$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa File: 8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa (raw, json) Hash identifier: KfCaHECAE4PHdaDpBzyCcLJG7WMib9DaLwxTinKXtMY= Subject key identifier: D0:AD:3A:20:3A:FD:05:73:B6:DE:92:54:8D:01:A4:FD:5E:55:96:82 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 501E9FFAB80BDFC2297CADC66CB7E0324878EA91 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa Signing time: Mon 19 May 2025 15:10:28 +0000 ROA not before: Mon 19 May 2025 15:10:28 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1e:9f:fa:b8:0b:df:c2:29:7c:ad:c6:6c:b7:e0:32:48:78:ea:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 19 15:10:28 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=90f9ac544fb56285f795d9bfe46df74479ea0ed7ac23b88d9db048abfc9795c9, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:a4:4e:d3:59:73:e2:cf:5f:d3:eb:dd:75: b1:6f:52:98:f8:31:a3:d1:d6:38:1d:1c:62:29:a8: ed:82:36:9c:d1:c0:85:e8:c1:e9:f8:7f:a1:e4:4c: a7:7d:db:68:0e:81:fd:31:dc:a4:9a:34:a9:d0:5c: 7b:13:5c:e0:c1:9e:4a:b8:f9:e2:ba:3a:a9:44:ed: cc:a1:fc:c3:ec:d2:21:a1:6d:89:67:46:91:44:63: 5a:5d:eb:b2:61:54:fe:a8:28:b9:2d:ba:1c:bf:78: 43:00:70:a1:ba:87:fc:b6:cf:73:19:2f:e3:6a:15: 45:70:b2:77:0e:73:fe:78:3c:60:5d:af:da:61:b4: bc:52:a2:48:5b:0f:6b:ea:64:bf:b0:de:91:16:40: 27:24:51:32:34:a3:42:cb:65:55:d0:72:fb:0c:ff: 30:bb:47:22:b4:1a:0b:bf:bf:48:f8:e2:f1:61:eb: 31:63:54:e5:4b:9d:0d:b8:9b:1f:65:9e:95:65:58: f7:a4:0b:d3:cc:ac:a3:7f:1c:40:ef:79:b5:69:44: 3a:b3:8b:3b:15:bf:21:d5:fb:8b:ee:f1:db:26:e6: b9:77:7b:96:1a:7d:39:58:25:5b:42:a7:cb:7f:fc: 50:ae:68:c4:2e:b5:ad:d7:58:17:5a:97:39:f0:6a: 55:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AD:3A:20:3A:FD:05:73:B6:DE:92:54:8D:01:A4:FD:5E:55:96:82 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8b52f640-42d6-47b7-a08e-d2f8931d5cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.246.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:3b:6a:b7:e6:7a:11:4b:b5:9f:04:33:c1:a3:39:90:ee:e0: 7f:54:19:52:43:c6:0b:27:58:78:eb:6d:d0:83:fd:39:9a:73: c7:e7:81:d1:16:ab:5d:73:82:01:3b:50:a2:29:f7:1c:07:2d: 9c:46:a2:42:1b:98:0b:fa:af:4c:e0:7b:89:04:15:f4:d3:e8: e3:3a:16:85:88:04:13:c7:dc:76:a7:9b:10:9e:a2:d2:51:8b: ad:d0:e4:d1:16:45:28:d8:ca:3e:19:20:5c:13:3d:ec:69:ed: a0:58:8d:db:12:ad:d8:16:f3:dd:16:8f:41:b1:d5:8f:93:fa: 63:0f:7b:47:86:21:f0:38:78:85:8e:04:18:e2:34:31:62:47: a5:68:41:cc:47:a2:b1:94:d5:6b:8d:d1:d8:e9:14:41:be:9c: b6:a9:93:00:94:9c:64:f2:2b:ce:bf:66:37:79:37:d9:fe:8a: 65:f7:a6:42:40:ec:70:ba:63:da:44:33:5b:f1:10:67:f9:9b: 44:6a:56:9c:4f:c8:2a:42:8f:08:12:3a:82:6b:c2:d5:30:a0: 97:e6:8b:71:27:78:47:c9:c1:24:4e:93:5e:8a:6b:b3:8f:f5: 0b:37:20:ca:fc:05:92:e0:aa:6c:ad:dc:89:e2:e8:4f:68:12: 6d:e7:96:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUB6f+rgL38IpfK3GbLfgMkh46pEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTE5MTUxMDI4WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MGY5YWM1NDRmYjU2Mjg1Zjc5NWQ5YmZlNDZkZjc0NDc5 ZWEwZWQ3YWMyM2I4OGQ5ZGIwNDhhYmZjOTc5NWM5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfkKRO01lz4s9f0+vddbFvUpj4MaPR1jgdHGIpqO2CNpzR wIXowen4f6HkTKd922gOgf0x3KSaNKnQXHsTXODBnkq4+eK6OqlE7cyh/MPs0iGh bYlnRpFEY1pd67JhVP6oKLktuhy/eEMAcKG6h/y2z3MZL+NqFUVwsncOc/54PGBd r9phtLxSokhbD2vqZL+w3pEWQCckUTI0o0LLZVXQcvsM/zC7RyK0Ggu/v0j44vFh 6zFjVOVLnQ24mx9lnpVlWPekC9PMrKN/HEDvebVpRDqzizsVvyHV+4vu8dsm5rl3 e5YafTlYJVtCp8t//FCuaMQuta3XWBdalznwalVRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0K06IDr9BXO23pJUjQGk/V5VloIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzhiNTJmNjQwLTQyZDYtNDdiNy1hMDhlLWQyZjg5MzFkNWNmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/YwDQYJKoZIhvcNAQELBQADggEBAI47arfmehFLtZ8EM8GjOZDu4H9U GVJDxgsnWHjrbdCD/Tmac8fngdEWq11zggE7UKIp9xwHLZxGokIbmAv6r0zge4kE FfTT6OM6FoWIBBPH3HanmxCeotJRi63Q5NEWRSjYyj4ZIFwTPexp7aBYjdsSrdgW 890Wj0Gx1Y+T+mMPe0eGIfA4eIWOBBjiNDFiR6VoQcxHorGU1WuN0djpFEG+nLap kwCUnGTyK86/Zjd5N9n+imX3pkJA7HC6Y9pEM1vxEGf5m0RqVpxPyCpCjwgSOoJr wtUwoJfmi3EneEfJwSROk16Ka7OP9Qs3IMr8BZLgqmyt3Ini6E9oEm3nlq8= -----END CERTIFICATE-----Generated at Fri Jun 6 05:01:12 2025 by rpki-client