$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/80051317-81e4-416b-892a-affc2e301f81.roa File: 80051317-81e4-416b-892a-affc2e301f81.roa (raw, json) Hash identifier: 6XDZD33FjgYB7xYnfnoml0yOzYfeHdW+1oYVvDpFz/k= Subject key identifier: BC:91:73:DC:6B:5D:DA:59:84:39:24:14:AB:B4:29:3D:9D:4D:69:67 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4DF7B45C765240FFB4D98627D205CFCA8A46A6A5 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/80051317-81e4-416b-892a-affc2e301f81.roa Signing time: Wed 23 Apr 2025 00:10:01 +0000 ROA not before: Wed 23 Apr 2025 00:10:01 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f7:b4:5c:76:52:40:ff:b4:d9:86:27:d2:05:cf:ca:8a:46:a6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 23 00:10:01 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=d0c8c2a3e309f9e3700850c77c880d4c0a5a943ddfb0f602538b702775a678a0, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:c3:0b:96:89:1c:1d:9a:d8:2e:45:4b:d5: bb:33:73:7b:26:af:33:be:50:97:d9:97:7a:eb:4e: 13:a1:68:84:94:eb:24:5a:6d:09:87:70:64:19:2d: f4:d2:b6:e5:59:d9:4a:08:e9:fa:a7:e7:d8:6b:03: 7d:56:f0:7d:08:b9:fc:86:b8:9f:e8:3a:48:63:ad: a9:ab:8e:00:1d:df:c3:59:bb:00:89:97:ae:37:ce: 37:cf:39:f9:2f:5c:96:2d:0c:49:c1:c0:24:b2:0d: 24:9f:04:50:22:50:fd:0b:a2:5d:37:2f:19:d9:49: c6:76:a9:34:a2:54:ed:b2:4f:8e:99:bf:7d:46:d5: 60:f9:5c:cf:cf:f4:86:5f:57:cb:6b:a3:f2:64:1f: 20:03:11:07:37:8d:74:20:c8:b3:fc:c1:17:db:e8: ea:d2:fc:58:76:c3:b0:67:50:ee:c7:65:1a:e2:7a: 6f:68:b9:2b:e2:8a:de:d1:cb:3b:08:90:72:f4:62: cb:8b:67:a0:1c:ae:1f:a6:33:a1:a7:58:4e:01:2d: d0:1f:eb:51:e4:65:f6:e0:b1:e6:14:c0:a4:a4:39: a0:11:43:6a:43:65:ad:e2:00:5d:06:01:ab:cc:a6: 4e:a6:a1:fa:f7:aa:a7:4d:6d:1f:1e:c2:01:b9:be: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:91:73:DC:6B:5D:DA:59:84:39:24:14:AB:B4:29:3D:9D:4D:69:67 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/80051317-81e4-416b-892a-affc2e301f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.178.0/23 Signature Algorithm: sha256WithRSAEncryption 82:ea:e1:86:55:60:ac:29:6f:67:43:ab:6e:e5:cc:cd:bf:c6: 06:5b:71:14:e3:1e:44:18:44:60:06:61:03:53:50:d4:21:9c: 15:54:37:f7:07:b8:bd:86:44:3a:2f:69:29:89:83:31:4a:0c: 9f:4d:67:a1:42:c4:e5:b7:e1:d6:99:cf:dd:20:0f:dc:55:b9: 66:d9:89:c7:51:dc:61:9f:e8:a2:59:69:3a:b4:11:80:48:28: 9e:04:f0:53:c4:9a:13:c2:33:fa:20:9e:35:e9:29:0c:06:53: 33:a8:35:3e:10:f2:a9:2a:d3:e9:47:08:c3:64:85:2a:06:ad: 76:e2:ef:72:43:63:d1:3c:a6:01:98:45:8f:63:82:41:c2:09: 9a:da:06:15:08:dc:48:df:45:ea:18:3e:c6:46:04:1b:1b:03: 21:8a:c2:1d:13:df:bf:04:c0:4d:95:5c:82:d6:69:6f:55:ad: 17:c2:1b:3f:85:3f:af:6f:64:cb:68:90:00:b1:1a:1c:d6:9c: 30:dc:e3:e5:57:a3:58:01:cd:14:60:63:70:24:46:b0:a5:49: ac:59:42:8c:d8:06:ea:9f:94:75:85:75:17:68:f3:9a:30:23: 8a:74:58:6d:66:d3:8d:1a:07:cb:29:62:e3:ed:40:da:06:2e: ae:35:e7:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTfe0XHZSQP+02YYn0gXPyopGpqUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDIzMDAxMDAxWhcNMjUwNTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGM4YzJhM2UzMDlmOWUzNzAwODUwYzc3Yzg4MGQ0YzBh NWE5NDNkZGZiMGY2MDI1MzhiNzAyNzc1YTY3OGEwMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC0sMLlokcHZrYLkVL1bszc3smrzO+UJfZl3rrThOhaISU 6yRabQmHcGQZLfTStuVZ2UoI6fqn59hrA31W8H0IufyGuJ/oOkhjramrjgAd38NZ uwCJl643zjfPOfkvXJYtDEnBwCSyDSSfBFAiUP0Lol03LxnZScZ2qTSiVO2yT46Z v31G1WD5XM/P9IZfV8tro/JkHyADEQc3jXQgyLP8wRfb6OrS/Fh2w7BnUO7HZRri em9ouSviit7RyzsIkHL0YsuLZ6Acrh+mM6GnWE4BLdAf61HkZfbgseYUwKSkOaAR Q2pDZa3iAF0GAavMpk6mofr3qqdNbR8ewgG5vlvZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvJFz3Gtd2lmEOSQUq7QpPZ1NaWcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzgwMDUxMzE3LTgxZTQtNDE2Yi04OTJhLWFmZmMyZTMwMWY4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFM37IwDQYJKoZIhvcNAQELBQADggEBAILq4YZVYKwpb2dDq27lzM2/xgZb cRTjHkQYRGAGYQNTUNQhnBVUN/cHuL2GRDovaSmJgzFKDJ9NZ6FCxOW34daZz90g D9xVuWbZicdR3GGf6KJZaTq0EYBIKJ4E8FPEmhPCM/ognjXpKQwGUzOoNT4Q8qkq 0+lHCMNkhSoGrXbi73JDY9E8pgGYRY9jgkHCCZraBhUI3EjfReoYPsZGBBsbAyGK wh0T378EwE2VXILWaW9VrRfCGz+FP69vZMtokACxGhzWnDDc4+VXo1gBzRRgY3Ak RrClSaxZQozYBuqflHWFdRdo85owI4p0WG1m040aB8spYuPtQNoGLq4159Y= -----END CERTIFICATE-----Generated at Sat Apr 26 16:36:00 2025 by rpki-client