$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa File: 3200cf8e-c64b-4110-8ccd-4128ae231d47.roa (raw, json) Hash identifier: Nr76Qrx33wF8nYLft7Id/7fL+NiP01Jt1JtuOckB/ZM= Subject key identifier: 95:5D:08:AF:0E:A0:F1:3D:FC:3E:5D:00:5E:5D:2D:9D:2B:8A:4E:74 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 44B7DDC8457C82EA67247D866FE1867680E3703F Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa Signing time: Tue 08 Jul 2025 00:10:24 +0000 ROA not before: Tue 08 Jul 2025 00:10:24 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b7:dd:c8:45:7c:82:ea:67:24:7d:86:6f:e1:86:76:80:e3:70:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 8 00:10:24 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=2a4e231ae3bfcf474220272ff8e3cc09dd95f4209c4115be5c5915accd4a4944, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:41:51:bb:44:d2:65:04:2b:a3:db:eb:40: f9:d7:78:22:1e:17:ea:d8:e6:d8:f6:a2:c7:e2:61: ad:18:1e:85:26:35:83:31:5f:6c:00:18:fc:86:f8: 8b:37:86:c4:bc:1e:00:d8:00:71:fd:02:38:3a:2e: ca:88:5d:0c:3f:15:4c:19:aa:ed:9c:d2:44:fe:0e: 95:e5:38:89:3b:70:5b:44:d5:fa:1b:cc:e4:3f:38: 23:e2:8b:7d:9f:0b:63:93:96:9d:43:17:24:c7:e4: 48:8d:6c:7f:15:51:1e:a7:47:e1:da:41:eb:e1:01: 30:54:12:30:c3:f7:ce:24:8e:c2:fb:c4:71:b5:4f: 91:e2:73:71:2f:bd:9f:36:07:fa:14:5a:7a:32:a3: d3:ea:48:78:0f:42:1b:2a:fd:12:f3:f6:3d:65:3a: 78:78:3e:81:cf:ce:fa:a5:86:9e:1c:87:a6:52:c1: 67:f0:09:35:e4:cf:9a:91:25:71:25:22:b4:97:03: 0c:ee:82:67:01:02:e4:a0:6b:a2:01:17:f9:c3:87: 33:d0:73:d8:53:b9:69:7d:ea:88:ce:7f:58:00:d8: 8f:01:e3:d6:a4:ea:38:4c:ae:99:c3:7f:0a:2e:b7: a1:42:60:d3:eb:60:10:33:b6:d1:4c:6f:3e:77:d1: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5D:08:AF:0E:A0:F1:3D:FC:3E:5D:00:5E:5D:2D:9D:2B:8A:4E:74 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.224.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:35:c4:ee:56:1a:f0:5a:eb:66:88:18:08:20:aa:a0:c2:62: 77:37:33:f1:3a:71:d4:f5:5b:04:74:b7:2c:9a:98:b2:e5:f6: 87:b7:1c:86:5e:11:77:06:2f:31:08:10:22:89:8b:3c:cb:fa: 30:66:f4:40:48:9d:45:99:c4:bd:a9:40:96:c2:8d:a7:ff:a1: ce:ce:48:ed:8e:e5:7c:1c:91:20:b9:4e:46:8a:2d:7f:02:48: 2d:77:b9:53:d2:93:44:1b:a6:d7:68:b6:f1:b6:f1:37:b8:b8: fb:71:85:d2:35:10:73:17:86:b9:bc:a1:f4:0e:9a:59:84:c3: 03:12:97:59:72:1f:7c:4b:44:c3:82:24:0a:67:f7:16:a9:17: 5a:4f:0b:82:f5:51:11:e2:93:32:76:d9:b4:d1:5b:c1:cf:86: d2:69:d4:9b:78:a1:d7:82:9b:52:60:ff:14:91:c7:25:fa:d1: 37:a5:9a:af:c4:2a:2d:ee:30:e0:a9:1d:5d:3d:5b:09:e7:4d: fe:ca:12:9f:54:77:c2:5a:4a:e2:b1:bd:d6:94:1d:6c:80:90: 71:fa:b8:5a:0d:11:21:6c:cc:fb:62:df:67:13:e1:13:4e:fd: c9:74:48:e9:03:0e:49:4a:21:2e:98:5c:07:dc:50:1b:d4:e0: 94:d2:6b:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURLfdyEV8gupnJH2Gb+GGdoDjcD8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzA4MDAxMDI0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTRlMjMxYWUzYmZjZjQ3NDIyMDI3MmZmOGUzY2MwOWRk OTVmNDIwOWM0MTE1YmU1YzU5MTVhY2NkNGE0OTQ0MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUzUFRu0TSZQQro9vrQPnXeCIeF+rY5tj2osfiYa0YHoUm NYMxX2wAGPyG+Is3hsS8HgDYAHH9Ajg6LsqIXQw/FUwZqu2c0kT+DpXlOIk7cFtE 1fobzOQ/OCPii32fC2OTlp1DFyTH5EiNbH8VUR6nR+HaQevhATBUEjDD984kjsL7 xHG1T5Hic3EvvZ82B/oUWnoyo9PqSHgPQhsq/RLz9j1lOnh4PoHPzvqlhp4ch6ZS wWfwCTXkz5qRJXElIrSXAwzugmcBAuSga6IBF/nDhzPQc9hTuWl96ojOf1gA2I8B 49ak6jhMrpnDfwout6FCYNPrYBAzttFMbz530Sd/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlV0Irw6g8T38Pl0AXl0tnSuKTnQwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzMyMDBjZjhlLWM2NGItNDExMC04Y2NkLTQxMjhhZTIzMWQ0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFFqeAwDQYJKoZIhvcNAQELBQADggEBAI01xO5WGvBa62aIGAggqqDCYnc3 M/E6cdT1WwR0tyyamLLl9oe3HIZeEXcGLzEIECKJizzL+jBm9EBInUWZxL2pQJbC jaf/oc7OSO2O5XwckSC5TkaKLX8CSC13uVPSk0QbptdotvG28Te4uPtxhdI1EHMX hrm8ofQOmlmEwwMSl1lyH3xLRMOCJApn9xapF1pPC4L1URHikzJ22bTRW8HPhtJp 1Jt4odeCm1Jg/xSRxyX60Telmq/EKi3uMOCpHV09WwnnTf7KEp9Ud8JaSuKxvdaU HWyAkHH6uFoNESFszPti32cT4RNO/cl0SOkDDklKIS6YXAfcUBvU4JTSa3I= -----END CERTIFICATE-----Generated at Tue Jul 22 11:52:49 2025 by rpki-client