$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e41ada77-fa4f-4da3-a532-14382438f575.roa File: e41ada77-fa4f-4da3-a532-14382438f575.roa (raw, json) Hash identifier: xuoSNzKbL13iv7PapcTqxYfZdhUV9MOMLKMUvcucEFQ= Subject key identifier: DC:24:04:8C:51:30:7B:6B:9E:B2:B3:81:54:6B:D2:FF:AC:AF:B9:B7 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5EBB79B3AECA2AE7E72168BD5994EF01CD6D09B1 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e41ada77-fa4f-4da3-a532-14382438f575.roa Signing time: Sat 25 Jan 2025 00:00:00 +0000 ROA not before: Sat 25 Jan 2025 00:00:00 +0000 ROA not after: Sat 01 Mar 2025 23:59:59 +0000 asID: 14618 IP address blocks: 76.223.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:bb:79:b3:ae:ca:2a:e7:e7:21:68:bd:59:94:ef:01:cd:6d:09:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jan 25 00:00:00 2025 GMT Not After : Mar 1 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:be:5d:d6:76:ca:b4:ca:ca:7a:0b:f0:18: e7:e0:ef:0e:35:6c:d4:c1:0e:ac:63:d9:f8:1d:d9: ea:76:ac:e9:3e:66:ed:86:73:34:41:4b:7f:9b:9b: 55:29:96:b4:34:80:0c:ac:30:dc:56:3f:10:0a:66: be:d0:76:c2:09:3b:57:1a:39:82:6c:1d:97:44:42: 8d:05:83:46:f4:ff:f7:8f:07:7a:fb:43:51:2f:d7: e6:8c:1f:b7:33:ef:04:0e:b4:99:10:69:9b:35:ee: 19:7f:8d:3d:e2:fe:80:f7:cb:9d:06:e1:2c:db:37: 6e:a7:ae:67:be:b8:0a:a4:72:7e:13:06:1d:04:a5: ba:f9:cf:b2:5b:9b:27:49:52:6e:94:67:b6:c7:69: b8:c2:0a:59:8a:bf:98:78:6b:73:d0:58:8b:08:ec: d5:e1:86:15:62:d4:ee:b1:85:a7:8f:4c:58:d4:f7: eb:e4:0d:00:e7:72:34:51:5a:f4:9f:9a:5a:18:82: 0f:93:0e:76:dd:10:f7:63:5e:90:0b:0a:27:ba:64: c4:38:7b:35:95:e4:60:4d:cd:66:06:39:33:39:ae: 5a:05:c5:79:e6:d1:1f:eb:19:cc:6c:5c:a6:81:46: c1:4b:c5:df:5a:0e:dd:9f:88:f7:30:26:97:25:4b: c0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:24:04:8C:51:30:7B:6B:9E:B2:B3:81:54:6B:D2:FF:AC:AF:B9:B7 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e41ada77-fa4f-4da3-a532-14382438f575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.191.0/24 Signature Algorithm: sha256WithRSAEncryption 32:a2:35:ea:74:6e:2f:33:79:46:fa:fb:b3:a0:8c:a4:24:94: 32:82:d4:60:24:38:c9:8b:44:c7:22:ec:bd:e6:03:92:9b:5f: 5b:bb:a3:ad:e2:60:e4:41:e3:95:c8:91:07:b1:51:9d:e0:9b: 4e:d1:8f:c9:f7:72:cb:e9:25:1a:36:a8:44:85:92:9e:cf:c1: 6f:a2:9e:64:ac:6a:a0:65:7f:a8:9f:b1:dd:ea:05:a8:ee:b1: 42:d6:33:cc:2a:30:8b:ad:24:3d:6a:99:69:84:41:61:d9:e5: 45:3a:34:52:48:3b:c8:bf:5e:a7:e2:63:22:a7:b6:16:31:72: ae:a7:79:b5:39:05:1f:42:70:35:cb:49:6d:36:f2:9c:ce:d9: d8:be:01:f9:5b:cb:6f:a3:1d:cd:76:11:2d:da:b5:3f:f4:0b: e6:b2:0e:d8:4f:54:d2:84:74:f0:d4:a7:4a:4e:f8:a0:f8:14: a6:c4:54:df:48:eb:4a:10:dc:4f:49:d5:b8:f0:f6:bc:0c:ec: 21:77:0e:a8:7c:d5:3b:1f:6d:ab:35:21:69:f2:e3:83:f6:56: 03:79:48:fd:2a:34:be:6e:ad:81:c0:af:ca:7d:16:eb:5a:37: 26:72:87:9c:4a:5c:75:e9:9e:ec:e8:fe:41:fe:16:7d:3b:f9: e2:c4:f5:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXrt5s67KKufnIWi9WZTvAc1tCbEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMTI1MDAwMDAwWhcNMjUwMzAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODg4YmQxMWMxOGI3NDJhYjBkMTM1NzFiY2ZiNWIxMWIz OGNiN2RjNDljZDkxMmE2ZWVkMjJiNWNkOGViZGJlMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsjL5d1nbKtMrKegvwGOfg7w41bNTBDqxj2fgd2ep2rOk+ Zu2GczRBS3+bm1UplrQ0gAysMNxWPxAKZr7QdsIJO1caOYJsHZdEQo0Fg0b0//eP B3r7Q1Ev1+aMH7cz7wQOtJkQaZs17hl/jT3i/oD3y50G4SzbN26nrme+uAqkcn4T Bh0Epbr5z7JbmydJUm6UZ7bHabjCClmKv5h4a3PQWIsI7NXhhhVi1O6xhaePTFjU 9+vkDQDncjRRWvSfmloYgg+TDnbdEPdjXpALCie6ZMQ4ezWV5GBNzWYGOTM5rloF xXnm0R/rGcxsXKaBRsFLxd9aDt2fiPcwJpclS8D9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3CQEjFEwe2uesrOBVGvS/6yvubcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2U0MWFkYTc3LWZhNGYtNGRhMy1hNTMyLTE0MzgyNDM4ZjU3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM378wDQYJKoZIhvcNAQELBQADggEBADKiNep0bi8zeUb6+7OgjKQklDKC 1GAkOMmLRMci7L3mA5KbX1u7o63iYORB45XIkQexUZ3gm07Rj8n3csvpJRo2qESF kp7PwW+inmSsaqBlf6ifsd3qBajusULWM8wqMIutJD1qmWmEQWHZ5UU6NFJIO8i/ XqfiYyKnthYxcq6nebU5BR9CcDXLSW028pzO2di+Aflby2+jHc12ES3atT/0C+ay DthPVNKEdPDUp0pO+KD4FKbEVN9I60oQ3E9J1bjw9rwM7CF3Dqh81Tsfbas1IWny 44P2VgN5SP0qNL5urYHAr8p9FutaNyZyh5xKXHXpnuzo/kH+Fn07+eLE9Rs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:11 2025 by rpki-client