$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa File: 7c541838-12b7-470a-b044-f31d3ab72ede.roa (raw, json) Hash identifier: BiB/Qv4ifoFydkqhdLriGQcWLozRxm7Iqyfp2SLMs9c= Subject key identifier: 6F:3A:6F:6A:A5:16:AE:C1:18:66:30:64:C9:7B:70:2E:1B:69:C5:FA Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 04A61135430F5A5CEA2F3280F126353731B90301 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa Signing time: Mon 21 Jul 2025 15:20:49 +0000 ROA not before: Mon 21 Jul 2025 15:20:49 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.249.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a6:11:35:43:0f:5a:5c:ea:2f:32:80:f1:26:35:37:31:b9:03:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:20:49 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=9a9f6d6012576dfa1d038c560936cd02047e33acd67898a37cace264cbb1285c, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:95:77:fb:d3:73:c3:c3:c5:41:e5:f4:ce:84: 04:46:ed:29:d3:4e:be:b7:a7:5a:dd:bd:0d:6f:0c: 9e:66:3f:a4:cc:a9:e3:19:14:08:cc:54:e3:df:a1: 6d:3f:23:4d:af:9f:ae:8d:0c:85:7b:a3:11:66:c7: 3b:29:68:d8:0a:a2:12:2e:6b:85:59:f4:e4:62:51: e3:e3:81:2c:05:f9:8f:33:36:db:99:d7:a7:44:cf: 82:55:8c:3a:bf:43:10:f0:0e:35:d4:be:e1:63:a5: e6:f7:56:15:01:18:fa:e1:8e:2e:92:8a:52:1f:8b: 22:ae:48:9d:80:2d:af:10:4e:d5:7b:24:23:b9:c8: eb:e9:d8:96:8e:0e:f2:24:a9:87:79:c2:55:88:6c: e9:d6:2b:bd:7b:81:2a:2d:fe:b0:74:32:26:29:68: 2d:a3:c1:54:da:77:5b:10:a2:07:b1:90:c3:af:c7: 20:6f:f3:cf:7a:33:df:a6:40:c1:bf:cb:c0:d2:6a: 16:5a:df:f6:07:ef:2e:d9:b1:df:30:e7:90:e0:c5: 8d:ac:ec:86:64:7d:79:a7:d8:21:ba:6e:53:1f:19: 91:83:43:76:ed:74:ab:45:c6:41:69:69:ba:65:20: bc:8f:72:45:e8:b3:71:f6:2a:70:23:61:e5:7e:7e: 1a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3A:6F:6A:A5:16:AE:C1:18:66:30:64:C9:7B:70:2E:1B:69:C5:FA X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/7c541838-12b7-470a-b044-f31d3ab72ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.249.208.0/23 Signature Algorithm: sha256WithRSAEncryption 22:23:2d:d3:4b:b5:a9:f7:50:e5:fc:af:8a:36:cc:bb:2e:f7: 04:6d:7c:55:fb:3d:a2:e1:a1:41:81:54:a1:75:51:21:84:c2: 9d:3b:f0:b5:9c:7c:f2:fe:ea:01:a8:55:ce:3c:49:63:0e:8e: b4:57:a3:cf:09:c0:cb:da:ba:07:26:ea:24:22:b1:73:a1:01: e2:bc:91:d0:90:f7:8c:af:a1:b0:94:eb:42:41:c1:6b:73:0f: 10:c1:c1:84:b1:39:7e:8c:db:04:3b:1f:fc:32:fb:ea:ae:67: ec:6a:94:4d:b7:49:01:33:ce:34:e6:9c:1e:52:01:73:ee:c6: 8a:91:68:ed:85:9e:46:7d:9d:63:0e:59:e3:5c:87:70:19:08: 12:e2:c5:c0:a6:1b:7d:e2:94:ee:68:87:08:d9:37:6f:92:eb: 1c:39:c1:81:a4:2d:55:7a:5f:f6:cd:69:86:c4:61:48:d9:a2: 5c:96:20:32:8f:b1:01:62:d2:75:12:d0:2e:ab:88:92:63:c4: 60:08:83:98:4e:ce:7e:1c:69:15:5e:53:d8:98:2d:27:6b:de: 5a:00:85:88:4a:87:d1:63:1a:81:5f:75:60:1b:1d:d0:cd:d0: 81:1c:4b:3b:80:77:76:a8:e5:5c:66:e8:46:8b:a1:ef:80:2d: 56:8e:fc:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBKYRNUMPWlzqLzKA8SY1NzG5AwEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMDQ5WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTlmNmQ2MDEyNTc2ZGZhMWQwMzhjNTYwOTM2Y2QwMjA0 N2UzM2FjZDY3ODk4YTM3Y2FjZTI2NGNiYjEyODVjMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCelXf703PDw8VB5fTOhARG7SnTTr63p1rdvQ1vDJ5mP6TM qeMZFAjMVOPfoW0/I02vn66NDIV7oxFmxzspaNgKohIua4VZ9ORiUePjgSwF+Y8z NtuZ16dEz4JVjDq/QxDwDjXUvuFjpeb3VhUBGPrhji6SilIfiyKuSJ2ALa8QTtV7 JCO5yOvp2JaODvIkqYd5wlWIbOnWK717gSot/rB0MiYpaC2jwVTad1sQogexkMOv xyBv8896M9+mQMG/y8DSahZa3/YH7y7Zsd8w55DgxY2s7IZkfXmn2CG6blMfGZGD Q3btdKtFxkFpabplILyPckXos3H2KnAjYeV+fhpZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbzpvaqUWrsEYZjBkyXtwLhtpxfowHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzdjNTQxODM4LTEyYjctNDcwYS1iMDQ0LWYzMWQzYWI3MmVkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEX+dAwDQYJKoZIhvcNAQELBQADggEBACIjLdNLtan3UOX8r4o2zLsu9wRt fFX7PaLhoUGBVKF1USGEwp078LWcfPL+6gGoVc48SWMOjrRXo88JwMvaugcm6iQi sXOhAeK8kdCQ94yvobCU60JBwWtzDxDBwYSxOX6M2wQ7H/wy++quZ+xqlE23SQEz zjTmnB5SAXPuxoqRaO2FnkZ9nWMOWeNch3AZCBLixcCmG33ilO5ohwjZN2+S6xw5 wYGkLVV6X/bNaYbEYUjZolyWIDKPsQFi0nUS0C6riJJjxGAIg5hOzn4caRVeU9iY LSdr3loAhYhKh9FjGoFfdWAbHdDN0IEcSzuAd3ao5Vxm6EaLoe+ALVaO/IU= -----END CERTIFICATE-----Generated at Tue Jul 22 11:52:52 2025 by rpki-client