$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa File: 5e3c0e08-edb8-4079-81e3-f4c857efb338.roa (raw, json) Hash identifier: xXSTsNE5H4Tk4ac5gFm6ZeFvwxpfbXpdFPxXHyQKi3U= Subject key identifier: 5D:AF:D7:B2:94:87:8C:26:E8:FB:EF:7D:B0:9A:04:D9:F3:69:62:69 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 60C1CF78E671A5A17C2DB65DD35274B46A148980 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa Signing time: Mon 21 Jul 2025 15:20:36 +0000 ROA not before: Mon 21 Jul 2025 15:20:36 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c1:cf:78:e6:71:a5:a1:7c:2d:b6:5d:d3:52:74:b4:6a:14:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:20:36 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=dbeb509c0b866ad858242995f298571e95c142f4b627364018091a1bde093148, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:86:90:75:f6:e8:e4:fd:08:32:a2:3d:50:c3: ef:f8:17:16:32:ad:10:23:b3:db:f4:6d:33:51:6a: 0c:5e:2b:f6:75:85:00:39:47:5c:34:59:1d:da:ba: 0e:26:c4:4c:c9:1a:cf:86:d1:fd:34:47:43:e3:17: a8:5c:37:97:02:fe:05:f5:73:77:b6:b0:87:9e:d8: 6e:b5:ad:b6:c8:91:2c:61:aa:9e:68:4d:f1:49:de: 4b:2c:58:90:65:6b:90:b1:1b:fc:ed:98:e8:5d:34: 42:27:cc:0b:c3:79:d7:34:5f:78:de:e8:ee:50:d2: 45:82:4d:b9:30:22:b1:40:29:79:1b:29:2c:5a:55: 8b:73:6d:43:25:f6:dc:61:4a:37:65:4e:6a:68:f9: 1b:5d:2c:ed:7a:22:26:10:06:cd:b4:32:4d:58:62: cd:a9:21:ba:65:ae:b8:e0:79:97:6c:c2:5e:81:87: db:64:d3:77:06:df:20:be:a1:90:1a:a8:1a:be:77: 8e:f5:81:ca:d2:d3:7d:46:7b:ce:77:db:0a:d8:94: 1c:8a:b2:3c:9f:07:65:ab:16:8e:17:fe:c6:37:3a: 70:f8:d1:b4:4b:04:32:e3:24:5b:53:a6:85:a8:30: 43:3e:42:b3:70:ba:a5:b9:61:e6:8d:37:b4:46:02: 79:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AF:D7:B2:94:87:8C:26:E8:FB:EF:7D:B0:9A:04:D9:F3:69:62:69 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5e3c0e08-edb8-4079-81e3-f4c857efb338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:0d:d6:ad:89:27:e4:e0:5f:96:7e:fe:6b:6d:70:ce:50:4f: 8c:54:eb:9f:50:b5:f3:dd:99:70:3c:7a:5a:86:d5:d4:3f:63: 3f:44:6e:27:51:b0:2e:a9:39:bc:b1:39:8f:9b:fb:f2:6d:1c: 84:fa:b2:ba:37:49:08:28:4f:b9:61:13:33:16:f5:65:8a:43: b0:3a:4e:8b:c5:3b:59:e7:14:b2:fb:fe:40:0f:20:1c:b1:07: 41:c1:c3:55:64:17:2d:f8:54:2a:32:27:7c:12:db:33:29:77: 22:86:fe:27:47:62:3b:7c:a3:a0:ea:23:15:8f:1f:29:f2:b9: 37:89:34:b9:2f:38:0a:95:ff:a9:d0:75:28:a5:fb:2b:38:c8: d1:c8:26:30:48:91:11:b3:9d:6e:33:41:d2:5b:f6:04:c6:a8: c2:f0:ab:76:c1:d2:9d:26:ff:41:f9:90:59:ee:06:bc:8a:d6: 18:22:b9:27:bd:99:6f:ce:a6:57:53:3e:63:23:d4:3f:7a:9a: b3:46:f2:c7:c0:c3:8b:33:b8:ed:54:62:f8:59:c4:a1:e0:8a: ea:a9:b1:1d:47:01:45:15:97:cd:3b:4c:eb:3b:42:df:99:db: 37:f5:a6:54:d2:ee:58:51:7b:48:db:c1:69:16:79:b4:15:08: c4:3f:d0:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYMHPeOZxpaF8LbZd01J0tGoUiYAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMDM2WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmViNTA5YzBiODY2YWQ4NTgyNDI5OTVmMjk4NTcxZTk1 YzE0MmY0YjYyNzM2NDAxODA5MWExYmRlMDkzMTQ4MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfhpB19ujk/Qgyoj1Qw+/4FxYyrRAjs9v0bTNRagxeK/Z1 hQA5R1w0WR3aug4mxEzJGs+G0f00R0PjF6hcN5cC/gX1c3e2sIee2G61rbbIkSxh qp5oTfFJ3kssWJBla5CxG/ztmOhdNEInzAvDedc0X3je6O5Q0kWCTbkwIrFAKXkb KSxaVYtzbUMl9txhSjdlTmpo+RtdLO16IiYQBs20Mk1YYs2pIbplrrjgeZdswl6B h9tk03cG3yC+oZAaqBq+d471gcrS031Ge8532wrYlByKsjyfB2WrFo4X/sY3OnD4 0bRLBDLjJFtTpoWoMEM+QrNwuqW5YeaNN7RGAnnfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXa/XspSHjCbo++99sJoE2fNpYmkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzVlM2MwZTA4LWVkYjgtNDA3OS04MWUzLWY0Yzg1N2VmYjMzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX+d0wDQYJKoZIhvcNAQELBQADggEBAGoN1q2JJ+TgX5Z+/mttcM5QT4xU 659QtfPdmXA8elqG1dQ/Yz9EbidRsC6pObyxOY+b+/JtHIT6sro3SQgoT7lhEzMW 9WWKQ7A6TovFO1nnFLL7/kAPIByxB0HBw1VkFy34VCoyJ3wS2zMpdyKG/idHYjt8 o6DqIxWPHynyuTeJNLkvOAqV/6nQdSil+ys4yNHIJjBIkRGznW4zQdJb9gTGqMLw q3bB0p0m/0H5kFnuBryK1hgiuSe9mW/OpldTPmMj1D96mrNG8sfAw4szuO1UYvhZ xKHgiuqpsR1HAUUVl807TOs7Qt+Z2zf1plTS7lhRe0jbwWkWebQVCMQ/0PY= -----END CERTIFICATE-----Generated at Tue Jul 22 11:51:00 2025 by rpki-client