$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cc9456b4-9220-4344-96a0-04b9d83c30f6.roa File: cc9456b4-9220-4344-96a0-04b9d83c30f6.roa (raw, json) Hash identifier: u9FUR0WTHU0vK65Umrj04ba1mSa7FzS48k/wkBUU+Uo= Subject key identifier: D2:58:76:4D:6D:86:4F:FE:85:94:1F:61:95:B9:E7:F0:E7:FB:4F:DC Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 75868EBACFBEBF47DF091F2615E9548E1CF514D6 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cc9456b4-9220-4344-96a0-04b9d83c30f6.roa Signing time: Mon 19 May 2025 15:10:27 +0000 ROA not before: Mon 19 May 2025 15:10:27 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:86:8e:ba:cf:be:bf:47:df:09:1f:26:15:e9:54:8e:1c:f5:14:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 19 15:10:27 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=d35d6f743693887135e9cff52ed8bbc8cfaaf1203cfbb3d17dd27cecd037f7c9, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:35:66:3c:49:8e:72:04:7c:64:65:f4:29:d2: 19:d5:a8:59:c0:1e:45:dd:59:db:d3:fd:f2:a6:83: f3:dd:7d:37:3c:a6:10:db:52:5e:60:50:05:d5:83: ba:bc:25:3d:f8:18:8b:21:ae:b3:fb:62:8e:b1:bf: 1f:9e:21:4d:47:fb:af:0a:3d:0d:37:d2:37:e9:f2: 4a:6d:a4:dc:4e:20:32:3b:51:27:26:d9:91:55:e4: 6b:3b:cb:ee:cc:42:37:4c:07:96:5e:c2:da:f9:04: 9a:9f:aa:4a:6c:ce:19:3f:27:9b:aa:1d:08:ca:d0: 58:ce:06:6d:2b:14:10:60:45:19:2c:48:fb:15:a6: ce:67:b1:f1:9c:9a:6a:f8:da:d5:08:b0:a9:18:0f: 53:44:5c:24:7b:1c:63:2f:c7:88:de:2d:20:1b:3d: b1:23:02:a8:b0:10:68:7d:71:1b:14:aa:e0:5c:d9: d1:4e:40:3a:2a:eb:5f:b4:f8:c9:fa:5f:00:f8:07: b5:8c:de:2d:9f:c2:81:d8:b1:9b:8c:9a:ba:0c:07: a5:5a:24:3e:62:b9:0f:8e:1b:0b:a2:ed:5c:c1:a6: 23:29:c6:4b:e6:c9:14:42:4c:df:fe:6d:79:60:10: 68:c1:2f:62:74:28:d6:38:f6:2e:8f:8a:a5:14:b1: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:58:76:4D:6D:86:4F:FE:85:94:1F:61:95:B9:E7:F0:E7:FB:4F:DC X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cc9456b4-9220-4344-96a0-04b9d83c30f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.248.0/23 Signature Algorithm: sha256WithRSAEncryption 72:7d:d8:5b:b2:1f:6e:d4:e9:c5:b9:21:2d:22:2d:4a:f1:5e: 68:0c:03:76:71:5f:5d:d3:3b:46:db:b2:4b:9c:27:b1:73:1e: cb:2b:ae:0a:d8:1c:48:21:ee:c7:c4:5a:20:53:62:8b:31:5a: dd:11:db:70:78:da:5a:69:23:0b:dc:17:0d:db:ea:c2:26:e3: f6:40:88:a1:6b:90:01:d4:83:81:8d:76:be:71:58:10:30:d6: 04:c9:9e:87:d7:92:d9:1e:25:6e:cc:ff:16:45:fe:85:5f:c6: 3b:fc:92:c6:28:72:5e:17:da:b1:88:4c:58:5b:3b:f3:dd:3d: d7:53:e4:d2:71:b1:ce:fa:29:94:8e:fb:37:0f:a1:d2:01:f4: a2:63:3b:d6:e4:ef:87:24:45:0a:76:ac:46:52:2c:50:d5:22: 90:cb:a8:20:28:55:c4:be:96:6e:d0:ae:c0:6b:71:9f:15:b2: 78:1e:90:c5:94:32:08:19:35:41:41:2b:f7:05:ec:75:01:ef: 6c:6a:76:73:79:92:f1:5c:d7:50:55:96:9e:1b:d3:cc:9c:04: b5:30:9d:a6:ea:5f:1c:95:f8:a0:06:73:7f:e8:28:49:f9:1f: 9c:58:72:3a:f8:ad:2f:55:57:37:3a:50:d5:b0:e5:00:14:50: 27:58:be:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdYaOus++v0ffCR8mFelUjhz1FNYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTE5MTUxMDI3WhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzVkNmY3NDM2OTM4ODcxMzVlOWNmZjUyZWQ4YmJjOGNm YWFmMTIwM2NmYmIzZDE3ZGQyN2NlY2QwMzdmN2M5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkNWY8SY5yBHxkZfQp0hnVqFnAHkXdWdvT/fKmg/PdfTc8 phDbUl5gUAXVg7q8JT34GIshrrP7Yo6xvx+eIU1H+68KPQ030jfp8kptpNxOIDI7 UScm2ZFV5Gs7y+7MQjdMB5Zewtr5BJqfqkpszhk/J5uqHQjK0FjOBm0rFBBgRRks SPsVps5nsfGcmmr42tUIsKkYD1NEXCR7HGMvx4jeLSAbPbEjAqiwEGh9cRsUquBc 2dFOQDoq61+0+Mn6XwD4B7WM3i2fwoHYsZuMmroMB6VaJD5iuQ+OGwui7VzBpiMp xkvmyRRCTN/+bXlgEGjBL2J0KNY49i6PiqUUscLxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0lh2TW2GT/6FlB9hlbnn8Of7T9wwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2NjOTQ1NmI0LTkyMjAtNDM0NC05NmEwLTA0YjlkODNjMzBmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/gwDQYJKoZIhvcNAQELBQADggEBAHJ92FuyH27U6cW5IS0iLUrxXmgM A3ZxX13TO0bbskucJ7FzHssrrgrYHEgh7sfEWiBTYosxWt0R23B42lppIwvcFw3b 6sIm4/ZAiKFrkAHUg4GNdr5xWBAw1gTJnofXktkeJW7M/xZF/oVfxjv8ksYocl4X 2rGITFhbO/PdPddT5NJxsc76KZSO+zcPodIB9KJjO9bk74ckRQp2rEZSLFDVIpDL qCAoVcS+lm7QrsBrcZ8VsngekMWUMggZNUFBK/cF7HUB72xqdnN5kvFc11BVlp4b 08ycBLUwnabqXxyV+KAGc3/oKEn5H5xYcjr4rS9VVzc6UNWw5QAUUCdYvl0= -----END CERTIFICATE-----Generated at Wed Jun 4 10:50:37 2025 by rpki-client