$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa File: efff1c41-4813-4726-a794-2bd64d641531.roa (raw, json) Hash identifier: 34fSEnmu56eS4hXRDqrb59iUeSwGwQq6zTOUWWwc04k= Subject key identifier: A1:6E:FF:92:B9:87:B8:0D:1E:3D:D9:97:77:63:ED:2B:BB:03:C4:D5 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 0FB74E7A7999E921293985CF95AEE7F785D5AC50 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa Signing time: Sat 31 May 2025 00:00:11 +0000 ROA not before: Sat 31 May 2025 00:00:11 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b7:4e:7a:79:99:e9:21:29:39:85:cf:95:ae:e7:f7:85:d5:ac:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 31 00:00:11 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=4b5284f43fb29415c415a4fbf4cbc8da1d3b90ce9783cd1db9392d7f3deed6cf, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:90:fb:f0:6a:ad:89:a5:8a:62:95:85:86: 8d:3a:7b:89:fb:ae:3d:9b:4f:54:a4:e0:19:d9:4e: 98:fb:b9:e5:87:b7:22:82:9b:e5:82:a9:51:fc:12: 10:63:ef:cb:2d:92:e0:48:0f:21:3e:a8:11:19:9c: e0:83:96:98:b5:03:a3:9e:56:35:a9:ed:b5:75:c8: e1:32:1c:b1:9e:4f:fc:36:02:dd:14:91:e3:be:ca: 72:fe:0b:14:c9:f9:13:51:5a:23:fb:6f:09:65:3d: 47:79:61:f2:ea:43:e4:a0:71:1d:c7:07:fd:62:9a: 24:d9:68:53:52:dd:61:b7:3d:5b:e9:a4:09:71:e6: 0b:a4:71:ce:c9:56:40:8f:4c:14:c6:bb:84:b1:ef: 36:e6:bd:55:60:5e:e2:c0:9c:b3:13:f3:44:d2:15: 55:63:cf:94:56:9f:67:e0:98:99:b7:fc:85:06:9e: 4a:a7:9d:48:6a:d0:ed:fa:09:21:25:96:68:14:66: 35:8a:98:e2:2f:1f:8f:08:ca:36:29:23:67:1f:1f: 8e:02:7b:1a:42:8b:de:2f:b6:22:2c:99:3e:46:f5: 51:2e:c9:3c:a9:6f:00:16:ce:0b:59:2f:e9:7d:91: e3:e7:65:76:40:f4:5a:8c:a6:e8:76:e9:05:51:26: 52:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6E:FF:92:B9:87:B8:0D:1E:3D:D9:97:77:63:ED:2B:BB:03:C4:D5 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/efff1c41-4813-4726-a794-2bd64d641531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.235.0/24 Signature Algorithm: sha256WithRSAEncryption 76:ee:b0:8c:8f:67:19:b2:f9:f5:ac:09:a4:2c:95:77:76:80: 1c:6c:a7:86:b5:f0:27:2d:6b:59:84:69:ad:82:e9:a6:3c:62: 82:f8:db:f6:5a:17:bc:65:5b:cb:c3:0f:04:0c:71:c8:e8:f1: 43:c5:44:54:49:13:f8:bd:76:04:00:e8:f7:fd:04:d1:2c:33: e3:c4:62:4f:2f:de:d1:7f:71:ca:14:f1:1f:77:f2:80:76:88: 65:b8:66:db:e4:ef:2f:47:71:35:dd:30:e3:0b:ce:0d:35:f6: d3:51:b8:6e:52:4d:1e:27:6f:50:20:e2:a0:fa:b9:ab:46:48: ed:12:30:92:bf:c3:4f:60:a8:b6:e3:49:0f:6c:08:b8:3b:ad: c5:c2:4f:2a:b6:d9:75:d7:96:3c:d0:9d:6b:93:a2:1c:a9:61: 70:d1:d8:cc:78:f3:2e:01:e3:ce:f0:1e:f4:c7:23:4e:18:a0: 3c:ae:e2:ee:36:0a:8d:17:9b:47:a5:b2:75:6e:10:49:e1:81: da:b4:da:aa:ae:92:bb:03:ba:21:ba:df:b0:04:4d:fc:a4:be: bc:5c:e9:9e:8c:bf:ed:ee:15:60:7e:bc:51:8a:39:42:02:38: f9:5a:a5:5a:ea:d3:f0:5a:34:fb:19:a4:30:1e:82:5c:ed:ad: 11:78:67:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD7dOenmZ6SEpOYXPla7n94XVrFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAwMDExWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjUyODRmNDNmYjI5NDE1YzQxNWE0ZmJmNGNiYzhkYTFk M2I5MGNlOTc4M2NkMWRiOTM5MmQ3ZjNkZWVkNmNmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkT5D78GqtiaWKYpWFho06e4n7rj2bT1Sk4BnZTpj7ueWH tyKCm+WCqVH8EhBj78stkuBIDyE+qBEZnOCDlpi1A6OeVjWp7bV1yOEyHLGeT/w2 At0UkeO+ynL+CxTJ+RNRWiP7bwllPUd5YfLqQ+SgcR3HB/1imiTZaFNS3WG3PVvp pAlx5gukcc7JVkCPTBTGu4Sx7zbmvVVgXuLAnLMT80TSFVVjz5RWn2fgmJm3/IUG nkqnnUhq0O36CSEllmgUZjWKmOIvH48IyjYpI2cfH44CexpCi94vtiIsmT5G9VEu yTypbwAWzgtZL+l9kePnZXZA9FqMpuh26QVRJlJnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoW7/krmHuA0ePdmXd2PtK7sDxNUwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2VmZmYxYzQxLTQ4MTMtNDcyNi1hNzk0LTJiZDY0ZDY0MTUzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++swDQYJKoZIhvcNAQELBQADggEBAHbusIyPZxmy+fWsCaQslXd2gBxs p4a18Ccta1mEaa2C6aY8YoL42/ZaF7xlW8vDDwQMccjo8UPFRFRJE/i9dgQA6Pf9 BNEsM+PEYk8v3tF/ccoU8R938oB2iGW4Ztvk7y9HcTXdMOMLzg019tNRuG5STR4n b1Ag4qD6uatGSO0SMJK/w09gqLbjSQ9sCLg7rcXCTyq22XXXljzQnWuTohypYXDR 2Mx48y4B487wHvTHI04YoDyu4u42Co0Xm0elsnVuEEnhgdq02qqukrsDuiG637AE Tfykvrxc6Z6Mv+3uFWB+vFGKOUICOPlapVrq0/BaNPsZpDAeglztrRF4Z3c= -----END CERTIFICATE-----Generated at Sun Jun 8 03:13:52 2025 by rpki-client