$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa File: a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa (raw, json) Hash identifier: bxFUZSAG0uU6J8eRR9mT8U0cgDNnPtXJizDelBIR5Js= Subject key identifier: B3:12:DD:A8:D9:1D:49:93:EE:74:E9:15:DE:77:A4:9D:CD:92:AC:CD Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Certificate serial: 5B83D71B0825B9D640F60FB6C0D599963CFD285D Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa Signing time: Fri 11 Jul 2025 00:00:04 +0000 ROA not before: Fri 11 Jul 2025 00:00:04 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 216.221.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:83:d7:1b:08:25:b9:d6:40:f6:0f:b6:c0:d5:99:96:3c:fd:28:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Validity Not Before: Jul 11 00:00:04 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=b1f8eec2bce923f9860c75fd0ed8f5e0d26b17dad6480c0cfc8664426febdc4a, CN=42519eb9-9579-4979-bdaf-164abd0e290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:8d:07:14:94:7b:34:79:0f:dc:88:8a:66: 4b:7b:11:a9:0a:61:ff:06:b7:96:b4:ed:97:21:0f: 19:c9:b8:ae:64:24:ce:f9:2a:22:f4:e4:c4:6e:b6: 98:2f:e7:5c:2d:2d:34:71:f2:7d:43:f9:be:1d:c8: b3:ff:c3:1d:66:e8:c7:61:97:14:e0:01:70:c2:c6: 07:24:94:6e:41:85:ac:fd:15:5c:3d:03:61:a5:79: 72:a5:ea:73:2e:9a:3c:92:cd:99:eb:6a:bf:b0:8e: df:8e:e9:1a:56:b3:53:7e:bd:f8:a2:04:8b:f5:7f: b7:5d:c1:49:83:b2:86:67:29:12:10:f0:b0:b4:45: 71:56:d5:a0:ce:f2:f1:64:ec:1f:b9:78:d1:e5:0b: 5f:43:95:7a:96:2e:41:2c:dc:a3:ec:f8:9b:71:fa: b3:d8:db:eb:12:ae:9a:34:58:4e:d0:93:4f:52:fa: 40:a2:29:ea:8a:08:af:4b:8b:c8:61:49:19:88:d8: 40:aa:26:0f:6a:31:67:92:65:d4:6a:99:af:d3:3e: 09:0a:1f:f8:a3:41:1f:64:54:f8:c2:e1:75:cf:ae: 16:0f:e8:c2:7f:1e:b3:48:b5:f9:ce:85:f3:a0:4e: 5e:f1:ca:72:b3:5b:70:9b:70:38:ed:58:7c:20:5f: 22:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:12:DD:A8:D9:1D:49:93:EE:74:E9:15:DE:77:A4:9D:CD:92:AC:CD X509v3 Authority Key Identifier: keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a91f26f0-5a1d-4d65-97ce-94a26d6646b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.221.163.0/24 Signature Algorithm: sha256WithRSAEncryption 33:a3:6c:b9:fe:4c:dc:96:18:e1:35:ec:56:58:2b:73:69:da: 91:55:96:6c:4d:9a:27:9d:f6:2f:75:68:1f:d9:01:74:59:08: b7:f5:72:e7:a7:01:9f:5a:82:c6:48:fd:3b:24:a5:7a:ee:a6: 02:36:2d:1a:fe:bd:65:b7:69:4d:d1:db:77:e7:fb:05:3a:7e: 8a:10:e6:2c:ae:ab:65:14:c1:67:d9:c6:24:38:9b:91:62:d9: c0:bf:c9:a9:8f:e0:a7:94:ce:a5:13:2a:bd:76:80:a3:65:b7: 4c:ea:42:9c:ba:14:24:cf:3f:a2:ed:17:33:09:96:1d:54:2d: 4e:f9:52:20:57:2b:4e:74:07:18:92:88:4c:a0:7a:1d:3c:30: a6:8d:a7:f3:1f:69:a6:1f:2d:1e:6b:b0:4d:54:3b:4f:f5:dd: ab:3d:9a:d6:de:d1:7a:9f:35:db:7c:9c:5c:89:94:f5:04:d0: 78:ec:8e:3a:b9:cb:d6:c0:8e:7d:10:2b:b9:1e:d0:4b:08:99: e7:24:3c:b0:7b:3a:95:83:77:6a:4a:6d:aa:57:a6:bc:32:a0: b5:4b:d6:66:85:b4:1b:31:27:6e:af:c8:24:42:91:aa:93:c0: 70:43:4c:aa:e8:e5:b1:81:a5:d8:74:72:7c:76:a9:4d:a7:ea: 31:d6:fc:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW4PXGwgludZA9g+2wNWZljz9KF0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNzExMDAwMDA0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWY4ZWVjMmJjZTkyM2Y5ODYwYzc1ZmQwZWQ4ZjVlMGQy NmIxN2RhZDY0ODBjMGNmYzg2NjQ0MjZmZWJkYzRhMS0wKwYDVQQDEyQ0MjUxOWVi OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYf40HFJR7NHkP3IiKZkt7EakKYf8Gt5a07ZchDxnJuK5k JM75KiL05MRutpgv51wtLTRx8n1D+b4dyLP/wx1m6MdhlxTgAXDCxgcklG5Bhaz9 FVw9A2GleXKl6nMumjySzZnrar+wjt+O6RpWs1N+vfiiBIv1f7ddwUmDsoZnKRIQ 8LC0RXFW1aDO8vFk7B+5eNHlC19DlXqWLkEs3KPs+Jtx+rPY2+sSrpo0WE7Qk09S +kCiKeqKCK9Li8hhSRmI2ECqJg9qMWeSZdRqma/TPgkKH/ijQR9kVPjC4XXPrhYP 6MJ/HrNItfnOhfOgTl7xynKzW3CbcDjtWHwgXyLzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsxLdqNkdSZPudOkV3neknc2SrM0wHwYDVR0jBBgwFoAUvJOucQ+vFCI2 CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04 NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2 ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1 NTUxNGQ5YzdkL2E5MWYyNmYwLTVhMWQtNGQ2NS05N2NlLTk0YTI2ZDY2NDZiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADY3aMwDQYJKoZIhvcNAQELBQADggEBADOjbLn+TNyWGOE17FZYK3Np2pFV lmxNmied9i91aB/ZAXRZCLf1cuenAZ9agsZI/TskpXrupgI2LRr+vWW3aU3R23fn +wU6fooQ5iyuq2UUwWfZxiQ4m5Fi2cC/yamP4KeUzqUTKr12gKNlt0zqQpy6FCTP P6LtFzMJlh1ULU75UiBXK050BxiSiEygeh08MKaNp/MfaaYfLR5rsE1UO0/13as9 mtbe0XqfNdt8nFyJlPUE0Hjsjjq5y9bAjn0QK7ke0EsImeckPLB7OpWDd2pKbapX prwyoLVL1maFtBsxJ26vyCRCkaqTwHBDTKro5bGBpdh0cnx2qU2n6jHW/Io= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:06 2025 by rpki-client