$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa File: 3200cf8e-c64b-4110-8ccd-4128ae231d47.roa (raw, json) Hash identifier: 2Qcus868QQUT/sPSQ8ik/bDp21KsVdg3+aQWLChlIDA= Subject key identifier: 56:B8:50:7C:A0:DB:01:C8:65:02:DD:5E:2C:2B:70:66:70:66:86:95 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 254EC5A384E60834B900D896CF8A6C22AD12E783 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa Signing time: Wed 23 Apr 2025 00:10:33 +0000 ROA not before: Wed 23 Apr 2025 00:10:33 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4e:c5:a3:84:e6:08:34:b9:00:d8:96:cf:8a:6c:22:ad:12:e7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 23 00:10:33 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=ec91a03765853b70a1de7eb1fcecc72b37e20216aeea035882a1a778c13c202d, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:96:7c:0b:10:13:7f:3b:22:ce:ab:1a:68: 54:9c:17:23:48:dd:a2:32:0f:df:42:7b:87:27:e4: 37:04:30:5a:b4:66:90:d4:7d:67:b3:e5:18:45:6a: be:db:6d:be:18:36:a5:88:41:8b:ea:b9:b1:2d:3b: eb:2e:6b:65:ce:32:4f:09:31:44:e2:23:a1:3b:ed: 4e:59:19:ed:2a:04:c1:89:0c:ad:23:93:a2:a0:eb: e1:b9:6a:82:95:87:3f:bb:2a:81:62:b6:12:28:f9: ff:99:4f:8c:05:7c:28:aa:19:3e:50:c1:6d:3e:32: 7b:c0:07:03:63:30:81:05:6a:82:98:b8:a5:c5:bb: fa:af:df:a4:5d:fc:eb:ec:c1:02:90:fb:62:60:17: d9:07:31:29:6f:94:91:08:88:2a:39:56:9c:3e:a5: ed:cb:83:b4:70:a3:01:4a:ca:01:f8:32:cc:ca:0e: 5c:1e:92:9c:70:b8:95:c7:d2:b4:cf:98:30:07:c0: 41:85:2a:ff:88:80:aa:bd:75:08:40:d9:49:da:6f: bd:ff:f3:58:d2:02:b9:35:d8:a3:fd:d6:e2:6a:96: 63:75:28:67:36:56:da:96:0c:84:c8:e0:a6:86:87: 9c:27:2c:8a:a4:43:60:88:e0:bd:ce:bb:be:90:0a: 78:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B8:50:7C:A0:DB:01:C8:65:02:DD:5E:2C:2B:70:66:70:66:86:95 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.224.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:5d:8c:96:43:20:f1:17:8d:46:a8:ad:c6:3c:91:c8:35:3b: 23:0a:8e:c3:0a:53:c5:40:9f:2e:92:42:39:23:b1:47:ca:e3: 7c:1c:35:ca:d7:f5:08:25:ef:07:40:07:a3:c7:ab:f6:6f:ba: 51:84:78:f6:ab:3a:81:34:8c:bb:7c:b3:ee:a7:00:4d:00:4e: 68:17:33:e9:21:90:c3:b8:c0:5a:a0:79:e3:5a:c7:0f:1b:85: 91:ce:05:c6:1d:81:cf:a9:0e:0e:6e:f6:53:e8:f1:08:d9:6d: 01:90:10:a0:4f:93:59:18:23:7c:96:41:ca:61:d6:ea:d8:51: 23:04:f3:24:85:0a:58:fd:a5:23:80:0a:f7:e9:fa:1b:24:89: 5d:e3:35:8c:7e:f2:11:53:ad:b1:4f:7f:33:c5:c6:78:65:d8: ef:fa:e0:ea:ba:e5:e1:f7:10:dc:8e:dd:31:ce:7d:fb:79:64: 03:fd:2f:86:c9:9a:b7:a4:19:ea:d3:d2:af:90:a6:67:b1:81: f7:57:da:74:da:47:bb:f1:39:d4:b8:8e:d1:3d:10:aa:c5:3a: de:82:1d:fe:12:5b:75:95:46:8d:59:b2:5f:c5:ff:03:d9:18: 4f:7f:7e:2b:06:02:ed:a9:31:df:26:d3:ef:d2:67:74:87:bb: c6:90:7d:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJU7Fo4TmCDS5ANiWz4psIq0S54MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDIzMDAxMDMzWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzkxYTAzNzY1ODUzYjcwYTFkZTdlYjFmY2VjYzcyYjM3 ZTIwMjE2YWVlYTAzNTg4MmExYTc3OGMxM2MyMDJkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2uJZ8CxATfzsizqsaaFScFyNI3aIyD99Ce4cn5DcEMFq0 ZpDUfWez5RhFar7bbb4YNqWIQYvqubEtO+sua2XOMk8JMUTiI6E77U5ZGe0qBMGJ DK0jk6Kg6+G5aoKVhz+7KoFithIo+f+ZT4wFfCiqGT5QwW0+MnvABwNjMIEFaoKY uKXFu/qv36Rd/OvswQKQ+2JgF9kHMSlvlJEIiCo5Vpw+pe3Lg7RwowFKygH4MszK DlwekpxwuJXH0rTPmDAHwEGFKv+IgKq9dQhA2Unab73/81jSArk12KP91uJqlmN1 KGc2VtqWDITI4KaGh5wnLIqkQ2CI4L3Ou76QCniVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVrhQfKDbAchlAt1eLCtwZnBmhpUwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyMDBjZjhlLWM2NGItNDExMC04Y2NkLTQxMjhhZTIzMWQ0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFqeAwDQYJKoZIhvcNAQELBQADggEBAAtdjJZDIPEXjUaorcY8kcg1OyMK jsMKU8VAny6SQjkjsUfK43wcNcrX9Qgl7wdAB6PHq/ZvulGEeParOoE0jLt8s+6n AE0ATmgXM+khkMO4wFqgeeNaxw8bhZHOBcYdgc+pDg5u9lPo8QjZbQGQEKBPk1kY I3yWQcph1urYUSME8ySFClj9pSOACvfp+hskiV3jNYx+8hFTrbFPfzPFxnhl2O/6 4Oq65eH3ENyO3THOfft5ZAP9L4bJmrekGerT0q+QpmexgfdX2nTaR7vxOdS4jtE9 EKrFOt6CHf4SW3WVRo1Zsl/F/wPZGE9/fisGAu2pMd8m0+/SZ3SHu8aQfZM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:40 2025 by rpki-client