$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b09c0df5-29e8-430d-b994-fadbc1050235.roa File: b09c0df5-29e8-430d-b994-fadbc1050235.roa (raw, json) Hash identifier: 7aeZpXgEwNH97miI918g6oo6n7zYl2QoMuka5+X1M6k= Subject key identifier: D2:F2:7C:D4:98:1A:49:94:34:84:C7:40:4B:28:F5:3D:CA:FA:18:E1 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2F6F47FE37E63BD8013B9C09CA04D1B72F7773BE Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b09c0df5-29e8-430d-b994-fadbc1050235.roa Signing time: Sat 25 Jan 2025 00:00:00 +0000 ROA not before: Sat 25 Jan 2025 00:00:00 +0000 ROA not after: Sat 01 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6f:47:fe:37:e6:3b:d8:01:3b:9c:09:ca:04:d1:b7:2f:77:73:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jan 25 00:00:00 2025 GMT Not After : Mar 1 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8c:63:a3:e4:fc:31:3d:fb:51:08:38:43:a7: c4:ed:d7:78:b8:1e:3d:35:b3:41:6d:52:9c:bb:15: 89:04:c8:ca:40:04:0d:21:01:96:13:e5:c7:65:82: be:b5:1b:e8:6e:df:6b:0f:8b:9a:4c:59:36:57:25: 00:ed:17:69:35:24:f3:c6:7c:fe:f0:ea:75:6f:1e: 75:e7:a1:e5:89:0d:45:36:1c:65:0f:94:84:dd:f0: 9e:3f:cd:1e:26:a0:0c:ef:a4:7a:dc:94:4f:fc:c8: 4f:a6:57:85:9e:21:4a:b3:b2:bc:dd:ae:fd:ad:62: d1:e0:48:55:77:0d:3e:f9:f2:78:80:11:1b:83:df: 26:3b:53:57:30:df:e4:eb:30:8b:7b:79:d2:65:48: 56:77:d7:20:f4:38:71:78:b6:13:b2:51:ca:1c:0d: 4f:7d:b0:87:70:53:7b:9f:53:73:75:65:d3:c9:af: 0f:9c:8e:11:cd:e4:8a:80:3a:45:c4:70:7e:0e:a7: 93:f7:77:bb:62:1b:11:c6:20:79:57:99:b8:62:51: 87:ca:7c:bb:7c:8f:a3:1e:7c:1e:16:a7:db:1f:51: 7b:33:10:9a:09:8c:9c:45:36:cb:de:84:09:ea:00: 88:42:ba:b9:1d:d3:95:25:25:ca:94:be:42:94:87: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F2:7C:D4:98:1A:49:94:34:84:C7:40:4B:28:F5:3D:CA:FA:18:E1 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b09c0df5-29e8-430d-b994-fadbc1050235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.214.0/24 Signature Algorithm: sha256WithRSAEncryption 08:a0:c1:4d:e3:47:4d:13:79:9c:af:23:b1:55:d5:3d:42:1b: 6c:32:a0:9e:ec:23:ee:89:9b:4e:e8:ab:26:c0:7e:3d:a9:8b: 76:82:96:ac:e1:ca:42:8c:6f:72:22:ae:a0:08:74:d2:5c:ff: b0:93:62:8c:c0:b2:fd:a7:0e:e5:3d:4a:cd:43:33:fe:bd:8c: 2b:b5:b1:60:1b:d1:e1:fc:5b:af:90:0e:82:87:2f:f2:b4:a4: 4d:55:1b:89:2c:a5:58:10:8c:fd:2c:bd:26:69:cd:83:72:f9: b7:04:00:25:33:75:57:da:1a:c5:9f:a3:2f:49:f3:0f:a8:57: 2d:4c:11:59:5d:43:02:2b:3f:bc:50:5d:b4:19:b2:e1:a3:a4: 86:2b:3a:67:a5:32:42:b6:cf:c9:c0:94:d8:80:80:f3:36:ea: 3e:a8:9e:f8:a2:27:47:54:29:de:c8:94:62:7e:2f:c1:93:48: 6d:e0:c9:05:9d:38:b4:77:5f:cb:2a:ca:36:ad:82:21:32:a0: 67:68:2d:84:c7:a8:0b:1a:d4:30:f1:7e:6c:0e:67:69:2f:36: 37:38:3d:06:10:a0:93:2a:2e:19:a1:20:fe:ba:d7:96:ca:88: 0a:15:98:48:04:5a:33:47:8c:07:6f:d0:68:0d:d7:13:c1:d5: eb:3e:10:da -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL29H/jfmO9gBO5wJygTRty93c74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTI1MDAwMDAwWhcNMjUwMzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjI4YThhOWEyNTgwZDliNzJlODY0NDBjYzU5NjE4MThj YjUzZjk1OTZhY2U0ZTQwZjU5OWU5NTNkMDRkYTU1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVjGOj5PwxPftRCDhDp8Tt13i4Hj01s0FtUpy7FYkEyMpA BA0hAZYT5cdlgr61G+hu32sPi5pMWTZXJQDtF2k1JPPGfP7w6nVvHnXnoeWJDUU2 HGUPlITd8J4/zR4moAzvpHrclE/8yE+mV4WeIUqzsrzdrv2tYtHgSFV3DT758niA ERuD3yY7U1cw3+TrMIt7edJlSFZ31yD0OHF4thOyUcocDU99sIdwU3ufU3N1ZdPJ rw+cjhHN5IqAOkXEcH4Op5P3d7tiGxHGIHlXmbhiUYfKfLt8j6MefB4Wp9sfUXsz EJoJjJxFNsvehAnqAIhCurkd05UlJcqUvkKUh04hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0vJ81JgaSZQ0hMdASyj1Pcr6GOEwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2IwOWMwZGY1LTI5ZTgtNDMwZC1iOTk0LWZhZGJjMTA1MDIzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dYwDQYJKoZIhvcNAQELBQADggEBAAigwU3jR00TeZyvI7FV1T1CG2wy oJ7sI+6Jm07oqybAfj2pi3aClqzhykKMb3IirqAIdNJc/7CTYozAsv2nDuU9Ss1D M/69jCu1sWAb0eH8W6+QDoKHL/K0pE1VG4kspVgQjP0svSZpzYNy+bcEACUzdVfa GsWfoy9J8w+oVy1MEVldQwIrP7xQXbQZsuGjpIYrOmelMkK2z8nAlNiAgPM26j6o nviiJ0dUKd7IlGJ+L8GTSG3gyQWdOLR3X8sqyjatgiEyoGdoLYTHqAsa1DDxfmwO Z2kvNjc4PQYQoJMqLhmhIP6615bKiAoVmEgEWjNHjAdv0GgN1xPB1es+ENo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:27 2025 by rpki-client