$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa File: f67538ee-cd29-4883-9251-086023a50dc3.roa (raw, json) Hash identifier: QR7gSGWrBBF4FBcMTZ4GSsGgKBEq2cfehW3PqKmfQXI= Subject key identifier: 41:A4:03:F4:65:74:3F:ED:9C:80:DF:65:EE:A3:B6:C4:2D:B6:E0:52 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 05E06A3A14616C1FCAD950DD7C82544898563353 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa Signing time: Tue 06 May 2025 00:00:45 +0000 ROA not before: Tue 06 May 2025 00:00:45 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e0:6a:3a:14:61:6c:1f:ca:d9:50:dd:7c:82:54:48:98:56:33:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: May 6 00:00:45 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=d2b00646b270bf1a4b288b9bc2c971b9c10a638cf0e8d28e4da3b2e41c17a645, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:58:e3:2d:fc:a0:1c:0e:c5:3f:e7:35:a4: d6:09:34:0c:48:d9:dd:98:3e:c3:a1:ab:f1:43:4d: 35:c7:b0:c7:50:1c:52:61:82:de:58:a1:86:47:1f: 93:6f:ba:b4:0e:be:08:bd:b6:f3:ed:a4:4b:ca:8a: 72:aa:0f:86:eb:02:a5:b7:51:2b:60:62:b7:8e:69: 85:b6:31:5e:14:15:6a:f6:36:99:8d:af:a8:64:b1: 48:5d:3d:bf:c7:e0:d7:c8:01:f5:c4:e4:7d:a4:7f: 29:4f:da:60:0d:d4:ea:07:8f:3d:8c:86:f5:8e:e6: 54:b2:87:66:80:c2:1c:d6:26:6a:5e:2c:46:50:fa: 83:49:e0:47:20:7c:83:79:c1:b2:a9:84:5f:a9:b7: 50:37:e5:6b:d7:01:d2:a7:57:a3:7a:53:37:d6:96: b3:96:04:77:8d:81:cf:a9:41:41:a6:2b:b6:95:8b: 22:88:88:ea:f3:86:4e:a0:eb:0c:6e:90:50:6f:62: d7:af:c2:ab:5f:95:d0:88:b6:7e:de:c3:9b:92:ac: 00:32:d2:e4:14:e9:b4:99:3d:8f:ae:07:db:f4:6f: fb:63:b8:4f:14:71:9c:ff:a5:fc:4c:5d:19:d4:91: 97:10:cb:82:e7:84:ac:b6:fc:f8:a1:6a:e0:4a:c4: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A4:03:F4:65:74:3F:ED:9C:80:DF:65:EE:A3:B6:C4:2D:B6:E0:52 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/f67538ee-cd29-4883-9251-086023a50dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.227.0/24 Signature Algorithm: sha256WithRSAEncryption 02:9f:81:ef:d5:23:b2:68:98:1b:12:33:b8:9a:29:06:68:06: 44:7e:e6:51:78:e9:2f:34:3a:0a:ac:4b:60:15:b0:eb:e9:31: 3f:eb:f7:ae:b7:f5:8f:36:75:00:51:c6:97:26:38:07:83:7b: 58:03:88:e6:99:63:a3:b3:0a:32:87:12:51:b6:ad:f9:19:a7: 66:b6:16:9a:cf:2b:56:db:a0:bd:5d:dd:37:66:e9:2f:e7:eb: 22:ca:50:0e:65:97:e6:93:b5:c5:e7:ce:97:09:fa:6a:f3:51: 0f:9b:d3:fb:46:7b:55:24:4d:41:52:fc:8c:4c:81:7e:61:08: fc:14:71:cd:7b:7c:fb:36:cb:4c:08:bb:ea:75:80:f1:dd:75: 00:92:10:ee:6a:67:96:93:b9:34:ee:9c:af:94:47:0d:6e:ad: 3f:5f:82:8b:50:54:e8:89:67:38:65:f5:19:d7:ac:d0:44:2a: 65:8d:55:89:1c:78:94:ab:02:46:6a:86:93:3e:de:0a:8b:45: 7e:8f:89:cc:ae:54:48:87:6f:78:bf:00:e6:38:6a:94:10:64: 69:94:55:2b:27:9d:92:55:5d:cf:6c:1d:02:74:60:5e:0a:df: 2f:a6:71:82:1b:5d:18:79:90:1d:ce:88:e0:bf:60:2d:16:4c: 04:12:d5:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBeBqOhRhbB/K2VDdfIJUSJhWM1MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTA2MDAwMDQ1WhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMmIwMDY0NmIyNzBiZjFhNGIyODhiOWJjMmM5NzFiOWMx MGE2MzhjZjBlOGQyOGU0ZGEzYjJlNDFjMTdhNjQ1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC08VjjLfygHA7FP+c1pNYJNAxI2d2YPsOhq/FDTTXHsMdQ HFJhgt5YoYZHH5NvurQOvgi9tvPtpEvKinKqD4brAqW3UStgYreOaYW2MV4UFWr2 NpmNr6hksUhdPb/H4NfIAfXE5H2kfylP2mAN1OoHjz2MhvWO5lSyh2aAwhzWJmpe LEZQ+oNJ4EcgfIN5wbKphF+pt1A35WvXAdKnV6N6UzfWlrOWBHeNgc+pQUGmK7aV iyKIiOrzhk6g6wxukFBvYtevwqtfldCItn7ew5uSrAAy0uQU6bSZPY+uB9v0b/tj uE8UcZz/pfxMXRnUkZcQy4LnhKy2/PihauBKxLXBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQaQD9GV0P+2cgN9l7qO2xC224FIwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2Y2NzUzOGVlLWNkMjktNDg4My05MjUxLTA4NjAyM2E1MGRjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++MwDQYJKoZIhvcNAQELBQADggEBAAKfge/VI7JomBsSM7iaKQZoBkR+ 5lF46S80OgqsS2AVsOvpMT/r96639Y82dQBRxpcmOAeDe1gDiOaZY6OzCjKHElG2 rfkZp2a2FprPK1bboL1d3Tdm6S/n6yLKUA5ll+aTtcXnzpcJ+mrzUQ+b0/tGe1Uk TUFS/IxMgX5hCPwUcc17fPs2y0wIu+p1gPHddQCSEO5qZ5aTuTTunK+URw1urT9f gotQVOiJZzhl9RnXrNBEKmWNVYkceJSrAkZqhpM+3gqLRX6PicyuVEiHb3i/AOY4 apQQZGmUVSsnnZJVXc9sHQJ0YF4K3y+mcYIbXRh5kB3OiOC/YC0WTAQS1Vc= -----END CERTIFICATE-----Generated at Fri May 9 13:20:23 2025 by rpki-client