$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa File: b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa (raw, json) Hash identifier: Q8FrgTPG2SubREiQO7z75PlYXAiiUT8ST3NEpldskJI= Subject key identifier: 65:15:41:8C:54:DF:AE:14:2A:79:18:C5:C7:21:FC:E4:D3:27:BA:D8 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 06EB942EDBAAC188CA2E72B5E8048E5BDE7A20D4 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa Signing time: Sat 25 Jan 2025 00:00:00 +0000 ROA not before: Sat 25 Jan 2025 00:00:00 +0000 ROA not after: Sat 01 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 23.251.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:eb:94:2e:db:aa:c1:88:ca:2e:72:b5:e8:04:8e:5b:de:7a:20:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jan 25 00:00:00 2025 GMT Not After : Mar 1 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0c:ac:b4:3b:ad:ad:08:ea:7f:0d:93:0d:cf: 10:e6:d1:2b:d7:be:03:8c:8d:c9:06:5b:eb:e0:4e: 00:a2:50:0f:df:d1:b5:1a:f8:77:ae:66:6c:75:71: 17:7d:c8:76:c1:fc:03:e3:92:1c:fa:58:9b:82:18: 97:28:a8:7e:f1:b3:b2:f7:2b:35:4d:d8:7e:a3:5f: af:ed:4d:ac:30:47:18:1c:50:4d:97:24:ba:5d:f8: 31:43:49:43:f7:07:a7:00:e5:b5:6b:3c:6c:12:ef: 70:18:81:28:a5:14:7c:95:90:4f:52:b2:0a:3e:66: 65:c9:38:90:14:17:85:fa:51:cb:9a:8d:f6:58:bb: 9f:42:0a:ba:5b:25:b4:bb:05:1f:53:77:7b:af:66: bb:31:6c:f3:7c:0b:74:c2:e7:27:83:ec:b8:1e:98: 75:08:8d:8b:42:fc:b5:7e:d7:f2:ca:46:09:15:36: c7:5c:81:ca:40:79:3e:e2:50:f4:f7:09:47:c2:a8: 28:70:92:55:e8:d9:26:25:09:e1:9f:b8:24:62:26: c3:83:c5:ff:45:7a:97:b6:d1:88:fa:cc:80:82:20: 44:a7:c6:a2:2b:3e:c1:17:da:b7:90:be:a2:a1:82: c0:2d:0a:ab:48:6d:c6:f3:d9:5e:b8:07:ec:35:fa: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:15:41:8C:54:DF:AE:14:2A:79:18:C5:C7:21:FC:E4:D3:27:BA:D8 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b6ee93d8-d7a7-41ad-8de1-90a055bc197c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.228.0/22 Signature Algorithm: sha256WithRSAEncryption 92:ac:22:82:9a:1d:cb:52:e8:db:c6:ff:a1:1f:3d:42:97:e3: c8:15:2a:0d:bf:e3:9f:6a:27:3e:e4:8e:7b:10:3d:78:57:50: b1:db:54:8c:59:d7:7b:03:8f:22:25:b6:b6:11:68:25:27:d5: 59:8a:04:b3:81:01:4b:09:3e:92:39:6c:b6:bf:11:51:35:df: a3:cd:dd:d3:3c:5a:79:5e:8a:d8:72:9d:5c:a2:72:57:12:37: 1c:52:49:9c:d7:d8:f6:21:a7:91:84:54:be:92:ce:13:41:25: 68:21:5b:d4:7b:e6:bd:36:f2:4c:ff:74:16:5a:d8:41:31:29: fc:80:14:88:dc:11:11:e0:b7:d5:a3:8f:57:00:c7:bd:67:0f: 79:d4:44:e9:4a:88:c5:4e:c2:39:1d:41:45:82:09:ee:c4:25: 86:b0:b1:c5:32:13:e1:03:bf:6c:fe:9f:2f:d9:83:46:bb:23: 8e:aa:1a:23:15:2d:71:34:44:31:7a:00:20:7a:b7:7e:16:0e: ac:1f:23:12:9b:27:e0:23:1b:ac:a3:5e:f1:d3:3f:30:a7:d7: 58:ad:65:5d:21:9e:60:82:e8:fc:51:51:ee:1c:db:0f:81:2b: 72:65:e3:2c:7a:56:ee:7b:3e:c9:d2:46:01:77:de:bb:8c:ee: c7:ea:4d:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBuuULtuqwYjKLnK16ASOW956INQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTI1MDAwMDAwWhcNMjUwMzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmY4NmVlMjQ3ZjIwYmIyNWNiMmU3YTA4ZjhmNGU1ZDhl NDA4MmYwYTlhOWJjYzExYjczNWQ4NTBlNTcyY2RlMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpDKy0O62tCOp/DZMNzxDm0SvXvgOMjckGW+vgTgCiUA/f 0bUa+HeuZmx1cRd9yHbB/APjkhz6WJuCGJcoqH7xs7L3KzVN2H6jX6/tTawwRxgc UE2XJLpd+DFDSUP3B6cA5bVrPGwS73AYgSilFHyVkE9Ssgo+ZmXJOJAUF4X6Ucua jfZYu59CCrpbJbS7BR9Td3uvZrsxbPN8C3TC5yeD7LgemHUIjYtC/LV+1/LKRgkV NsdcgcpAeT7iUPT3CUfCqChwklXo2SYlCeGfuCRiJsODxf9Fepe20Yj6zICCIESn xqIrPsEX2reQvqKhgsAtCqtIbcbz2V64B+w1+o8rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZRVBjFTfrhQqeRjFxyH85NMnutgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I2ZWU5M2Q4LWQ3YTctNDFhZC04ZGUxLTkwYTA1NWJjMTk3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIX++QwDQYJKoZIhvcNAQELBQADggEBAJKsIoKaHctS6NvG/6EfPUKX48gV Kg2/459qJz7kjnsQPXhXULHbVIxZ13sDjyIltrYRaCUn1VmKBLOBAUsJPpI5bLa/ EVE136PN3dM8WnleithynVyiclcSNxxSSZzX2PYhp5GEVL6SzhNBJWghW9R75r02 8kz/dBZa2EExKfyAFIjcERHgt9Wjj1cAx71nD3nUROlKiMVOwjkdQUWCCe7EJYaw scUyE+EDv2z+ny/Zg0a7I46qGiMVLXE0RDF6ACB6t34WDqwfIxKbJ+AjG6yjXvHT PzCn11itZV0hnmCC6PxRUe4c2w+BK3Jl4yx6Vu57PsnSRgF33ruM7sfqTdU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:46 2025 by rpki-client