$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa File: 639621c0-050e-4e66-b3a2-1dd129de2c24.roa (raw, json) Hash identifier: OYS7XYJj3gaaul52aTw72m66kr0NGIbg0wSOKF8+yNk= Subject key identifier: A6:9D:5C:FC:25:B9:3E:42:B2:4E:43:F5:6E:9A:50:EC:19:DB:B6:E7 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 0A2A7829DA34A7AD27F7A8415C6B685764945E39 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa Signing time: Fri 11 Apr 2025 00:10:17 +0000 ROA not before: Fri 11 Apr 2025 00:10:17 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2a:78:29:da:34:a7:ad:27:f7:a8:41:5c:6b:68:57:64:94:5e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 11 00:10:17 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=875af1bedfbde518688abaf39c37ff93452507d153b2e43444af8333016db23b, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:62:ea:c7:0a:cd:dc:64:43:c3:14:d8:e8: e7:7d:93:1b:cf:63:8c:3d:f9:56:38:46:27:a3:7d: 88:20:2d:94:bc:97:67:ef:4f:f5:03:54:30:b7:b0: 12:02:68:d9:c1:de:83:c0:25:50:1b:d1:d9:b3:51: ae:a3:10:ee:66:3a:f7:5a:3f:4a:d2:64:d7:42:47: 1f:30:fc:a0:ad:1a:e3:9f:5d:c4:93:76:94:02:8d: 6b:b3:82:d5:92:22:3c:24:88:9a:8a:9d:93:f3:2b: bd:1f:2d:cc:d4:61:38:88:30:eb:53:c9:7a:97:bc: 84:73:d4:e4:1b:40:3c:b0:16:8b:3a:58:42:18:6b: 00:56:49:c6:1f:ce:42:19:4a:54:7c:60:62:6f:d8: 86:f7:26:b3:4d:81:e6:3b:27:3b:2b:87:91:26:62: 1d:fe:42:f2:02:e9:bf:73:94:d1:02:4d:60:67:7b: 67:73:8a:49:8c:f6:b3:dd:b2:17:9a:5f:f4:9c:52: 0b:82:d0:f1:e0:60:f3:76:a4:b6:f2:76:f8:32:70: f3:20:4b:9a:8f:75:f9:4b:1e:f7:b6:60:be:c5:a4: aa:34:5c:ad:05:cb:22:2d:ff:12:97:83:01:3b:c2: d8:26:5c:65:9e:d0:19:42:3f:9e:04:b6:16:f2:2d: 36:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9D:5C:FC:25:B9:3E:42:B2:4E:43:F5:6E:9A:50:EC:19:DB:B6:E7 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.182.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:27:e2:cd:d8:ef:ce:32:ec:27:2d:65:87:95:66:5e:9b:31: 48:da:26:f9:f2:35:ec:41:d1:6f:ec:7d:f9:32:4d:b9:fa:fe: 08:35:f7:e1:b7:38:b3:33:17:22:2b:df:50:81:87:d4:46:1e: 96:d5:f1:27:23:12:4d:25:24:57:ff:22:01:c4:b0:d8:42:bf: 72:2f:2e:02:0a:56:06:a5:99:98:26:6e:74:29:79:e0:a2:1e: ef:54:28:d4:67:18:3f:6b:7f:fa:e9:e5:99:b5:86:af:d6:0b: c1:18:82:17:45:81:3d:0b:da:18:74:49:4a:1b:d4:f6:29:0e: 97:13:be:c3:5b:af:19:8e:86:a6:db:d5:23:7a:a6:10:70:ff: d8:99:86:c9:20:23:c3:52:17:9b:53:a5:71:a5:e3:2f:36:f9: 2d:16:62:3b:e9:43:bc:84:99:9e:b1:5c:44:ff:6e:e6:c6:0b: 4b:e9:73:d0:c2:f1:51:e0:34:e2:a1:37:e6:ce:8c:b8:8e:43: 4e:55:5c:92:53:f3:d7:f7:c5:d3:bf:50:5d:88:df:d9:18:d7: aa:26:bb:6b:a2:f2:8f:6d:af:36:b0:e8:86:e9:94:ee:d1:cb: 74:17:a1:6a:83:15:e9:07:de:e3:f1:07:9a:91:34:dd:1e:e1: ee:bd:9a:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCip4Kdo0p60n96hBXGtoV2SUXjkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDExMDAxMDE3WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzVhZjFiZWRmYmRlNTE4Njg4YWJhZjM5YzM3ZmY5MzQ1 MjUwN2QxNTNiMmU0MzQ0NGFmODMzMzAxNmRiMjNiMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2amLqxwrN3GRDwxTY6Od9kxvPY4w9+VY4RiejfYggLZS8 l2fvT/UDVDC3sBICaNnB3oPAJVAb0dmzUa6jEO5mOvdaP0rSZNdCRx8w/KCtGuOf XcSTdpQCjWuzgtWSIjwkiJqKnZPzK70fLczUYTiIMOtTyXqXvIRz1OQbQDywFos6 WEIYawBWScYfzkIZSlR8YGJv2Ib3JrNNgeY7Jzsrh5EmYh3+QvIC6b9zlNECTWBn e2dzikmM9rPdsheaX/ScUguC0PHgYPN2pLbydvgycPMgS5qPdflLHve2YL7FpKo0 XK0FyyIt/xKXgwE7wtgmXGWe0BlCP54EthbyLTapAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpp1c/CW5PkKyTkP1bppQ7BnbtucwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzYzOTYyMWMwLTA1MGUtNGU2Ni1iM2EyLTFkZDEyOWRlMmMyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37YwDQYJKoZIhvcNAQELBQADggEBAD4n4s3Y784y7CctZYeVZl6bMUja JvnyNexB0W/sffkyTbn6/gg19+G3OLMzFyIr31CBh9RGHpbV8ScjEk0lJFf/IgHE sNhCv3IvLgIKVgalmZgmbnQpeeCiHu9UKNRnGD9rf/rp5Zm1hq/WC8EYghdFgT0L 2hh0SUob1PYpDpcTvsNbrxmOhqbb1SN6phBw/9iZhskgI8NSF5tTpXGl4y82+S0W YjvpQ7yEmZ6xXET/bubGC0vpc9DC8VHgNOKhN+bOjLiOQ05VXJJT89f3xdO/UF2I 39kY16omu2ui8o9trzaw6IbplO7Ry3QXoWqDFekH3uPxB5qRNN0e4e69mrA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:40 2025 by rpki-client