$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b09c0df5-29e8-430d-b994-fadbc1050235.roa File: b09c0df5-29e8-430d-b994-fadbc1050235.roa (raw, json) Hash identifier: lweQTmQ1AUyOCuWG5GBvhKXOiJSS+68gt1hHXEvU97E= Subject key identifier: 12:9D:F4:DC:8E:08:3B:F1:08:32:3D:15:F2:60:0B:2E:EF:E8:A9:F0 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6466B14E5AD145AE658A750200AC1FA3EEF2864A Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b09c0df5-29e8-430d-b994-fadbc1050235.roa Signing time: Sat 31 May 2025 00:01:10 +0000 ROA not before: Sat 31 May 2025 00:01:10 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:66:b1:4e:5a:d1:45:ae:65:8a:75:02:00:ac:1f:a3:ee:f2:86:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:01:10 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=eff21b4278d4d602ef80a2bd2d2f26c248a5779012fe2de6a7e8fb6266b74899, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:34:ed:e7:62:d9:5e:24:a2:e6:74:c8:ae:d7: bd:09:68:e4:01:22:b2:ef:35:cb:88:fa:30:c5:3a: 0c:f7:97:46:fc:fc:e9:c4:66:bc:0e:c3:f9:16:53: 86:23:f9:2e:03:96:0c:c1:fe:32:0b:0c:0e:87:c1: 24:90:c5:74:2a:2d:1b:4d:2c:51:6c:7d:8a:ca:81: 2f:db:7f:cb:9f:bc:8e:cd:0e:65:0f:69:05:0a:98: 03:cd:6a:75:39:bd:d2:ee:ba:ed:3c:39:be:8e:45: 81:ad:1d:f5:06:94:52:dc:c3:0e:29:31:92:b6:98: 5e:d4:10:13:6b:73:6f:66:3d:38:a9:dc:88:c4:df: 65:9c:be:96:08:6b:01:16:c1:92:22:49:45:e3:d8: aa:c4:20:5d:85:3d:c8:f2:59:08:4a:9f:22:65:91: f2:ab:d2:03:16:ad:7d:da:d4:ae:38:8f:00:40:89: 37:87:0a:62:08:a2:77:c9:e1:43:e1:b1:7e:2c:1d: fb:92:fa:f3:e7:a1:95:84:6c:e2:93:90:9f:57:40: a1:98:65:82:da:a8:0d:93:1f:c0:5d:e0:2f:ac:ad: 04:6d:24:27:0d:4f:3f:d5:7d:df:e8:95:fb:f8:52: 0a:13:4f:db:45:ba:44:a8:bf:01:fd:21:e9:23:08: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9D:F4:DC:8E:08:3B:F1:08:32:3D:15:F2:60:0B:2E:EF:E8:A9:F0 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b09c0df5-29e8-430d-b994-fadbc1050235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.214.0/24 Signature Algorithm: sha256WithRSAEncryption 63:8c:d5:db:9e:5b:b2:12:a4:f3:71:89:19:82:e8:81:f9:97: c6:a2:e6:22:8a:94:d9:e5:90:57:e6:6d:d9:00:55:1b:1e:9a: 28:30:85:14:f3:62:cd:89:0a:63:d9:4d:cf:d2:a2:dd:8d:e8: 5b:e3:e0:ff:bd:e3:17:5c:29:ca:2e:9f:9f:d8:07:eb:be:4a: b1:70:20:b6:0c:b8:79:3d:30:df:a2:63:58:cd:bb:83:7a:d8: 13:0f:43:c5:c3:e3:92:39:5e:72:3d:e0:31:48:a4:0b:ca:c3: 3b:73:43:95:df:cc:54:2a:6d:7e:d0:35:ef:f1:b8:64:a0:3c: 83:14:c6:e7:2c:9f:98:0b:76:54:fc:ae:66:81:8c:31:3b:0c: 50:23:aa:04:ad:16:66:a5:7e:ef:8a:0a:6e:c0:90:e1:f0:a8: 14:d1:cf:a0:33:9d:b4:e3:35:8c:87:71:15:58:95:d8:c5:db: cb:af:f9:80:5a:3d:09:ce:08:31:bd:fa:c8:4a:1b:f3:46:59: b6:e7:fb:ed:6a:f4:ce:af:2e:65:11:f7:f3:c0:29:d1:93:8c: b6:c9:25:2c:16:61:68:1c:97:bc:29:20:b0:1f:b8:b4:31:0c: 6e:8e:ee:1d:96:89:30:a8:90:11:79:0d:f3:b9:8d:60:ef:62: 74:4f:8e:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZGaxTlrRRa5linUCAKwfo+7yhkowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAwMTEwWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmYyMWI0Mjc4ZDRkNjAyZWY4MGEyYmQyZDJmMjZjMjQ4 YTU3NzkwMTJmZTJkZTZhN2U4ZmI2MjY2Yjc0ODk5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQNO3nYtleJKLmdMiu170JaOQBIrLvNcuI+jDFOgz3l0b8 /OnEZrwOw/kWU4Yj+S4DlgzB/jILDA6HwSSQxXQqLRtNLFFsfYrKgS/bf8ufvI7N DmUPaQUKmAPNanU5vdLuuu08Ob6ORYGtHfUGlFLcww4pMZK2mF7UEBNrc29mPTip 3IjE32WcvpYIawEWwZIiSUXj2KrEIF2FPcjyWQhKnyJlkfKr0gMWrX3a1K44jwBA iTeHCmIIonfJ4UPhsX4sHfuS+vPnoZWEbOKTkJ9XQKGYZYLaqA2TH8Bd4C+srQRt JCcNTz/Vfd/olfv4UgoTT9tFukSovwH9IekjCMkdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEp303I4IO/EIMj0V8mALLu/oqfAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2IwOWMwZGY1LTI5ZTgtNDMwZC1iOTk0LWZhZGJjMTA1MDIzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dYwDQYJKoZIhvcNAQELBQADggEBAGOM1dueW7ISpPNxiRmC6IH5l8ai 5iKKlNnlkFfmbdkAVRsemigwhRTzYs2JCmPZTc/Sot2N6Fvj4P+94xdcKcoun5/Y B+u+SrFwILYMuHk9MN+iY1jNu4N62BMPQ8XD45I5XnI94DFIpAvKwztzQ5XfzFQq bX7QNe/xuGSgPIMUxucsn5gLdlT8rmaBjDE7DFAjqgStFmalfu+KCm7AkOHwqBTR z6AznbTjNYyHcRVYldjF28uv+YBaPQnOCDG9+shKG/NGWbbn++1q9M6vLmUR9/PA KdGTjLbJJSwWYWgcl7wpILAfuLQxDG6O7h2WiTCokBF5DfO5jWDvYnRPjnA= -----END CERTIFICATE-----Generated at Sat Jun 7 04:59:49 2025 by rpki-client