$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/38b1d6a5-8a6e-4ed3-a057-939fd4f17f57.roa File: 38b1d6a5-8a6e-4ed3-a057-939fd4f17f57.roa (raw, json) Hash identifier: DIMthWOmJhT7brCpqtAXySyO/YVxXjCKHI5M3zj9yrE= Subject key identifier: C8:55:2C:19:2C:2D:56:10:88:C6:41:6F:C1:67:E9:9E:71:43:FA:BD Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 54EE218C01B906AC9370FFFAFA403BC5CD64813F Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/38b1d6a5-8a6e-4ed3-a057-939fd4f17f57.roa Signing time: Tue 08 Jul 2025 00:10:13 +0000 ROA not before: Tue 08 Jul 2025 00:10:13 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ee:21:8c:01:b9:06:ac:93:70:ff:fa:fa:40:3b:c5:cd:64:81:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 8 00:10:13 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=fb2268357faac2e3cdff69dbc2714e76f7be5f19e4a964bcbbf1bc2c2b327477, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:09:06:72:13:a2:10:67:0f:0b:a2:c4:24: d3:db:25:4b:c6:17:69:c8:7d:fc:c8:0a:98:aa:d4: eb:61:4e:0c:e1:6b:89:86:38:30:bf:93:8b:07:37: 9a:d9:b5:6f:79:1a:d5:9d:17:7e:84:ea:10:5d:53: dc:5b:dd:80:a1:c9:3d:b2:0b:78:c8:f9:d9:25:81: 7f:18:05:8b:fb:ca:9a:b9:76:3e:06:6a:a0:2f:38: 94:11:27:5f:2f:10:c6:1d:25:2a:74:19:1e:9c:e9: 57:38:7c:0b:8b:d6:6c:e9:c1:15:3b:52:dc:ff:cb: b4:89:73:75:ad:f1:1a:93:08:89:fa:61:0f:9b:2f: 5b:b8:8c:46:86:f5:98:ec:09:16:f7:17:07:a3:7a: 08:38:16:bb:5b:1e:33:76:f8:1f:78:99:19:f3:4d: 52:9f:4a:09:d1:c6:3b:ac:02:6c:ec:42:4f:c7:4c: 33:da:cf:a3:a3:e3:32:28:3f:d2:6b:56:bb:f5:58: f2:bc:8f:b0:d4:d1:c4:ef:e4:eb:a8:eb:02:3f:7a: ee:b4:e2:4f:ba:ca:95:58:fd:c3:e7:26:a3:8d:6d: e8:9c:f5:c2:b5:04:b3:7b:41:be:7d:a7:72:6a:d5: 36:df:5a:94:fe:44:8e:da:33:cf:90:51:4c:88:84: 1b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:55:2C:19:2C:2D:56:10:88:C6:41:6F:C1:67:E9:9E:71:43:FA:BD X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/38b1d6a5-8a6e-4ed3-a057-939fd4f17f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.240.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:1e:e0:aa:dc:2b:8c:71:22:79:a2:54:f9:d4:5e:d0:44:ee: 72:92:26:ec:97:76:e5:b5:11:22:cc:58:92:18:51:3c:f9:67: 0a:cd:e1:fb:7c:ae:09:03:a9:7a:88:35:1c:0d:40:5c:c2:48: 3a:dc:35:82:43:2c:16:ab:33:27:35:6a:e6:5a:98:ae:1a:01: a1:0d:e2:66:84:c0:d1:46:2f:80:a0:d7:f3:99:66:87:17:77: 91:bc:ae:8a:8a:b4:a1:ad:e3:37:e2:42:d7:5f:75:dd:58:dd: a3:64:df:e6:ec:c9:a5:0c:c2:51:f7:6e:7c:62:04:c6:ed:2d: a4:73:95:89:79:5c:52:09:75:d0:60:78:af:09:60:15:66:34: 39:20:f0:e1:4a:94:ee:91:da:cc:a5:80:34:f8:05:34:49:f3: 1a:99:30:4d:83:13:f2:36:20:99:1e:36:31:f5:83:c0:50:5e: c3:70:ce:ce:a6:4e:66:b4:f3:2c:c5:16:9c:b1:83:1d:3d:59: 63:a0:a1:d3:35:26:ca:6d:58:99:cc:7c:d5:81:0e:45:64:93: 32:b5:7c:9c:61:b9:29:0c:0b:da:5d:a6:83:ca:39:ac:86:87: e6:4a:07:c6:26:cd:dd:6a:f0:70:b6:e1:59:f4:9e:a5:f4:4c: 3e:0c:6f:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVO4hjAG5BqyTcP/6+kA7xc1kgT8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzA4MDAxMDEzWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjIyNjgzNTdmYWFjMmUzY2RmZjY5ZGJjMjcxNGU3NmY3 YmU1ZjE5ZTRhOTY0YmNiYmYxYmMyYzJiMzI3NDc3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHWwkGchOiEGcPC6LEJNPbJUvGF2nIffzICpiq1OthTgzh a4mGODC/k4sHN5rZtW95GtWdF36E6hBdU9xb3YChyT2yC3jI+dklgX8YBYv7ypq5 dj4GaqAvOJQRJ18vEMYdJSp0GR6c6Vc4fAuL1mzpwRU7Utz/y7SJc3Wt8RqTCIn6 YQ+bL1u4jEaG9ZjsCRb3Fwejegg4FrtbHjN2+B94mRnzTVKfSgnRxjusAmzsQk/H TDPaz6Oj4zIoP9JrVrv1WPK8j7DU0cTv5Ouo6wI/eu604k+6ypVY/cPnJqONbeic 9cK1BLN7Qb59p3Jq1TbfWpT+RI7aM8+QUUyIhBvNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyFUsGSwtVhCIxkFvwWfpnnFD+r0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzM4YjFkNmE1LThhNmUtNGVkMy1hMDU3LTkzOWZkNGYxN2Y1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+/AwDQYJKoZIhvcNAQELBQADggEBAIoe4KrcK4xxInmiVPnUXtBE7nKS JuyXduW1ESLMWJIYUTz5ZwrN4ft8rgkDqXqINRwNQFzCSDrcNYJDLBarMyc1auZa mK4aAaEN4maEwNFGL4Cg1/OZZocXd5G8roqKtKGt4zfiQtdfdd1Y3aNk3+bsyaUM wlH3bnxiBMbtLaRzlYl5XFIJddBgeK8JYBVmNDkg8OFKlO6R2sylgDT4BTRJ8xqZ ME2DE/I2IJkeNjH1g8BQXsNwzs6mTma08yzFFpyxgx09WWOgodM1JsptWJnMfNWB DkVkkzK1fJxhuSkMC9pdpoPKOayGh+ZKB8Ymzd1q8HC24Vn0nqX0TD4Mb+k= -----END CERTIFICATE-----Generated at Tue Jul 22 11:49:57 2025 by rpki-client