$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa File: 5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa (raw, json) Hash identifier: U9EGfDX2INBKNSqwF2rd7lPx5f4aXWjA8P060uhM7dw= Subject key identifier: F4:BB:DD:9C:68:E7:0D:40:67:C9:AB:F5:52:50:0B:7F:B4:B2:78:40 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 1E41F85219BD2AA0DCED622C1FFA09FC324315F5 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa Signing time: Sat 08 Feb 2025 00:00:00 +0000 ROA not before: Sat 08 Feb 2025 00:00:00 +0000 ROA not after: Sat 15 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 199.255.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:41:f8:52:19:bd:2a:a0:dc:ed:62:2c:1f:fa:09:fc:32:43:15:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 8 00:00:00 2025 GMT Not After : Mar 15 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ee:1b:fa:8a:6d:56:9b:ed:60:2c:cc:e4:26: 4e:bf:6e:d1:15:39:b6:81:7d:37:0d:52:ed:4b:e0: 79:44:7d:5f:60:bf:e7:6d:8a:a8:dd:1d:fc:f7:b5: d0:1f:31:31:78:6d:2f:cf:10:81:25:0b:4b:a8:4e: b4:bb:60:1f:db:12:9c:88:5f:43:c2:4e:ba:f4:5e: a5:c2:09:70:cb:d6:87:eb:bd:cf:a4:52:17:f2:5c: c0:26:1f:57:aa:4b:a9:ed:1a:3d:86:72:df:fa:10: 48:7c:4e:ae:09:1b:f2:ff:a1:a3:b5:91:7e:58:54: 8a:07:12:74:e9:c1:b1:9f:33:18:e6:ec:fb:c5:65: 3a:de:b9:eb:b6:16:c2:63:59:8b:97:4c:1b:4c:62: 11:48:a9:90:c3:fe:c5:07:2f:7d:99:b1:76:22:8b: 13:de:98:d9:6f:8e:4b:68:16:61:b0:f5:8f:de:c4: c1:6a:46:17:e5:a3:41:98:65:6e:24:2e:2a:3d:e5: 3e:04:21:af:a8:dc:4d:2d:8f:b3:13:c4:26:4b:d9: 9e:57:99:e9:e5:fe:08:ec:75:4c:6b:e8:af:61:c5: b4:f4:4e:a0:ee:80:3c:39:13:2f:85:75:6c:1f:51: 0a:6d:89:fa:57:da:7f:45:81:77:f6:82:6a:ef:27: d4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BB:DD:9C:68:E7:0D:40:67:C9:AB:F5:52:50:0B:7F:B4:B2:78:40 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5b719c48-5ad8-440e-87e5-abf7ba604b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.255.192.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:98:32:12:19:4c:e3:31:8b:bb:cf:d7:be:2a:f7:07:52:c2: b8:46:98:39:5d:85:df:d4:e2:f0:78:7a:bf:e5:d2:0e:2a:e4: f1:7a:6f:ef:df:ed:ba:d1:38:a0:1c:cf:cf:38:24:94:bd:4a: 54:5e:94:8c:4f:c7:1a:94:e7:2c:5d:0b:ff:0c:d1:75:27:95: 88:a7:a3:59:32:18:30:d8:af:59:8f:32:8b:53:17:b4:81:03: af:92:0c:35:b6:9f:76:81:70:ca:52:bf:25:35:cd:9d:1b:49: 1c:aa:bd:e0:24:db:85:49:24:1f:eb:cc:8b:b7:95:0d:66:43: 81:07:ad:25:9b:21:89:60:49:43:63:91:b3:8d:9c:14:ac:a0: b3:39:d9:73:14:70:9b:cc:b2:17:8a:83:09:1c:b3:33:39:13: ba:1d:a5:9e:a4:d6:be:23:5c:af:30:e1:8d:a2:01:b0:90:3c: 68:9f:25:70:cc:ec:bc:94:d4:50:a1:8d:5c:28:2c:d4:8d:9b: 9d:0e:d3:13:76:3c:a5:f7:99:f9:52:44:ec:a7:bc:b1:f4:87: ee:3d:18:be:8e:41:1f:f6:b3:14:46:86:4e:25:6d:37:c3:53: a0:41:5e:7a:d4:40:a2:18:14:90:10:84:1d:45:3a:4d:e0:e2: cb:8e:78:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHkH4Uhm9KqDc7WIsH/oJ/DJDFfUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMjA4MDAwMDAwWhcNMjUwMzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjEyMmZiZTdmOTAyNjdiNDYzNTZjNjAxMzU2NjU1ZmFj MDI3ZDYwZTk0ZWY1YzgyZmUwYjUxODllYzg4NzJjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDu7hv6im1Wm+1gLMzkJk6/btEVObaBfTcNUu1L4HlEfV9g v+dtiqjdHfz3tdAfMTF4bS/PEIElC0uoTrS7YB/bEpyIX0PCTrr0XqXCCXDL1ofr vc+kUhfyXMAmH1eqS6ntGj2Gct/6EEh8Tq4JG/L/oaO1kX5YVIoHEnTpwbGfMxjm 7PvFZTreueu2FsJjWYuXTBtMYhFIqZDD/sUHL32ZsXYiixPemNlvjktoFmGw9Y/e xMFqRhflo0GYZW4kLio95T4EIa+o3E0tj7MTxCZL2Z5Xmenl/gjsdUxr6K9hxbT0 TqDugDw5Ey+FdWwfUQptifpX2n9FgXf2gmrvJ9QHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9LvdnGjnDUBnyav1UlALf7SyeEAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzViNzE5YzQ4LTVhZDgtNDQwZS04N2U1LWFiZjdiYTYwNGI5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALH/8AwDQYJKoZIhvcNAQELBQADggEBAI6YMhIZTOMxi7vP174q9wdSwrhG mDldhd/U4vB4er/l0g4q5PF6b+/f7brROKAcz884JJS9SlRelIxPxxqU5yxdC/8M 0XUnlYino1kyGDDYr1mPMotTF7SBA6+SDDW2n3aBcMpSvyU1zZ0bSRyqveAk24VJ JB/rzIu3lQ1mQ4EHrSWbIYlgSUNjkbONnBSsoLM52XMUcJvMsheKgwkcszM5E7od pZ6k1r4jXK8w4Y2iAbCQPGifJXDM7LyU1FChjVwoLNSNm50O0xN2PKX3mflSROyn vLH0h+49GL6OQR/2sxRGhk4lbTfDU6BBXnrUQKIYFJAQhB1FOk3g4suOeOk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:13 2025 by rpki-client