$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa File: dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa (raw, json) Hash identifier: BybuxSUI1FG69itVIlMvQLLgWIU4/s/060WnpM3K8KA= Subject key identifier: 4D:92:98:CE:D0:3E:68:54:BB:6F:1D:3C:26:8C:99:00:5B:6A:4C:ED Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 2B7920AE7B4033EFD95E49CED4BC613DF13E7212 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa Signing time: Fri 11 Apr 2025 00:10:10 +0000 ROA not before: Fri 11 Apr 2025 00:10:10 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:79:20:ae:7b:40:33:ef:d9:5e:49:ce:d4:bc:61:3d:f1:3e:72:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Apr 11 00:10:10 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=06e12b8bff81356bd0c74f28eb610f30123a666c9391336f62d4a6f2cf1f7e76, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:59:85:a8:46:02:fe:7b:ad:27:9d:e3:e0: d3:43:18:9b:27:1c:55:6c:02:47:30:0c:b7:db:a2: 13:f4:e6:6c:b5:ac:48:ec:4b:8e:6d:9c:22:a3:5c: 98:27:75:6d:75:ac:f4:f4:06:8d:e7:19:c5:85:99: d7:e6:27:56:83:be:fc:d9:8b:e7:99:55:70:dd:54: 43:38:82:3e:42:93:69:58:41:ec:5d:f6:8d:e3:33: e0:e5:3b:f6:bd:74:fd:14:32:3b:08:90:2e:58:16: db:8b:f7:60:98:35:e7:44:43:c1:2c:f2:14:f9:75: 28:29:67:01:00:c3:b0:db:1e:56:86:12:13:1b:0e: 05:a5:2f:d5:41:74:60:e8:89:55:52:81:1f:1d:14: 29:f3:e7:77:92:5c:79:54:25:68:e3:13:61:9c:9d: 4c:2b:32:f7:f8:31:3f:3d:01:d0:b2:7a:18:3c:13: 72:01:fb:28:6f:43:84:be:e9:98:c0:20:5c:8e:70: 27:08:23:08:4f:17:19:ee:21:2c:cb:8e:7f:6b:e7: 05:c9:4b:6c:e2:3f:d1:d1:17:6a:2f:a9:07:40:91: 24:17:1b:73:5b:2b:94:9d:6b:8a:83:78:f6:04:e0: f2:f0:25:d6:fb:32:76:c1:48:0d:d7:0f:e9:27:df: bb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:92:98:CE:D0:3E:68:54:BB:6F:1D:3C:26:8C:99:00:5B:6A:4C:ED X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.189.0/24 Signature Algorithm: sha256WithRSAEncryption 40:ec:c6:53:81:1d:53:5e:01:54:51:20:3a:20:aa:40:77:50: 13:14:d3:0b:bc:aa:24:ce:87:7c:2b:ba:61:8f:c8:f3:0b:bf: 2d:f7:bd:06:5d:27:e7:e0:45:79:ac:a0:bf:df:da:ea:e6:b2: ac:1c:52:07:0e:8c:aa:e7:cd:30:56:f4:fd:ef:c2:aa:41:7a: 5d:8c:2a:dc:58:b6:dc:d1:24:83:84:a4:70:77:81:71:9d:e2: fc:2c:e8:72:97:51:e8:6a:94:8b:a4:b0:f5:0d:a7:0c:5d:3b: 44:69:66:b9:ee:b5:e0:a9:f3:a1:97:c9:3e:d0:18:46:a4:62: 6b:48:4b:42:88:22:a2:a0:4e:7e:79:bd:7f:4c:13:f5:23:79: 6e:46:75:ea:90:ec:a9:76:4e:a9:8b:a6:b6:28:4c:54:49:b8: ae:85:e1:f7:2b:87:98:bb:f8:50:8d:f6:38:9c:d4:7b:8f:cf: 73:a7:e0:3c:aa:f9:a3:34:62:a9:da:8c:b3:c3:ba:9a:08:06: 1f:d6:d8:64:d8:c4:df:78:f1:8d:db:59:f9:2d:11:80:90:42: 61:a8:0f:d4:05:1b:82:bd:71:fa:6a:1d:17:89:f0:cd:e5:fa: f8:3d:7a:25:4c:42:61:21:d1:71:2a:80:f6:c8:59:5e:5d:e0: 9d:22:ca:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK3kgrntAM+/ZXknO1LxhPfE+chIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNDExMDAxMDEwWhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNmUxMmI4YmZmODEzNTZiZDBjNzRmMjhlYjYxMGYzMDEy M2E2NjZjOTM5MTMzNmY2MmQ0YTZmMmNmMWY3ZTc2MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrYlmFqEYC/nutJ53j4NNDGJsnHFVsAkcwDLfbohP05my1 rEjsS45tnCKjXJgndW11rPT0Bo3nGcWFmdfmJ1aDvvzZi+eZVXDdVEM4gj5Ck2lY Qexd9o3jM+DlO/a9dP0UMjsIkC5YFtuL92CYNedEQ8Es8hT5dSgpZwEAw7DbHlaG EhMbDgWlL9VBdGDoiVVSgR8dFCnz53eSXHlUJWjjE2GcnUwrMvf4MT89AdCyehg8 E3IB+yhvQ4S+6ZjAIFyOcCcIIwhPFxnuISzLjn9r5wXJS2ziP9HRF2ovqQdAkSQX G3NbK5Sda4qDePYE4PLwJdb7MnbBSA3XD+kn37sLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTZKYztA+aFS7bx08JoyZAFtqTO0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2RjZTJkYjkzLThmYjctNDJiOS1iZTU2LTIzZjQ2YjViZjRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM370wDQYJKoZIhvcNAQELBQADggEBAEDsxlOBHVNeAVRRIDogqkB3UBMU 0wu8qiTOh3wrumGPyPMLvy33vQZdJ+fgRXmsoL/f2urmsqwcUgcOjKrnzTBW9P3v wqpBel2MKtxYttzRJIOEpHB3gXGd4vws6HKXUehqlIuksPUNpwxdO0RpZrnuteCp 86GXyT7QGEakYmtIS0KIIqKgTn55vX9ME/UjeW5GdeqQ7Kl2TqmLprYoTFRJuK6F 4fcrh5i7+FCN9jic1HuPz3On4Dyq+aM0YqnajLPDupoIBh/W2GTYxN948Y3bWfkt EYCQQmGoD9QFG4K9cfpqHReJ8M3l+vg9eiVMQmEh0XEqgPbIWV5d4J0iysc= -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:53 2025 by rpki-client