$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa File: 2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa (raw, json) Hash identifier: B5sRvTTxQzkBJ3dcvVlsoKEAb8k9cWIYSII1yMnWceg= Subject key identifier: 88:23:C3:6E:DB:1A:7B:C1:1A:20:D7:56:45:D8:CA:AD:25:B8:19:EF Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4579B0AA8EC6451B1F7AA7AB7E6BD721EA4285E7 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa Signing time: Fri 11 Apr 2025 00:10:04 +0000 ROA not before: Fri 11 Apr 2025 00:10:04 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:79:b0:aa:8e:c6:45:1b:1f:7a:a7:ab:7e:6b:d7:21:ea:42:85:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 11 00:10:04 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=30f5cef0f0dfc20651268c2ca1e34c609d6440e88c2b5030fe491f0c6b2f3b44, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:b9:1b:44:d2:1e:a1:39:5d:24:f0:88:ea: ce:2a:b0:2e:25:46:83:e7:bc:af:a4:f3:75:4d:63: 43:2f:a0:f8:b9:df:51:d7:27:1f:62:b3:00:16:02: f3:40:79:cc:c5:90:08:aa:45:c3:58:08:48:5d:0b: e5:4f:3e:8d:de:8e:b6:22:be:de:c4:04:c1:f9:36: 8b:c0:5d:c3:f1:62:1c:da:98:74:22:4c:c6:d2:57: 39:2e:7b:14:ae:5f:e2:87:99:35:a1:1e:38:bc:00: d4:04:63:6c:67:37:3b:6c:ee:23:8c:34:28:e0:9a: ec:72:33:5e:ef:3d:45:53:db:ed:d4:e1:c6:eb:e8: 7e:ed:38:8b:9f:be:f0:ea:d2:3d:ed:b5:46:c8:34: 3c:24:c6:7c:2d:33:ea:75:77:2a:61:7c:04:9d:d7: a7:e1:55:52:e8:b9:59:04:d7:de:85:5c:dd:d5:f9: e5:d3:84:18:22:86:86:d3:25:a8:4b:77:29:66:63: 48:de:19:1f:d4:11:af:e9:b0:f5:9b:12:72:5d:a7: f3:2a:ce:57:2d:a7:b9:77:0b:df:9c:d7:f7:09:84: a2:39:a9:49:5e:2a:f6:36:38:7c:2c:ec:b2:25:84: 06:95:2c:3c:4f:e7:2f:b7:b5:98:f2:55:30:f2:0c: 93:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:23:C3:6E:DB:1A:7B:C1:1A:20:D7:56:45:D8:CA:AD:25:B8:19:EF X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2ce0da13-0e88-4bf2-bd9d-35168bcefdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.229.0/24 Signature Algorithm: sha256WithRSAEncryption 29:8c:21:f8:f0:03:35:ed:82:c6:c4:8f:40:0c:9b:8d:e0:76: 2a:2e:2b:7b:c4:dd:1e:57:22:9a:57:9f:ab:bf:72:65:d7:84: 39:78:0c:65:29:02:7a:29:dd:28:fc:30:00:85:e0:59:b8:f9: 56:d4:6e:42:6c:63:9f:42:e4:6d:f6:6e:ad:37:85:f9:71:0a: 70:20:56:88:07:b0:3b:0f:1d:68:28:f1:6a:78:20:4c:e0:61: 5b:38:48:51:11:97:11:83:3b:78:8f:5b:06:4f:65:c7:21:a3: 6f:fa:4b:be:15:ae:82:bd:88:53:ff:98:a0:bd:b8:f1:51:b8: 7b:95:13:e4:38:76:be:92:22:3a:5a:29:89:23:87:2e:2e:b5: 76:20:46:b7:1a:41:1f:4c:23:69:90:36:bc:48:58:dd:d9:80: 2d:7d:98:d9:46:0c:9f:89:70:fc:cf:2d:64:bd:ef:3f:14:df: d0:ab:59:22:b2:90:f9:b6:13:ec:66:4a:2b:20:42:f8:ef:fe: 66:57:f1:04:c0:77:06:b5:01:7e:15:92:d7:4b:31:5c:36:f3: b3:a3:1f:4c:c5:13:9e:d9:84:c0:58:f1:da:89:37:6a:9a:b6: 77:ce:e4:f3:33:47:be:a8:b9:d1:b9:fa:99:42:b0:cb:c6:5d: ab:6a:07:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURXmwqo7GRRsfeqerfmvXIepChecwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDExMDAxMDA0WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGY1Y2VmMGYwZGZjMjA2NTEyNjhjMmNhMWUzNGM2MDlk NjQ0MGU4OGMyYjUwMzBmZTQ5MWYwYzZiMmYzYjQ0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH7LkbRNIeoTldJPCI6s4qsC4lRoPnvK+k83VNY0MvoPi5 31HXJx9iswAWAvNAeczFkAiqRcNYCEhdC+VPPo3ejrYivt7EBMH5NovAXcPxYhza mHQiTMbSVzkuexSuX+KHmTWhHji8ANQEY2xnNzts7iOMNCjgmuxyM17vPUVT2+3U 4cbr6H7tOIufvvDq0j3ttUbINDwkxnwtM+p1dyphfASd16fhVVLouVkE196FXN3V +eXThBgihobTJahLdylmY0jeGR/UEa/psPWbEnJdp/Mqzlctp7l3C9+c1/cJhKI5 qUleKvY2OHws7LIlhAaVLDxP5y+3tZjyVTDyDJPbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiCPDbtsae8EaINdWRdjKrSW4Ge8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzJjZTBkYTEzLTBlODgtNGJmMi1iZDlkLTM1MTY4YmNlZmRjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABFqeUwDQYJKoZIhvcNAQELBQADggEBACmMIfjwAzXtgsbEj0AMm43gdiou K3vE3R5XIppXn6u/cmXXhDl4DGUpAnop3Sj8MACF4Fm4+VbUbkJsY59C5G32bq03 hflxCnAgVogHsDsPHWgo8Wp4IEzgYVs4SFERlxGDO3iPWwZPZccho2/6S74VroK9 iFP/mKC9uPFRuHuVE+Q4dr6SIjpaKYkjhy4utXYgRrcaQR9MI2mQNrxIWN3ZgC19 mNlGDJ+JcPzPLWS97z8U39CrWSKykPm2E+xmSisgQvjv/mZX8QTAdwa1AX4VktdL MVw287OjH0zFE57ZhMBY8dqJN2qatnfO5PMzR76oudG5+plCsMvGXatqB5Q= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:41 2025 by rpki-client