$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa File: b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa (raw, json) Hash identifier: RWwJZf/Yl4+WZ4LNJDgdzgSmGht4uQn4HZPuEPqdCkA= Subject key identifier: 6C:65:C4:5F:2B:C3:6A:81:6E:AA:CF:25:33:BD:91:86:41:47:E8:48 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 201DE97FBEC1FBC35E5F91AD0433C303A85C46EF Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa Signing time: Mon 17 Mar 2025 15:01:09 +0000 ROA not before: Mon 17 Mar 2025 15:01:09 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.251.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1d:e9:7f:be:c1:fb:c3:5e:5f:91:ad:04:33:c3:03:a8:5c:46:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Mar 17 15:01:09 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:46:06:b4:be:4f:58:97:ef:1c:55:0a:ac: de:af:25:26:54:1a:3e:4a:79:f9:ae:0f:05:4e:22: a4:e9:34:ff:ab:e3:56:83:b4:28:8e:18:a5:c6:97: 08:4b:82:0b:20:49:6d:9a:40:48:c6:1b:2d:59:af: 25:71:e0:d8:cc:6a:2f:aa:56:79:12:e8:11:a0:ba: fa:dc:f4:40:1c:d0:d4:4a:28:b5:f2:96:b7:fd:79: 7c:60:ca:57:ec:fe:12:26:ad:a7:b6:d0:2e:c9:4e: b5:83:fc:a4:80:cc:33:ff:0b:ef:37:09:63:0f:94: 38:1a:6e:76:fa:5d:f4:8a:df:70:8a:39:b7:4d:6e: a5:83:1b:24:7a:38:b7:ae:81:37:88:f7:69:36:b5: 5d:45:cd:7d:d4:0e:12:e1:a1:00:2f:5f:d7:93:b2: 2b:41:41:f0:e8:10:ab:54:02:f1:e9:03:6a:cf:f6: dc:00:4d:45:9d:04:8f:d4:7d:ee:b7:5b:7b:82:ec: ad:4f:07:d0:3b:13:2b:3c:76:98:5c:39:83:21:32: 38:45:81:d2:29:67:05:ba:6c:f2:e8:75:90:53:d3: 4b:5d:4b:c8:25:97:ac:c5:17:c0:cc:93:35:ac:b7: 8c:63:21:9a:bf:c0:a1:1b:cb:60:86:88:aa:ff:2f: 65:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:65:C4:5F:2B:C3:6A:81:6E:AA:CF:25:33:BD:91:86:41:47:E8:48 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5cc85b6-fdc1-4a8f-b266-611d77cebf5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.252.0/22 Signature Algorithm: sha256WithRSAEncryption 26:b6:22:85:09:85:59:e7:12:74:5f:b4:a1:0d:80:22:69:34: 22:68:b1:b3:9a:0e:bb:75:e8:16:18:65:56:5a:9b:ad:a5:5b: 5b:5c:5d:7e:51:ff:79:e2:48:a2:05:73:9f:b7:f8:80:51:4a: ed:d2:90:b4:f4:dd:4e:fc:05:bc:52:a0:da:8c:ab:83:70:32: a1:c0:da:1d:85:73:66:80:2f:13:ae:64:fe:3c:e2:85:50:b0: 85:31:ba:4e:58:81:63:26:e9:1a:f9:ac:ae:2c:d0:5d:9e:01: a4:eb:f9:e5:ab:55:9c:d3:7d:26:88:a9:46:3c:90:80:60:91: bc:32:ff:68:ba:35:e9:bf:53:03:a2:9b:e6:0e:27:03:97:67: 79:dc:21:12:d9:ca:3d:5f:d6:6e:e2:01:98:a1:9c:15:c5:ad: fe:77:ff:a8:a5:7a:eb:b3:1b:2d:f3:7a:a4:76:9f:99:d3:6a: 16:76:5e:b0:f2:68:76:a4:92:0d:f2:1e:19:95:2a:cc:b5:7e: 63:2e:52:2d:ce:58:e9:3d:18:63:3b:d8:e8:04:07:42:68:e4: 88:86:e1:cb:6a:ce:bf:d6:6b:44:d4:b6:da:63:3f:c4:5a:9e: 7d:a1:c8:bc:a9:c3:07:89:b1:50:36:35:27:d9:47:3c:fb:4f: 89:32:27:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIB3pf77B+8NeX5GtBDPDA6hcRu8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMzE3MTUwMTA5WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMTMzNmNhMzZhMWQ4NDI0ZTMyMjQ2YjI1YzY0ZGRhZjQ4 ZGIwZWE4NTM0ZDU3YjVmOTdkODdmYTYwNTVlOWNiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmW0YGtL5PWJfvHFUKrN6vJSZUGj5KefmuDwVOIqTpNP+r 41aDtCiOGKXGlwhLggsgSW2aQEjGGy1ZryVx4NjMai+qVnkS6BGguvrc9EAc0NRK KLXylrf9eXxgylfs/hImrae20C7JTrWD/KSAzDP/C+83CWMPlDgabnb6XfSK33CK ObdNbqWDGyR6OLeugTeI92k2tV1FzX3UDhLhoQAvX9eTsitBQfDoEKtUAvHpA2rP 9twATUWdBI/Ufe63W3uC7K1PB9A7Eys8dphcOYMhMjhFgdIpZwW6bPLodZBT00td S8gll6zFF8DMkzWst4xjIZq/wKEby2CGiKr/L2UtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbGXEXyvDaoFuqs8lM72RhkFH6EgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I1Y2M4NWI2LWZkYzEtNGE4Zi1iMjY2LTYxMWQ3N2NlYmY1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX+/wwDQYJKoZIhvcNAQELBQADggEBACa2IoUJhVnnEnRftKENgCJpNCJo sbOaDrt16BYYZVZam62lW1tcXX5R/3niSKIFc5+3+IBRSu3SkLT03U78BbxSoNqM q4NwMqHA2h2Fc2aALxOuZP484oVQsIUxuk5YgWMm6Rr5rK4s0F2eAaTr+eWrVZzT fSaIqUY8kIBgkbwy/2i6Nem/UwOim+YOJwOXZ3ncIRLZyj1f1m7iAZihnBXFrf53 /6ileuuzGy3zeqR2n5nTahZ2XrDyaHakkg3yHhmVKsy1fmMuUi3OWOk9GGM72OgE B0Jo5IiG4ctqzr/Wa0TUttpjP8Rann2hyLypwweJsVA2NSfZRzz7T4kyJ1o= -----END CERTIFICATE-----Generated at Fri Apr 4 23:28:11 2025 by rpki-client