$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa File: 5e3c0e08-edb8-4079-81e3-f4c857efb338.roa (raw, json) Hash identifier: p0YApB75OVvh43ovbbqQlfsdfMGiyzK9hHKZE3BhxAQ= Subject key identifier: D1:B5:37:10:6F:7A:22:2A:88:26:87:48:E1:06:46:95:F5:A6:B3:D7 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 694379C4EF250709B5A820CFB540052EF3C9BE7F Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa Signing time: Sat 31 May 2025 00:00:57 +0000 ROA not before: Sat 31 May 2025 00:00:57 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:43:79:c4:ef:25:07:09:b5:a8:20:cf:b5:40:05:2e:f3:c9:be:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:00:57 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=930e21db28ae22ee07d750cad785694942ed95360354ee5308588e937c3a3fcd, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:35:98:c3:86:e0:04:b8:1d:b3:53:1e:57: c7:34:53:0d:d0:69:9f:71:62:d1:a3:09:b3:5a:94: b8:7f:77:a4:9c:a9:52:a0:d1:27:69:bc:88:94:92: f5:b2:4d:b5:75:de:fe:29:a7:67:6e:a4:b3:54:cd: e8:3f:70:50:db:72:47:3f:36:c6:4a:3e:fe:b6:9e: cd:1b:67:c3:36:14:4a:e7:1a:8f:3d:90:ba:dc:bb: 18:c9:6c:42:97:e7:a4:41:e3:56:93:f4:08:50:fb: 28:58:9b:ea:2a:6e:72:54:28:15:bf:99:fc:82:fb: 74:0e:5f:eb:80:61:bf:b7:82:46:ee:f2:4d:7b:d6: 88:8e:1a:a2:5c:06:c0:30:4e:ac:a8:f1:7a:76:52: 37:05:d8:8a:64:eb:da:50:78:07:2b:4a:5b:91:94: 4d:ae:ab:31:26:94:98:5a:d7:ca:21:4c:0b:0f:02: 9e:90:92:1d:f2:3d:74:0d:d8:6e:41:42:ec:8b:4c: 92:61:32:89:67:0f:27:1e:58:2c:6a:e0:83:6b:41: f7:89:11:be:f2:fa:b5:f7:80:ff:93:4c:ca:a4:e4: e9:ea:ca:64:62:96:76:e3:fd:39:60:72:f8:7c:2b: 73:16:44:59:0a:6e:aa:2b:f6:4c:09:71:f8:b9:76: b9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B5:37:10:6F:7A:22:2A:88:26:87:48:E1:06:46:95:F5:A6:B3:D7 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 66:16:18:5c:b1:1e:ad:61:00:a1:33:8b:1b:c8:43:be:9a:53: f6:cb:c2:25:4e:eb:d3:13:ff:0e:27:43:db:9b:53:de:86:0b: 99:66:83:c1:14:63:36:90:f8:4a:9c:34:e8:9b:46:2a:ba:08: ca:70:03:af:4a:9a:47:1b:a8:8e:4a:36:83:27:dc:53:16:80: ce:46:31:8f:84:95:7d:48:99:b3:e5:d6:80:7a:6f:03:ae:e6: 36:3e:c9:a7:c6:c7:44:e0:06:9f:88:ca:2d:4c:88:91:8b:11: 8d:e6:26:4d:6e:13:85:bc:6b:67:d0:90:1c:e8:82:18:3c:d0: 4f:22:08:6e:c4:1c:72:f0:76:dc:d8:e2:da:35:65:6a:55:aa: bd:0a:35:02:4a:d6:ba:77:83:ad:e6:8f:b2:87:17:ae:31:74: c2:02:3b:60:f5:20:7c:bc:db:48:f5:20:07:ed:1a:b3:9e:6d: 98:49:4d:d7:8b:81:c8:a6:51:c1:55:5d:08:c9:48:68:76:d4: 1c:22:88:d1:fa:96:a8:fd:f5:4a:ab:09:cb:fa:dd:9e:c6:52: 19:a4:41:db:f0:50:14:b8:43:4a:2f:23:a4:d4:4b:d4:2f:12: 13:99:64:58:51:82:1c:10:e7:1f:87:89:c0:b1:e8:2e:7f:93: b8:be:31:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaUN5xO8lBwm1qCDPtUAFLvPJvn8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAwMDU3WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzBlMjFkYjI4YWUyMmVlMDdkNzUwY2FkNzg1Njk0OTQy ZWQ5NTM2MDM1NGVlNTMwODU4OGU5MzdjM2EzZmNkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj0DWYw4bgBLgds1MeV8c0Uw3QaZ9xYtGjCbNalLh/d6Sc qVKg0SdpvIiUkvWyTbV13v4pp2dupLNUzeg/cFDbckc/NsZKPv62ns0bZ8M2FErn Go89kLrcuxjJbEKX56RB41aT9AhQ+yhYm+oqbnJUKBW/mfyC+3QOX+uAYb+3gkbu 8k171oiOGqJcBsAwTqyo8Xp2UjcF2Ipk69pQeAcrSluRlE2uqzEmlJha18ohTAsP Ap6Qkh3yPXQN2G5BQuyLTJJhMolnDyceWCxq4INrQfeJEb7y+rX3gP+TTMqk5Onq ymRilnbj/Tlgcvh8K3MWRFkKbqor9kwJcfi5drnjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0bU3EG96IiqIJodI4QZGlfWms9cwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVlM2MwZTA4LWVkYjgtNDA3OS04MWUzLWY0Yzg1N2VmYjMzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBAGYWGFyxHq1hAKEzixvIQ76aU/bL wiVO69MT/w4nQ9ubU96GC5lmg8EUYzaQ+EqcNOibRiq6CMpwA69KmkcbqI5KNoMn 3FMWgM5GMY+ElX1ImbPl1oB6bwOu5jY+yafGx0TgBp+Iyi1MiJGLEY3mJk1uE4W8 a2fQkBzoghg80E8iCG7EHHLwdtzY4to1ZWpVqr0KNQJK1rp3g63mj7KHF64xdMIC O2D1IHy820j1IAftGrOebZhJTdeLgcimUcFVXQjJSGh21BwiiNH6lqj99UqrCcv6 3Z7GUhmkQdvwUBS4Q0ovI6TUS9QvEhOZZFhRghwQ5x+HicCx6C5/k7i+MXo= -----END CERTIFICATE-----Generated at Fri Jun 6 18:11:05 2025 by rpki-client