$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa File: eaef83ec-c27a-4971-921b-164f8f284067.roa (raw, json) Hash identifier: 8Clql4V6DNcaVqPP4J94samFH+YS9pwDU270Fp94a7k= Subject key identifier: 01:FF:EA:A8:30:BD:4A:14:08:69:06:38:D1:D8:1C:9F:22:78:37:B6 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 63080F343936D0788B84AB4A4EC969A1A8A2D404 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa Signing time: Wed 19 Feb 2025 00:20:18 +0000 ROA not before: Wed 19 Feb 2025 00:20:18 +0000 ROA not after: Wed 26 Mar 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:08:0f:34:39:36:d0:78:8b:84:ab:4a:4e:c9:69:a1:a8:a2:d4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Feb 19 00:20:18 2025 GMT Not After : Mar 26 23:59:59 2025 GMT Subject: CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1c:04:5f:60:46:76:4c:8e:0a:95:c0:80:e1: a0:d5:ff:4f:63:51:a4:7b:9f:9d:46:6e:1f:0d:8b: 8c:89:22:14:09:4f:d3:ae:66:f0:55:93:8b:3a:db: f1:ea:82:eb:7e:88:91:0f:43:68:0f:0c:54:40:41: f0:7c:a5:1d:d3:ae:cf:cd:a0:a5:50:58:52:46:bb: d5:61:36:60:15:28:93:e5:4c:ce:42:1a:29:aa:df: 14:cb:6b:8f:81:8b:81:dd:e8:63:d1:c7:4b:a4:13: 36:60:20:65:b3:24:bb:54:06:44:ef:6b:06:26:6a: ae:91:02:71:2e:fe:42:e5:81:53:8f:d9:cd:9a:83: 68:31:d5:5d:31:dd:1f:e9:76:98:a1:2f:8a:bd:ac: 9c:64:4f:2c:c9:e0:41:0d:49:0f:31:59:c0:c6:d6: d4:d6:92:0b:ed:83:72:89:b6:80:49:37:30:b0:92: 92:de:04:a2:10:3a:2b:6a:58:eb:03:4d:60:e4:17: 11:a6:12:6a:3f:a9:74:8c:a8:41:e0:b1:7d:8e:10: 3b:1d:3c:b7:58:5b:d4:d5:13:ac:4e:6a:d2:27:59: 9d:55:67:ca:ca:89:eb:82:d1:a9:0a:06:af:3e:f1: bd:0c:c5:85:81:e2:18:d1:78:e2:42:d9:5d:67:65: bc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FF:EA:A8:30:BD:4A:14:08:69:06:38:D1:D8:1C:9F:22:78:37:B6 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.187.0/24 Signature Algorithm: sha256WithRSAEncryption 41:f6:c0:d5:9b:f0:e1:c6:70:36:0a:8e:b3:87:d8:7d:54:ab: e8:52:f5:67:9f:e5:85:b3:88:74:dc:94:36:2c:fe:58:ea:04: e0:ac:ac:0b:76:73:db:f2:be:d9:91:5c:b3:7f:1b:d2:50:3d: d6:20:31:50:fe:6c:7e:94:76:20:33:f0:4c:05:ac:00:01:ff: 96:61:52:e6:02:dd:4b:e6:32:47:e0:78:b1:16:23:4a:4f:e2: f1:f0:55:28:31:2d:73:14:d7:44:28:fd:e4:a3:01:a0:ee:00: 65:6a:e3:1b:9c:ba:4e:f4:18:fc:a3:46:9b:5b:be:aa:44:57: cd:c1:ee:b4:77:4b:76:c4:de:f0:c4:8a:79:9b:7f:24:05:7c: 3b:51:06:4c:49:d7:8f:52:be:1a:0b:74:02:43:4c:03:2b:5a: 48:f4:ec:ec:fb:05:83:f3:db:8c:ec:14:aa:9f:f6:74:36:ba: 56:5e:16:36:9c:5e:06:ba:50:c2:d7:11:22:33:32:6f:ab:f3: 37:c2:6d:93:fc:fc:48:7f:07:3c:17:e6:cf:61:44:2c:bf:02: 9e:fd:28:da:cf:9a:f2:21:8d:1e:82:d0:98:69:f1:14:1c:a3: 27:0e:60:41:9e:23:69:53:fe:f3:21:22:88:3a:51:ef:cf:34: cc:bc:b4:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYwgPNDk20HiLhKtKTslpoaii1AQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwMjE5MDAyMDE4WhcNMjUwMzI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzE1YjlhNjExZGIyNmY4MTE1ZjY2N2YxMmJjYTIzZWVj OWYzOTc1YjQ3YWUyMWRhMDhjYTM2NGY2MTM5ZmUxMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUHARfYEZ2TI4KlcCA4aDV/09jUaR7n51Gbh8Ni4yJIhQJ T9OuZvBVk4s62/Hqgut+iJEPQ2gPDFRAQfB8pR3Trs/NoKVQWFJGu9VhNmAVKJPl TM5CGimq3xTLa4+Bi4Hd6GPRx0ukEzZgIGWzJLtUBkTvawYmaq6RAnEu/kLlgVOP 2c2ag2gx1V0x3R/pdpihL4q9rJxkTyzJ4EENSQ8xWcDG1tTWkgvtg3KJtoBJNzCw kpLeBKIQOitqWOsDTWDkFxGmEmo/qXSMqEHgsX2OEDsdPLdYW9TVE6xOatInWZ1V Z8rKieuC0akKBq8+8b0MxYWB4hjReOJC2V1nZbwfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAf/qqDC9ShQIaQY40dgcnyJ4N7YwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2VhZWY4M2VjLWMyN2EtNDk3MS05MjFiLTE2NGY4ZjI4NDA2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37swDQYJKoZIhvcNAQELBQADggEBAEH2wNWb8OHGcDYKjrOH2H1Uq+hS 9Wef5YWziHTclDYs/ljqBOCsrAt2c9vyvtmRXLN/G9JQPdYgMVD+bH6UdiAz8EwF rAAB/5ZhUuYC3UvmMkfgeLEWI0pP4vHwVSgxLXMU10Qo/eSjAaDuAGVq4xucuk70 GPyjRptbvqpEV83B7rR3S3bE3vDEinmbfyQFfDtRBkxJ149SvhoLdAJDTAMrWkj0 7Oz7BYPz24zsFKqf9nQ2ulZeFjacXga6UMLXESIzMm+r8zfCbZP8/Eh/BzwX5s9h RCy/Ap79KNrPmvIhjR6C0Jhp8RQcoycOYEGeI2lT/vMhIog6Ue/PNMy8tIQ= -----END CERTIFICATE-----Generated at Thu Mar 13 23:54:39 2025 by rpki-client