$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa File: 1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa (raw, json) Hash identifier: XRZUU1Z/DOgwqPbkh0NWcbVqGwSZE4IczN21RzjfIeo= Subject key identifier: F0:4E:A2:BC:34:E5:8C:A8:CC:0D:3A:E8:5E:C8:C7:2A:84:8C:62:C4 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 63CF041B816195DEDD7315487A699314594DB0DA Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa Signing time: Wed 23 Apr 2025 00:10:21 +0000 ROA not before: Wed 23 Apr 2025 00:10:21 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:cf:04:1b:81:61:95:de:dd:73:15:48:7a:69:93:14:59:4d:b0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 23 00:10:21 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=967a931592042087998987e224ab7f50ed454dd05d6ca5138710a62fa7a35ae8, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:8e:38:16:35:23:2f:1e:12:20:9b:fc:bb: e0:76:7b:d2:6f:5a:4a:54:61:35:33:93:cc:82:b9: 0c:48:ba:d9:e5:5e:3b:19:ef:01:ca:c2:a9:b9:8a: c6:b0:38:d2:c7:1b:16:12:96:2c:9b:c4:58:b6:e2: 59:30:19:c4:fe:e9:34:eb:92:62:29:13:18:c7:52: cf:81:d1:fc:f2:25:36:19:0b:8d:6e:d9:5a:1d:4e: de:4a:a4:93:22:a1:e6:7c:46:0d:88:e2:5b:d2:12: 31:64:33:9c:ed:0f:9c:20:cb:0d:90:5b:58:dc:49: db:a8:f6:fe:76:86:9e:1f:93:e3:4d:46:c8:be:54: 61:6b:ab:bd:3e:a8:9d:cf:d1:7b:e4:45:3b:5f:f5: 03:31:ba:0e:8c:4e:83:5e:1f:f0:ef:6f:eb:bf:99: 7c:ba:51:a7:cd:78:cf:72:89:bb:e4:48:27:6a:ea: 85:a2:bd:06:de:82:de:a8:71:95:d1:a3:08:34:7b: 5d:f4:b8:fd:60:1a:82:3c:63:08:46:0d:37:00:18: f0:d1:e5:29:1e:b8:ed:f4:99:ec:a7:ce:30:45:c5: 0c:1b:21:9c:cd:a1:be:60:df:ba:f2:9e:53:3f:9d: fc:0c:77:60:ec:83:49:f0:b9:4b:a4:3d:11:b7:22: c2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4E:A2:BC:34:E5:8C:A8:CC:0D:3A:E8:5E:C8:C7:2A:84:8C:62:C4 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.208.0/20 Signature Algorithm: sha256WithRSAEncryption 5e:42:e9:58:87:39:3d:4b:8a:71:f3:94:c4:eb:12:9e:63:00: 3f:9c:78:88:30:50:d0:51:1a:bb:cb:24:9f:17:ec:2f:00:be: 77:8e:7b:12:0f:d0:30:8d:4d:9c:1b:dc:b4:b4:c7:43:96:ba: e6:70:c1:7f:7e:cd:fd:7d:04:ba:dc:9c:7e:ac:33:21:7b:50: 2b:80:d1:fa:99:bd:c9:c6:fc:0c:93:73:9e:44:34:eb:0c:9c: 66:fd:8a:bd:c5:b7:54:68:47:ba:6e:7d:2c:ae:f4:44:b0:8d: ff:88:b2:52:74:7f:84:2f:7f:03:df:52:5a:6b:d8:a5:a5:a7: 76:37:bc:8d:12:5d:2a:ce:42:06:ca:92:23:e0:7a:ef:b0:42: 15:ad:02:cb:46:4c:3c:60:d4:d7:b2:19:77:0a:d8:e4:72:01: 17:a2:40:5d:2b:bc:15:6d:6e:b7:ac:ee:f8:e2:3e:8b:a7:2d: b9:8b:a4:8f:4f:42:a9:b6:61:27:ef:2c:76:5b:52:63:82:b8: 11:5b:38:5d:b8:d4:a8:fa:f5:95:73:a5:86:45:30:f8:fa:a4: 80:0d:97:7b:3e:c8:a0:1a:3c:af:ba:69:c0:e2:c7:59:08:67: 52:bf:75:9e:2e:2d:88:57:77:75:26:6e:75:55:6c:80:5e:61: 64:75:fd:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY88EG4Fhld7dcxVIemmTFFlNsNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDIzMDAxMDIxWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjdhOTMxNTkyMDQyMDg3OTk4OTg3ZTIyNGFiN2Y1MGVk NDU0ZGQwNWQ2Y2E1MTM4NzEwYTYyZmE3YTM1YWU4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCikI44FjUjLx4SIJv8u+B2e9JvWkpUYTUzk8yCuQxIutnl XjsZ7wHKwqm5isawONLHGxYSliybxFi24lkwGcT+6TTrkmIpExjHUs+B0fzyJTYZ C41u2VodTt5KpJMioeZ8Rg2I4lvSEjFkM5ztD5wgyw2QW1jcSduo9v52hp4fk+NN Rsi+VGFrq70+qJ3P0XvkRTtf9QMxug6MToNeH/Dvb+u/mXy6UafNeM9yibvkSCdq 6oWivQbegt6ocZXRowg0e130uP1gGoI8YwhGDTcAGPDR5SkeuO30meynzjBFxQwb IZzNob5g37rynlM/nfwMd2Dsg0nwuUukPRG3IsIhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8E6ivDTljKjMDTroXsjHKoSMYsQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzFjOTU5ZTY2LWY5NjctNDNkNi05M2JkLWNiZGNmMTYwY2JiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQX+dAwDQYJKoZIhvcNAQELBQADggEBAF5C6ViHOT1LinHzlMTrEp5jAD+c eIgwUNBRGrvLJJ8X7C8AvneOexIP0DCNTZwb3LS0x0OWuuZwwX9+zf19BLrcnH6s MyF7UCuA0fqZvcnG/AyTc55ENOsMnGb9ir3Ft1RoR7pufSyu9ESwjf+IslJ0f4Qv fwPfUlpr2KWlp3Y3vI0SXSrOQgbKkiPgeu+wQhWtAstGTDxg1NeyGXcK2ORyARei QF0rvBVtbres7vjiPounLbmLpI9PQqm2YSfvLHZbUmOCuBFbOF241Kj69ZVzpYZF MPj6pIANl3s+yKAaPK+6acDix1kIZ1K/dZ4uLYhXd3UmbnVVbIBeYWR1/ac= -----END CERTIFICATE-----Generated at Sat Apr 26 18:31:55 2025 by rpki-client