$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa File: 271f0380-5b52-472a-bc37-cdbbdcd650e9.roa (raw, json) Hash identifier: V/DOx5VcOdZyEvWnNBI74kienj4vgIJu0AIOHvYntLw= Subject key identifier: FF:4B:3C:65:1C:5C:CD:67:D3:31:A1:C8:14:E8:D9:17:59:61:24:08 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 27B245C879F473DF38BC88AE7BB474A301D4D61A Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa Signing time: Fri 11 Apr 2025 00:00:17 +0000 ROA not before: Fri 11 Apr 2025 00:00:17 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b2:45:c8:79:f4:73:df:38:bc:88:ae:7b:b4:74:a3:01:d4:d6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 11 00:00:17 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=50f33270e5b57a72944449145c9c8a809bf1745554cb2616c56645340e24149a, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:01:08:88:90:6e:dc:99:70:96:c4:9a:b3: a2:64:94:59:a4:9c:68:26:8f:6d:d4:58:7f:ad:54: 53:76:f9:c5:1b:17:13:7c:fd:90:89:48:87:50:2c: 1b:89:f2:d5:65:27:88:7f:3a:95:81:f3:fc:04:d8: 81:74:cc:c1:6e:15:bb:12:6b:ba:c9:6c:a9:81:c9: 15:74:ec:7e:d4:ae:3e:21:ee:d3:42:20:f3:75:89: c1:9a:1d:af:57:91:c3:b1:67:5b:18:ca:af:74:68: 11:c5:19:d3:2a:a6:b3:57:a8:9e:04:fc:4f:80:06: 3c:8f:0a:c7:64:78:2b:2d:94:1c:d2:48:75:8b:e7: 5e:34:22:14:03:82:36:14:52:b3:b0:c2:38:3a:60: 17:66:09:e1:c8:22:44:08:c9:f2:57:5c:0b:d2:fc: c8:68:37:66:03:31:5e:bc:0c:f3:87:cf:bc:57:52: 8a:83:0f:31:ec:77:1e:28:67:75:9f:9b:52:89:e8: 31:ff:f4:67:84:a7:ed:20:38:95:e2:e3:9a:06:93: eb:e2:f0:2b:7d:d1:58:3e:3d:dc:1e:63:da:86:ca: 3c:1b:60:32:d6:05:84:47:38:29:d6:12:58:32:06: 0f:57:3f:72:78:64:dd:80:07:04:6f:a9:04:cc:90: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4B:3C:65:1C:5C:CD:67:D3:31:A1:C8:14:E8:D9:17:59:61:24:08 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/271f0380-5b52-472a-bc37-cdbbdcd650e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.217.0/24 Signature Algorithm: sha256WithRSAEncryption 53:c9:69:78:20:f6:28:4d:c1:b6:5b:cb:0e:0b:09:72:a5:21: f9:15:ac:55:89:2f:76:ac:bc:03:83:39:e2:cb:7d:75:10:0e: ce:0e:fa:12:46:5a:dd:90:8a:f9:3c:b2:c3:b2:24:e1:4f:53: 6f:00:93:39:76:5a:e9:0b:b5:af:d3:b7:a6:82:1e:40:c2:9a: 99:08:a4:b4:b2:66:fd:0f:a4:17:8e:21:6f:84:56:46:4f:a7: 48:aa:18:f5:16:53:77:33:32:90:33:f6:f3:68:56:78:01:fa: 7a:d4:46:0d:b0:1b:db:de:95:05:64:7e:ee:fc:d9:57:16:9a: 04:74:34:c6:57:91:fb:c0:f9:ed:20:ff:3a:dc:40:31:06:0f: ca:38:a1:f8:51:f3:95:fb:f6:a6:e8:76:36:42:29:80:9f:cb: f5:19:51:9c:70:2e:c5:dd:b0:5d:5e:5a:18:1a:22:34:12:9d: dc:0f:0e:3d:bb:57:3a:27:0c:ab:fd:7c:6b:2c:37:fe:f2:8b: 80:25:89:60:7c:44:b1:ce:3c:ec:26:b4:75:80:27:ac:11:31: 2f:3e:8a:25:90:d4:93:4c:48:0d:cc:f4:30:cb:bc:50:da:e4: 11:ce:e2:11:e8:63:41:3e:67:1c:9a:bb:4d:3b:05:dc:16:9e: f2:7e:b4:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ7JFyHn0c984vIiue7R0owHU1howDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDExMDAwMDE3WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGYzMzI3MGU1YjU3YTcyOTQ0NDQ5MTQ1YzljOGE4MDli ZjE3NDU1NTRjYjI2MTZjNTY2NDUzNDBlMjQxNDlhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIzgEIiJBu3JlwlsSas6JklFmknGgmj23UWH+tVFN2+cUb FxN8/ZCJSIdQLBuJ8tVlJ4h/OpWB8/wE2IF0zMFuFbsSa7rJbKmByRV07H7Urj4h 7tNCIPN1icGaHa9XkcOxZ1sYyq90aBHFGdMqprNXqJ4E/E+ABjyPCsdkeCstlBzS SHWL5140IhQDgjYUUrOwwjg6YBdmCeHIIkQIyfJXXAvS/MhoN2YDMV68DPOHz7xX UoqDDzHsdx4oZ3Wfm1KJ6DH/9GeEp+0gOJXi45oGk+vi8Ct90Vg+PdweY9qGyjwb YDLWBYRHOCnWElgyBg9XP3J4ZN2ABwRvqQTMkGTZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/0s8ZRxczWfTMaHIFOjZF1lhJAgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzI3MWYwMzgwLTViNTItNDcyYS1iYzM3LWNkYmJkY2Q2NTBlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+dkwDQYJKoZIhvcNAQELBQADggEBAFPJaXgg9ihNwbZbyw4LCXKlIfkV rFWJL3asvAODOeLLfXUQDs4O+hJGWt2Qivk8ssOyJOFPU28Akzl2WukLta/Tt6aC HkDCmpkIpLSyZv0PpBeOIW+EVkZPp0iqGPUWU3czMpAz9vNoVngB+nrURg2wG9ve lQVkfu782VcWmgR0NMZXkfvA+e0g/zrcQDEGD8o4ofhR85X79qbodjZCKYCfy/UZ UZxwLsXdsF1eWhgaIjQSndwPDj27VzonDKv9fGssN/7yi4AliWB8RLHOPOwmtHWA J6wRMS8+iiWQ1JNMSA3M9DDLvFDa5BHO4hHoY0E+Zxyau007BdwWnvJ+tKM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:16 2025 by rpki-client