$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa File: 3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa (raw, json) Hash identifier: 04quVoKNo4Ten1azLbE16jYhN6gGJjFPxSPWRVlIegg= Subject key identifier: B7:6E:87:31:EE:0C:4F:DE:B8:02:7C:F4:23:09:DD:28:DF:80:55:3D Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 63183F1F19B3B33C2DDDF9A873A8255F309CC5E7 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa Signing time: Fri 11 Apr 2025 00:00:50 +0000 ROA not before: Fri 11 Apr 2025 00:00:50 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:18:3f:1f:19:b3:b3:3c:2d:dd:f9:a8:73:a8:25:5f:30:9c:c5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 11 00:00:50 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=781484361415ad40a85cb69ce67900882563b4977be984cd989fa7d1587b9805, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:3f:e2:ea:70:4a:6e:b2:bb:54:3e:20:0f: e2:0e:b2:49:f4:f7:29:49:74:c1:ad:de:93:4b:b4: a5:d1:45:f1:a0:90:86:c3:33:91:11:88:ea:17:48: b1:e8:fb:ed:3a:3a:2d:08:13:45:2a:04:e0:da:04: 3e:85:8b:d0:5a:a2:52:6d:bf:79:6e:4d:37:89:19: 38:6c:8f:65:e5:0f:a4:79:8e:fb:ed:ea:7f:42:80: 6b:49:4e:b4:ce:a5:f6:c9:da:6e:df:bf:75:5f:ed: f8:4b:a5:3f:88:7e:9f:46:af:c5:1b:05:5a:ac:9f: b2:d9:90:15:b2:cf:7f:6e:3a:88:77:b8:ff:2c:fc: ec:cd:90:f8:4b:1f:d1:c2:ed:d1:c9:63:31:66:a6: 92:43:54:ae:75:2f:26:e7:c9:24:3d:96:3d:b2:ed: 1a:2c:d5:ac:e2:8f:0b:0e:4b:45:e0:33:02:ca:d4: e7:54:29:c1:71:2e:8f:10:b2:54:b8:6a:b8:2d:5a: b4:99:d1:d0:ec:3a:36:d6:ee:0a:28:b9:62:d5:a7: a8:4a:73:f2:80:3a:7f:85:2d:97:28:90:e4:49:86: df:04:04:25:6d:2a:98:ee:34:e1:e8:e6:a9:ab:ae: bf:af:96:56:dd:3e:aa:c7:87:be:f1:48:cb:45:dd: ca:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6E:87:31:EE:0C:4F:DE:B8:02:7C:F4:23:09:DD:28:DF:80:55:3D X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.224.0/24 Signature Algorithm: sha256WithRSAEncryption 36:6a:6c:9a:1d:5f:e6:be:bb:4a:2e:3a:8a:0c:2b:6f:85:cc: a4:76:44:f2:9b:03:d6:97:ae:14:42:de:58:04:40:7d:a5:b8: 80:71:18:90:9d:9d:cb:46:d5:ae:f4:b5:c3:8d:69:a9:6c:30: 70:31:c6:40:84:f1:09:be:72:c9:a8:b9:f0:f8:99:d4:66:63: da:ec:59:6e:b7:02:b8:04:91:a3:1b:f2:d0:36:73:01:b1:97: 0e:9b:85:d1:37:e1:80:06:36:d1:0e:bf:56:c7:bb:74:a0:08: 2f:26:76:7e:be:ef:20:dc:44:af:e7:ed:0e:74:58:d2:b0:0a: 5c:86:31:df:50:9e:53:31:5a:39:0e:f6:d1:5c:37:68:6a:29: 98:13:83:e0:8d:87:83:11:69:a9:28:cf:c2:f0:6e:c8:ea:a3: 85:7c:a3:3d:eb:c7:c0:35:21:ef:c9:42:f4:15:63:ba:a2:57: 9e:2c:9e:92:78:af:36:4a:83:89:cc:56:b4:66:e0:17:c3:b6: 16:ea:c4:05:90:3b:14:4d:dc:4b:2b:69:7e:77:4e:24:b9:8f: 8f:58:f1:a5:e9:a3:6c:93:19:10:12:0b:78:44:b2:4f:b3:d2: 09:ed:bd:0a:38:df:c6:38:21:5b:de:1a:b8:fe:43:f5:20:d8: 5b:54:d1:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYxg/Hxmzszwt3fmoc6glXzCcxecwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDExMDAwMDUwWhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODE0ODQzNjE0MTVhZDQwYTg1Y2I2OWNlNjc5MDA4ODI1 NjNiNDk3N2JlOTg0Y2Q5ODlmYTdkMTU4N2I5ODA1MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwTz/i6nBKbrK7VD4gD+IOskn09ylJdMGt3pNLtKXRRfGg kIbDM5ERiOoXSLHo++06Oi0IE0UqBODaBD6Fi9BaolJtv3luTTeJGThsj2XlD6R5 jvvt6n9CgGtJTrTOpfbJ2m7fv3Vf7fhLpT+Ifp9Gr8UbBVqsn7LZkBWyz39uOoh3 uP8s/OzNkPhLH9HC7dHJYzFmppJDVK51LybnySQ9lj2y7Ros1azijwsOS0XgMwLK 1OdUKcFxLo8QslS4argtWrSZ0dDsOjbW7goouWLVp6hKc/KAOn+FLZcokORJht8E BCVtKpjuNOHo5qmrrr+vllbdPqrHh77xSMtF3cqpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUt26HMe4MT964Anz0IwndKN+AVT0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzNhZDJhZTljLWQ1MDUtNGI1My04YTAzLWMwMDM0NjAyZDQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++AwDQYJKoZIhvcNAQELBQADggEBADZqbJodX+a+u0ouOooMK2+FzKR2 RPKbA9aXrhRC3lgEQH2luIBxGJCdnctG1a70tcONaalsMHAxxkCE8Qm+csmoufD4 mdRmY9rsWW63ArgEkaMb8tA2cwGxlw6bhdE34YAGNtEOv1bHu3SgCC8mdn6+7yDc RK/n7Q50WNKwClyGMd9QnlMxWjkO9tFcN2hqKZgTg+CNh4MRaakoz8Lwbsjqo4V8 oz3rx8A1Ie/JQvQVY7qiV54snpJ4rzZKg4nMVrRm4BfDthbqxAWQOxRN3EsraX53 TiS5j49Y8aXpo2yTGRASC3hEsk+z0gntvQo438Y4IVveGrj+Q/Ug2FtU0c8= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:41 2025 by rpki-client