$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d99a456-6c99-48ae-bf3a-149585d61d61.roa File: 5d99a456-6c99-48ae-bf3a-149585d61d61.roa (raw, json) Hash identifier: 8PHhsxfOcpykSOk9IEOXVTG9ZBOJ3hSfjtOP73iEq7g= Subject key identifier: AB:80:53:E3:84:F7:CB:D2:EB:9E:A2:30:DE:7F:7E:66:73:F1:72:7A Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 14B82D25B04F412EEC633EBA5DE95B461E617C11 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d99a456-6c99-48ae-bf3a-149585d61d61.roa Signing time: Tue 08 Jul 2025 00:10:22 +0000 ROA not before: Tue 08 Jul 2025 00:10:22 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 69.169.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b8:2d:25:b0:4f:41:2e:ec:63:3e:ba:5d:e9:5b:46:1e:61:7c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 8 00:10:22 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=296659c5457dc5d3dc3534f2bb456c422cad793d28eede93f869c898a430930f, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:55:ea:d4:bf:a6:7e:10:ae:cc:8b:13:7c: b8:1a:1a:ab:8d:24:d8:d7:66:56:0d:07:11:a3:a2: 38:f6:64:df:a1:d1:d4:f5:1a:99:c9:f2:82:82:fd: dd:14:34:3c:a6:0e:b9:79:52:45:a7:c8:8b:d2:87: 0e:30:96:de:aa:4c:ed:d9:9b:5e:79:08:66:71:e8: 96:7d:67:68:08:54:19:43:f8:c4:e2:7c:ef:e3:0c: 35:3a:63:6a:0b:bf:c2:4e:02:fd:40:b8:68:04:8e: 27:99:e7:1c:6f:e1:70:45:08:a2:36:c0:cf:e5:86: 11:79:dc:c7:bc:ff:84:0e:a1:b6:fc:09:0b:38:6d: 83:a7:78:66:f0:22:38:85:fc:44:6f:45:ea:0a:3c: 27:02:22:9b:71:0c:45:24:43:d8:6a:b1:b9:40:03: be:44:ff:9f:8f:e9:3c:7a:b4:97:a4:0c:7d:ef:93: ac:05:e3:3d:9b:2d:8f:f4:cb:ef:a4:fe:db:91:0e: 60:7c:10:2e:cb:18:cc:71:73:a9:e2:03:a3:44:88: 85:c3:fd:99:37:0b:b6:b4:76:ed:ef:d3:73:13:55: 62:06:9e:95:82:2e:45:fd:77:d8:8a:4b:c4:7c:dc: 5c:4a:a3:63:84:0d:cc:02:6f:ee:a0:50:42:d8:0d: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:80:53:E3:84:F7:CB:D2:EB:9E:A2:30:DE:7F:7E:66:73:F1:72:7A X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d99a456-6c99-48ae-bf3a-149585d61d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.169.232.0/22 Signature Algorithm: sha256WithRSAEncryption 91:cc:8a:b9:d8:bf:ce:26:1c:1a:31:8e:3d:f5:06:a7:e1:67: f2:2c:ff:ac:fb:0f:94:6a:8f:5f:40:24:e4:23:ce:a3:4a:5b: 1d:ad:42:1a:a8:fe:02:5e:34:bf:9f:e9:d2:9e:2f:f4:79:5f: 88:40:71:f6:d6:b2:5f:2d:93:97:d6:38:79:ac:6a:28:96:37: ca:c2:e2:45:28:7b:35:75:ad:83:24:be:b5:6a:46:a4:c2:35: 43:8d:cd:c6:ee:a1:e6:cd:03:48:b2:f4:00:04:18:f4:ce:28: 7f:d9:45:3a:41:e6:d0:1e:18:2a:e6:04:26:5e:9b:59:d0:9d: 0e:3a:a7:0d:a8:11:f1:7e:ba:79:dc:58:97:ba:5b:58:b3:24: 33:7d:15:85:3e:5c:f8:48:06:c1:8a:6b:c7:6d:17:22:2e:03: 69:31:d9:41:6b:7c:a9:e4:c1:1c:14:91:0a:1c:c9:ec:3c:25: c3:e3:13:47:e7:f0:55:97:da:d5:ad:31:9e:8b:c2:01:b7:b9: 70:9d:49:3d:65:98:73:5c:76:c2:16:56:de:68:6c:31:bc:e9: 55:02:14:44:3c:41:0d:1b:5c:63:a7:99:6a:48:7a:50:72:ac: f7:78:b5:16:43:49:56:68:56:08:13:58:17:15:8f:5c:63:3e: 43:05:48:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFLgtJbBPQS7sYz66XelbRh5hfBEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzA4MDAxMDIyWhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTY2NTljNTQ1N2RjNWQzZGMzNTM0ZjJiYjQ1NmM0MjJj YWQ3OTNkMjhlZWRlOTNmODY5Yzg5OGE0MzA5MzBmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIu1Xq1L+mfhCuzIsTfLgaGquNJNjXZlYNBxGjojj2ZN+h 0dT1GpnJ8oKC/d0UNDymDrl5UkWnyIvShw4wlt6qTO3Zm155CGZx6JZ9Z2gIVBlD +MTifO/jDDU6Y2oLv8JOAv1AuGgEjieZ5xxv4XBFCKI2wM/lhhF53Me8/4QOobb8 CQs4bYOneGbwIjiF/ERvReoKPCcCIptxDEUkQ9hqsblAA75E/5+P6Tx6tJekDH3v k6wF4z2bLY/0y++k/tuRDmB8EC7LGMxxc6niA6NEiIXD/Zk3C7a0du3v03MTVWIG npWCLkX9d9iKS8R83FxKo2OEDcwCb+6gUELYDT05AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq4BT44T3y9LrnqIw3n9+ZnPxcnowHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVkOTlhNDU2LTZjOTktNDhhZS1iZjNhLTE0OTU4NWQ2MWQ2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJFqegwDQYJKoZIhvcNAQELBQADggEBAJHMirnYv84mHBoxjj31BqfhZ/Is /6z7D5Rqj19AJOQjzqNKWx2tQhqo/gJeNL+f6dKeL/R5X4hAcfbWsl8tk5fWOHms aiiWN8rC4kUoezV1rYMkvrVqRqTCNUONzcbuoebNA0iy9AAEGPTOKH/ZRTpB5tAe GCrmBCZem1nQnQ46pw2oEfF+unncWJe6W1izJDN9FYU+XPhIBsGKa8dtFyIuA2kx 2UFrfKnkwRwUkQocyew8JcPjE0fn8FWX2tWtMZ6LwgG3uXCdST1lmHNcdsIWVt5o bDG86VUCFEQ8QQ0bXGOnmWpIelByrPd4tRZDSVZoVggTWBcVj1xjPkMFSBQ= -----END CERTIFICATE-----Generated at Wed Jul 23 12:24:02 2025 by rpki-client