$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa File: 99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa (raw, json) Hash identifier: fFvuFOEcg77SqO0tW0QBOifporNfX/ZVSNVODn9Q8+c= Subject key identifier: 9D:D2:3D:8A:87:3E:8D:54:C9:8C:9F:74:18:E7:5E:1B:0C:4F:63:63 Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 6021A76832AEF025047A9DD482F0C14D72511270 Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa Signing time: Mon 21 Jul 2025 15:20:14 +0000 ROA not before: Mon 21 Jul 2025 15:20:14 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 76.223.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:21:a7:68:32:ae:f0:25:04:7a:9d:d4:82:f0:c1:4d:72:51:12:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 21 15:20:14 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=ff47f2e724e99b54573c2345f5b8a83afc79f1c196e7ac3650c3e0407e97a21f, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:ce:0a:f2:03:1c:ca:f9:bb:1f:a0:77:4f: fc:b2:01:7c:43:91:9d:70:cd:49:ce:4c:7d:15:42: 23:af:43:fe:6e:57:b3:39:70:7c:26:e1:74:a3:17: 23:01:bf:99:e3:fc:75:43:9f:7a:17:c3:cb:d3:95: f8:35:c5:a1:58:f2:e3:95:23:ed:f1:64:2a:65:ef: 67:93:64:d6:a2:e2:94:f0:4e:c6:a4:91:c8:9e:64: b9:87:4a:e4:23:5f:80:d8:74:17:de:cd:39:e8:f1: cb:53:e0:c5:b8:f2:ae:ca:35:d4:53:2f:bd:da:80: 8f:22:f3:22:88:6e:ea:6b:83:5b:0b:91:92:04:75: 90:da:fa:a2:fe:a4:e8:0e:d2:71:be:ba:e1:69:a5: 3d:ae:f3:00:fd:26:b2:bc:d4:cb:c2:9c:25:ff:75: b4:69:d3:f0:57:39:fa:b8:c5:1c:2b:a0:d5:81:9e: 09:70:6e:f1:3b:6a:05:68:0e:d0:22:48:03:15:56: 2d:7a:a3:25:0b:af:cf:e2:fb:21:f3:1e:fe:e1:63: dd:61:35:c4:20:71:f1:a8:bf:45:8b:19:d1:9c:a6: 02:24:f7:d6:6f:25:6e:3e:e5:54:1e:9c:d1:64:17: c2:08:15:90:93:d5:f7:25:9e:fb:7d:8a:98:3e:02: b8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D2:3D:8A:87:3E:8D:54:C9:8C:9F:74:18:E7:5E:1B:0C:4F:63:63 X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/99e36b6b-0208-44a2-a5f3-df3bd254fcda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 76.223.184.0/24 Signature Algorithm: sha256WithRSAEncryption 67:b5:86:5a:a6:cc:16:b6:a5:30:b9:25:0a:ad:da:bf:40:79: af:06:ef:7d:ef:fe:f1:9a:b7:16:a6:e4:b9:ee:c3:c0:ad:20: af:ac:86:03:71:9a:70:5c:98:64:22:19:69:79:00:29:49:61: 87:62:64:fb:0c:b5:c6:45:ba:b4:96:ee:07:c1:14:60:ce:19: 93:a2:e9:cc:fc:ff:75:f0:a1:cb:28:22:48:3a:c8:c9:07:47: ae:d1:4a:f6:e3:76:f4:f6:eb:0f:b6:ab:78:21:85:1c:06:11: 8f:ca:03:70:c7:6a:78:c8:43:0d:e7:2f:6b:51:e3:b3:5d:d0: f7:d0:9f:65:e1:58:40:8a:aa:ec:99:35:65:0d:b0:0b:a3:17: 99:bb:b1:b0:2f:b3:af:ee:64:52:77:8f:e5:a6:2e:54:6c:cc: 4d:58:45:04:e6:9b:1e:72:30:79:36:61:ae:d7:f5:93:f2:9b: 98:52:fd:bf:e4:fe:46:57:19:9b:84:b0:06:f4:da:1c:b1:e2: 21:2c:ab:7c:25:be:bb:43:eb:9b:e5:d2:7e:cf:ca:85:43:97: e5:99:d8:f4:0e:8e:5f:30:58:fb:7f:a8:82:f4:d5:d1:59:0c: 42:5c:bc:f6:2d:ef:e6:58:4a:85:8c:64:8e:7c:06:47:93:39: 69:0d:d3:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYCGnaDKu8CUEep3UgvDBTXJREnAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzIxMTUyMDE0WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjQ3ZjJlNzI0ZTk5YjU0NTczYzIzNDVmNWI4YTgzYWZj NzlmMWMxOTZlN2FjMzY1MGMzZTA0MDdlOTdhMjFmMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0684K8gMcyvm7H6B3T/yyAXxDkZ1wzUnOTH0VQiOvQ/5u V7M5cHwm4XSjFyMBv5nj/HVDn3oXw8vTlfg1xaFY8uOVI+3xZCpl72eTZNai4pTw TsakkcieZLmHSuQjX4DYdBfezTno8ctT4MW48q7KNdRTL73agI8i8yKIbuprg1sL kZIEdZDa+qL+pOgO0nG+uuFppT2u8wD9JrK81MvCnCX/dbRp0/BXOfq4xRwroNWB nglwbvE7agVoDtAiSAMVVi16oyULr8/i+yHzHv7hY91hNcQgcfGov0WLGdGcpgIk 99ZvJW4+5VQenNFkF8IIFZCT1fclnvt9ipg+ArgVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUndI9ioc+jVTJjJ90GOdeGwxPY2MwHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkLzk5ZTM2YjZiLTAyMDgtNDRhMi1hNWYzLWRmM2JkMjU0ZmNkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABM37gwDQYJKoZIhvcNAQELBQADggEBAGe1hlqmzBa2pTC5JQqt2r9Aea8G 733v/vGatxam5Lnuw8CtIK+shgNxmnBcmGQiGWl5AClJYYdiZPsMtcZFurSW7gfB FGDOGZOi6cz8/3XwocsoIkg6yMkHR67RSvbjdvT26w+2q3ghhRwGEY/KA3DHanjI Qw3nL2tR47Nd0PfQn2XhWECKquyZNWUNsAujF5m7sbAvs6/uZFJ3j+WmLlRszE1Y RQTmmx5yMHk2Ya7X9ZPym5hS/b/k/kZXGZuEsAb02hyx4iEsq3wlvrtD65vl0n7P yoVDl+WZ2PQOjl8wWPt/qIL01dFZDEJcvPYt7+ZYSoWMZI58BkeTOWkN03E= -----END CERTIFICATE-----Generated at Tue Jul 22 11:47:37 2025 by rpki-client