56:b5:80:a3:26:6f:e4:09:ba:0c: 92:28:22:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF+ScQDmzoVOAbCFEl86aaeVyYoEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTI1MDAwMDAwWhcNMjUwMzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzBlNTQxYTRkMWJjN2M3MTk2ZTI5M2QwOTljNDNmYTA5 NTVjMWU1N2ZiMDdkMDI4ZjE4ZWFhM2QzYmU4YzFhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq9BCEgNfM3rYOYr4qr1P2m0rFng66lJAGLrgEYhb+fQhb Do914u7zhuF9Ovms+EEjZEEQayWKCGPh6I20NbGoKNm9s1OEl6XqD+qNG1GGSGS4 G31F6zZp0+NfvEzVH2mlfCZZcMMPS9s1ZeamBnJFUHnxuea/xlgDsbB5ZoXF+GC6 lrUnWtiPD9L3spt0KtE+DRun9+5anOVL6cnMmOCiTgxtJamXKcfe0VFlY77K18LA VHx6NBwCb7lUx1llhkm6wTMn6FyKE5YacFwSI5BDOXehk9R53xoScyB3NieOSpEM 7XJFPDqhNLjm9ryopT3EMBO5RcvusSB//9x7l2/pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPH8jZf5X0o/HBRt9DjJRJv6TtU8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNmNjcyYzcyLTRkNWYtNDA4YS04MzI2LTdlNjJhZGJlZDg5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBAAtSU/zzH7RR5slD3QKBtz35mcYP h61BUr4e1GTG82I3UoDbd1CNTtwVu8a21D1Clafx3gWELI1QgYWgg/GtVZA43mkc z+yW22XfcEJmnd1R3RviMivaDVxOiD0hScO48HiLwaZNEZrLF3PK72L+3d4pRD4G 1qu8mEFNqDJjdNYkBdTm9aiDNJagC5+Hr50p3sA+/jPd3BEbuAl4bFn4hzuXa/qU BCcs7wGY+7YhITJMoFb6U667SynhfuhSZWcSgDhnrLJxv74yCMKkDO2+8basukjY p8qsidqCcvu/6k4FMBZ5hyyvLIgxC/t2e2wpTE13VrWAoyZv5Am6DJIoIso= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:56 2025 by rpki-client