$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa File: 59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa (raw, json) Hash identifier: zhGMrq7CAtb9XLQuhyKyFt2k3nkslyQS3AH5UqQmXmE= Subject key identifier: 7D:7E:51:78:D2:4B:9F:0B:27:D0:BD:89:2F:7B:F4:70:86:32:1C:9D Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5EF8A757B5D14EB057DCB9064EB228846E784CFB Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa Signing time: Sat 31 May 2025 00:01:06 +0000 ROA not before: Sat 31 May 2025 00:01:06 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f8:a7:57:b5:d1:4e:b0:57:dc:b9:06:4e:b2:28:84:6e:78:4c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:01:06 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=589f8bd5524d81a3bb06fd7a620b06a17f6b9c27580f578f7e3c41be4ac0160c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:ca:58:ca:9d:a7:02:8d:4b:7c:82:b1:44: 02:34:db:ec:19:1c:0d:06:ef:0e:6b:76:0d:55:e8: f8:06:b2:c8:40:2e:19:9e:8e:9c:db:cc:3e:e1:8f: 13:64:8d:d3:94:88:47:ea:2c:7f:52:18:8d:74:bc: 9c:81:96:cf:2c:23:2a:26:93:7e:a1:03:1d:91:25: 87:94:26:e1:47:bf:33:7e:16:8f:d8:d1:b2:ea:51: ff:ea:56:8b:69:8f:6a:97:37:e7:f8:4d:95:77:d5: b3:19:cb:79:35:ea:98:0e:a5:af:17:c0:47:34:37: 61:67:61:cb:27:07:2a:a3:15:66:f1:b1:f2:d1:04: ac:6d:62:94:de:7c:a2:31:e3:e6:51:78:a3:3d:9a: 82:2c:0d:44:a9:65:bc:ac:53:ce:b3:11:82:43:2c: 67:29:8f:c1:a7:27:e2:5d:c6:48:46:4a:68:1d:b1: dd:95:60:bd:16:d9:9f:2c:1e:24:96:9a:2d:80:10: 82:21:f4:8f:f3:bf:25:15:07:9a:6b:18:03:8d:c7: b3:32:f8:40:25:0d:f0:3b:08:bf:5e:65:80:7d:34: ca:53:54:19:a4:61:a9:f5:60:50:41:0e:76:cc:4f: 50:17:0b:c2:53:44:60:ef:a0:a1:c9:ec:df:4f:59: 0f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7E:51:78:D2:4B:9F:0B:27:D0:BD:89:2F:7B:F4:70:86:32:1C:9D X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/59ab264e-284f-4e30-b2f0-d85fa73b62b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.220.0/24 Signature Algorithm: sha256WithRSAEncryption 28:89:ce:9f:94:3b:4d:01:67:e8:45:34:cf:4a:2b:f3:60:03: 42:88:1b:e0:d2:ee:80:09:36:d1:13:65:0a:29:dc:cb:89:a8: f5:da:d8:da:24:c1:dc:39:88:56:b4:f9:44:22:4b:a5:b7:98: 54:f1:dc:c2:4b:1d:9f:5f:75:ea:c3:1e:5f:9b:1b:2d:e1:5f: 8e:00:ed:b1:20:cd:38:b0:de:a2:18:1d:01:9e:ad:d6:bf:ba: 4b:88:a7:b9:29:f4:60:49:2b:42:f3:23:69:45:55:14:da:ba: a8:e9:30:7e:2f:d0:f6:0b:69:bd:b4:15:b6:2f:62:15:e4:77: 2a:a9:c0:07:d9:51:f3:5c:4b:a2:44:09:45:f4:ed:f3:fb:64: 93:7a:70:33:8b:cf:1b:17:e1:d5:56:62:e3:58:01:4f:e9:e8: 2a:ac:6a:07:8d:82:64:65:72:48:e2:36:d3:52:15:bd:52:db: 5c:b9:2a:93:d2:1b:ca:97:d7:94:05:d9:ad:ae:ef:c7:5a:4b: 91:4d:6a:61:a6:5f:90:e3:06:24:43:6f:cc:e3:bb:62:f5:a1: ec:f8:6f:08:c1:9b:17:c5:0b:b3:ab:5a:89:e7:36:e3:bb:e8: 5d:4f:60:04:b0:30:b8:f1:9f:3d:b8:b8:e3:f5:7f:f9:c0:18: 9b:96:13:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXvinV7XRTrBX3LkGTrIohG54TPswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAwMTA2WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODlmOGJkNTUyNGQ4MWEzYmIwNmZkN2E2MjBiMDZhMTdm NmI5YzI3NTgwZjU3OGY3ZTNjNDFiZTRhYzAxNjBjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeLMpYyp2nAo1LfIKxRAI02+wZHA0G7w5rdg1V6PgGsshA LhmejpzbzD7hjxNkjdOUiEfqLH9SGI10vJyBls8sIyomk36hAx2RJYeUJuFHvzN+ Fo/Y0bLqUf/qVotpj2qXN+f4TZV31bMZy3k16pgOpa8XwEc0N2FnYcsnByqjFWbx sfLRBKxtYpTefKIx4+ZReKM9moIsDUSpZbysU86zEYJDLGcpj8GnJ+JdxkhGSmgd sd2VYL0W2Z8sHiSWmi2AEIIh9I/zvyUVB5prGAONx7My+EAlDfA7CL9eZYB9NMpT VBmkYan1YFBBDnbMT1AXC8JTRGDvoKHJ7N9PWQ/fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfX5ReNJLnwsn0L2JL3v0cIYyHJ0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzU5YWIyNjRlLTI4NGYtNGUzMC1iMmYwLWQ4NWZhNzNiNjJiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dwwDQYJKoZIhvcNAQELBQADggEBACiJzp+UO00BZ+hFNM9KK/NgA0KI G+DS7oAJNtETZQop3MuJqPXa2Nokwdw5iFa0+UQiS6W3mFTx3MJLHZ9fderDHl+b Gy3hX44A7bEgzTiw3qIYHQGerda/ukuIp7kp9GBJK0LzI2lFVRTauqjpMH4v0PYL ab20FbYvYhXkdyqpwAfZUfNcS6JECUX07fP7ZJN6cDOLzxsX4dVWYuNYAU/p6Cqs ageNgmRlckjiNtNSFb1S21y5KpPSG8qX15QF2a2u78daS5FNamGmX5DjBiRDb8zj u2L1oez4bwjBmxfFC7OrWonnNuO76F1PYASwMLjxnz24uOP1f/nAGJuWE70= -----END CERTIFICATE-----Generated at Fri Jun 6 04:38:33 2025 by rpki-client