$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa File: 84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa (raw, json) Hash identifier: xomPz1B/IoWErsTGo8Xj7NrFkethBuZo3bNv5AJoIko= Subject key identifier: 86:EC:CB:E3:CF:76:74:42:4E:AB:D9:4D:EC:47:41:61:27:F5:7B:67 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 35083BF72C4DEAABD774952860A44828A636DC4C Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa Signing time: Mon 21 Jul 2025 15:20:51 +0000 ROA not before: Mon 21 Jul 2025 15:20:51 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 23.251.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:08:3b:f7:2c:4d:ea:ab:d7:74:95:28:60:a4:48:28:a6:36:dc:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:20:51 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=bd22cdcae3d57afaf4504b86fb4aefedc403281a84df300b423973d29bb0c6dd, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:20:be:75:1e:f3:dd:62:bd:2e:04:b0:85:33: 82:11:0d:c3:d0:ce:fa:f0:74:50:72:20:8e:98:0d: 0f:ee:f8:ea:9a:b5:d4:f5:ed:14:a9:c1:67:2a:c0: a2:aa:15:8f:f9:54:36:03:1f:b2:00:ad:34:29:03: cb:4a:c0:29:77:0e:6a:e6:a3:c3:73:3d:7e:48:d9: ee:96:0a:de:c9:bc:88:ba:80:cf:0c:30:ca:24:ab: 9b:54:d7:6e:d4:d3:b8:fa:45:b9:df:43:e7:c3:17: 2b:e5:54:a5:74:78:9a:0a:ca:d2:1d:22:98:a0:18: b2:e6:35:97:5b:eb:e9:2b:86:0f:e5:f0:6c:4d:ef: 05:cb:07:20:82:bd:f3:6e:b3:a2:e2:db:69:56:a6: 58:d9:41:34:5a:8a:d4:96:ae:88:e7:ff:bf:03:ae: 38:72:1d:dc:52:00:ef:33:01:e9:18:31:b4:70:d7: 58:ad:8c:f9:96:56:46:75:3d:d0:03:b8:4c:25:8f: 6f:85:5c:3b:e7:4a:d7:e6:3c:44:80:1a:25:09:fe: bc:0b:0c:18:5c:fa:28:e6:8d:fd:0d:46:c3:f4:1a: 69:62:66:f0:75:59:23:40:d6:a8:9d:f7:48:cc:59: 17:7f:99:fa:2d:ef:2b:75:23:0d:6b:d5:8b:f6:71: e2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EC:CB:E3:CF:76:74:42:4E:AB:D9:4D:EC:47:41:61:27:F5:7B:67 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.251.234.0/24 Signature Algorithm: sha256WithRSAEncryption 30:ff:e6:bd:17:4c:35:7f:e5:0c:a3:db:34:f4:dc:8c:28:18: d0:ae:79:3d:a1:81:1e:0f:f6:10:9c:6d:b3:80:88:27:d1:80: 42:cc:9c:81:9d:52:4e:30:fe:fa:04:8b:2b:93:1b:67:0d:74: 18:4e:74:74:51:0a:2f:d3:28:3b:8f:84:18:3e:57:0e:8c:74: 81:3c:e1:42:c6:ab:b7:06:ea:ae:92:27:28:eb:bc:89:5d:1b: 09:cd:bd:0e:9c:ec:dc:b6:43:ed:93:7b:10:7a:47:42:bf:94: 3f:3b:91:5c:fc:3f:40:85:7a:10:af:2d:44:33:56:be:52:f7: 60:e3:a6:4b:66:f6:ef:f0:2c:23:cf:16:44:e8:41:60:74:6a: 6b:56:d7:7a:ea:a7:fe:c3:84:31:9c:fe:2b:83:c7:20:e0:0e: 9a:ef:40:f9:65:21:d2:ad:a4:df:0f:61:44:b1:b8:03:a1:69: 86:21:f8:b1:fe:d5:89:1f:ee:60:d2:30:83:c4:1d:d4:0f:4e: 20:41:f8:44:c9:3e:bc:e8:e8:e6:fa:4f:4c:fc:a6:70:fe:76: 19:ba:2d:f3:1a:c9:0f:06:75:26:09:82:78:db:72:5d:d5:cb: 87:2f:7a:b2:19:29:b9:12:ba:04:eb:28:33:0a:2c:47:b4:cf: bc:24:07:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNQg79yxN6qvXdJUoYKRIKKY23EwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMDUxWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDIyY2RjYWUzZDU3YWZhZjQ1MDRiODZmYjRhZWZlZGM0 MDMyODFhODRkZjMwMGI0MjM5NzNkMjliYjBjNmRkMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLIL51HvPdYr0uBLCFM4IRDcPQzvrwdFByII6YDQ/u+Oqa tdT17RSpwWcqwKKqFY/5VDYDH7IArTQpA8tKwCl3Dmrmo8NzPX5I2e6WCt7JvIi6 gM8MMMokq5tU127U07j6RbnfQ+fDFyvlVKV0eJoKytIdIpigGLLmNZdb6+krhg/l 8GxN7wXLByCCvfNus6Li22lWpljZQTRaitSWrojn/78DrjhyHdxSAO8zAekYMbRw 11itjPmWVkZ1PdADuEwlj2+FXDvnStfmPESAGiUJ/rwLDBhc+ijmjf0NRsP0Gmli ZvB1WSNA1qid90jMWRd/mfot7yt1Iw1r1Yv2ceIxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhuzL4892dEJOq9lN7EdBYSf1e2cwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzg0YzAzOGFlLTdhNWEtNDE0YS1iZDAwLTFlZGI2ZmJlNWFkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAX++owDQYJKoZIhvcNAQELBQADggEBADD/5r0XTDV/5Qyj2zT03IwoGNCu eT2hgR4P9hCcbbOAiCfRgELMnIGdUk4w/voEiyuTG2cNdBhOdHRRCi/TKDuPhBg+ Vw6MdIE84ULGq7cG6q6SJyjrvIldGwnNvQ6c7Ny2Q+2TexB6R0K/lD87kVz8P0CF ehCvLUQzVr5S92Djpktm9u/wLCPPFkToQWB0amtW13rqp/7DhDGc/iuDxyDgDprv QPllIdKtpN8PYUSxuAOhaYYh+LH+1Ykf7mDSMIPEHdQPTiBB+ETJPrzo6Ob6T0z8 pnD+dhm6LfMayQ8GdSYJgnjbcl3Vy4cverIZKbkSugTrKDMKLEe0z7wkB8g= -----END CERTIFICATE-----Generated at Tue Jul 22 11:50:22 2025 by rpki-client