$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/854367ff-45b7-4925-99a1-97b01f4fabe8.roa File: 854367ff-45b7-4925-99a1-97b01f4fabe8.roa (raw, json) Hash identifier: WKPN7uwrvhq5uXQ03MXXppCs++2HWhZJcrDDPF8KtZ8= Subject key identifier: 0A:62:3D:00:08:BB:27:42:A6:E0:1F:74:8B:34:1D:DF:1D:C2:E8:40 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 061CF328DA23F6CE78D542BDEA0362C96F56CE55 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/854367ff-45b7-4925-99a1-97b01f4fabe8.roa Signing time: Sat 19 Jul 2025 00:00:08 +0000 ROA not before: Sat 19 Jul 2025 00:00:08 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 216.221.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:1c:f3:28:da:23:f6:ce:78:d5:42:bd:ea:03:62:c9:6f:56:ce:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 19 00:00:08 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=d5037fc0c26a819db8a33580a93746a2b3d60ffa830edd23699f4cbccb631ac9, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:10:4f:a2:c8:8b:ea:f9:fd:87:bb:4c:92: 40:8b:f6:85:c8:b8:49:91:67:43:14:b5:73:6c:cb: 75:3e:4e:24:36:6a:2a:bb:eb:54:30:18:3f:94:12: fb:f3:ee:8e:fd:1f:92:b0:27:8d:3e:8d:0a:88:31: b8:e6:97:76:6f:99:45:c1:98:bd:c1:c8:be:5a:f1: 62:b7:7b:d6:43:80:0d:d2:d9:78:67:f9:f4:f9:97: a6:02:12:eb:29:6c:64:87:36:83:12:59:45:38:ee: d3:84:6e:01:ae:4e:9e:a1:2a:3b:92:e2:48:20:64: 8c:46:ee:1c:a2:28:12:8b:38:50:74:6e:e1:80:49: 0c:48:ab:e4:86:2b:7c:c4:66:99:62:83:7a:af:f6: 1d:5c:72:08:2f:32:2a:63:bb:ea:dc:3d:25:8b:5d: b7:4c:18:41:0a:57:46:d6:bc:b4:8a:6e:24:c5:70: 52:5e:3e:5f:65:3f:82:5d:9d:86:76:ae:18:df:4c: 1b:72:d5:aa:47:5e:11:a7:2c:a0:bb:ff:4c:54:c0: 61:ca:db:c7:35:62:ac:cb:f9:06:da:e3:86:f8:46: 75:91:0a:11:63:29:74:a0:98:8a:cb:df:9d:70:72: 07:3d:0c:ae:58:f6:f4:c5:f6:45:b9:83:e3:3f:57: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:62:3D:00:08:BB:27:42:A6:E0:1F:74:8B:34:1D:DF:1D:C2:E8:40 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/854367ff-45b7-4925-99a1-97b01f4fabe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.166.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:4e:86:97:a1:f1:d4:1e:5a:96:b7:8a:6a:31:f2:97:1a:5c: 24:8b:19:5e:db:18:d2:5f:6c:c8:db:49:61:57:88:eb:e1:87: d4:7b:ea:10:1d:f3:64:2c:5b:8b:2a:41:b6:30:e3:d8:28:06: 64:38:80:d6:f4:25:ef:4d:6f:9e:b8:cb:cc:0e:74:c0:c0:bb: aa:b8:f1:a3:cf:1c:ab:17:33:30:28:5a:b8:f3:04:1c:08:f6: b6:79:b6:3f:39:f5:66:4f:aa:45:58:9d:a0:de:56:f4:bc:09: 6b:0b:5d:c0:f3:67:cc:8e:a3:1a:33:eb:9d:60:f2:a5:8a:6e: 77:80:70:4f:c6:4a:78:3e:26:3e:fe:bf:25:38:66:6f:7b:3b: b5:87:35:b4:f5:d4:e2:a2:d2:75:a8:ba:fb:14:02:69:74:3a: 3c:f2:74:57:e9:ff:b1:4b:4c:7a:72:e8:87:b4:6e:e3:27:39: d1:c3:35:bc:57:55:62:cb:50:83:16:81:d9:0f:51:cd:78:32: 78:6a:5e:b5:bc:c3:9e:23:8b:dd:e0:bb:54:22:90:91:49:7b: 8c:19:ec:8f:a2:2e:42:58:38:da:08:c5:64:65:35:f2:05:95: 94:2c:87:29:0d:22:81:dc:e8:13:e0:96:5f:0b:91:03:fb:30: b9:be:d6:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBhzzKNoj9s541UK96gNiyW9WzlUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzE5MDAwMDA4WhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTAzN2ZjMGMyNmE4MTlkYjhhMzM1ODBhOTM3NDZhMmIz ZDYwZmZhODMwZWRkMjM2OTlmNGNiY2NiNjMxYWM5MS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFORBPosiL6vn9h7tMkkCL9oXIuEmRZ0MUtXNsy3U+TiQ2 aiq761QwGD+UEvvz7o79H5KwJ40+jQqIMbjml3ZvmUXBmL3ByL5a8WK3e9ZDgA3S 2Xhn+fT5l6YCEuspbGSHNoMSWUU47tOEbgGuTp6hKjuS4kggZIxG7hyiKBKLOFB0 buGASQxIq+SGK3zEZplig3qv9h1ccggvMipju+rcPSWLXbdMGEEKV0bWvLSKbiTF cFJePl9lP4JdnYZ2rhjfTBty1apHXhGnLKC7/0xUwGHK28c1YqzL+Qba44b4RnWR ChFjKXSgmIrL351wcgc9DK5Y9vTF9kW5g+M/VwzLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCmI9AAi7J0Km4B90izQd3x3C6EAwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzg1NDM2N2ZmLTQ1YjctNDkyNS05OWExLTk3YjAxZjRmYWJlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHY3aYwDQYJKoZIhvcNAQELBQADggEBABpOhpeh8dQeWpa3imox8pcaXCSL GV7bGNJfbMjbSWFXiOvhh9R76hAd82QsW4sqQbYw49goBmQ4gNb0Je9Nb564y8wO dMDAu6q48aPPHKsXMzAoWrjzBBwI9rZ5tj859WZPqkVYnaDeVvS8CWsLXcDzZ8yO oxoz651g8qWKbneAcE/GSng+Jj7+vyU4Zm97O7WHNbT11OKi0nWouvsUAml0Ojzy dFfp/7FLTHpy6Ie0buMnOdHDNbxXVWLLUIMWgdkPUc14MnhqXrW8w54ji93gu1Qi kJFJe4wZ7I+iLkJYONoIxWRlNfIFlZQshykNIoHc6BPgll8LkQP7MLm+1jY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:13 2025 by rpki-client