$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa File: b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa (raw, json) Hash identifier: D1urMndakOmy1f5RbPchK5hk1tcIz2mGiXcf1cIHaX0= Subject key identifier: 78:47:41:F5:C3:F7:6D:98:B2:EE:2D:B6:25:6A:31:35:12:2B:C7:DC Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 4436511C3137EAE696BD75863FBE1338ABFA903E Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa Signing time: Fri 11 Apr 2025 00:00:56 +0000 ROA not before: Fri 11 Apr 2025 00:00:56 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:36:51:1c:31:37:ea:e6:96:bd:75:86:3f:be:13:38:ab:fa:90:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 11 00:00:56 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=3203eb177fe4631742d19a95bb7163d2968483b9abd1b9e787db0e341ce697c8, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:10:24:e6:a0:cc:d3:33:a8:60:aa:cb:db:7e: 3b:ba:34:e0:32:c0:ce:d1:69:85:82:db:99:41:bf: d7:b0:49:e1:eb:ab:d3:4a:cf:c5:a3:42:e2:1b:1b: db:c3:38:b9:f6:e4:36:e4:81:3e:30:a2:db:9a:a8: 2d:0a:db:2e:89:80:a3:68:4b:ec:93:87:49:1c:3a: 74:d6:b6:a7:d8:d4:16:09:ad:f6:69:06:09:1c:59: 05:43:48:db:e5:5a:58:93:d7:3c:2f:1f:20:db:3d: 4b:23:75:9e:c6:62:99:63:14:db:95:d5:ce:67:02: 8d:01:54:de:72:4c:b2:81:7e:75:3b:e6:57:62:da: 42:71:56:a6:f1:b7:49:d1:df:12:54:90:da:78:85: aa:2c:b9:69:6d:1d:fa:72:ff:24:ea:14:0d:dd:51: 49:39:bf:4b:1f:87:43:82:ed:a9:31:db:98:05:b0: a0:78:b6:ff:35:01:f0:2f:f1:c4:7f:4d:bd:7e:da: e1:b4:cb:85:d5:a1:07:f7:bd:92:43:e7:72:85:41: b5:58:23:60:b0:d1:cf:ed:ad:6b:bb:44:bc:1e:59: 0b:4b:d2:9e:9a:49:1d:f4:73:a5:3d:cb:39:8c:49: d8:83:f6:34:ea:e1:7f:d0:a6:e4:96:a3:3a:20:9d: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:47:41:F5:C3:F7:6D:98:B2:EE:2D:B6:25:6A:31:35:12:2B:C7:DC X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b4bb9851-b5aa-4370-bffe-4fc1fd414858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.236.0/23 Signature Algorithm: sha256WithRSAEncryption 70:5e:6f:52:9c:b0:02:b9:ca:96:b2:d3:5c:40:2c:99:ad:96: 77:45:45:79:4e:d4:6c:de:f9:31:68:ba:f8:83:3c:e6:ab:db: b4:54:ef:c5:50:b9:35:fd:55:82:77:56:99:2b:8f:5c:4a:2c: db:28:1a:1b:f4:fd:3b:92:74:7b:eb:07:16:19:e1:25:74:f8: df:6f:a9:13:99:87:08:79:ba:94:13:bb:82:15:a5:60:da:08: 63:0c:dd:12:81:c0:92:b9:46:0d:74:f0:1b:df:75:68:70:59: 37:f0:05:f2:2d:56:e9:0a:ac:17:ec:ae:9d:16:18:9c:df:32: b1:d4:84:e0:cc:7d:f4:f6:00:e8:4c:93:36:18:d8:29:fd:98: 27:e1:e8:8e:ce:df:ae:d8:74:44:b2:66:36:47:ff:9b:33:7a: eb:da:f3:59:fc:5c:a2:91:04:69:40:7b:45:5b:b6:d8:c9:9d: 6d:fc:7e:78:e5:80:90:27:85:6d:8e:9c:33:49:2a:52:c7:c7: c4:05:24:8d:32:7e:1b:35:71:70:ea:33:d9:be:8f:2b:8f:a7: 98:b2:a5:61:7e:cc:49:e0:09:88:4c:20:92:35:c8:fc:ba:8b: 4a:4e:73:f4:03:83:90:67:98:7c:cd:89:27:c7:e1:61:7f:55: f4:b1:a7:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURDZRHDE36uaWvXWGP74TOKv6kD4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDExMDAwMDU2WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjAzZWIxNzdmZTQ2MzE3NDJkMTlhOTViYjcxNjNkMjk2 ODQ4M2I5YWJkMWI5ZTc4N2RiMGUzNDFjZTY5N2M4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2ECTmoMzTM6hgqsvbfju6NOAywM7RaYWC25lBv9ewSeHr q9NKz8WjQuIbG9vDOLn25DbkgT4wotuaqC0K2y6JgKNoS+yTh0kcOnTWtqfY1BYJ rfZpBgkcWQVDSNvlWliT1zwvHyDbPUsjdZ7GYpljFNuV1c5nAo0BVN5yTLKBfnU7 5ldi2kJxVqbxt0nR3xJUkNp4haosuWltHfpy/yTqFA3dUUk5v0sfh0OC7akx25gF sKB4tv81AfAv8cR/Tb1+2uG0y4XVoQf3vZJD53KFQbVYI2Cw0c/trWu7RLweWQtL 0p6aSR30c6U9yzmMSdiD9jTq4X/QpuSWozognUkpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeEdB9cP3bZiy7i22JWoxNRIrx9wwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2I0YmI5ODUxLWI1YWEtNDM3MC1iZmZlLTRmYzFmZDQxNDg1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX++wwDQYJKoZIhvcNAQELBQADggEBAHBeb1KcsAK5ypay01xALJmtlndF RXlO1Gze+TFouviDPOar27RU78VQuTX9VYJ3Vpkrj1xKLNsoGhv0/TuSdHvrBxYZ 4SV0+N9vqROZhwh5upQTu4IVpWDaCGMM3RKBwJK5Rg108BvfdWhwWTfwBfItVukK rBfsrp0WGJzfMrHUhODMffT2AOhMkzYY2Cn9mCfh6I7O367YdESyZjZH/5szeuva 81n8XKKRBGlAe0VbttjJnW38fnjlgJAnhW2OnDNJKlLHx8QFJI0yfhs1cXDqM9m+ jyuPp5iypWF+zEngCYhMIJI1yPy6i0pOc/QDg5BnmHzNiSfH4WF/VfSxpyQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:04 2025 by rpki-client