$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa File: 60789a29-f516-47ec-9154-b2b610f7282e.roa (raw, json) Hash identifier: dCPHbQfs4SLRIfZnaj3njGJrFmvEetJIKobreYZOTFI= Subject key identifier: ED:AA:80:E1:D8:4C:C4:C6:B3:BA:E7:77:37:C6:0C:F0:81:3F:A9:5D Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 3523B252F639186B31367D1177BD6FB91E631594 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa Signing time: Wed 09 Apr 2025 00:00:10 +0000 ROA not before: Wed 09 Apr 2025 00:00:10 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 216.221.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:23:b2:52:f6:39:18:6b:31:36:7d:11:77:bd:6f:b9:1e:63:15:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 9 00:00:10 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=eb9e326d0aa60a24dd7a1a1c637c609bad57e197005d9bb53b77e92319749d2a, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:17:b6:40:42:26:43:e4:2c:84:56:d1:7b:b4: 60:83:fd:00:75:b0:87:89:31:84:65:76:b8:82:2d: ad:c8:6e:bc:70:2e:df:a6:1d:d8:49:0a:8f:b2:8a: aa:ea:9b:0f:8c:83:90:25:3e:56:dc:33:d2:ca:3d: 19:e1:ac:46:39:40:78:e3:e7:d1:64:30:db:a9:aa: 07:48:71:ca:3f:0e:3a:75:fc:7a:f7:59:10:af:ca: 3e:51:9e:0a:34:24:02:e7:3c:a1:cd:6f:7c:c5:85: 22:85:c4:b3:f3:a0:0e:cc:3f:e8:62:1d:ad:69:17: e7:1f:56:84:d9:9e:3c:db:f3:e0:c9:15:c6:27:f1: f4:42:b6:44:16:98:3f:d9:a0:5d:91:be:27:97:db: 02:27:a9:ba:e8:09:76:10:8a:14:71:61:86:40:33: d4:89:dc:9d:fa:1c:00:72:58:69:16:bb:bf:77:e6: 87:ad:a5:46:b9:1b:54:b3:dd:7e:27:b9:8d:bc:9d: af:6a:90:c1:54:d4:25:a4:1c:3d:1d:03:0b:cb:5e: 7d:5c:71:1d:87:e1:ff:03:69:9d:04:7c:36:a6:4b: fb:91:d7:4f:4c:c8:9a:0b:f8:8f:24:80:65:3e:ab: 5d:77:e3:f1:cd:89:c0:41:bb:60:b7:54:7c:c6:0a: 9b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AA:80:E1:D8:4C:C4:C6:B3:BA:E7:77:37:C6:0C:F0:81:3F:A9:5D X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.168.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:71:28:27:e9:e4:92:33:77:ab:e7:95:97:15:8f:bc:54:eb: cd:00:c6:1e:3c:dd:0d:c8:51:52:5a:ae:76:b1:30:27:df:2b: 12:59:c9:40:74:2c:f9:e4:34:2d:18:c3:16:a4:44:6f:cc:c7: 52:38:65:82:a2:8a:14:f6:f7:bc:c9:0a:a3:5f:70:b9:43:b8: 3f:a2:76:b4:34:35:c1:f8:c7:77:a4:f6:3b:e4:79:f9:ab:d1: a8:aa:fa:21:b9:90:a0:d9:4e:c0:18:b6:51:de:7a:36:7c:e4: 85:63:00:0b:08:a0:42:5f:bc:fa:bf:54:18:5d:10:a2:70:70: 81:8a:23:98:5b:9e:d4:76:5c:fb:d2:bf:1f:17:94:31:4b:35: df:0e:6f:b2:27:76:4c:29:7c:8f:a5:05:b8:24:bc:3c:3d:31: 9a:46:12:a4:28:b9:9b:7b:52:57:f0:38:96:82:77:6a:b0:10: e6:b9:87:34:f8:9a:90:88:35:ad:a1:40:19:f9:58:92:19:2f: cd:6b:85:8f:37:0b:a2:12:3a:34:79:f3:a8:dc:36:7e:e8:bc: df:7e:d7:48:83:94:31:9c:a7:93:18:30:ed:3a:46:f7:ac:97: c2:11:81:3f:53:6d:7c:ed:b5:d3:26:1e:a3:4f:fe:8c:3d:8d: 79:67:7f:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNSOyUvY5GGsxNn0Rd71vuR5jFZQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDA5MDAwMDEwWhcNMjUwNTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjllMzI2ZDBhYTYwYTI0ZGQ3YTFhMWM2MzdjNjA5YmFk NTdlMTk3MDA1ZDliYjUzYjc3ZTkyMzE5NzQ5ZDJhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmF7ZAQiZD5CyEVtF7tGCD/QB1sIeJMYRldriCLa3Ibrxw Lt+mHdhJCo+yiqrqmw+Mg5AlPlbcM9LKPRnhrEY5QHjj59FkMNupqgdIcco/Djp1 /Hr3WRCvyj5Rngo0JALnPKHNb3zFhSKFxLPzoA7MP+hiHa1pF+cfVoTZnjzb8+DJ FcYn8fRCtkQWmD/ZoF2RvieX2wInqbroCXYQihRxYYZAM9SJ3J36HAByWGkWu793 5oetpUa5G1Sz3X4nuY28na9qkMFU1CWkHD0dAwvLXn1ccR2H4f8DaZ0EfDamS/uR 109MyJoL+I8kgGU+q1134/HNicBBu2C3VHzGCpuLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7aqA4dhMxMazuud3N8YM8IE/qV0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzYwNzg5YTI5LWY1MTYtNDdlYy05MTU0LWIyYjYxMGY3MjgyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPY3agwDQYJKoZIhvcNAQELBQADggEBAA1xKCfp5JIzd6vnlZcVj7xU680A xh483Q3IUVJarnaxMCffKxJZyUB0LPnkNC0YwxakRG/Mx1I4ZYKiihT297zJCqNf cLlDuD+idrQ0NcH4x3ek9jvkefmr0aiq+iG5kKDZTsAYtlHeejZ85IVjAAsIoEJf vPq/VBhdEKJwcIGKI5hbntR2XPvSvx8XlDFLNd8Ob7IndkwpfI+lBbgkvDw9MZpG EqQouZt7UlfwOJaCd2qwEOa5hzT4mpCINa2hQBn5WJIZL81rhY83C6ISOjR586jc Nn7ovN9+10iDlDGcp5MYMO06Rvesl8IRgT9TbXzttdMmHqNP/ow9jXlnfwY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:59 2025 by rpki-client