$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4b847893-4aea-442a-b81c-619bfedf3ca5.roa File: 4b847893-4aea-442a-b81c-619bfedf3ca5.roa (raw, json) Hash identifier: BcFAxm59wTEHaGSgfnKPB4rvuWdcfsIsMwtXR9W/A1I= Subject key identifier: 61:D7:25:89:3E:9E:00:26:AD:1C:35:DE:E5:A3:3F:A3:2A:D2:2A:91 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 18642CEB2B89D6E9A25EA469B40492C3392B7A77 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4b847893-4aea-442a-b81c-619bfedf3ca5.roa Signing time: Sat 19 Jul 2025 00:00:05 +0000 ROA not before: Sat 19 Jul 2025 00:00:05 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 206.55.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:64:2c:eb:2b:89:d6:e9:a2:5e:a4:69:b4:04:92:c3:39:2b:7a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 19 00:00:05 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=835f57f7cf3c41520969d3f3337800565f9dc6cf8eb5aaa9b170c258538653c7, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dc:12:cb:2d:85:84:51:7d:0b:bd:98:14:6c: 62:79:1d:9f:a9:2f:9c:e6:f1:9e:a3:2e:22:a6:35: bf:33:24:c3:c0:4e:07:14:12:53:60:8c:6b:64:c0: 9a:c0:e1:1b:2f:27:af:78:97:63:bf:63:2b:36:bd: c7:fb:22:75:2d:75:fe:40:83:1b:94:21:57:93:57: d3:c5:2f:1d:5d:f7:e7:28:38:b9:76:04:03:3e:2c: 2c:43:87:d9:39:1f:15:0f:ee:f9:e5:99:cc:6b:21: ec:77:9c:f2:5f:37:f7:c5:63:35:da:71:99:2c:47: 17:d2:10:35:2b:52:2e:1f:94:e9:8a:4b:bc:ec:71: 55:a4:58:17:35:71:ca:fc:2b:94:72:f5:31:db:0e: e0:5a:6e:c9:b5:d1:fc:e4:cd:3f:5a:f5:f6:24:e4: 00:4b:a3:b8:22:37:71:cb:a9:8f:d3:8b:79:c4:f4: c3:1d:c8:19:26:4a:97:f3:ab:42:8c:25:6e:27:92: e1:6b:55:fd:c4:ee:21:56:6a:70:ff:bf:df:0a:0a: 26:aa:35:3d:40:2c:5d:1d:76:5b:a5:0c:ab:c2:f1: b4:f6:82:e8:b8:20:6f:73:f8:52:83:57:79:22:a4: f1:87:54:d2:8e:3c:32:eb:59:4b:d3:51:f5:15:10: ff:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D7:25:89:3E:9E:00:26:AD:1C:35:DE:E5:A3:3F:A3:2A:D2:2A:91 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4b847893-4aea-442a-b81c-619bfedf3ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.55.129.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:20:96:ed:e8:d8:42:cf:80:60:31:ca:9c:1b:fe:46:39:29: 13:ac:f1:e4:bb:90:b8:6d:bc:31:09:c0:dd:8f:bb:30:76:a6: 39:05:2d:12:49:89:0c:cd:d6:e6:21:4a:6e:77:c9:f2:9b:b0: 25:50:d3:36:d0:e9:66:4b:10:ee:d9:6f:48:ae:ef:65:91:f7: 56:de:16:ad:03:12:24:ef:7a:b8:37:72:e1:a1:3d:0f:f5:79: 08:57:1e:5b:f8:e5:4a:62:fb:de:37:71:1f:72:2c:ee:83:cd: d6:64:6d:5b:1c:5f:91:3d:0f:1a:35:3f:98:a4:c5:c0:ba:aa: 70:14:cc:43:d8:f8:a4:40:9e:71:86:41:1a:c7:08:a2:e4:16: 23:70:f0:7c:b3:78:c0:64:94:99:f0:61:45:7e:87:a7:2f:6e: fb:7b:51:cf:91:42:8d:1f:51:10:2a:12:7b:3a:f3:27:8c:0d: 5a:a3:b8:c7:13:c3:f4:ed:0f:a8:d2:45:a9:5b:dc:77:27:cd: 17:b4:85:99:cc:3e:07:2c:62:0b:bd:a4:15:37:01:57:3e:42: 30:f2:4c:f6:25:8d:05:bf:c1:0e:1d:60:70:6b:f9:1b:19:9a: 0b:71:0d:48:96:71:db:a5:c8:3f:d3:0f:11:55:7c:e2:b5:b5: bf:9b:a8:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGGQs6yuJ1umiXqRptASSwzkrencwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzE5MDAwMDA1WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzVmNTdmN2NmM2M0MTUyMDk2OWQzZjMzMzc4MDA1NjVm OWRjNmNmOGViNWFhYTliMTcwYzI1ODUzODY1M2M3MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC43BLLLYWEUX0LvZgUbGJ5HZ+pL5zm8Z6jLiKmNb8zJMPA TgcUElNgjGtkwJrA4RsvJ694l2O/Yys2vcf7InUtdf5AgxuUIVeTV9PFLx1d9+co OLl2BAM+LCxDh9k5HxUP7vnlmcxrIex3nPJfN/fFYzXacZksRxfSEDUrUi4flOmK S7zscVWkWBc1ccr8K5Ry9THbDuBabsm10fzkzT9a9fYk5ABLo7giN3HLqY/Ti3nE 9MMdyBkmSpfzq0KMJW4nkuFrVf3E7iFWanD/v98KCiaqNT1ALF0ddlulDKvC8bT2 gui4IG9z+FKDV3kipPGHVNKOPDLrWUvTUfUVEP+VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYdcliT6eACatHDXe5aM/oyrSKpEwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzRiODQ3ODkzLTRhZWEtNDQyYS1iODFjLTYxOWJmZWRmM2NhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADON4EwDQYJKoZIhvcNAQELBQADggEBAE0glu3o2ELPgGAxypwb/kY5KROs 8eS7kLhtvDEJwN2PuzB2pjkFLRJJiQzN1uYhSm53yfKbsCVQ0zbQ6WZLEO7Zb0iu 72WR91beFq0DEiTverg3cuGhPQ/1eQhXHlv45Upi+943cR9yLO6DzdZkbVscX5E9 Dxo1P5ikxcC6qnAUzEPY+KRAnnGGQRrHCKLkFiNw8HyzeMBklJnwYUV+h6cvbvt7 Uc+RQo0fURAqEns68yeMDVqjuMcTw/TtD6jSRalb3HcnzRe0hZnMPgcsYgu9pBU3 AVc+QjDyTPYljQW/wQ4dYHBr+RsZmgtxDUiWcdulyD/TDxFVfOK1tb+bqJM= -----END CERTIFICATE-----Generated at Tue Jul 22 11:50:30 2025 by rpki-client