$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32c53391-9c3f-4b16-925f-978e804a33ba.roa File: 32c53391-9c3f-4b16-925f-978e804a33ba.roa (raw, json) Hash identifier: f13uw4UpQ1JmlIYV/UNxF5uIC9DDk5KY8Do/DvT9RGs= Subject key identifier: 65:85:5F:A3:1A:4E:2C:36:9E:1F:A5:82:C4:0C:9C:5B:80:1D:E7:FF Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5E6B44FAA2EE01788E6C9F55C42BDC000B98BE93 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32c53391-9c3f-4b16-925f-978e804a33ba.roa Signing time: Mon 02 Jun 2025 15:00:04 +0000 ROA not before: Mon 02 Jun 2025 15:00:04 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 24.110.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6b:44:fa:a2:ee:01:78:8e:6c:9f:55:c4:2b:dc:00:0b:98:be:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jun 2 15:00:04 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=a80ad81bbd60b67fd6eae7d911a7ca456bc10c3a6d3c8332f5a2144d27a4e7f8, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5b:c1:2d:cd:4d:27:05:2e:6e:dc:ab:f6:d9: ba:7b:d9:b1:80:e9:82:47:7b:15:03:b8:c3:0c:2c: 60:51:71:d5:31:26:66:4c:af:a7:34:72:40:21:3b: 7d:28:7a:e4:e6:b5:0b:5d:67:e8:78:56:fe:5f:93: b7:fe:7f:60:4c:0e:eb:49:2b:15:53:0f:86:ff:42: 4f:dd:f0:7a:3c:61:0f:99:95:75:d2:a7:72:ca:27: 8c:ec:e8:13:16:5e:51:ea:0a:7b:a1:4f:e6:92:f1: b3:ee:3d:b3:13:d0:44:8c:7b:10:30:59:1e:d2:c4: 78:b0:e7:a9:77:d6:66:56:7f:dc:db:a7:10:f5:ed: 81:42:a8:86:f4:92:73:25:c0:9f:bb:c1:b3:48:87: 4a:b0:9a:e8:f4:80:b9:ca:73:73:a2:3a:a1:c2:c5: 3c:ed:e1:3b:14:0d:0b:09:5f:d2:19:0f:1f:82:45: b4:39:6c:39:18:5e:40:c2:b6:84:07:52:de:ec:0b: b8:7c:75:a8:b3:3e:8b:96:41:9e:ac:b3:17:ff:2e: 24:20:47:71:de:fc:cd:5c:d7:43:3c:95:14:57:c2: 34:61:33:6b:19:01:b9:7c:8e:ff:39:f6:6d:0d:3b: 10:84:5a:f8:c5:c1:24:20:ac:cc:6e:05:2f:31:67: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:85:5F:A3:1A:4E:2C:36:9E:1F:A5:82:C4:0C:9C:5B:80:1D:E7:FF X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/32c53391-9c3f-4b16-925f-978e804a33ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.110.64.0/18 Signature Algorithm: sha256WithRSAEncryption 69:a6:9b:53:3b:36:15:17:a3:a3:4f:4f:f8:a1:5b:98:a2:85: d0:17:06:0a:66:a7:9b:ec:4c:9c:80:95:54:47:49:96:3a:f0: 37:51:84:ed:ff:8c:ac:8e:af:44:c9:b6:3c:22:de:51:64:58: af:20:58:0d:e5:da:17:12:20:a3:5a:46:dd:b9:66:e9:a8:91: 9f:17:24:93:7f:e9:a8:0d:f1:4e:be:1f:67:7c:4c:e2:a1:be: 8b:fe:28:49:d1:d1:3c:e1:42:eb:96:c7:85:45:c0:41:9c:15: a7:4c:87:f4:02:7e:ab:17:30:fd:31:08:6c:60:b3:59:8f:d8: ce:4c:ac:de:10:af:81:7c:9e:77:11:87:dd:2f:40:b9:6d:01: b8:1a:8e:13:a8:c1:7a:6d:17:cb:8d:b0:c2:11:ea:d1:2b:39: 1d:63:d9:e5:62:a5:3d:78:d3:06:72:03:da:13:9c:6c:a4:5c: e1:0f:3a:07:20:eb:05:9c:42:a0:e8:46:36:ca:13:e6:da:47: 3b:1e:9b:21:00:9e:57:a1:26:fd:c1:ec:e3:11:8a:00:45:e8: 72:60:09:44:41:5a:4a:dd:af:a5:c0:a1:98:3a:5d:e2:eb:4f: 44:6f:67:a1:1a:db:a4:31:71:c9:93:9a:b0:48:16:0e:70:04: 44:5d:47:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXmtE+qLuAXiObJ9VxCvcAAuYvpMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjAyMTUwMDA0WhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhODBhZDgxYmJkNjBiNjdmZDZlYWU3ZDkxMWE3Y2E0NTZi YzEwYzNhNmQzYzgzMzJmNWEyMTQ0ZDI3YTRlN2Y4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdW8EtzU0nBS5u3Kv22bp72bGA6YJHexUDuMMMLGBRcdUx JmZMr6c0ckAhO30oeuTmtQtdZ+h4Vv5fk7f+f2BMDutJKxVTD4b/Qk/d8Ho8YQ+Z lXXSp3LKJ4zs6BMWXlHqCnuhT+aS8bPuPbMT0ESMexAwWR7SxHiw56l31mZWf9zb pxD17YFCqIb0knMlwJ+7wbNIh0qwmuj0gLnKc3OiOqHCxTzt4TsUDQsJX9IZDx+C RbQ5bDkYXkDCtoQHUt7sC7h8daizPouWQZ6ssxf/LiQgR3He/M1c10M8lRRXwjRh M2sZAbl8jv859m0NOxCEWvjFwSQgrMxuBS8xZ/pNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZYVfoxpOLDaeH6WCxAycW4Ad5/8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyYzUzMzkxLTljM2YtNGIxNi05MjVmLTk3OGU4MDRhMzNiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYYbkAwDQYJKoZIhvcNAQELBQADggEBAGmmm1M7NhUXo6NPT/ihW5iihdAX Bgpmp5vsTJyAlVRHSZY68DdRhO3/jKyOr0TJtjwi3lFkWK8gWA3l2hcSIKNaRt25 ZumokZ8XJJN/6agN8U6+H2d8TOKhvov+KEnR0TzhQuuWx4VFwEGcFadMh/QCfqsX MP0xCGxgs1mP2M5MrN4Qr4F8nncRh90vQLltAbgajhOowXptF8uNsMIR6tErOR1j 2eVipT140wZyA9oTnGykXOEPOgcg6wWcQqDoRjbKE+baRzsemyEAnlehJv3B7OMR igBF6HJgCURBWkrdr6XAoZg6XeLrT0RvZ6Ea26QxccmTmrBIFg5wBERdRwo= -----END CERTIFICATE-----Generated at Sat Jun 14 06:22:08 2025 by rpki-client